last executing test programs: 1m50.182770033s ago: executing program 4 (id=544): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setns(0xc9, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x27, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0xc0, 0x0) ioctl$ECCGETLAYOUT(r2, 0x81484d11, &(0x7f0000000900)) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0502ecfffffffddbdf25120100001800018014000200626f6e645f736c8f76655f31000000000800060002000000"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r6, 0x8927, &(0x7f0000000180)={'ip6gretap0\x00', @ifru_hwaddr=@local}) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x1, r3, 0xe}, 0x80, &(0x7f00000004c0)}}], 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) r8 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1, 0x4}) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000001140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["000000000000000000020008", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) socket$kcm(0x11, 0xa, 0x300) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 1m49.200993734s ago: executing program 4 (id=549): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0xb, 0x880c0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000002c0)=[{0x2, 0xca01, 0x0, 0x0}, {0xd, 0x2000, 0x0, 0x0}], 0x2}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x1, 0xb7, {0xb7, 0x30, "e21f51f9d86819307a76200b1d17d0a9926322b58c3a29f184ebf301f90a38e5240ea7510bb8ec944ac65950b25b0809fbc8f71db9edda064b37e05450c728971a5a2fa61b59d5811816dd331a3ee55410024e4810d4b9a6e93de056e6f56426ec491a1e42be40fe44b7655f182337be94bd1b73cdfcde586616c93c4f7da157eef92824202d7931d1965ca9758474c5419a3a25d9c9873467ae443747c49c785c9f6d8d4b897601c30a6937aed7e19da270f0d248"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}}, &(0x7f00000009c0)={0x34, &(0x7f0000000300)={0x20, 0xf, 0x8a, "b5066cd25f91224e352030f4edd2d01777175a0171888472b46297ef4d24d881577108c78e2493becff1c27b03ed872534c2d13e47636a180baf9c1d5deb40b5e921c8e8d252c1c76549159b329f06caa41d13ec3dc031fb29e112fe95c0971dc45e6a978b63485c65517d35938431790a32417d06fb9fa17b4b016e7397bf76dae69ff52fe945b9fbbc"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000900)={0xc0, 0xa1, 0x4}, &(0x7f0000000940)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000000980)={0xc0, 0xa2, 0x2f, "eb38c387a77de194669f7855a7e46687b1203d6fbd32f01a782ac1bf64507ded24a6aae637ac6f757de36959c07b7c"}}) syz_usb_disconnect(r0) 1m45.24637247s ago: executing program 4 (id=556): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xd) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_clone(0x880b0780, &(0x7f00000003c0)="d0ff5cee990777c142891fd9c7f053233e21f6185c8f0fe36d37e868114b2f438477bdd2c825b24c550598a64f0a8328630b31e0598c1c67d93e79435fb1b4f5c1b85e271a", 0x45, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000003440)="ff2757741f3de1c8b16a5c9743993ee975551cf4e06f8098fbf6843ed7267724e1f8577a78cdac1382f81a8d42af3f9f94321e3fb6659346ed86a8c144b9ae891a0d12138c8efde67ac40eef819612e5f1f1cd7560834d2bee54ed6d00a8f89cec55c1effeed2d4dd4ad53e0ea9579a196151952c62e3c1d17afd45f54d7d6fe89e0c8a95eaa1e5915133d415574ee32b96a5d9bf6d2b6c20919718e556d8c5ff04e947eb4b739ef2dc3b61cdd477b972aedeb7cb78c5d4c371fd6a749d45211519df8ac3de175927e706f4eda68e63b283fda2050a17378410e79a9ef90d90911693cb320553ae9bbb009bd374c620f8ef77ab36828842fdd41ad6a725c9e88a39b3ecf508b8c0e86d85e5232f0397684f569197cb37d61bdce8ca1aaefcb973e7eab41dc03446a262fd0a0beb5fa62b17fd927bf53aa4560f9121d780d8fba5580edc9bb0dbb97feedc610a0a7181c36da2d05477fa93a50c433dea4783d2e46b83220d07c253ab1e5d2899c8a41bca5fb2a2996a95bcc16baa5672d82bf9bcbfd344d0ca157aebd5fd88aa8758c5f6c056fcb0c9e131f00a97a90e43d6cabeed511cc127d0907fd832e2df13925cca0dc62260ebc94e2675cfc8d2765e99e2405c82a5a3f37b7d1de12b1a033816ad325820c8d469bee6be605d4459aadb1669a06f15ef1b508229289865e1d97e3671732893892eff8daaafaae5797c4abd186040ee94b8140a113e52aceee0d9c49b41773c046ed9424a80f70566a5802c3aaba7fdc8644a7ef8742873987180f7a06867d6dfc1d7c7cbec2d29ea06524debef92a17c72241a772473447ccab96f9a049b81e88fff518b3f0a52bc4d218438e4e4d4228485aa5ad5c7778e262b28363ac1290511521313623a9af13af22b4fd75a3f742bcddc43048e7176c2153cee93debb29fe7453465211d4356ffa66d7f18fc5a0a858de30f98fc27f6225e9dbc4a725060a8f85bebf02fd5ead5122162cc61143c096890ba3ce622a0077fb43e588f59965c4f67a63e678977320a4b9bcee0b7ac9fb101a9275b4834cc661bc336fdc415b4bf219420def3eb7c8731fb96e74071811dbc90c6d7f6d22eee99bc03bb9b4798b95f78ba2fff21005f3a4260545436d96c0593f7ead93ca580419eca0a2150ff85b66831311712912979b7b9a6d3a8e5d82c867cfa1e01aff41b597262529bf6ff8354dcb990e5544f3137709944aa9685ce76052295643a560eada8cb00bf8a0629314e0767437aa0312fa58816d4bb3c5002d6e25faa7660a18e2435f7a2881dd7d74dc0f5a62776d4bbb2f8f86e37e632fb75c1c45c7336819b84607c0345d65216ee3c7464246917cfdc1bef769b5add2d748db917a67b0d4c8c620a6f081f2335226968e23bd27de88b6431b0451aae3f30e6dc15d79e10ba67db7fcacba05a7c390b98b5dfbb3b2d90487acd1cb24250c1121819b71d649422a4a4d454e979b81dee3ddf7153f462e75dfad2fe699771295b63808bd384bc4eee9af02445520b673d8486ed0b1b488f29fcd658211840ee904eaef6f841ac40f239c3a1bf822734d391e3ac807a20675badd3db9812687faba89e829d0449aa30e0323fbb2edee75b8ced67fe00c82c84514567798d6cb8878f7f53f5a7b7ad1384335138fb13d47582c4ce551f9bb83bfc19e32f8f1f0b958da13c20161d74d181f763509922a0a0859674b7c4cfe8c689c45eea83ae8e661fd617a8cdc3e26c6c0497cc9001d724a069395b7882f084a5c74dcd4f6b1d39d68a3509bbbbd33e0419f67a7fd05c743ddcbc441e29b7c1e60458aeaff3786102ba137d7886a0e1a923c6789d337f96fcee2bd87f31f536e1ad3de4a3b69f408e445f25914cf140f457226610d6d8b2d3958bd76f539d059a3aa126ee7a66b07151ed09cf5145533eb0967ab5381ee27bcb3627f3d7948164bae05d4f49ff2aa6c0d1453d7edb03a3468c3a10cc987fcca9fdbde0649dff66b99e454e26c8c098316ea89ccbd24dd451cb1de1bf9dcf9a20a9cdac615e81bb690c7dbe780df37632b8eaaef31866846cd99c7be1f06e5887b7b87c187d32c79f453505c0ed82646c9ae98613ca881bd1b6f5aa9a7749d8724bf9412841e8ce67e436ce17cadbea9db7e7262de425a59d2c12e0fd010ac56eb4ccac3cff2875f49121d0b0123ddfa28a33c42bdaaac59d2fedc626232b4c54a18f57447ea4a611c039aea36938250c93ffa6e9cd611ac61f0822ca17dd0e1db123f13971d0a640bdb5c7aa349c92d72f1cd066dafca32786fe65510d2936609ac0215b62d9ca774b36fc32e89bbb167c3956b8a45a166d373d0a1813c6a725dcd6d6a2b024ac3a28fbff587c82792e5338ef8bfef150b6644d47853d89f12bf4cf242c73e35ed04feb7e9018ea7aed5397445c298fa5f24b9fd622b3330a16edabdeb38b2acf0317813afd7ff4b702b797ebbbd3ab11affbd1236cbeee4a90f0ec2eed8c58f4d3584574fe8f1e018585d02c92603cfba3dc67fa9c6ce977a2d9b4000a5d7444b132b9b31d1d18283a4035c3108d994b159516b74467d70dc76913f722155d5954044fc4ddcff0ee2ec10e94ef100ea57d3661a2e7ffe1bb159039c7f3b71ccc3800f69258d4d399e25bb63ce7b4f1a002b4fa9184ef52c549981521281589ef1c8988b879ce85afd64143e4e7d4000c4a0d4724270b68ccb14c5de6949d4710b5adc6816a3da4139965d12ef808c0fa85ecfb918b2fecd61734ed7290b2ec6cb666d59e358e0cdb377f337fbba7281c7cb3cbb6b5b70cc10f6eb75224ba78d9a41df25fa868f0b1e51990f26bee9cf76882e32a37bb5f5955011e508a0021d2da70930391155ab91ddec53efa0b6e1791a3f3651dcb3b7f5f06413a39101eb409975299b2861a7a75adb0a71971e1e11d4dad9ba48c759fe0f3bc4d41435439904b9ad6a5c7cc43a7b0ef27c2ab312f0f49aee93b27a7633a270336d6d7df758ab404786cc3e97e73fcb766ac185db9f84ae0f3936299424dae08f23c1029e5322485aaa4c1cef54f7c5d40fbd3da271f094fafdca41bda51669888628b7a12cd83bceb8e5f30745fb1f247b3f5b70d30becf9098484cc2c4bc560b9fc8ae01b73bb4a5c528c1c3053404544c8d5514f2b5cb27ab5fc56c75f8a08ee294729f67b3affd9f5073223d48c46ff67ed0e611e1280b726e0f158ebcef32a2909ad61f64823ba7ba348eac8df1aa4f7b51d83627b719401b0686aeec03f2b1de693f677d22837e084628d3f74b9d63c8b51100a86d744ce6903067218c64334341e5f89e87ab1a9844785677de7820ec540335626f069593125d3494dfddb41a9f058855bead785a282de90a54969612d38351f1aea1e4553a8b5727fdc1c4205d0eecb2fefe11ab8bd38283721980d65c3f7b49dbc9127bce965e63738056582d2f2b6ecd2d7fcd92499c60fb88987131f8482e26a4ea701a46059978e6ffd0c2ef0d265027646ce12e1d7bf83ebf9169b1b6b2cc389418ed0a5c1a552c69d57c719d7b6e45f6310f9caeb9dc8763e2a0bcadafd8d609071c246f9b2f580c3e8f8693d76392491781a97b5feae73a628a20c31af50e6b94904cc29aff825c3be7083e0cc6eda84cf63e06e16cbf99dafae6f33234d73b8ac955968a4a7058dca15a2ef30815dc3d97764af713f852d03ba967dcc9bf667af2997a75c8687942be2e73c965001bef4d303cfad2dae8223230a87bbadc78b4da88342a458ea6b5c7dc1aa38b6127ffcfb03908cf1632a5017a5b994da28b874a6bc73fd0b35cd40fed8b15208191debf76474e8a362b88873d78da5709542631cd719f96d15f78e6bbac4da69267d3ef8e43bc0024ff5c8aba3aee1ae48afeae2fdc266e354ee8769cd53b5d71fa630d3d86b95b500044fd9b7bed2b4be9110b600247413f13ddf56e406a9a67363a7c7cd561e2e24dc44cbf446268fcdb95d94665d26a8ab0e963425b78c0bb362c579580c7ee4b0fb14fdabd0a33724c6db96c36a6704f530c7a629aa230d328aead079e5bfa41ef28c2b23c56fe7a84ec5326323929b588eda65a0dea1871799b099e276b1f17e4ca1af5562be2a51c2276fb1c3fec83b8526299aecbfe39e4bfdcad807fc8a8565cc6c7858818d747b83037d1c66c025a738afa19e245683bcf00a1e3a5b8f1a0b1d8444ffa1cb515a33bf40b272b3e50ca8d10923787d0637d541ad7c6352de432fb38ac5bee8be8a25f47b5407dc4455c6a766d39ed2c8f15d230b24f3fee0bab28f2e5b1056fecc9f96ca1fa39b2a92d73290a481baa187c5ba7c1fecfdab144d63d9c660e85d7518081154e48e1b310b45ae5958acc68bcc3f7c15e10291b1a9a19f528b155d32437b4b0d5f358218c23ed562b5029a35b096826132ed331f4c9281273793ada44d31ca3cdb407807eaf558aa0e947920595ce851d216417130d6a7503f8830509e7cc3926ed7c53ccd259011c198af212607cdd89fe855db23855cce2a239c3ae157337cbef2084f8b7f5bb8d9ef515df2f7a2ee4bebed2951df2d6e3a2abe22d697a16ac0e31335fe04b0db4fb38a562d377eedd01146182fb368b4d1300843e0588451c54dce3ab0f16dc37bc168bb852994f8557b06a47d6c510badc78b3da81997082029cc21a98b3070532964eab3f41ba2b30653a316aec04625270d14a49cd4658d02e5298ff838a43f97658c6dfc33e1673473d3dcbef49007915cb16eba01e2f935f1292b670545299abb8e161be6d0c26f49c1f289eda81763a3aaebc0caf685342b027620992acdab07457c1a97e85b002cbcc3df3b8f29cc4dc6c4bfba1f0a7d24d7b5669e235be2fb05d9f68932772fd2ea3a78f64348f66f8ac7f97234dd85292d815d3f7fcb5cae870b6b3cf320cdf4946aaf34cb90822e2680562b4589946ac79f02addef541b47eccc90e636c4f2fc4e543677f05a175b1b5ef0b7da61b966c31caa018986f7c061eb86080dc5ab38a973949ef50f04cfbbef245fbc87b123f441f0a855221847b37b643f2874a24e9a5fe7ad24ba47398a9f4a68e56a8130c741fd238c32b6ed256421937c86b4614ed0acde79cee218b80d9504bbdab9a3a7b43828362c082a9d479def5e1d9f0a3a849b2159c28574b24e03b8a7bfcf21104832e7f52c8fb695557e0b7e4204868764ff70a032b102f5d8d7f8c66763128027238843be0581a0640c59b11ac2ece8944b91938b9253e7114f3e878094895190fdbbb45e32c10114a5aa52200a465b0027467137900fbb8d598183398d5df89c349435019a2878378b7fd6bdb159bae4662dd67259252eb805b7d4b217bfcea75553907b4c2abb983c79b660bf6c9f18e88ca4c34aa5d5d52351f82e49a3ef9f2f213cea25e4fe361e091d7b5a4741e718d34a010546b12e92104d59a8022ee66d9ba85c5faa0d028d2869f9cb032cfecc4a368db7f4f3aea93ee85869607164ade49b8f599a6b515c1a5b6c44007a6dc4f205aedfe2ab37b720f2fae0b9a2ed8ba054f01031b4f3082ee90cf9018cfc4d943a65fdd900639cd6dbad959c860aef4269168b77e1b916ed6b0ea4a1dd6f702301588a1b6d41823ced112c55a258e99d2b3f4373b5a57f5b647b1cb4b1f06b7f32ee99e17e0ec40dfd94d131a96492d42021abe7d1650bde3186045a9bec542730fade077373d87b27a80b2daf23c79cec0522b7c4974b2d2ad1e0ba665e0c8ae2f673f9a952bc895109f297817210e5426eabbb5b89a4555ed778904ee3ebe82a5fcd8ee96103cbafe64d3781b202273f8d19845d4ba9") sched_getscheduler(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0xaa4, 0x0, 0x0, 0x1000, 0xffffffff, r1, 0x0, 0x166}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r4, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1}, 0x15}], 0x1, 0x40000141, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000000c0)={0x9, 0x2, {}, {0xee01}, 0x2, 0x6}) 1m41.834540889s ago: executing program 4 (id=565): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x4a7}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044005}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0xcc, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10, 0x19681}, [@IFLA_VFINFO_LIST={0xa4, 0x16, 0x0, 0x1, [{0x4}, {0x9c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x1, 0xa43, 0xb}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6f, 0x13}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0xfb5, 0xcadf, 0x88a8}}, {0x14, 0x1, {0x9, 0xb54, 0x2, 0x8100}}, {0x14, 0x1, {0x2, 0x6c8, 0x4e, 0x8100}}, {0x14, 0x1, {0x88, 0x9e0, 0xe}}]}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0x8000000000000001}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7881, 0x5de}}]}]}, @IFLA_GROUP={0x8}]}, 0xcc}}, 0x0) 1m41.566426405s ago: executing program 4 (id=566): add_key(&(0x7f0000000400)='rxrpc\x00', 0x0, &(0x7f0000000600)="01000000020d0800ffffff050000000000112233ff0500000007000006000000", 0x20, 0xfffffffffffffffd) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = gettid() r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) accept4(r0, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000100)=0x80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) shutdown(r0, 0x2000000) 1m41.230482371s ago: executing program 4 (id=567): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x34db, &(0x7f0000000b00)=ANY=[], 0x0) 1m40.636380977s ago: executing program 32 (id=567): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x34db, &(0x7f0000000b00)=ANY=[], 0x0) 1m14.112644483s ago: executing program 1 (id=637): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x20) write(r0, &(0x7f0000000180)="9aa4", 0x2) 1m13.750223829s ago: executing program 1 (id=639): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/bonding_masters\x00', &(0x7f00000001c0), 0x800) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r0 = syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000080)) mount(0x0, &(0x7f0000000080)='./sys/class/net/bonding_masters\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x20) write(r1, &(0x7f0000000180)="9aa4", 0x2) 1m13.245942007s ago: executing program 1 (id=641): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x8) write(r0, &(0x7f0000000000)='7', 0x1) read$FUSE(r0, 0x0, 0x0) setregid(0x0, 0x0) 1m12.762014735s ago: executing program 1 (id=643): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x20200, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001340)={0xb, [], 0xb6, "84e34128ed9008"}) 1m12.301919983s ago: executing program 1 (id=647): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syncfs(r0) pselect6(0x40, &(0x7f0000000140)={0x10, 0xfff, 0x9, 0x3, 0x7, 0x8, 0x6, 0xdc5f}, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg(r4, &(0x7f00000050c0)={0x0, 0x0, 0x0}, 0x20008840) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$netlink(0x10, 0x3, 0xf) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x8, 0x80000001, 0x7}, 0x24}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x88c0}, 0x2) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x7f80, 0x700, 0x9, 0x8b, {{0x5, 0x4, 0x1, 0x2, 0x14, 0x68, 0x0, 0xca, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}}) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) setuid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/comedi\x00', 0x0, 0x0) 1m11.028113062s ago: executing program 1 (id=651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x24}, 0x94) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x842, 0x4) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xa0000, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(r0, &(0x7f00000001c0)='./file0\x00', 0x400, 0x800, &(0x7f0000000400)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0x4d, &(0x7f0000000100)={&(0x7f00000005c0)={0x88, 0x1403, 0x10, 0x70bd2c, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10144}, 0x20004080) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x3, 0x1, 0x2000, 0x80004, 0xfffffffd, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x20}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x4, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008040) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m10.84884603s ago: executing program 33 (id=651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x24}, 0x94) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x842, 0x4) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xa0000, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(r0, &(0x7f00000001c0)='./file0\x00', 0x400, 0x800, &(0x7f0000000400)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0x4d, &(0x7f0000000100)={&(0x7f00000005c0)={0x88, 0x1403, 0x10, 0x70bd2c, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10144}, 0x20004080) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x3, 0x1, 0x2000, 0x80004, 0xfffffffd, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x20}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x4, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008040) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m2.014386281s ago: executing program 5 (id=682): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010006a1c00"/20, @ANYRES16=r0, @ANYBLOB="80400100fb2404000500100005000000130022008145fb9adc64b93e245806b7273a0000"], 0x3c}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000002180)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000340)='westwood', 0x8) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0), 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000080010000400000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000840), 0x3, r4}, 0x38) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000200)="6d31d842000000806a51c21b199223d62307", 0x12}, {&(0x7f0000000040)="18f17419b146a84cbeda9224297dac92d747ced31a35cd6d7b9b442343ada863ecd2a9abcae9c24f89e086f890db26e60abb098b3c5dbf9d2ef1b9c77d874baabb4b8f78e051d4632866ae642a2651fe1cb76754cd5b59fa84e2d937c49821003116b8ba4ab0293456b739", 0xffffffae}, {&(0x7f0000000500)="edb4a0cdd18a271cdbaace5806cf8a2692bea8933fc7b9e8f05c9d5150d5e56f76c53ebff12630745660e26f01c67083b94f8b4b057788c24b8eb47837899455e593c0cabc47ff2ba3ac6bad652739262852c58d03d2c3a2e47a69855d1f43606791bbae827314cee4cf1c9413374044f78a2d", 0x73}], 0x3) getsockopt$SO_NETNS_COOKIE(r2, 0x1, 0x47, &(0x7f0000000080), &(0x7f0000000100)=0x8) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0x86, 0xb722}, 0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000500)={r5, 0x10f, "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"}, &(0x7f00000001c0)=0x135) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000200)={r6, 0x8}, 0x8) 1m1.154204386s ago: executing program 5 (id=686): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x10c42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{0x2, 0x4, 0x2, 0x4}, {0x2, 0x6, 0x8, 0xffffffff}, {0x6, 0xb, 0xc, 0x7f6}, {0xff80, 0x7, 0xe5, 0x4}, {0x7, 0x7, 0x5, 0x5}, {0x8, 0x5, 0x0, 0x2}]}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) write(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test/cgroup.procs\x00', 0x1202, 0x2) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000280)={0x3, 0x0, [{0x1, 0x0, 0x0, 0xe2a, 0x3, 0x0, 0xfffff000}, {0x80000001, 0x7a93, 0x4, 0x2, 0x81, 0xdde, 0x8}, {0x40000000, 0x4, 0x6, 0x0, 0x3, 0x6, 0x5}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161142, 0x0) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r0, 0x6f50, 0xfffffffffffffff7) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESOCT=r6, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000001000000030000e0000200005e3dba8ae862e81c"], 0x48}, 0x1, 0x0, 0x0, 0xc094}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100000044090000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001000000000000602f030000f1b68c3e70a5d4bb02ab9dd1826faf62d4bcfd6c350a928a417ccf61f72b6378965ff4776ad1e8e0b6d8bc529caeb5e8ff90381a02e9b1826bd45bc45cb236d7d4c40a3906a23a8316ff860e7a5f8b83caf8d63135a9ec5c9a8a39582542fc2e1dbf"], 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x8050) sendmsg$can_bcm(r7, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000000280)=ANY=[@ANYBLOB="0200"], 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0xc084) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000105fefff7ff00010000e0000001000000000000000000000000fc010000000000000000000000000001000107144e230005000000003a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d46c00000000000000000000000000ffffac1e000100000000000000009201000000000000060000000000000000000000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0e00000000090000000000000000000000000000001f00000002000000feffffffffffffff02000000fcffffffff0f00002abd7000043500000200010000000000480003006465666c61746500"/207], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0xfffffffe, 0x0, 0x0, 0x6fd) futex(&(0x7f000000cffc)=0x2, 0x5, 0x1, 0x0, 0x0, 0x1000000) socket(0xf, 0x80c, 0x100) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) write$6lowpan_enable(r3, &(0x7f0000000300)='0', 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) 1m0.122258595s ago: executing program 5 (id=691): r0 = getpgid(0x0) ioprio_get$pid(0x3, r0) setns(0xc9, 0x0) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c55102a945b303e188d7fcade7e696f9300"]) r3 = open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) fcntl$notify(r3, 0x402, 0x8000003b) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x80000034) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x40000, 0x0) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000040020000090a010400000000000000000700000008000a40000000020900020073797a30000000000900010073797a3000000000080005400000000c0c0009800800014000000910080003400000011008000c40000000e758"], 0x288}}, 0x20050800) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x1c, 0x2) mkdirat(r5, &(0x7f00000000c0)='./bus\x00', 0x0) renameat2(r5, &(0x7f00000001c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) setns(r9, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 58.310868495s ago: executing program 5 (id=697): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001340)={0xb, [], 0xb6, "84e34128ed9008"}) 57.630705701s ago: executing program 5 (id=700): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2e00000013000500000000000000000003010000100002007664706173696d5f6e6574000a00040076647079300019cc88bc7a85e014f8c970", 0x39}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="07aa16c201", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000034c0)=[{0x0}, {&(0x7f0000001300)="1f5913541b76ac75afa67453834bd308ec1c87d5ec4087e41fd9eac38e6634c077e328f49776b9b4c69c43cc03b7b5b88207b06129c3661f45bc9b9b2224b540fc5ce992d8497185aa55cd429930617050cd4061f3df87427a656a3d1d8f552af7acc195161614fe1435a61ed1c6121b332b84761141ec7425b4f92f887c776ed285f4baea0a49e85a9c2ead37f29743e4297f1f8d11b74c686637a06fd8fe97e6beeb62d89725e6338c0eb6e9de686860a07d21a9355f2a5051f7f9cb5ca8c80770dc83432572964790c7a4a6bba94e15bb4f71ab546dc94fe35b40", 0xdc}, {&(0x7f00000023c0)="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", 0xc91}], 0x3}}], 0x2, 0x40840) writev(r0, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') pread64(r7, &(0x7f0000000040)=""/30, 0x1e, 0x800000000040042) connect$can_bcm(r4, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], 0x20000078}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000000000000000009dd07391d9c45bd54d62b09df68678c8d307c7ea08a2c9b20a24edcbed84db44db0cbe38df36d8d0dc0275b27ed3a6e98e886e3afcdcf4ff363ba9ed754871406e1f6826466265259f5469e67b23fbec0d3ed19143e3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000700000000000000000000008bc7e9385559d457"], 0x48}}, 0x0) shutdown(r0, 0x1) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 56.66198848s ago: executing program 5 (id=704): socket$inet6_sctp(0xa, 0x1, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f00000028c0)='/proc/crypto\x00', 0x1800, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000414010000000000020000000800010000000000080003"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="7b2826bd7000fcdbdf251e00000010002f800c0002000202aaaaaaaaaaaa08000300", @ANYRES32=r3, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4004000) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x8d9f, 0x2, 0x1, 0x372}, 0x0, 0x4, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) sendto$inet(r5, 0x0, 0x0, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000280)={0x9, 0x1, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x3f, 0x9, 0x0, 0x80, 0x0, 0x1fff, 0xfffffffffffffffc, 0x4, 0x1010000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x7fffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 56.183722217s ago: executing program 34 (id=704): socket$inet6_sctp(0xa, 0x1, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f00000028c0)='/proc/crypto\x00', 0x1800, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000414010000000000020000000800010000000000080003"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="7b2826bd7000fcdbdf251e00000010002f800c0002000202aaaaaaaaaaaa08000300", @ANYRES32=r3, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4004000) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x8d9f, 0x2, 0x1, 0x372}, 0x0, 0x4, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) sendto$inet(r5, 0x0, 0x0, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000280)={0x9, 0x1, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x3f, 0x9, 0x0, 0x80, 0x0, 0x1fff, 0xfffffffffffffffc, 0x4, 0x1010000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x7fffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 52.56442062s ago: executing program 6 (id=720): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2e00000013000500000000000000000003010000100002007664706173696d5f6e6574000a00040076647079300019cc88bc7a85e014f8c970", 0x39}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="07aa16c201", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000034c0)=[{0x0}, {&(0x7f0000001300)="1f5913541b76ac75afa67453834bd308ec1c87d5ec4087e41fd9eac38e6634c077e328f49776b9b4c69c43cc03b7b5b88207b06129c3661f45bc9b9b2224b540fc5ce992d8497185aa55cd429930617050cd4061f3df87427a656a3d1d8f552af7acc195161614fe1435a61ed1c6121b332b84761141ec7425b4f92f887c776ed285f4baea0a49e85a9c2ead37f29743e4297f1f8d11b74c686637a06fd8fe97e6beeb62d89725e6338c0eb6e9de686860a07d21a9355f2a5051f7f9cb5ca8c80770dc83432572964790c7a4a6bba94e15bb4f71ab546dc94fe35b40", 0xdc}, {&(0x7f00000023c0)="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", 0xc91}], 0x3}}], 0x2, 0x40840) writev(r0, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') pread64(r7, &(0x7f0000000040)=""/30, 0x1e, 0x800000000040042) connect$can_bcm(r4, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], 0x20000078}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000000000000000009dd07391d9c45bd54d62b09df68678c8d307c7ea08a2c9b20a24edcbed84db44db0cbe38df36d8d0dc0275b27ed3a6e98e886e3afcdcf4ff363ba9ed754871406e1f6826466265259f5469e67b23fbec0d3ed19143e3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000700000000000000000000008bc7e9385559d457"], 0x48}}, 0x0) shutdown(r0, 0x1) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 48.932033556s ago: executing program 6 (id=731): r0 = syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000200)=ANY=[@ANYBLOB="12010003000000089c24069040000102030109021f0001011410450904000001f702000909050202"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x155555555555561b}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000001300)={0x14, 0x0, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) sigaltstack(&(0x7f00000001c0)={0x0, 0x80000000}, &(0x7f0000000440)={0x0}) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0xffffffff) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32=r3, @ANYRES8, @ANYRES8, @ANYRESDEC=r1, @ANYRESDEC], 0xffffffe3) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r6, 0x1, &(0x7f0000000040), 0x0) msync(&(0x7f000017a000/0x4000)=nil, 0x4000, 0x3) get_robust_list(0x0, 0x0, 0x0) pwritev2(r2, &(0x7f0000000000)=[{&(0x7f0000000500)="002e2e0000000000d8c1a2", 0xb}], 0x1, 0x9, 0x8000400, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) 44.522010832s ago: executing program 6 (id=743): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0xfffc, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x1e, &(0x7f0000000180)=ANY=[], 0x0) (fail_nth: 3) 44.310646167s ago: executing program 6 (id=745): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x22500, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r2 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./gadget\x00', &(0x7f0000000380)={0x80, 0x40, 0x4}, 0x18) openat$incfs(r6, &(0x7f00000004c0)='.log\x00', 0x10040, 0x11) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$loop(r0, &(0x7f00000001c0)='./gadget\x00', 0x20, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c000000000101040d0000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000140005800e000100736e6d705f74"], 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x0) 43.419572918s ago: executing program 6 (id=747): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xfffffffe, @mcast2, 0xe}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1e, 0x20005, @mcast2}, 0x1c) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1404, 0x200, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40000) fcntl$setpipe(r0, 0x407, 0x22ce) 42.894916924s ago: executing program 6 (id=750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x1, 0x0, 0xff, 0x2, 0x800, 0xa4}, &(0x7f0000000040)=0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x80000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf251200000008000300", @ANYRES32=r7, @ANYBLOB="0500e4000000000076176aef65e31b4affbcce611cbe4e77b011b9949363f6789d8e6bd1819429ee44aa7acf222288edd6f7586ce91390ae4431bdcc959badb8eb9b803db566c37734d16dc5dc8ab23fd11c2b74b34a77571b0bd8755d02347d0d02"], 0x24}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000207010200000000000000000a0000044400078008000140ffffffff0800024000000003080002400000000708000140000000a905000160fffffffd0800024000000009080002400000000108000240000000060c0002400000000000000005"], 0x64}, 0x1, 0x0, 0x0, 0x24000821}, 0x4084) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r8, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x4c}}, 0x20001) syz_open_dev$tty20(0xc, 0x4, 0x1) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r9, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r10 = dup(r9) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r10, &(0x7f0000000100)={0x4, 0x8}, 0x10) write$cgroup_subtree(r10, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r10, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 42.051372487s ago: executing program 35 (id=750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x1, 0x0, 0xff, 0x2, 0x800, 0xa4}, &(0x7f0000000040)=0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x80000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf251200000008000300", @ANYRES32=r7, @ANYBLOB="0500e4000000000076176aef65e31b4affbcce611cbe4e77b011b9949363f6789d8e6bd1819429ee44aa7acf222288edd6f7586ce91390ae4431bdcc959badb8eb9b803db566c37734d16dc5dc8ab23fd11c2b74b34a77571b0bd8755d02347d0d02"], 0x24}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000207010200000000000000000a0000044400078008000140ffffffff0800024000000003080002400000000708000140000000a905000160fffffffd0800024000000009080002400000000108000240000000060c0002400000000000000005"], 0x64}, 0x1, 0x0, 0x0, 0x24000821}, 0x4084) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r8, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x4c}}, 0x20001) syz_open_dev$tty20(0xc, 0x4, 0x1) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r9, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r10 = dup(r9) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r10, &(0x7f0000000100)={0x4, 0x8}, 0x10) write$cgroup_subtree(r10, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r10, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 12.018469013s ago: executing program 0 (id=871): r0 = syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000200)=ANY=[@ANYBLOB="12010003000000089c24069040000102030109021f00010114104509"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x155555555555561b}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000001300)={0x14, 0x0, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) socket(0x28, 0x5, 0x0) 10.066161869s ago: executing program 3 (id=877): r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000400)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff00070581024000000705010240"], 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x0, 0xb2, {0xb2, 0x10, "5b79538a42539a2bd5264f371d7b462e0f35abfda9399a2583959d05ebe32c4fa2e18d9fd5987fc3743fd5cffbd02a857e7333b12cf3bf820f8e4e06e76737c3ddd52ea36d64fc284b34237e205224dea028ba304a27551d745d3d8331bf43ad254eae298362ae66e5a60e1c7f42d5c085a198ea633de1f06980dc51172460580942724c023a5585d8b2069c746e17c64dea0fc51793172df8448273a37057ebcb5abada816b79f62e570e34c9431fa3"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}}, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x20, 0x15, 0x85, "2c93862574bcfc1e8be69f119de41af3ece3b7013f93c0afc8c2a60ce24b533bbafd875295979a2e83c6a995891eda2366c509150d269ac6cbbbbf75802469dd8a52bc0692d475b891c56abb5df65d7850dbbee70e277964133fce09d3c3eb8f606d0921a3ceb4cad8256ad1b7ef3d62d3c99f545f4b799eb2ca150979439f8a4f6e085f9b"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xba}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0xc0, 0x5, 0x6, "e6061d839175"}, &(0x7f0000000300)={0x40, 0x5, 0x4, "042c95fe"}}) syz_usb_ep_write(r0, 0xfe, 0xc, &(0x7f0000000140)="0400c3f81b19ecf8ddd67ed9") 9.817899231s ago: executing program 2 (id=878): r0 = syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000200)=ANY=[@ANYBLOB="12010003000000089c24069040000102030109021f0001011410450904000001f702000909050202"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x155555555555561b}) sigaltstack(&(0x7f00000001c0)={0x0, 0x80000000}, &(0x7f0000000440)={0x0}) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) socket$kcm(0x23, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0xffffffff) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32=r3, @ANYRES8, @ANYRES8, @ANYRESDEC=r1, @ANYRESDEC], 0xffffffe3) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r6, 0x1, &(0x7f0000000040), 0x0) msync(&(0x7f000017a000/0x4000)=nil, 0x4000, 0x3) get_robust_list(0x0, 0x0, 0x0) pwritev2(r2, &(0x7f0000000000)=[{&(0x7f0000000500)="002e2e0000000000d8c1a2", 0xb}], 0x1, 0x9, 0x8000400, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) 8.626955974s ago: executing program 0 (id=881): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x4d, 0x2ba8}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x7, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe5, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x8, 0xd, 0x800, 0x3, 0x6, 0x4, 0x100002, 0xc7, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x6, 0x4, 0x16, 0xc, 0x5, 0x401, 0x2000001, 0x405, 0xa7, 0x81, 0xd, 0x1ff, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x3, 0x1000000, 0x489, 0x7ff, 0x4, 0x80000001, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0xfffffff7, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0xa, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x4002, 0x2e6bf781, 0x80000001, 0x5, 0x2, 0x489, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee48, 0x2000004, 0x1, 0x10, 0x6, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x8, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0xa, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x3, 0x10010, 0xfffffffd, 0x5, 0xfffffffe], [0xc, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x4, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0xa0, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xea1, 0x428, 0x5, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13fff, 0x1, 0x1]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0xfffffffffffffffa, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xa, 0x5, 0xa, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.872559142s ago: executing program 3 (id=883): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r1, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001340)}], 0x5, 0x4, 0x5) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=ANY=[], 0x14}}, 0x0) write$vga_arbiter(r2, &(0x7f00000000c0)=@target={'target ', {'PCI:', '0', ':', '11', ':', '1', '.', '10'}}, 0x15) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000001c00)) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001300)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000001400)=0xe8) sendmsg$nl_generic(r4, &(0x7f0000001880)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001440)={0x3dc, 0x36, 0x200, 0x70bd28, 0x25dfdbfe, {0x15}, [@typed={0x14, 0x40, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x23a, 0x13, 0x0, 0x1, [@generic="247c6001049792e3d8239f628cc7d604f457c6860d04fa12476db94d83e477bf61a8353a87c9a329362b2b8fb18be7840d99451ce454bfceb231670e021359da3d9b79c05828ac6a401871a74b96f8e120cc05f0bfc473000740a25faf2bba91cc6b2e918b16813def04e1fae912d0b8e03ddca2c0ee6dfe6c7e5b0977bcef5605a3d3ac5d04654cb6e7d9aeb7f8e13e8a21e6a808fabd96dd4f04e80025", @generic="341572aa806620241fc1e203504b02bb7d83b0ed77f9665585dec8c791365f9d07abd66d5c78d3860e231c151b5bc0dd5f22f7171059d58da2c86a42778822927222bf3ae8876acb046c501920b58afc4b83c0cf9af395becec7918661d9050ff6f09ac458316715303642dad8ebc1e029d968cd4ed56c833a2d2e0ebe28846e1027737c", @generic="1156a98ead5c06289728e1ada8ceac93e13de982c27d1e6061e62ade2e5cb036fd7c82ab01ece236ba18f09f3432736497d59709aee1e8f98232287874d38912e76a08a50b749fe44bb109", @nested={0x4, 0x11}, @generic="61388f18720e12981989643a2820cf040d2885acdc97c41058f22457c1baad18e9f89341e0a552daf80f8cb6b25c05a60e1ecc7d9ad320497624cfd8d3d9c5e7e9da7b552985cfc63dd80303b182da046b79cb2d7321304f9ea0a791604624f3bf", @generic="e3ba6215c53aac4544be69534e91556bac052fcdc99de818bfdaf54ed0cbcbc087628f70b3581392847049158812a2c8385d142ea8a306761a57e3db", @typed={0x14, 0x4e, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x44}}, @typed={0x8, 0x3d, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0xf5, 0x0, 0x0, @uid=r5}, @nested={0x4, 0xe9}]}, @generic="90d12230b9283fce99e4c14ec97682d946b5f85dcaa376219a2ce33f78c4998f5c35d4efecf4086c5beeeb05788ebf9dd7ad6b94492147b18a23c91e821e8a9632249f0a6d9fb51a3288f588b910b567a7d7477ac2a8e1d93dfac859095555876170df18e35afbde079782e51c822dcdfbbaae1d1a33bf4a15ea2f97c979d4dcfdcef77590cbc611d019e8ebd43c5ea53c47c432150d415837458e73308b1b1f83e48a754e46813044c4ffc6547a79daf38f13ed3a3a3d44d04421e7f493b456b3dfbc549e3abfa4b75bcb19edcf59bf56117caa517b7cc36592eb6fa8cec31fe8f21be6db4e93eec897b8a5", @generic="83e7430b339985b56545e2f90a54ed77bd349006bbf627282f65e891aacb2a6f2e945f7db611f611c291170321b0b0a06108a3662e5b47262122860f19fa90b439c38fa93987c18c121b3dd6e588aab63812aa377d7bb329edbcfec3ae693427921538a69c1eac860ef4fb44d1c5757217a037efb988d440fa63a235f07ad85962afe71cbcafa86b53d12b"]}, 0x3dc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000001040)="99d3c9f30f09b993080000b800000000ba000000800f30660f38dfb1e4000000f4cfc4e1fe12230f01c3b9800000c00f3235010000000f30", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x14, 0xfc, 0x0, 0x40, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0xfc, 0xff, 0xff, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.248384025s ago: executing program 0 (id=884): syz_open_dev$tty20(0xc, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./dev/kmsg\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 4.435295023s ago: executing program 2 (id=886): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) prlimit64(0x0, 0x7, &(0x7f0000002640)={0x3, 0xa5b1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, 0x41, 0x1, 0x70bd2a, 0x4, {0x1}, [@nested={0x4, 0x47}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@nested={0x14, 0x4, 0x0, 0x1, [@typed={0xe, 0x13d, 0x0, 0x0, @binary="003ed25cf791733fd7e1"}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x400c0d4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000300)="72bd8af674fdc36b983ae69136cf492a393b2e38306573742fe49c99a1becd9ea340d1e8c4cd9418a437baf3cae611ab7b4a47fb191ab46efaa2c736bd8966caa1ced37eb91daf69a70d4f1e9e0aa05e26e07d75cd2f43d03a00ef7db0194a74f2e1", 0x62) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x58, &(0x7f00000001c0)}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) 4.271362461s ago: executing program 3 (id=888): syz_usb_connect(0x3, 0x50, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x1, "d13e41eb5698c023926aec567268e7476fddc4815932b43bc053b5893f2837ed", 0xf, 0x7, 0x8, 0x3312}, 0x3c) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000100)={@broadcast, @loopback, 0xffffffffffffffff, "7a5c8e464d22e0f2409d0bc687371c52afd39846d543ff3f6ba82e81fdadb08e", 0xfffffffb, 0xfffffcab, 0x6, 0x4}, 0x3c) 4.245451779s ago: executing program 2 (id=889): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/cpu_dma_latency\x00', 0x20c01, 0x11) writev(r0, &(0x7f0000002600)=[{&(0x7f0000000140)="ab21057c", 0x4}], 0x1) 4.029796319s ago: executing program 2 (id=890): r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="9adf5154383e67a21710760c556d09284061f8a86cf83be873be19b378c5ad3e22f3a461d74042939f84d611c98efa309daeac38e517c8186de69f67493b6f256d9408b031dc2b6651cd3bda5b4c51f1d061b7edd81ccea323c3a6303548ca0367d3ce693487c575d2d86fb5814ac56061ccfa5991b4f86bf85a326f0878d6176c613791b6f99dd523603b2371eadde58d9781749da52e027861a4158100085e29", 0xa1}, {&(0x7f0000000100)="79e08001934d3e84d53ffe2ed1983f974bde5e62a827d19a5d17ab43fc17178bed4005f841a079ee6dc8bdfdbc9823a20797c7b4a1e5d833f4d6055b7cbb79edc66249511f75088e5d15cf72e8a95cf629769d435942f4b225362f08759af1e349b4b9f89f86c20d61c87fe0dad0cdea1771cad7ef4e72e24ed4329a39015b2dbd5bc1e3fff62a9da95a4637fd5489f2935d94f274a894e4ff43aae93fd40030fce117b1ab67bf4623df25b4e4ec82d8dbdafdef25c2c2689c8dbe9de46aaf341e1b37147a32520ea2de", 0xca}], 0x2) r1 = syz_usbip_server_init(0x5) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, 0x0) syz_usb_connect$uac2(0x1, 0xde, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x30df, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x2, 0x0, 0x97, {0x8, 0xb, 0x2, 0x2, 0x1, 0x9, 0x20, 0x6c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0xa, 0x9, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x40, 0x35, 0x9, 0x9}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x7fff, 0x0, "821dd07b75"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xdc, 0x4, 0xd4, 0x0, "c182ad", "c4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x2, 0x4, {0x8, 0x25, 0x1, 0x80, 0x30, 0x3, 0x20}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x6, 0xd, 0x0, 0x4, 0x9, 0x631, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7f, 0x1, 0x4, 0xc, "24f03d8594"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xa60, 0x8001, 0x8b, "14c64d5e2025d7df"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x7, 0x79, "c426", "16"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x5, 0x9, {0x8, 0x25, 0x1, 0x0, 0xf, 0x4, 0x7}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0x5, 0x81, 0x6, 0x28, 0x20}, 0x69, &(0x7f0000000380)={0x5, 0xf, 0x69, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "0e47ef7eaf3c88fce17cbdb423978108"}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf, 0xcec1, [0xfff0, 0xc0, 0xc0cf, 0xcf, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0x4, 0x7}, @generic={0x12, 0x10, 0x3, "e4301cfe9e5d27ea0290373d7abd1b"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "e98eed7aaa5e159d3ec903a15fb72e98"}]}, 0x2, [{0x99, &(0x7f0000000400)=@string={0x99, 0x3, "1bf86ae7e164dc6f9618aa8d003e53dd33cbc9e0dbe94b94118a6eee8f8e725ec2fd5bb3c5dbaeafee6bf52a55cef9644c9fd971986b193668719508422888b97471493f253efbc72fd9d15d10b28a09d955a6557730344ffbcf8563f81748989842c316a41188612e9d73d0f94d0220e3e714a05f13eff1d7f8540426430e1f5e0d17ed563814ff784809e013f823b52c509c59f25526"}}, {0x31, &(0x7f00000004c0)=@string={0x31, 0x3, "7a97115307819d015e6d84840eff244bf0db146153f5c504dfe09f67068fb93d91a9d47bf0b36a080712e778913dcb"}}]}) write$usbip_server(r1, &(0x7f0000001680)=@ret_submit={{0x3, 0x6, 0x0, 0x0, 0x8}, 0x4, 0x0, 0xa2f, 0x0, 0xe1}, 0x30) 3.885535803s ago: executing program 0 (id=891): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000580)=@mmap={0x1, 0x2, 0xffffffd7, 0x100000, 0x9, {}, {0x0, 0x2, 0x7f, 0xc0, 0x0, 0x37, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40814) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 3.691078528s ago: executing program 0 (id=892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000040)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r3, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@delchain={0x1acc, 0x65, 0x800, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xd}, {0xc, 0x7}, {0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x10001}, @TCA_RATE={0x6, 0x5, {0xa, 0x4}}, @filter_kind_options=@f_bpf={{0x8}, {0x1a90, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x7, 0x9, 0x5}, {0x1b, 0x3, 0x1}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0xa}, {0x54, 0x5, [{0x7, 0x4, 0x9, 0x2}, {0x1, 0x4, 0x7, 0xd}, {0x7, 0x2, 0xff, 0x9}, {0x9, 0x8, 0x10, 0xb6}, {0x4, 0x80, 0x7, 0x4}, {0x858, 0x4, 0x6b, 0x5}, {0x2, 0x0, 0x3, 0x6}, {0xa1b, 0x4, 0x1, 0xb01}, {0x100, 0x4, 0x0, 0x9}, {0xe075, 0x4, 0x0, 0xc782}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_FD={0x8, 0x6, r3}, @TCA_BPF_ACT={0x9e0, 0x1, [@m_skbedit={0xf4, 0x7, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7bf7, 0x9, 0x20000000, 0x5916, 0xc7e}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x27}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xfff2}}]}, {0x85, 0x6, "4abbe9a67ba928b77574a576a9870502b8d770d3b392cacf268f2df2c3f354d2cc18443c58e38370a32acd4943afce65d80be8cee7e2c7cc7d3e57be02992c161cb4172d3171f8d240d33e452cd6d91b8f2dd038962f0826e73d61d783429dfa1b41011811325c3ad144bc7bcfc67731ea3b23773eccb0a542869a9286ec8c73cd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0x1ec, 0xd, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x10, 0x6, 0xffffffffffffffff, 0xd97c, 0x10}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x8, 0x5, 0x2, 0xa77}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x200, 0xffffffffffffffff, 0x7, 0x672}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0xb7cb, 0x4, 0x1, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x42ab, 0x1, 0x3, 0xa}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1ff, 0x2, 0x6, 0x8, 0x80}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x1, 0x20000000, 0x9, 0x81}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x7, 0x7, 0xb, 0x81}}]}, {0xfd, 0x6, "459f49e483a5da2a06c6cb195c0fc962be58f8b183c250c2b1702ed3617f7424dd066819ae344dc6ea45e5e74c706898cd7e795426499b2a65cab103be30223ac30e5177c50dea378e1d36ce68131a797d0873471956864325e20740f90912728edadab5c53e0afd3cb569b9beb2c54ea530d82019ad57ec47bd3aa43c6746d134fc5dc7bb5e6fcef2d557dd8ef589a780dbb1bff12e6a6e1f513f7367a163a7094b6357753e34b023cb08ce4a04e8ce0974d7146da5dc99087a8e2a7d7fa1d654a160b52c2e6af9c0d706fbee52d59960dc48daa82a8aee35c12124fa468b698b1b69f4fdadb62536656561e11c8b1a2125df9e9b3401fd81"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x16c, 0x17, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xf, 0x7, 0x7, 0x1dd7}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x10000000, 0x8, 0x78}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x8, 0x8, 0x8001, 0x9}, 0x1}}]}, {0xec, 0x6, "90e42f4be6bdcfee71103588c61dbc8badda10cc8697044282ab7e8ce663ed63a64d326102bc75f611cc56a8298c79ee19ae95e579f755f3edc5390710aa1926ddf3e6dbb35b87b2d43c818948ae8d82c35ecca8d81964bb73b64e3acc718a987fcb81f8512f2a5693063799aee09b35c23f01814f90b07da6f535aeb75721757eaf15c727d027d20c6c678fbc67c5bf8c167c38a1e2a2586a308433cc47d2658907e873b8d6a7a6c46c063ba63db8f47b0142aa1fe8c76524f578e677bfad41bd1721e9bb63e83dd22b15205fd3a289ea176e29d025516ccaf39404b9501b1c191c47944d628ae2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0x1a8, 0x1a, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0x3a, 0x0, 0x4, 0x4}, @empty, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x7, 0x30000000, 0x8, 0x7}, @empty, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x80000001, 0xffffffffeffffff0, 0x7e6, 0x9}, @multicast1, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0xeeb2, 0x3, 0x4, 0x9}, @multicast1, @multicast2, 0x5f91a7912e7ce6d4}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x3, 0x10000000, 0xffffff00, 0x4}, @multicast2, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x0, 0x20000000, 0xfff, 0x9}, @broadcast, @multicast1, 0xff000000}}]}, {0x8d, 0x6, "d77035a2ae6ebff2688777dead5e0a4bc025be7c8aa3049b2c704f283b0e6c86615a4286bc838d79a10fb269d224225f2ba5f0c15a5b9373935c8ac776ab9ae3ec45d1a8b9ac71d4386c7e6c28a9c68eb9a07306c890cd04fa4bc7ff454e3de6ff12c924efe5d4f1f533a82e9864a270fd396f6be4472912090f88a7b43f06447022cf38421fc9bec1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0xf0, 0xd, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffff801, 0xf, 0x4, 0x579, 0x9}}]}, {0xa1, 0x6, "7666cfe46921bb3b306fe7a2f2fad783839dc8fbd5d020cfe9a686c2d69bd782535193fe17e48ef748278e73f51ddb2a85beca88db39fdd5d969902bfb909a9050bc510fc7c527e9b8faa8d659825523847c0d8155cb4a7d4f5e6898ed7450d44ef727822e55ff5eda3d044cd041c6fd70e68ee5769c8ff63fa869538f0c6d29b7317151e3211f832099493ad85ad796a56f5a02580eaa6a619a54faf3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x2f8, 0x15, 0x0, 0x0, {{0x7}, {0x260, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x4c, 0x6, {0x0, 'nat\x00', 0x8, 0xfff8, "4abb0714cfcd914719fe4c205b3bddae18e40874d78b58fde87a8115b1fab3c47b79"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TARG={0xd2, 0x6, {0x800, 'nat\x00', 0x5, 0x4, "5b6ef21e34b73095fc5a653d1e7fb96d4d29ff5ecbfc7feef3ca486cb924301fe40ccf6a36f72bc7644644aac239bcb86a5208c63f09ee4f10f4fedf62f69de75578d57f833f8e23417769abdfa5804efd146ea49db3b413b5caeab45a350d7e547048be2f06d09c329c5d5328fcd4a368c1143d86bdb42698cd02e63e00e63e9740db2df06b69e20821a3d89b6c1280d5340382fe22c05c03c877d4ea9a2c63df132ef3a4975c2c"}}, @TCA_IPT_TARG={0x122, 0x6, {0x0, 'raw\x00', 0xd, 0xfffd, "42f5fe0a9d74eccfec09aceb087c3d02e71cf895e1cc7d4c02ac7f57a0d1e77206e8dbc82cfce7d94d92fdd4cf247de6d2bb00d787ec3d363b68a74a22505f13a39828412d7355fb6be54fba3aba8a41daf99d8a7858ebd0dfc2b6404890c578f0aa8e82fc75ec9140ae3c9e8e51da203d3f52d8ea269fe8c9e173be0f8dd9393caf4d01e0892693474f72610d81754dc0fd0ef734abff6bfc27756781ba4bd3eed734c9af45ae451ba70669fdd2a53d284267055f53f15621d960aa52a0eee51072a51eaa28766d1cf90dc02f3c3ef51a19313c3baba90692896781e2ae0fcc73aceb52b2ccc92d80a9453b7e4d836234c73cde70b603dc"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffb}]}, {0x72, 0x6, "0cbee746f455bf139857434d9af7373d89a6cfd3e9eaed0095c8615e08fc1017c293a46ea73251064ebca93f652f6d4a2c5552df96a292eaa0d2a7f12c0b2d271c898d2f0ac14f8a57d222139cd798b327ad8ddb9b49bc6851d0ee9308041227e6440529b58f0e03bd7fed3fa0f1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_BPF_POLICE={0x1014, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xffffffff, 0x3b9, 0x6, 0x3, 0x0, 0x1000, 0x2, 0x0, 0x1f, 0x2, 0x55c78c41, 0x7, 0x7, 0x7, 0x9, 0x6, 0x400, 0x10001, 0x7, 0x6, 0xcf2, 0xfff, 0x9, 0x2, 0xfff, 0x0, 0x200, 0x2, 0x8000, 0x0, 0x3, 0x5, 0x9, 0x1, 0xa33, 0x3, 0x0, 0x8, 0x0, 0x9, 0x3, 0x5cc, 0x502, 0x5, 0xb243, 0x40, 0x7fffffff, 0x1, 0xfffffffd, 0x3ff, 0x6, 0x8e, 0x5, 0x4, 0x80, 0xfffffff8, 0x80000001, 0x7fffffff, 0x2, 0x8, 0x5, 0x4, 0xfffffffd, 0xd7, 0x11, 0x101, 0x80, 0x401, 0x426, 0xa, 0x1, 0x80000000, 0x430e7d1b, 0x7ff, 0x6, 0x1000, 0x49, 0x1, 0x5, 0x6, 0x4, 0x800, 0xfffffffe, 0xff, 0xa0f2, 0xfffffff6, 0x81, 0x7, 0x2, 0x8, 0x6, 0x6, 0xffffffff, 0x445f, 0x9, 0x1, 0x9, 0x5, 0x10, 0xb365, 0x4, 0x7, 0xfffffff9, 0x9, 0x7, 0xaf6, 0x5, 0x0, 0xffffffff, 0x1, 0x2, 0x8, 0x4, 0x3, 0x3, 0x7, 0x1e, 0x6, 0x40, 0x4, 0x80000000, 0xffffffff, 0x6, 0xffffffff, 0x9, 0x8, 0x8, 0x9, 0x5, 0x2, 0x193, 0x4, 0xffff0001, 0x4, 0x8, 0xa, 0x9, 0x3, 0x8000000, 0x21b1, 0x400, 0x8, 0x9, 0x8a0, 0x5, 0x6, 0x8000, 0x4, 0x8, 0x4, 0x2, 0x0, 0x6, 0x1, 0x0, 0x4, 0xfffff3c0, 0x4, 0x7ff, 0x3, 0x696, 0xc000000, 0x9, 0x9, 0xff, 0x1c0, 0x22, 0x5, 0x5, 0x101, 0x7, 0x4, 0x3, 0x81, 0x3, 0x5, 0x17, 0x7fff, 0x80000001, 0x4, 0xa0c, 0xd2e, 0xff, 0x0, 0x36, 0xfff, 0x10, 0x1, 0x6, 0x6, 0x2, 0x0, 0x6f, 0x5, 0x8, 0x2, 0x6, 0x6a, 0x80000000, 0x8797, 0x1, 0x3, 0x8, 0x4, 0x9, 0x8001, 0xb, 0x4, 0x7ff, 0x9, 0xfffffff4, 0x3, 0x8, 0x81ad, 0x46c, 0x1, 0x3, 0x0, 0x4, 0x4280, 0x40000000, 0x58b13f84, 0x8, 0x0, 0xe0, 0x5, 0x1, 0xf, 0x9, 0x3, 0x9, 0x7fffffff, 0x0, 0x2, 0x6, 0xfff, 0xb0000, 0x401, 0x9, 0xb, 0x2, 0x5, 0xffffffff, 0x2b4f, 0x6, 0x5, 0x6, 0x3, 0x1238, 0x1, 0x9, 0x8, 0xf1, 0xfffffdc9, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x2, 0xf, 0xd474, 0x3f0, 0x6, 0x3aab, 0xfff0, 0x10, 0x3, 0x3, 0x9, 0x8, 0xfffffff7, 0xbe, 0x7, 0x2, 0x80000000, 0xe2f, 0xffffffff, 0x2bf3, 0x7, 0x1, 0x7fff, 0x7f, 0x6, 0x8, 0x1, 0x7e4, 0x2, 0xfffffffb, 0x80000001, 0x7f, 0x0, 0xa489, 0x30, 0xf9, 0x5, 0x7f, 0x5, 0x1, 0x1, 0x9, 0x1, 0xdb53, 0x8, 0x0, 0x3, 0x2, 0x2, 0x200, 0x9, 0xdfc, 0x80, 0x7f, 0x1000, 0x9, 0xfffffffb, 0x0, 0x7, 0x1, 0xe302, 0x9, 0x9, 0xffffffff, 0x401, 0x4, 0x8, 0x8, 0x2, 0x6706, 0x2, 0x7, 0x2, 0x8, 0x80, 0x0, 0xffff, 0x6, 0x9, 0x7ff, 0x8, 0x7, 0xf, 0x7, 0xbadd, 0xef, 0x1b, 0x8, 0x401, 0xc, 0x0, 0x9729, 0xfffffff9, 0xf, 0x9, 0x6, 0x0, 0x401, 0x3ff, 0x2, 0xae00000, 0x6, 0xff, 0x6, 0x900000, 0x8, 0xfff, 0x7, 0x5, 0xf, 0x9, 0x89, 0x8, 0x6, 0x3, 0xd, 0x7, 0x9, 0x7, 0x59, 0x7, 0x83, 0x7, 0x7ee2, 0x400, 0x3, 0x6, 0x868, 0x10001, 0xffffffc0, 0x401, 0xc, 0x1, 0x6, 0x4877, 0x4, 0x5, 0xffffffff, 0x2, 0xffffffff, 0x7, 0x2, 0x0, 0xfff, 0xf366, 0x4, 0x3, 0x4, 0x4, 0x4e7d, 0x100, 0x8b, 0x1, 0x5, 0x7, 0x9, 0x5, 0x5, 0x8, 0x6, 0xdaae, 0x0, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x7, 0x5, 0x7fff, 0xfffff801, 0x4, 0xf5, 0x2, 0x1000, 0xe00000, 0x2, 0xb, 0x80000000, 0x3ff, 0x210a, 0x2, 0x7, 0xf2, 0x80000001, 0x10001, 0x0, 0x0, 0x67a2ddb9, 0x1, 0xfff, 0x8ba, 0xa2d, 0xf, 0x101, 0x3, 0x7, 0x2, 0x800, 0x4, 0xa, 0x4, 0x0, 0x800, 0x3, 0x8, 0xdd3, 0xff, 0x9cb, 0x2, 0x10000, 0x200, 0x7fffffff, 0x3, 0x1, 0x6, 0x5635, 0x2000000, 0x29049357, 0x0, 0x8, 0x6ebf63fd, 0x10000, 0x5, 0x9, 0x401, 0x4, 0x7, 0x7, 0x70, 0xfffffffa, 0x1, 0x4, 0x401, 0xd, 0x2, 0x8, 0x7, 0x1, 0x80000, 0x4, 0x1, 0x200, 0x800, 0x1, 0x81, 0x5, 0x49f, 0x9, 0x40, 0x7fff, 0xffff, 0x5, 0xd]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x8, 0x1f0e, 0x80000000, 0x1, 0x1ff, 0xf8, 0x73a, 0x7f, 0x3, 0x56c, 0x3, 0x7, 0x3, 0x3, 0x3ff, 0x610d, 0x7, 0x5, 0x10000, 0x5, 0xdeaf5bf0, 0x7, 0x3, 0x4, 0x2, 0x4, 0x2, 0x8, 0x5, 0xfffff001, 0x4, 0x4, 0x7, 0x86f, 0x3, 0x0, 0xedff, 0x3, 0x7fffffff, 0x7, 0xfffffffc, 0x8, 0x6, 0x10001, 0x401, 0xb9, 0x0, 0x5, 0x9, 0x8, 0x1, 0x0, 0x9, 0xc, 0x1, 0x0, 0x4, 0x10000, 0x9e, 0x1, 0xb, 0x1, 0x3, 0x3, 0x3, 0x1, 0x4, 0xc, 0x9, 0x1, 0x9026, 0xe, 0x3, 0xff, 0x57b, 0xfffff953, 0x300000, 0x7fffffff, 0x5, 0x7fffffff, 0x6, 0xfffffff8, 0x8000, 0x0, 0x0, 0xfffffffe, 0x80000001, 0x8001, 0x2a, 0x40, 0x983b, 0x6, 0x8, 0x0, 0x1, 0x717, 0xfffffc01, 0x7, 0x5, 0x5, 0x60000000, 0x100, 0x9, 0xfbf7, 0x1000, 0x3, 0x2, 0x4000000, 0x5, 0x800, 0x4, 0x3, 0xffff, 0x0, 0xfffffff9, 0x7, 0x6, 0x6, 0x3, 0x9, 0xfffffffe, 0x1, 0x8, 0x6c6a, 0xa, 0x1, 0x81, 0x6738, 0x6, 0x8, 0x8, 0x0, 0x3, 0xc076, 0x2, 0x2, 0x5, 0x1, 0x7, 0x0, 0xe2, 0x4f07, 0x7, 0x762d, 0x7, 0x200, 0x8001, 0x7f, 0x0, 0x200, 0x6, 0x3, 0xf8b, 0x9, 0x617, 0xfffffffb, 0x1, 0x5, 0x6, 0x400, 0x81, 0x7f, 0x3, 0x81, 0x1, 0x24, 0xc0790000, 0x2, 0x1ff, 0x1000, 0x3ff, 0x4, 0x80000000, 0x1de, 0x5, 0x0, 0x4, 0x0, 0x2d00, 0x8, 0xbc82, 0xc00, 0x8bb, 0x2, 0x0, 0x7f, 0xfffffff8, 0x9, 0x3ff, 0xe2, 0x9, 0x9c8, 0x100, 0x4, 0x7, 0x7, 0x100, 0x5, 0xffffa0a7, 0x3, 0x5, 0x8, 0x9, 0x7fffffff, 0x8, 0x2, 0x5, 0x9, 0x1, 0x10001, 0x6, 0x80000001, 0x200, 0x81, 0x9, 0x6, 0x3, 0xc080, 0xffffff80, 0x3ff, 0x1, 0x1000, 0x5, 0xffffffbf, 0x8, 0x401, 0x1000, 0x9, 0x3, 0x7ff, 0x7, 0x5, 0x9, 0x80000000, 0xffffff4d, 0x25b, 0x3, 0x40, 0x5, 0x8, 0x0, 0x1a, 0x9, 0xfffffffa, 0x97b, 0x7e, 0x1, 0x6, 0x0, 0x5, 0xd, 0xea, 0x7, 0x3ff, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x3, 0x5, 0x9, 0x3a, 0x54, 0x1, 0x101, 0x200, 0x9, 0xfffffffd, 0x7, 0x7086, 0x3, 0x2, 0x7f, 0x10000, 0x2, 0x9, 0x0, 0x164, 0x0, 0x40, 0x934, 0x1000, 0x94, 0xf0da, 0x3, 0x6, 0x9, 0x4b2, 0x4, 0x8, 0xa, 0xe, 0x6, 0x9, 0xe, 0x5, 0x6d8e, 0x9, 0x8, 0xa, 0x100, 0x6, 0xffff8000, 0x0, 0x52, 0x10, 0x0, 0xcb15, 0x7, 0x1, 0x0, 0x8, 0x8000, 0x4, 0xd, 0x4, 0x80, 0xea1, 0x10, 0x3, 0x0, 0x1, 0x7, 0xffffff7d, 0x6, 0x7, 0xfff, 0x2, 0x8, 0xfed3, 0x7fff, 0x2, 0x3, 0x36b, 0x4, 0x8, 0x400, 0xe41b, 0x6, 0x456, 0x1, 0x4, 0x8, 0x100, 0x4, 0x0, 0x6, 0x2, 0x6, 0xfffeffff, 0x1, 0x3, 0x7fff, 0x10, 0xfffffffd, 0xd7, 0x8, 0x7, 0xfff, 0x7, 0x6, 0xb, 0x9, 0x1, 0x7, 0x9, 0xb457, 0xf1f, 0x4, 0x8, 0x2add, 0x3, 0x4, 0x6, 0x2, 0x7ff, 0x101, 0x3, 0x4, 0x7, 0x5, 0xfffffe91, 0x3, 0x4, 0x6ced, 0x0, 0x6, 0xa, 0x2, 0x7, 0x3, 0x8, 0x7ff, 0x1, 0x5, 0xc2e, 0x9, 0x3ff, 0x10, 0x6, 0x8, 0x5, 0xfffffffb, 0x2, 0x1, 0x5b2, 0x9, 0x8000, 0x7, 0x0, 0x9, 0xffffffff, 0x6, 0x0, 0x8001, 0x1, 0x2, 0x6, 0x2, 0x38000000, 0xffffffff, 0x9, 0x8, 0x0, 0x9, 0x5, 0xd, 0x10001, 0x5, 0x7, 0x1ff, 0x9, 0x4, 0x8, 0x100000, 0x2, 0x3, 0xd, 0xc, 0x5, 0x0, 0x4, 0x10000, 0xfff, 0x0, 0x6, 0x3ff, 0x4, 0x9, 0x7, 0xffff0000, 0x5, 0x401, 0x4, 0xffff0000, 0x100, 0xcc6, 0x9, 0x80000000, 0x9, 0x0, 0x29, 0x899e, 0xffff, 0x4, 0x4, 0xc000000, 0x2, 0x3, 0x3, 0x1, 0x4b, 0x9, 0x4, 0x401, 0x7c1, 0x9, 0x200, 0x26, 0x0, 0x9, 0x1, 0xe22, 0x4, 0x8001, 0x2f70, 0x5fe, 0x1000, 0x3, 0x8, 0x7, 0x32, 0x8001, 0x3, 0x1, 0xc2bd, 0x9000, 0x5, 0xb100, 0x0, 0x0, 0x10, 0x6, 0x8, 0x6, 0x7, 0x9, 0xfffffffd, 0x9, 0xa, 0x9c, 0x8, 0x800]}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x1acc}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000000c0)={@remote, 0x7c}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0xbffe) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', 0x0}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.333349031s ago: executing program 3 (id=895): r0 = io_uring_setup(0x8, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000080)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000003f000500000000000000000002000000000000000f0001006f76732d7379"], 0x34}}, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000100)={0x100, 0xb, 0x1, '\x00', 0x800a}, 0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) io_uring_enter(r0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0) 3.151554053s ago: executing program 3 (id=896): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syncfs(r0) 2.865962906s ago: executing program 2 (id=898): prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='w', 0x1}], 0x1, 0x6) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) ioctl(r2, 0xc178fd02, &(0x7f0000000180)="040000001f000000000000003801") ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000240)={0x9, 0x5}) lstat(&(0x7f0000000180)='./tracing\x00', &(0x7f00000001c0)) r3 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x6, 0x50}}]}}]}}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000480)={'veth1_virt_wifi\x00', &(0x7f0000000040)=@ethtool_cmd={0x7, 0x3, 0x7, 0x7ff, 0x8, 0xc, 0xb, 0x98, 0x6, 0x8, 0xfffffe01, 0x5, 0x9, 0xff, 0x7, 0x3, [0x10, 0x1]}}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) 2.335018457s ago: executing program 7 (id=903): mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000002ac0)={0xf2, 0xf2}, 0x20) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) (async) r1 = socket$inet(0x2, 0xa, 0x9) setsockopt$MRT_FLUSH(r1, 0x0, 0xd0, &(0x7f00000002c0)=0x1, 0x4) (async) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000300)='v', 0x34022}], 0x1000000000000364) 2.218590367s ago: executing program 7 (id=904): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0xf, [0x1, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29a, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0xd, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x400000, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x18c, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x100, 0x0, 0x0, 0x204, 0x0, 0x0, 0x4000, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x402, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0xc9, 0x0, 0x8, 0x9, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x5cb9, 0xcaa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0) link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r2 = landlock_create_ruleset(&(0x7f0000000100)={0x7f6e, 0x0, 0x0, 0x4020}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000000)={0x0, r0}, 0x1) landlock_restrict_self(r2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00') 2.07893539s ago: executing program 7 (id=905): syz_usb_connect(0x3, 0x50, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000100)={@broadcast, @loopback, 0xffffffffffffffff, "7a5c8e464d22e0f2409d0bc687371c52afd39846d543ff3f6ba82e81fdadb08e", 0xfffffffb, 0xfffffcab, 0x6, 0x4}, 0x3c) 1.546566855s ago: executing program 8 (id=906): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xbf, 0x84, 0x7, 0x17, 0x40, "e758cae9ffed10000000b24000", "39e8000b82d8351da3f8240000000f00"}) (async) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xbf, 0x84, 0x7, 0x17, 0x40, "e758cae9ffed10000000b24000", "39e8000b82d8351da3f8240000000f00"}) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) pipe2$watch_queue(&(0x7f0000001180), 0x80) (async) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000400)) (async) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000400)) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r1) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000200)=[{{0x77359400}, 0x16, 0x5, 0xe}, {{0x77359400}, 0x0, 0x4, 0xa}, {{}, 0x3, 0xffff}, {{r2, r3/1000+10000}, 0x2, 0x9, 0x4}, {{r4, r5/1000+10000}}, {{r6, r7/1000+10000}, 0x3, 0x7, 0xa7c6}, {{0x77359400}, 0x17, 0x7, 0xfffffff9}], 0xa8) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) unlinkat(r1, 0xfffffffffffffffd, 0x200) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x1d, &(0x7f0000000040)=0x15a, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r13) getsockname$packet(r13, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="01000000494ef9adc66bcc0000001000010500006c4ee273c19d60384cf420baf157162488be293ed2856ee7c25b4b902510d08364217e4013d076d39c8ffc4fee9ceb8111574c1e", @ANYRES32=r14, @ANYBLOB="01600000000000001400128009000100697069700000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4841}, 0x84000) (async) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="01000000494ef9adc66bcc0000001000010500006c4ee273c19d60384cf420baf157162488be293ed2856ee7c25b4b902510d08364217e4013d076d39c8ffc4fee9ceb8111574c1e", @ANYRES32=r14, @ANYBLOB="01600000000000001400128009000100697069700000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4841}, 0x84000) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xfffd}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x2000c000) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000700)=ANY=[@ANYBLOB="50010000", @ANYRES16=r11, @ANYBLOB="010026bd7000fedbdc250100000008000100", @ANYRES32=r15, @ANYBLOB="3401028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000000000600", @ANYRES32=r15, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000200000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000300000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400010000000800070000000000"], 0x150}, 0x1, 0x0, 0x0, 0x4000431}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000700)=ANY=[@ANYBLOB="50010000", @ANYRES16=r11, @ANYBLOB="010026bd7000fedbdc250100000008000100", @ANYRES32=r15, @ANYBLOB="3401028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000000000600", @ANYRES32=r15, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000200000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000300000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400010000000800070000000000"], 0x150}, 0x1, 0x0, 0x0, 0x4000431}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f00000002c0)={@loopback, @rand_addr=0x64010100, 0x0, "d7c9a42c8c7b0105a3ad46e23df5ddd5952f7009709e96e627229749823dfb30", 0x8, 0x7, 0x7, 0x10}, 0x3c) write(r8, &(0x7f0000000300)='delete path_group \\3 /bin/sh\n', 0x1d) (async) write(r8, &(0x7f0000000300)='delete path_group \\3 /bin/sh\n', 0x1d) 1.469977378s ago: executing program 8 (id=907): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) r2 = fcntl$getown(r0, 0x9) sched_setscheduler(r2, 0x0, &(0x7f0000000040)=0x80) sendmsg$nl_route_sched(r0, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r4 = io_uring_setup(0x7d1, &(0x7f0000000240)={0x0, 0xddf9, 0x100, 0xfffffffe, 0x183}) close_range(r4, r4, 0x0) ioctl$FE_GET_EVENT(r3, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_SET_FRONTEND(r3, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x1170, 0x1398, 0x148, 0x1170, 0x210, 0x1398, 0x1398, 0x210, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0xffff00, 0xff000000, 0x0, 0xff000000], [0xffffff00], 'dvmrp0\x00', 'ipvlan1\x00', {0xff}, {}, 0x6, 0x0, 0x0, 0x18}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@srh={{0x30}, {0x89, 0xf, 0x8e, 0x1b, 0x7, 0x15425724a96145f8, 0x400}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0xe18, {0xffffffff}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [], [0xff000000, 0x0, 0x0, 0xff], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x2b, 0x0, 0x0, 0x7b}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x24, r7, 0x1, 0x70bd28, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r8, {0xffe0, 0x1}, {0xe, 0xfff3}, {0xfff1}}}, 0x24}}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe6a, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xf}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x75521fc4caed34d}, 0x20004804) 1.468905909s ago: executing program 7 (id=908): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x1ff) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="080000000100000002"], 0x484080) (fail_nth: 3) 1.378636936s ago: executing program 2 (id=909): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x12) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x10282, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="0232", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0xeeee0000, 0x108000}) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x0) read(r3, &(0x7f0000000500)=""/1024, 0x400) read$FUSE(r3, &(0x7f0000002480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$I2C(&(0x7f00000001c0), 0xb, 0x880c0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000100)={&(0x7f00000002c0)=[{0x1000, 0xca01, 0x0, 0x0}, {0xd, 0x7001, 0x0, 0x0}], 0x2}) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000900)={{{@in=@empty, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000001a40)=0xe8) getpgid(r6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000008f00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r4, r5}}, './tracefs\x00'}) sendmmsg$unix(r3, 0x0, 0x0, 0x4000044) syz_usb_disconnect(r7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) 1.165806046s ago: executing program 7 (id=910): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000003b67465306c0d72ea3c2f4500f9d7590d6a142ec7c473e4a915e7568de056c17368e6b16672f2064b7bb1dcb3c42e819db78111e9afa800318b9091e5fd5d9a0cde9ba70e27ea48d6670af4444f1b59780ccf85610b22de592", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000004000002850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000300)={0xb, 0x5, {0x2, @struct={0xfffffff8, 0xffffffff}, 0x0, 0x699, 0x4, 0x75dcfaaf, 0x400, 0x7, 0xc, @struct={0x5, 0x7fffffff}, 0xda, 0x6, [0x7ff, 0x0, 0x0, 0x5, 0x2, 0x7]}, {0x4, @usage=0x200040, 0x0, 0xedc, 0x800, 0x9, 0x10000, 0x7, 0x401, @struct={0x0, 0x8d7}, 0xffff0000, 0xa, [0x3, 0x5, 0x3, 0x1, 0x62e1]}, {0xa15e, @usage=0x9, 0x0, 0x5, 0x5, 0x2, 0x0, 0x182, 0x48, @usage=0x8, 0x5, 0x5, [0x1, 0xffffffffffffffff, 0x5, 0xce81, 0x2, 0x2]}, {0x6, 0x2, 0x8}}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') read$FUSE(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000c80)='fdinfo\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) syz_emit_vhci(0x0, 0x4) ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) ioctl$UFFDIO_COPY(r3, 0xc028aa03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x4, "d30f388c52e47600000000000000000000000300", 0x0, 0x5, 0xfff, 0xffffffde}, 0x3c) getdents64(r3, &(0x7f0000002440)=""/181, 0xb5) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r7, 0x890b, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x1f) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000faffffff00000000030000008500000036000000670000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) 910.349864ms ago: executing program 8 (id=911): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x7, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe5, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x8, 0xd, 0x800, 0x3, 0x6, 0x4, 0x100002, 0xc7, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x6, 0x4, 0x16, 0xc, 0x5, 0x401, 0x2000001, 0x405, 0xa7, 0x81, 0xd, 0x1ff, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x3, 0x1000000, 0x489, 0x7ff, 0x4, 0x80000001, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0xfffffff7, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0xa, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x4002, 0x2e6bf781, 0x80000001, 0x5, 0x2, 0x489, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee48, 0x2000004, 0x1, 0x10, 0x6, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x8, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0xa, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x3, 0x10010, 0xfffffffd, 0x5, 0xfffffffe], [0xc, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x4, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0xa0, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xea1, 0x428, 0x5, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13fff, 0x1, 0x1]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0xfffffffffffffffa, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xa, 0x5, 0xa, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 773.09508ms ago: executing program 8 (id=912): openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) gettid() r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) epoll_create1(0xbfa4d5fb5a1d3d0) timer_create(0x7, 0x0, &(0x7f0000000240)) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x28000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) socket(0x40000000015, 0x5, 0x0) syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x0, 0x10000051}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x1, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010001d0400000402fedbdf2500000000", @ANYRES32=r4, @ANYBLOB="4b0206170000000018000a00", @ANYRES32=r4, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 712.126996ms ago: executing program 8 (id=913): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000002, 0x204031, 0xffffffffffffffff, 0xc9751000) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x8, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x7ffe, 0xa}]}) (fail_nth: 3) 410.566606ms ago: executing program 8 (id=914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x38, 0x3, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0xb63a}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c015}, 0x4000844) r1 = syz_open_dev$mtd(&(0x7f0000000000), 0x46, 0x1) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x4000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x200400c4) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newtfilter={0xa0, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xfff1, 0xffe0}, {0x0, 0xffe0}, {0xfff1, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x70, 0x2, [@TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x5}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xffffff00, 0xff, 0xff000000]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xff000000, 0xff000000, 0xffffff00, 0xff000000]}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0xf}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x7}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @multicast}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6, 0x2d, 0x9}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000480)={'filter\x00', 0x2, [{}, {}]}, 0x48) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005c3f6b200304a4bc23d7010203010902120001000000000904"], 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) lseek(r1, 0x9, 0x2) 261.09191ms ago: executing program 7 (id=915): openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = msgget$private(0x0, 0xa4) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0xc, 0x0, &(0x7f0000000a40)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0x138, 0x16, 0x633, 0x0, 0x80000000, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@empty, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xc, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0x2, 0x4, 0x18}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) msgsnd(r1, &(0x7f0000000000)={0x1}, 0x8, 0x800) msgrcv(r1, &(0x7f0000001040)={0x0, ""/100}, 0x6c, 0x0, 0x208be586909acbb4) getsockopt$sock_int(r0, 0x1, 0x48, 0x0, &(0x7f00000000c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x109083) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x1, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe658}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x4, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010025bd7000fcdbdf2501000000000000000b"], 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r7, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 228.039662ms ago: executing program 0 (id=916): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004000000002000003c"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x1a, 0x0, 0x6}, 0x28) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) socket(0x10, 0x3, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/51, 0x0, &(0x7f0000000500)=""/4092}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@bloom_filter={0x1e, 0xc, 0x7, 0x1ff, 0x6200, r2, 0x464, '\x00', 0x0, r2, 0x4, 0x1, 0x3, 0x5}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0xfb40, '\x00', 0x0, r2, 0x5, 0x1, 0x4}, 0x50) shutdown(r1, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x50) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=917): r0 = syz_open_dev$dvb_frontend(&(0x7f0000002180), 0x7b0c, 0x40000) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000024c0)={0x9, &(0x7f0000002200)=[{0x20, '\x00', @st={0x4, [{0x3, @svalue=0xe}, {0x1, @uvalue=0x1}, {0x0, @svalue=0x3}, {0x3, @svalue=0x7}]}}, {0xd, '\x00', @buffer={"37dcf882d301f636bba1aeb8b9ff3b2e8a1433ce9a54973d8fcc7513cfef7ed6", 0x20}, 0x74}, {0x2f, '\x00', @data=0x3, 0x2}, {0xb, '\x00', @st={0x4, [{0x1, @svalue=0x4000004}, {0x1, @uvalue=0x3a5}, {0x2, @svalue=0xb}, {0x5d1ae71d15d461ec, @svalue=0xc}]}, 0x6}, {0x16, '\x00', @buffer={"6286ae8c1979f833ab4c4e4f62f4ee8901a6f20bb586484243639abe77012d1a", 0x20}, 0x6}, {0x11, '\x00', @buffer={"8bf85060e37980b2ca188f430e1a6042d644127f6bdf9e9421b9cb87f1be9fcb", 0x20}, 0x367}, {0x39, '\x00', @data=0x8, 0x1b}, {0x1c, '\x00', @data=0x7fffffff, 0x7}, {0x2a, '\x00', @st={0x4, [{0x2, @uvalue=0xc}, {0x0, @svalue=0xffffffffffffffff}, {0x3, @svalue}, {0x1, @svalue=0x3ff}]}, 0x6}]}) kernel console output (not intermixed with test programs): 59 [ 267.018850][ T8144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.018861][ T8144] RSP: 002b:00007f0c96f13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 267.018873][ T8144] RAX: ffffffffffffffda RBX: 00007f0c96225fa0 RCX: 00007f0c95f9e159 [ 267.018880][ T8144] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 267.018887][ T8144] RBP: 00007f0c96f13090 R08: 0000000000000000 R09: 0000000000000000 [ 267.018894][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.018900][ T8144] R13: 00007f0c96226038 R14: 00007f0c96225fa0 R15: 00007fff4ed0cc28 [ 267.018916][ T8144] [ 267.408972][ T8143] block nbd5: not configured, cannot reconfigure [ 267.474066][ T5704] usb 1-1: USB disconnect, device number 30 [ 267.707090][ T8155] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 268.814041][ T5603] Bluetooth: hci2: command tx timeout [ 269.683764][ T31] kauditd_printk_skb: 200 callbacks suppressed [ 269.683777][ T31] audit: type=1400 audit(1791039724.958:724): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 269.768426][ T8174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.856437][ T31] audit: type=1400 audit(1791039725.128:725): avc: denied { call } for pid=8151 comm="syz.2.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 269.899225][ T8152] netlink: Failed to add k\ helper -22 [ 269.899268][ T8152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.127033][ T31] audit: type=1400 audit(1791039725.398:726): avc: denied { write } for pid=8158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.214674][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 270.365451][ T10] usb 4-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 270.369331][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 270.369346][ T10] usb 4-1: Product: syz [ 270.369355][ T10] usb 4-1: Manufacturer: syz [ 270.459560][ T31] audit: type=1400 audit(1791039725.728:727): avc: denied { write } for pid=8191 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.695152][ T8137] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.695203][ T8137] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.718834][ T8137] bridge_slave_0: entered allmulticast mode [ 270.719712][ T8137] bridge_slave_0: entered promiscuous mode [ 270.736126][ T8137] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.736176][ T8137] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.736258][ T8137] bridge_slave_1: entered allmulticast mode [ 270.770831][ T8137] bridge_slave_1: entered promiscuous mode [ 270.795647][ T10] usb 4-1: USB disconnect, device number 33 [ 270.882862][ T5603] Bluetooth: hci2: command tx timeout [ 270.944918][ T8137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.946533][ T8137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.045662][ T31] audit: type=1400 audit(1791039726.308:728): avc: denied { write } for pid=8198 comm="syz.5.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 271.110102][ T31] audit: type=1400 audit(1791039726.378:729): avc: denied { read } for pid=8198 comm="syz.5.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 271.227431][ T8137] team0: Port device team_slave_0 added [ 271.229803][ T8137] team0: Port device team_slave_1 added [ 271.397410][ T8203] block nbd2: not configured, cannot reconfigure [ 271.443354][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.443366][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.443380][ T8137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.444500][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.444509][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.444522][ T8137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.646967][ T8207] FAULT_INJECTION: forcing a failure. [ 271.646967][ T8207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.646990][ T8207] CPU: 0 UID: 0 PID: 8207 Comm: syz.5.667 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.647006][ T8207] Tainted: [L]=SOFTLOCKUP [ 271.647010][ T8207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 271.647017][ T8207] Call Trace: [ 271.647021][ T8207] [ 271.647025][ T8207] dump_stack_lvl+0x100/0x190 [ 271.647047][ T8207] should_fail_ex.cold+0x5/0xa [ 271.647064][ T8207] _copy_to_user+0x32/0xd0 [ 271.647080][ T8207] __sys_bpf+0x263a/0x4a30 [ 271.647097][ T8207] ? __pfx___sys_bpf+0x10/0x10 [ 271.647109][ T8207] ? find_held_lock+0x2b/0x80 [ 271.647126][ T8207] ? get_pid_task+0xfc/0x250 [ 271.647141][ T8207] ? get_pid_task+0xfc/0x250 [ 271.647161][ T8207] ? find_held_lock+0x2b/0x80 [ 271.647181][ T8207] ? rcu_read_lock_any_held+0x6a/0x90 [ 271.647200][ T8207] ? find_held_lock+0x2b/0x80 [ 271.647216][ T8207] ? ksys_write+0x190/0x250 [ 271.647229][ T8207] ? ksys_write+0x190/0x250 [ 271.647244][ T8207] ? lock_acquire+0x1d1/0x380 [ 271.647267][ T8207] ? fput+0x7c/0x100 [ 271.647282][ T8207] ? ksys_write+0x1ac/0x250 [ 271.647296][ T8207] ? __x64_sys_bpf+0xce/0x140 [ 271.647308][ T8207] __x64_sys_bpf+0xce/0x140 [ 271.647321][ T8207] ? do_syscall_64+0xae/0x790 [ 271.647334][ T8207] do_syscall_64+0x123/0x790 [ 271.647348][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.647359][ T8207] RIP: 0033:0x7f2f4d59e159 [ 271.647369][ T8207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.647380][ T8207] RSP: 002b:00007f2f4e3c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 271.647391][ T8207] RAX: ffffffffffffffda RBX: 00007f2f4d825fa0 RCX: 00007f2f4d59e159 [ 271.647399][ T8207] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000004 [ 271.647406][ T8207] RBP: 00007f2f4e3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 271.647413][ T8207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.647419][ T8207] R13: 00007f2f4d826038 R14: 00007f2f4d825fa0 R15: 00007ffdc8923928 [ 271.647435][ T8207] [ 272.128247][ T8137] hsr_slave_0: entered promiscuous mode [ 272.141095][ T8137] hsr_slave_1: entered promiscuous mode [ 272.159006][ T8137] debugfs: 'hsr0' already exists in 'hsr' [ 272.159021][ T8137] Cannot create hsr debugfs directory [ 273.111180][ T5603] Bluetooth: hci2: command tx timeout [ 273.191108][ T8215] netlink: 830 bytes leftover after parsing attributes in process `syz.2.670'. [ 273.250343][ T8222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.668'. [ 273.314153][ T8220] @0: renamed from bond_slave_1 (while UP) [ 273.475527][ T8225] netlink: 72 bytes leftover after parsing attributes in process `syz.2.670'. [ 273.588327][ T8231] FAULT_INJECTION: forcing a failure. [ 273.588327][ T8231] name failslab, interval 1, probability 0, space 0, times 0 [ 273.588350][ T8231] CPU: 0 UID: 0 PID: 8231 Comm: syz.0.673 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.588366][ T8231] Tainted: [L]=SOFTLOCKUP [ 273.588370][ T8231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 273.588377][ T8231] Call Trace: [ 273.588381][ T8231] [ 273.588386][ T8231] dump_stack_lvl+0x100/0x190 [ 273.588407][ T8231] should_fail_ex.cold+0x5/0xa [ 273.588424][ T8231] should_failslab+0xc2/0x120 [ 273.588441][ T8231] __kmalloc_cache_noprof+0x91/0x6d0 [ 273.588454][ T8231] ? copy_mount_options+0x55/0x190 [ 273.588470][ T8231] copy_mount_options+0x55/0x190 [ 273.588484][ T8231] __x64_sys_mount+0x1ab/0x310 [ 273.588496][ T8231] ? __pfx___x64_sys_mount+0x10/0x10 [ 273.588512][ T8231] do_syscall_64+0x123/0x790 [ 273.588527][ T8231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.588538][ T8231] RIP: 0033:0x7f174499e159 [ 273.588548][ T8231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.588559][ T8231] RSP: 002b:00007f174582d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 273.588571][ T8231] RAX: ffffffffffffffda RBX: 00007f1744c25fa0 RCX: 00007f174499e159 [ 273.588578][ T8231] RDX: 0000200000000040 RSI: 00002000000002c0 RDI: 0000000000000000 [ 273.588585][ T8231] RBP: 00007f174582d090 R08: 0000200000000080 R09: 0000000000000000 [ 273.588592][ T8231] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001 [ 273.588599][ T8231] R13: 00007f1744c26038 R14: 00007f1744c25fa0 R15: 00007ffed154e6c8 [ 273.588614][ T8231] [ 273.724859][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 273.925697][ T9] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 273.931319][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.931335][ T9] usb 4-1: Product: syz [ 273.931343][ T9] usb 4-1: Manufacturer: syz [ 273.931352][ T9] usb 4-1: SerialNumber: syz [ 273.986534][ T9] usb 4-1: config 0 descriptor?? [ 273.988699][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 273.988714][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 274.188737][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 274.204890][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 274.206064][ T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 274.206092][ T9] usb 4-1: media controller created [ 274.207500][ T8242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.676'. [ 274.275204][ T31] audit: type=1400 audit(1791039729.548:730): avc: denied { write } for pid=8205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.317462][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.335481][ T8249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8249 comm=syz.2.676 [ 274.507872][ T9] DVB: Unable to find symbol dib7000p_attach() [ 274.507882][ T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 274.635287][ T31] audit: type=1400 audit(1791039729.908:731): avc: denied { write } for pid=8256 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.668637][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 274.668648][ T9] Registered IR keymap rc-empty [ 274.668781][ T9] dvb-usb: could not initialize remote control. [ 274.668786][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 274.713219][ T9] usb 4-1: USB disconnect, device number 34 [ 274.747809][ T31] audit: type=1400 audit(1791039730.018:732): avc: denied { append } for pid=8221 comm="syz.3.672" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 274.799413][ T8223] FAULT_INJECTION: forcing a failure. [ 274.799413][ T8223] name failslab, interval 1, probability 0, space 0, times 0 [ 274.799436][ T8223] CPU: 0 UID: 0 PID: 8223 Comm: syz.3.672 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.799454][ T8223] Tainted: [L]=SOFTLOCKUP [ 274.799458][ T8223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 274.799468][ T8223] Call Trace: [ 274.799472][ T8223] [ 274.799477][ T8223] dump_stack_lvl+0x100/0x190 [ 274.799500][ T8223] should_fail_ex.cold+0x5/0xa [ 274.799519][ T8223] should_failslab+0xc2/0x120 [ 274.799536][ T8223] __kmalloc_cache_noprof+0x91/0x6d0 [ 274.799556][ T8223] ? kvm_dev_ioctl+0xb48/0x1b50 [ 274.799575][ T8223] kvm_dev_ioctl+0xb48/0x1b50 [ 274.799594][ T8223] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 274.799612][ T8223] ? selinux_file_ioctl+0x13b/0x290 [ 274.799628][ T8223] ? selinux_file_ioctl+0xb6/0x290 [ 274.799643][ T8223] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 274.799658][ T8223] __x64_sys_ioctl+0x18e/0x210 [ 274.799673][ T8223] do_syscall_64+0x123/0x790 [ 274.799687][ T8223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.799699][ T8223] RIP: 0033:0x7f0c95f9e159 [ 274.799709][ T8223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.799721][ T8223] RSP: 002b:00007f0c96f13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.799733][ T8223] RAX: ffffffffffffffda RBX: 00007f0c96225fa0 RCX: 00007f0c95f9e159 [ 274.799740][ T8223] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 274.799747][ T8223] RBP: 00007f0c9603506b R08: 0000000000000000 R09: 0000000000000000 [ 274.799754][ T8223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.799760][ T8223] R13: 00007f0c96226038 R14: 00007f0c96225fa0 R15: 00007fff4ed0cc28 [ 274.799776][ T8223] [ 275.127601][ T5603] Bluetooth: hci2: command tx timeout [ 275.187388][ T8137] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 275.224063][ T8137] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 275.226427][ T8137] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 275.268432][ T8137] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 275.270980][ T8137] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 275.300151][ T8137] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 275.300616][ T8137] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 275.334300][ T8137] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 275.458657][ T31] audit: type=1400 audit(1791039730.728:733): avc: denied { ioctl } for pid=8276 comm="syz.0.683" path="socket:[25263]" dev="sockfs" ino=25263 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 275.498848][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 275.543058][ T5704] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 275.544058][ T31] audit: type=1400 audit(1791039730.818:734): avc: denied { create } for pid=8276 comm="syz.0.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 275.618657][ T31] audit: type=1400 audit(1791039730.888:735): avc: denied { getopt } for pid=8277 comm="syz.5.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 275.694291][ T5704] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 275.695047][ T5704] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 275.695061][ T5704] usb 3-1: config 0 has no interface number 0 [ 275.698356][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.698371][ T5704] usb 3-1: Product: syz [ 275.698379][ T5704] usb 3-1: Manufacturer: syz [ 275.698387][ T5704] usb 3-1: SerialNumber: syz [ 275.699967][ T5704] usb 3-1: config 0 descriptor?? [ 275.855743][ T8137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.895808][ T8288] syzkaller1: entered promiscuous mode [ 275.895824][ T8288] syzkaller1: entered allmulticast mode [ 275.956757][ T5704] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 275.958514][ T8137] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.980335][ T5704] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 275.980525][ T5704] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 275.980557][ T5704] usb 3-1: media controller created [ 276.065651][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 276.180570][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.181402][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.264942][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.265005][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.267648][ T8293] batman_adv: batadv0: Adding interface: syzkaller0 [ 276.267658][ T8293] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.267675][ T8293] batman_adv: batadv0: Interface activated: syzkaller0 [ 276.384415][ T8296] netlink: 830 bytes leftover after parsing attributes in process `syz.5.686'. [ 276.410454][ T8291] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 276.495117][ T8296] netlink: 72 bytes leftover after parsing attributes in process `syz.5.686'. [ 276.517971][ T8303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.687'. [ 276.537925][ T8291] batman_adv: batadv0: Removing interface: syzkaller0 [ 276.589311][ T8303] netlink: 'syz.3.687': attribute type 12 has an invalid length. [ 276.589326][ T8303] netlink: 'syz.3.687': attribute type 29 has an invalid length. [ 276.589334][ T8303] netlink: 148 bytes leftover after parsing attributes in process `syz.3.687'. [ 276.690461][ T31] audit: type=1400 audit(1791039731.958:736): avc: denied { write } for pid=8272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.048863][ T31] audit: type=1400 audit(1791039732.318:737): avc: denied { write } for pid=8313 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.189477][ T8320] netlink: 400 bytes leftover after parsing attributes in process `syz.0.690'. [ 277.214236][ T5704] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 277.360105][ T5704] usb 3-1: USB disconnect, device number 34 [ 277.409444][ T8325] netlink: 400 bytes leftover after parsing attributes in process `syz.5.691'. [ 277.509359][ T8329] 9p: Bad value for 'rfdno' [ 278.009123][ T8342] FAULT_INJECTION: forcing a failure. [ 278.009123][ T8342] name failslab, interval 1, probability 0, space 0, times 0 [ 278.009145][ T8342] CPU: 0 UID: 0 PID: 8342 Comm: syz.0.692 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.009161][ T8342] Tainted: [L]=SOFTLOCKUP [ 278.009165][ T8342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 278.009172][ T8342] Call Trace: [ 278.009176][ T8342] [ 278.009181][ T8342] dump_stack_lvl+0x100/0x190 [ 278.009202][ T8342] should_fail_ex.cold+0x5/0xa [ 278.009220][ T8342] should_failslab+0xc2/0x120 [ 278.009237][ T8342] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 278.009260][ T8342] ? sock_alloc_inode+0x26/0x2c0 [ 278.009273][ T8342] ? __pfx_sock_alloc_inode+0x10/0x10 [ 278.009285][ T8342] sock_alloc_inode+0x26/0x2c0 [ 278.009295][ T8342] ? __pfx_sock_alloc_inode+0x10/0x10 [ 278.009305][ T8342] alloc_inode+0x68/0x250 [ 278.009319][ T8342] sock_alloc+0x44/0x280 [ 278.009334][ T8342] ? security_socket_create+0x7f/0x250 [ 278.009349][ T8342] sock_create_lite+0x82/0x120 [ 278.009367][ T8342] sctp_getsockopt_peeloff_common.constprop.0+0x1bd/0x640 [ 278.009386][ T8342] ? __pfx_sctp_getsockopt_peeloff_common.constprop.0+0x10/0x10 [ 278.009408][ T8342] sctp_getsockopt+0x374a/0x7110 [ 278.009424][ T8342] ? avc_has_perm_noaudit+0x56/0x470 [ 278.009443][ T8342] ? find_held_lock+0x2b/0x80 [ 278.009461][ T8342] ? avc_has_perm_noaudit+0x11e/0x470 [ 278.009480][ T8342] ? avc_has_perm_noaudit+0x11e/0x470 [ 278.009499][ T8342] ? __pfx_sctp_getsockopt+0x10/0x10 [ 278.009518][ T8342] ? avc_has_perm+0x135/0x1e0 [ 278.009536][ T8342] ? __pfx_avc_has_perm+0x10/0x10 [ 278.009557][ T8342] ? lock_acquire+0x1d1/0x380 [ 278.009569][ T8342] ? __might_fault+0xc5/0x140 [ 278.009581][ T8342] ? find_held_lock+0x2b/0x80 [ 278.009597][ T8342] ? __might_fault+0xc5/0x140 [ 278.009608][ T8342] ? __might_fault+0xc5/0x140 [ 278.009623][ T8342] ? _copy_from_user+0x59/0xd0 [ 278.009637][ T8342] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 278.009650][ T8342] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 278.009665][ T8342] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 278.009678][ T8342] do_sock_getsockopt+0x50a/0x6e0 [ 278.009692][ T8342] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 278.009707][ T8342] ? __fget_files+0x34/0x3d0 [ 278.009722][ T8342] ? find_held_lock+0x2b/0x80 [ 278.009743][ T8342] ? __fget_files+0x21f/0x3d0 [ 278.009762][ T8342] __sys_getsockopt+0x148/0x260 [ 278.009782][ T8342] ? __x64_sys_getsockopt+0xbd/0x160 [ 278.009798][ T8342] __x64_sys_getsockopt+0xbd/0x160 [ 278.009813][ T8342] ? do_syscall_64+0xae/0x790 [ 278.009825][ T8342] ? lockdep_hardirqs_on+0x7d/0x110 [ 278.009837][ T8342] do_syscall_64+0x123/0x790 [ 278.009851][ T8342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.009863][ T8342] RIP: 0033:0x7f174499e159 [ 278.009873][ T8342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.009883][ T8342] RSP: 002b:00007f174582d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 278.009895][ T8342] RAX: ffffffffffffffda RBX: 00007f1744c25fa0 RCX: 00007f174499e159 [ 278.009902][ T8342] RDX: 0000000000000066 RSI: 0000000000000084 RDI: 0000000000000003 [ 278.009909][ T8342] RBP: 00007f174582d090 R08: 0000200000000080 R09: 0000000000000000 [ 278.009916][ T8342] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.009923][ T8342] R13: 00007f1744c26038 R14: 00007f1744c25fa0 R15: 00007ffed154e6c8 [ 278.009939][ T8342] [ 278.010374][ T8346] FAULT_INJECTION: forcing a failure. [ 278.010374][ T8346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.010391][ T8346] CPU: 0 UID: 0 PID: 8346 Comm: syz.3.693 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.010406][ T8346] Tainted: [L]=SOFTLOCKUP [ 278.010410][ T8346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 278.010417][ T8346] Call Trace: [ 278.010421][ T8346] [ 278.010425][ T8346] dump_stack_lvl+0x100/0x190 [ 278.010444][ T8346] should_fail_ex.cold+0x5/0xa [ 278.010460][ T8346] _copy_from_user+0x2e/0xd0 [ 278.010474][ T8346] ____sys_sendmsg+0x1d1/0xbe0 [ 278.010488][ T8346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.010503][ T8346] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 278.010523][ T8346] ___sys_sendmsg+0x190/0x1e0 [ 278.010537][ T8346] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.010550][ T8346] ? __lock_acquire+0x5c0/0x1f40 [ 278.010569][ T8346] ? find_held_lock+0x2b/0x80 [ 278.010595][ T8346] __sys_sendmsg+0x160/0x210 [ 278.010612][ T8346] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.010636][ T8346] do_syscall_64+0x123/0x790 [ 278.010650][ T8346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.010662][ T8346] RIP: 0033:0x7f0c95f9e159 [ 278.010671][ T8346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.010682][ T8346] RSP: 002b:00007f0c96f13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.010692][ T8346] RAX: ffffffffffffffda RBX: 00007f0c96225fa0 RCX: 00007f0c95f9e159 [ 278.010699][ T8346] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000004 [ 278.010706][ T8346] RBP: 00007f0c96f13090 R08: 0000000000000000 R09: 0000000000000000 [ 278.010713][ T8346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.010720][ T8346] R13: 00007f0c96226038 R14: 00007f0c96225fa0 R15: 00007fff4ed0cc28 [ 278.010735][ T8346] [ 278.315627][ T8137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.920655][ T31] audit: type=1400 audit(1791039734.188:738): avc: denied { write } for pid=8328 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.086288][ T31] audit: type=1400 audit(1791039734.358:739): avc: denied { mounton } for pid=8350 comm="syz.3.695" path="/154/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 279.153483][ T31] audit: type=1400 audit(1791039734.428:740): avc: denied { setopt } for pid=8350 comm="syz.3.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 279.156346][ T31] audit: type=1400 audit(1791039734.428:741): avc: denied { bind } for pid=8350 comm="syz.3.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 279.236164][ T8354] FAULT_INJECTION: forcing a failure. [ 279.236164][ T8354] name failslab, interval 1, probability 0, space 0, times 0 [ 279.236187][ T8354] CPU: 0 UID: 0 PID: 8354 Comm: syz.3.695 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.236205][ T8354] Tainted: [L]=SOFTLOCKUP [ 279.236210][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 279.236217][ T8354] Call Trace: [ 279.236222][ T8354] [ 279.236227][ T8354] dump_stack_lvl+0x100/0x190 [ 279.236250][ T8354] should_fail_ex.cold+0x5/0xa [ 279.236268][ T8354] should_failslab+0xc2/0x120 [ 279.236285][ T8354] kmem_cache_alloc_noprof+0x92/0x6a0 [ 279.236299][ T8354] ? do_getname+0x35/0x390 [ 279.236313][ T8354] do_getname+0x35/0x390 [ 279.236326][ T8354] do_sys_openat2+0xc7/0x1e0 [ 279.236343][ T8354] ? __pfx_do_sys_openat2+0x10/0x10 [ 279.236360][ T8354] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 279.236378][ T8354] __x64_sys_openat+0x12d/0x210 [ 279.236396][ T8354] ? __pfx___x64_sys_openat+0x10/0x10 [ 279.236419][ T8354] do_syscall_64+0x123/0x790 [ 279.236433][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.236446][ T8354] RIP: 0033:0x7f0c95f9e159 [ 279.236456][ T8354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.236467][ T8354] RSP: 002b:00007f0c96f13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 279.236479][ T8354] RAX: ffffffffffffffda RBX: 00007f0c96225fa0 RCX: 00007f0c95f9e159 [ 279.236486][ T8354] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 279.236494][ T8354] RBP: 00007f0c9603506b R08: 0000000000000000 R09: 0000000000000000 [ 279.236501][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.236508][ T8354] R13: 00007f0c96226038 R14: 00007f0c96225fa0 R15: 00007fff4ed0cc28 [ 279.236525][ T8354] [ 279.755830][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 279.755843][ T31] audit: type=1400 audit(1791039735.028:760): avc: denied { write } for pid=7737 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 279.755869][ T31] audit: type=1400 audit(1791039735.028:761): avc: denied { write } for pid=7737 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 279.755891][ T31] audit: type=1400 audit(1791039735.028:762): avc: denied { write } for pid=7737 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 279.755913][ T31] audit: type=1400 audit(1791039735.028:763): avc: denied { write } for pid=7737 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 279.755935][ T31] audit: type=1400 audit(1791039735.028:764): avc: denied { write } for pid=7737 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 279.929921][ T31] audit: type=1400 audit(1791039735.198:765): avc: denied { write } for pid=7737 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 279.968824][ T31] audit: type=1400 audit(1791039735.238:766): avc: denied { write } for pid=7737 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 279.969169][ T31] audit: type=1400 audit(1791039735.238:767): avc: denied { write } for pid=7737 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 280.006806][ T31] audit: type=1400 audit(1791039735.278:768): avc: denied { write } for pid=7737 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 280.034339][ T31] audit: type=1400 audit(1791039735.308:769): avc: denied { write } for pid=7737 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 280.280863][ T8137] veth0_vlan: entered promiscuous mode [ 280.340376][ T8137] veth1_vlan: entered promiscuous mode [ 280.498359][ T8137] veth0_macvtap: entered promiscuous mode [ 280.517624][ T8137] veth1_macvtap: entered promiscuous mode [ 280.540695][ T8137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.600955][ T8137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.723497][ T7688] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.724082][ T84] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.724105][ T84] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.724123][ T84] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.887156][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.887171][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.966970][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.966984][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.380439][ T8389] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 281.409438][ T4922] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.426013][ T4922] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.435660][ T4922] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.448258][ T4922] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.459142][ T4922] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.550838][ T8424] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 283.518171][ T8394] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.523042][ T4922] Bluetooth: hci3: command tx timeout [ 283.526162][ T8394] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.526265][ T8394] bridge_slave_0: entered allmulticast mode [ 283.528202][ T8394] bridge_slave_0: entered promiscuous mode [ 283.575780][ T8394] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.576414][ T8394] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.576504][ T8394] bridge_slave_1: entered allmulticast mode [ 283.613052][ T8394] bridge_slave_1: entered promiscuous mode [ 283.627918][ T8412] netlink: 'syz.6.711': attribute type 4 has an invalid length. [ 283.706687][ T8394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.728698][ T8394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.826153][ T8394] team0: Port device team_slave_0 added [ 283.854993][ T8394] team0: Port device team_slave_1 added [ 283.943653][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.943665][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.943679][ T8394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.953757][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.953768][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.953783][ T8394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.228435][ T8394] hsr_slave_0: entered promiscuous mode [ 284.240935][ T8394] hsr_slave_1: entered promiscuous mode [ 284.251049][ T8394] debugfs: 'hsr0' already exists in 'hsr' [ 284.251066][ T8394] Cannot create hsr debugfs directory [ 285.149406][ T31] kauditd_printk_skb: 78 callbacks suppressed [ 285.149419][ T31] audit: type=1400 audit(1791039740.418:848): avc: denied { ioctl } for pid=8453 comm="syz.0.721" path="socket:[26458]" dev="sockfs" ino=26458 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 285.486439][ T8466] FAULT_INJECTION: forcing a failure. [ 285.486439][ T8466] name failslab, interval 1, probability 0, space 0, times 0 [ 285.486463][ T8466] CPU: 0 UID: 0 PID: 8466 Comm: syz.3.722 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.486479][ T8466] Tainted: [L]=SOFTLOCKUP [ 285.486484][ T8466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 285.486491][ T8466] Call Trace: [ 285.486495][ T8466] [ 285.486500][ T8466] dump_stack_lvl+0x100/0x190 [ 285.486521][ T8466] should_fail_ex.cold+0x5/0xa [ 285.486538][ T8466] should_failslab+0xc2/0x120 [ 285.486555][ T8466] __kmalloc_cache_noprof+0x91/0x6d0 [ 285.486567][ T8466] ? copy_mount_options+0x55/0x190 [ 285.486583][ T8466] copy_mount_options+0x55/0x190 [ 285.486597][ T8466] __x64_sys_mount+0x1ab/0x310 [ 285.486609][ T8466] ? __pfx___x64_sys_mount+0x10/0x10 [ 285.486625][ T8466] do_syscall_64+0x123/0x790 [ 285.486642][ T8466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.486653][ T8466] RIP: 0033:0x7f0c95f9e159 [ 285.486663][ T8466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.486674][ T8466] RSP: 002b:00007f0c96ef2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 285.486685][ T8466] RAX: ffffffffffffffda RBX: 00007f0c96226090 RCX: 00007f0c95f9e159 [ 285.486693][ T8466] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 285.486700][ T8466] RBP: 00007f0c96ef2090 R08: 0000200000000500 R09: 0000000000000000 [ 285.486707][ T8466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.486714][ T8466] R13: 00007f0c96226128 R14: 00007f0c96226090 R15: 00007fff4ed0cc28 [ 285.486729][ T8466] [ 285.607804][ T4922] Bluetooth: hci3: command tx timeout [ 285.975784][ T31] audit: type=1400 audit(1791039741.248:849): avc: denied { read } for pid=8467 comm="syz.0.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 286.095374][ T8394] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 286.118764][ T8394] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 286.119242][ T8394] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 286.168438][ T8394] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 286.181061][ T8394] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 286.228162][ T8394] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 286.247138][ T8394] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 286.264563][ T8394] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 286.398328][ T8483] FAULT_INJECTION: forcing a failure. [ 286.398328][ T8483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.398353][ T8483] CPU: 0 UID: 0 PID: 8483 Comm: syz.3.725 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.398370][ T8483] Tainted: [L]=SOFTLOCKUP [ 286.398374][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 286.398381][ T8483] Call Trace: [ 286.398385][ T8483] [ 286.398390][ T8483] dump_stack_lvl+0x100/0x190 [ 286.398414][ T8483] should_fail_ex.cold+0x5/0xa [ 286.398431][ T8483] _copy_from_user+0x2e/0xd0 [ 286.398447][ T8483] vhost_vring_ioctl+0x9c3/0x1640 [ 286.398465][ T8483] ? __pfx_vhost_vring_ioctl+0x10/0x10 [ 286.398480][ T8483] ? vhost_dev_ioctl+0x395/0xe70 [ 286.398494][ T8483] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 286.398510][ T8483] ? do_vfs_ioctl+0x226/0x13e0 [ 286.398523][ T8483] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 286.398537][ T8483] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 286.398555][ T8483] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 286.398574][ T8483] vhost_vsock_dev_ioctl+0x8c8/0xb70 [ 286.398590][ T8483] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 286.398607][ T8483] ? selinux_file_ioctl+0x13b/0x290 [ 286.398620][ T8483] ? selinux_file_ioctl+0xb6/0x290 [ 286.398636][ T8483] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 286.398651][ T8483] __x64_sys_ioctl+0x18e/0x210 [ 286.398665][ T8483] do_syscall_64+0x123/0x790 [ 286.398680][ T8483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.398692][ T8483] RIP: 0033:0x7f0c95f9e159 [ 286.398702][ T8483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.398713][ T8483] RSP: 002b:00007f0c96ef2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.398725][ T8483] RAX: ffffffffffffffda RBX: 00007f0c96226090 RCX: 00007f0c95f9e159 [ 286.398733][ T8483] RDX: 0000200000001040 RSI: 000000004008af20 RDI: 0000000000000003 [ 286.398740][ T8483] RBP: 00007f0c96ef2090 R08: 0000000000000000 R09: 0000000000000000 [ 286.398746][ T8483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.398753][ T8483] R13: 00007f0c96226128 R14: 00007f0c96226090 R15: 00007fff4ed0cc28 [ 286.398768][ T8483] [ 286.800598][ T8394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.859419][ T8394] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.877403][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.877457][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.923869][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.923923][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.034762][ T8394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.097695][ T8486] FAULT_INJECTION: forcing a failure. [ 287.097695][ T8486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.097717][ T8486] CPU: 0 UID: 0 PID: 8486 Comm: syz.3.726 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.097733][ T8486] Tainted: [L]=SOFTLOCKUP [ 287.097737][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 287.097744][ T8486] Call Trace: [ 287.097748][ T8486] [ 287.097753][ T8486] dump_stack_lvl+0x100/0x190 [ 287.097774][ T8486] should_fail_ex.cold+0x5/0xa [ 287.097791][ T8486] _copy_to_user+0x32/0xd0 [ 287.097807][ T8486] simple_read_from_buffer+0xcb/0x170 [ 287.097825][ T8486] proc_fail_nth_read+0x1af/0x230 [ 287.097843][ T8486] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.097859][ T8486] ? rw_verify_area+0xce/0x6d0 [ 287.097871][ T8486] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.097887][ T8486] vfs_read+0x1e4/0xb40 [ 287.097900][ T8486] ? lock_acquire+0x1d1/0x380 [ 287.097913][ T8486] ? __fget_files+0x34/0x3d0 [ 287.097929][ T8486] ? __pfx_vfs_read+0x10/0x10 [ 287.097940][ T8486] ? find_held_lock+0x2b/0x80 [ 287.097957][ T8486] ? __fget_files+0x215/0x3d0 [ 287.097975][ T8486] ? __fget_files+0x21f/0x3d0 [ 287.097995][ T8486] ksys_read+0x12a/0x250 [ 287.098009][ T8486] ? __pfx_ksys_read+0x10/0x10 [ 287.098027][ T8486] do_syscall_64+0x123/0x790 [ 287.098041][ T8486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.098053][ T8486] RIP: 0033:0x7f0c95f5e98e [ 287.098063][ T8486] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 287.098074][ T8486] RSP: 002b:00007f0c96ef1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 287.098085][ T8486] RAX: ffffffffffffffda RBX: 00007f0c96ef26c0 RCX: 00007f0c95f5e98e [ 287.098092][ T8486] RDX: 000000000000000f RSI: 00007f0c96ef20a0 RDI: 0000000000000005 [ 287.098099][ T8486] RBP: 00007f0c96ef2090 R08: 0000000000000000 R09: 0000000000000000 [ 287.098105][ T8486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.098112][ T8486] R13: 00007f0c96226128 R14: 00007f0c96226090 R15: 00007fff4ed0cc28 [ 287.098128][ T8486] [ 287.694279][ T4922] Bluetooth: hci3: command tx timeout [ 288.662958][ T190] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 288.784023][ T8394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.813469][ T190] usb 7-1: Using ep0 maxpacket: 8 [ 288.815387][ T190] usb 7-1: unable to get BOS descriptor or descriptor too short [ 288.815413][ T190] usb 7-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 288.817113][ T190] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.817138][ T190] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 288.817150][ T190] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 288.819888][ T190] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.819903][ T190] usb 7-1: Product: syz [ 288.819911][ T190] usb 7-1: Manufacturer: syz [ 288.819920][ T190] usb 7-1: SerialNumber: syz [ 289.174459][ T190] usb 7-1: can't set first interface for hiFace device. [ 289.174477][ T190] snd-usb-hiface 7-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 289.178048][ T190] usb 7-1: USB disconnect, device number 2 [ 289.243259][ T5704] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 289.309426][ T8516] netlink: 830 bytes leftover after parsing attributes in process `syz.0.733'. [ 289.395267][ T8516] netlink: 72 bytes leftover after parsing attributes in process `syz.0.733'. [ 289.416914][ T5704] usb 3-1: Using ep0 maxpacket: 8 [ 289.417641][ T5704] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 289.438466][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.439922][ T5704] usb 3-1: config 0 descriptor?? [ 289.463492][ T5704] usb 3-1: probing VID:PID(0424:012C) [ 289.530298][ T5704] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 289.558299][ T5704] vub300 3-1:0.0: probe with driver vub300 failed with error -22 [ 289.670331][ T5696] usb 3-1: USB disconnect, device number 35 [ 289.733812][ T8394] veth0_vlan: entered promiscuous mode [ 289.741068][ T8394] veth1_vlan: entered promiscuous mode [ 289.756630][ T190] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 289.767654][ T4922] Bluetooth: hci3: command tx timeout [ 289.829766][ T8394] veth0_macvtap: entered promiscuous mode [ 289.845904][ T8394] veth1_macvtap: entered promiscuous mode [ 289.888715][ T8394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.906201][ T190] usb 7-1: unable to get BOS descriptor or descriptor too short [ 289.906230][ T190] usb 7-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 289.906986][ T190] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.907011][ T190] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 is Bulk; changing to Interrupt [ 289.907023][ T190] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 289.909142][ T190] usb 7-1: string descriptor 0 read error: -22 [ 289.909206][ T190] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.989457][ T8394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.064116][ T7688] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.065431][ T7688] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.065454][ T7688] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.065472][ T7688] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.338491][ T190] snd-usb-hiface 7-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 290.390415][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.390429][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.595395][ T31] audit: type=1400 audit(1791039745.868:850): avc: denied { setopt } for pid=8525 comm="syz.3.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 290.597754][ T31] audit: type=1400 audit(1791039745.868:851): avc: denied { ioctl } for pid=8503 comm="syz.6.731" path="socket:[27365]" dev="sockfs" ino=27365 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 290.687052][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 290.687077][ T8531] netlink: 'syz.2.737': attribute type 22 has an invalid length. [ 290.687085][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 290.786368][ T7688] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.799396][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.799409][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.799540][ T1336] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.800235][ T1336] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.800346][ T1336] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.861052][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 290.861076][ T8531] netlink: 'syz.2.737': attribute type 22 has an invalid length. [ 290.861084][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 291.019731][ T5696] usb 7-1: USB disconnect, device number 3 [ 291.345866][ T5704] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 291.373227][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 292.236095][ T5704] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 292.238285][ T5696] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 292.239246][ T5704] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.239271][ T5704] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 292.239294][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.255449][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 292.266267][ T5704] usb 3-1: config 0 descriptor?? [ 292.337176][ T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 292.338660][ T9] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 292.338676][ T9] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 292.338687][ T9] usb 1-1: config 166 has no interface number 0 [ 292.338697][ T9] usb 1-1: config 166 has no interface number 1 [ 292.338729][ T9] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 292.338742][ T9] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 292.338761][ T9] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 292.338774][ T9] usb 1-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 292.338788][ T9] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 292.338806][ T9] usb 1-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 292.338819][ T9] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 292.338833][ T9] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 292.338845][ T9] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 292.338861][ T9] usb 1-1: config 166 interface 177 has no altsetting 0 [ 292.338871][ T9] usb 1-1: config 166 interface 34 has no altsetting 0 [ 292.473228][ T5704] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 292.473323][ T5704] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 292.509989][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.510006][ T9] usb 1-1: Product: syz [ 292.510028][ T9] usb 1-1: Manufacturer: syz [ 292.510037][ T9] usb 1-1: SerialNumber: syz [ 292.599555][ T5696] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 292.629114][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.629142][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.659337][ T5696] usb 4-1: config 0 descriptor?? [ 292.880494][ T5696] usbhid 4-1:0.0: can't add hid device: -71 [ 292.880577][ T5696] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 292.905261][ T5696] usb 4-1: USB disconnect, device number 35 [ 293.038531][ T8557] gadgetfs: bound to dummy_udc driver [ 293.273060][ T5725] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 293.273273][ C0] gadgetfs: connected [ 293.274689][ T5725] gadgetfs: disconnected [ 293.383002][ T5696] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 293.423747][ C0] gadgetfs: connected [ 293.424543][ T5725] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 293.424780][ T5725] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 293.424807][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.429244][ C0] gadgetfs: configuration #1 [ 293.534119][ T5696] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 293.534927][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.534971][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.536871][ T5696] usb 4-1: config 0 descriptor?? [ 293.666282][ T31] audit: type=1400 audit(1791039748.938:852): avc: denied { write } for pid=8559 comm="syz.7.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 293.873296][ T10] gadgetfs: suspended from state 3 [ 293.878631][ T10] gadgetfs: disconnected [ 293.945058][ T5725] usb 2-1: USB disconnect, device number 30 [ 293.993425][ T9] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 294.070631][ T9] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 294.104594][ T5703] usb 3-1: USB disconnect, device number 36 [ 294.129246][ T9] ums-realtek 1-1:166.34: probe with driver ums-realtek failed with error -5 [ 294.158939][ T9] uvcvideo 1-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 294.158960][ T9] uvcvideo 1-1:166.34: No valid video chain found. [ 294.199301][ T9] usb 1-1: USB disconnect, device number 31 [ 294.386896][ T5696] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 294.388159][ T5696] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input24 [ 294.595637][ T8576] FAULT_INJECTION: forcing a failure. [ 294.595637][ T8576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.595674][ T8576] CPU: 0 UID: 0 PID: 8576 Comm: syz.2.751 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.595690][ T8576] Tainted: [L]=SOFTLOCKUP [ 294.595695][ T8576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 294.595702][ T8576] Call Trace: [ 294.595706][ T8576] [ 294.595711][ T8576] dump_stack_lvl+0x100/0x190 [ 294.595733][ T8576] should_fail_ex.cold+0x5/0xa [ 294.595751][ T8576] _copy_from_user+0x2e/0xd0 [ 294.595766][ T8576] vt_ioctl+0x1ba2/0x3170 [ 294.595780][ T8576] ? __pfx_vt_ioctl+0x10/0x10 [ 294.595792][ T8576] ? tomoyo_path_number_perm+0x28f/0x580 [ 294.595810][ T8576] ? tomoyo_path_number_perm+0x188/0x580 [ 294.595828][ T8576] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 294.595844][ T8576] ? tty_jobctrl_ioctl+0x152/0xce0 [ 294.595855][ T8576] ? __pfx_vt_ioctl+0x10/0x10 [ 294.595867][ T8576] tty_ioctl+0x26a/0x1640 [ 294.595884][ T8576] ? __pfx_tty_ioctl+0x10/0x10 [ 294.595898][ T8576] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 294.595916][ T8576] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 294.595933][ T8576] ? __fget_files+0x34/0x3d0 [ 294.595956][ T8576] ? selinux_file_ioctl+0x13b/0x290 [ 294.595970][ T8576] ? selinux_file_ioctl+0xb6/0x290 [ 294.595986][ T8576] ? __pfx_tty_ioctl+0x10/0x10 [ 294.596001][ T8576] __x64_sys_ioctl+0x18e/0x210 [ 294.596016][ T8576] do_syscall_64+0x123/0x790 [ 294.596031][ T8576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.596043][ T8576] RIP: 0033:0x7f712c79e159 [ 294.596053][ T8576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.596064][ T8576] RSP: 002b:00007f712d589028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.596075][ T8576] RAX: ffffffffffffffda RBX: 00007f712ca25fa0 RCX: 00007f712c79e159 [ 294.596083][ T8576] RDX: 0000200000000040 RSI: 000000000000560a RDI: 0000000000000003 [ 294.596090][ T8576] RBP: 00007f712d589090 R08: 0000000000000000 R09: 0000000000000000 [ 294.596097][ T8576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.596103][ T8576] R13: 00007f712ca26038 R14: 00007f712ca25fa0 R15: 00007fff6533bc78 [ 294.596118][ T8576] [ 295.026210][ T8577] misc userio: Invalid payload size [ 295.100145][ T9] usb 4-1: USB disconnect, device number 36 [ 295.100215][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 295.295800][ T31] audit: type=1400 audit(1791039750.568:853): avc: denied { bind } for pid=8581 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 295.486031][ T8588] FAULT_INJECTION: forcing a failure. [ 295.486031][ T8588] name failslab, interval 1, probability 0, space 0, times 0 [ 295.486057][ T8588] CPU: 0 UID: 0 PID: 8588 Comm: syz.0.756 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.486077][ T8588] Tainted: [L]=SOFTLOCKUP [ 295.486083][ T8588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 295.486092][ T8588] Call Trace: [ 295.486096][ T8588] [ 295.486101][ T8588] dump_stack_lvl+0x100/0x190 [ 295.486125][ T8588] should_fail_ex.cold+0x5/0xa [ 295.486145][ T8588] should_failslab+0xc2/0x120 [ 295.486164][ T8588] __kmalloc_noprof+0xfc/0x840 [ 295.486181][ T8588] ? x509_fabricate_name.isra.0+0x5ea/0xa10 [ 295.486200][ T8588] x509_fabricate_name.isra.0+0x5ea/0xa10 [ 295.486219][ T8588] asn1_ber_decoder+0xd0c/0x2170 [ 295.486252][ T8588] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 295.486280][ T8588] ? kasan_save_track+0x14/0x30 [ 295.486296][ T8588] ? __kasan_kmalloc+0xaa/0xb0 [ 295.486314][ T8588] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 295.486327][ T8588] ? x509_cert_parse+0x162/0x910 [ 295.486345][ T8588] x509_cert_parse+0x1c9/0x910 [ 295.486362][ T8588] x509_key_preparse+0x65/0x9c0 [ 295.486381][ T8588] asymmetric_key_preparse+0xce/0x1d0 [ 295.486393][ T8588] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 295.486407][ T8588] __key_create_or_update+0x463/0xe30 [ 295.486429][ T8588] ? __pfx___key_create_or_update+0x10/0x10 [ 295.486448][ T8588] ? lookup_user_key+0x3f3/0x1300 [ 295.486473][ T8588] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 295.486493][ T8588] key_create_or_update+0x42/0x60 [ 295.486514][ T8588] __do_sys_add_key+0x2e8/0x460 [ 295.486528][ T8588] ? __pfx___do_sys_add_key+0x10/0x10 [ 295.486547][ T8588] do_syscall_64+0x123/0x790 [ 295.486564][ T8588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.486589][ T8588] RIP: 0033:0x7f174499e159 [ 295.486602][ T8588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.486614][ T8588] RSP: 002b:00007f174582d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 295.486628][ T8588] RAX: ffffffffffffffda RBX: 00007f1744c25fa0 RCX: 00007f174499e159 [ 295.486637][ T8588] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 295.486645][ T8588] RBP: 00007f1744a3506b R08: ffffffffffffffff R09: 0000000000000000 [ 295.486653][ T8588] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 295.486660][ T8588] R13: 00007f1744c26038 R14: 00007f1744c25fa0 R15: 00007ffed154e6c8 [ 295.486677][ T8588] [ 295.893258][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 295.897671][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 295.898227][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 295.898691][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 295.899620][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.983040][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 296.137218][ T9] usb 8-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 296.158759][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 296.158777][ T9] usb 8-1: Product: syz [ 296.158785][ T9] usb 8-1: Manufacturer: syz [ 296.433612][ T5696] usb 8-1: USB disconnect, device number 2 [ 296.613024][ T5725] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 296.633234][ T9] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 296.764761][ T5725] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 296.765874][ T5725] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 296.765901][ T5725] usb 4-1: too many endpoints for config 1 interface 1 altsetting 0: 48, using maximum allowed: 30 [ 296.765922][ T5725] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 296.767430][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.767444][ T5725] usb 4-1: Product: syz [ 296.767453][ T5725] usb 4-1: Manufacturer: syz [ 296.767461][ T5725] usb 4-1: SerialNumber: syz [ 296.866161][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 296.870661][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.870678][ T9] usb 3-1: config 0 has no interface number 0 [ 296.870699][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 296.870715][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 296.870737][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.945423][ T9] usb 3-1: config 0 descriptor?? [ 296.946049][ T8605] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 296.998711][ T9] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 297.174218][ T31] audit: type=1400 audit(1791039752.448:854): avc: denied { read write } for pid=8602 comm="syz.3.761" name="sg0" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 297.174253][ T31] audit: type=1400 audit(1791039752.448:855): avc: denied { open } for pid=8602 comm="syz.3.761" path="/dev/sg0" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 297.247447][ T9] usb 3-1: USB disconnect, device number 37 [ 297.304017][ T8618] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 297.324588][ T31] audit: type=1400 audit(1791039752.598:856): avc: denied { ioctl } for pid=8602 comm="syz.3.761" path="/dev/sg0" dev="devtmpfs" ino=1075 ioctlcmd=0x2289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 297.376843][ T5725] usb 4-1: selecting invalid altsetting 1 [ 297.376865][ T5725] speedtch 4-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 297.376904][ T5725] speedtch 4-1:1.0: usbatm_usb_probe: bind failed: -22! [ 297.376932][ T5725] speedtch 4-1:1.0: probe with driver speedtch failed with error -22 [ 297.434610][ T5725] usb 4-1: selecting invalid altsetting 1 [ 297.434626][ T5725] speedtch 4-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 297.434889][ T5725] speedtch 4-1:1.1: usbatm_usb_probe: bind failed: -22! [ 297.434917][ T5725] speedtch 4-1:1.1: probe with driver speedtch failed with error -22 [ 297.498173][ T5725] usb 4-1: USB disconnect, device number 37 [ 298.002544][ T4922] Bluetooth: hci2: command tx timeout [ 298.125738][ T31] audit: type=1400 audit(1791039753.398:857): avc: denied { map } for pid=8628 comm="syz.7.768" path="socket:[27879]" dev="sockfs" ino=27879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 298.125771][ T31] audit: type=1400 audit(1791039753.398:858): avc: denied { read accept } for pid=8628 comm="syz.7.768" path="socket:[27879]" dev="sockfs" ino=27879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 298.295105][ T8592] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.295504][ T31] audit: type=1400 audit(1791039753.568:859): avc: denied { getopt } for pid=8640 comm="syz.2.772" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 298.296476][ T8592] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.296582][ T8592] bridge_slave_0: entered allmulticast mode [ 298.300414][ T8592] bridge_slave_0: entered promiscuous mode [ 298.370811][ T8592] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.370862][ T8592] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.370957][ T8592] bridge_slave_1: entered allmulticast mode [ 298.409793][ T8592] bridge_slave_1: entered promiscuous mode [ 298.540040][ T8592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.560347][ T8592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.702944][ T5725] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 298.704436][ T8592] team0: Port device team_slave_0 added [ 298.853370][ T5725] usb 1-1: Using ep0 maxpacket: 16 [ 298.853807][ T5725] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 298.855687][ T5725] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 298.855704][ T5725] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 298.855716][ T5725] usb 1-1: config 166 has no interface number 0 [ 298.855725][ T5725] usb 1-1: config 166 has no interface number 1 [ 298.855750][ T5725] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 298.855761][ T5725] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 298.855778][ T5725] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 298.855791][ T5725] usb 1-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 298.855804][ T5725] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 298.855819][ T5725] usb 1-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 298.855832][ T5725] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 298.855847][ T5725] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 298.855859][ T5725] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 298.855873][ T5725] usb 1-1: config 166 interface 177 has no altsetting 0 [ 298.855882][ T5725] usb 1-1: config 166 interface 34 has no altsetting 0 [ 298.859389][ T8592] team0: Port device team_slave_1 added [ 298.969885][ T5696] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 299.094638][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.094657][ T5725] usb 1-1: Product: syz [ 299.094666][ T5725] usb 1-1: Manufacturer: syz [ 299.094674][ T5725] usb 1-1: SerialNumber: syz [ 299.167570][ T5696] usb 4-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 299.189503][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 299.189519][ T5696] usb 4-1: Product: syz [ 299.189547][ T5696] usb 4-1: Manufacturer: syz [ 299.278728][ T8592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.278741][ T8592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.278755][ T8592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.347017][ T8592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.347041][ T8592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.347056][ T8592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.470861][ T9] usb 4-1: USB disconnect, device number 38 [ 299.505298][ T31] audit: type=1400 audit(1791039754.778:860): avc: denied { create } for pid=8655 comm="syz.2.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 299.578846][ T8592] hsr_slave_0: entered promiscuous mode [ 299.580489][ T8592] hsr_slave_1: entered promiscuous mode [ 299.599483][ T8592] debugfs: 'hsr0' already exists in 'hsr' [ 299.599498][ T8592] Cannot create hsr debugfs directory [ 300.083126][ T4922] Bluetooth: hci2: command tx timeout [ 300.154877][ T8669] netlink: 400 bytes leftover after parsing attributes in process `syz.7.779'. [ 300.213662][ T8669] 9p: Bad value for 'rfdno' [ 300.289851][ T8592] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 301.675768][ T8592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 301.679547][ T8592] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 301.720816][ T8592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 301.736754][ T5725] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 301.765132][ T8592] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 301.797604][ T8592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 301.800107][ T8592] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 301.855897][ T5725] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 301.883125][ T8592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 301.923072][ T5725] ums-realtek 1-1:166.34: probe with driver ums-realtek failed with error -5 [ 301.928844][ T5725] uvcvideo 1-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 301.928865][ T5725] uvcvideo 1-1:166.34: No valid video chain found. [ 301.968279][ T5725] usb 1-1: USB disconnect, device number 32 [ 302.165150][ T5603] Bluetooth: hci2: command tx timeout [ 302.255024][ T8592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.295961][ T8592] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.323135][ T5603] Bluetooth: hci5: command 0x1003 tx timeout [ 302.323182][ T4922] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 302.359350][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.359404][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.390760][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.390813][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.494478][ T8592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.525376][ T31] audit: type=1400 audit(1791039757.798:861): avc: denied { execute } for pid=8699 comm="syz.2.784" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 303.597276][ T8735] netlink: 400 bytes leftover after parsing attributes in process `syz.2.790'. [ 303.620765][ T8735] 9p: Bad value for 'rfdno' [ 303.653298][ T5696] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 303.702382][ T5725] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 303.726497][ T8592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.804282][ T5696] usb 8-1: Using ep0 maxpacket: 16 [ 303.804753][ T5696] usb 8-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 303.805578][ T5696] usb 8-1: config 166 has an invalid interface number: 177 but max is 1 [ 303.805593][ T5696] usb 8-1: config 166 has an invalid interface number: 34 but max is 1 [ 303.805605][ T5696] usb 8-1: config 166 has no interface number 0 [ 303.805614][ T5696] usb 8-1: config 166 has no interface number 1 [ 303.805639][ T5696] usb 8-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 303.805651][ T5696] usb 8-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 303.805670][ T5696] usb 8-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 303.805683][ T5696] usb 8-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 303.805696][ T5696] usb 8-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 303.805710][ T5696] usb 8-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 303.805723][ T5696] usb 8-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 303.805737][ T5696] usb 8-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 303.805749][ T5696] usb 8-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 303.805763][ T5696] usb 8-1: config 166 interface 177 has no altsetting 0 [ 303.805773][ T5696] usb 8-1: config 166 interface 34 has no altsetting 0 [ 303.807256][ T5696] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.807270][ T5696] usb 8-1: Product: syz [ 303.807279][ T5696] usb 8-1: Manufacturer: syz [ 303.807287][ T5696] usb 8-1: SerialNumber: syz [ 303.866010][ T5725] usb 4-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 303.954783][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 303.954799][ T5725] usb 4-1: Product: syz [ 303.954808][ T5725] usb 4-1: Manufacturer: syz [ 304.114491][ T5696] ums-realtek 8-1:166.177: USB Mass Storage device detected [ 304.243019][ T4922] Bluetooth: hci2: command tx timeout [ 304.297981][ T5696] ums-realtek 8-1:166.34: USB Mass Storage device detected [ 304.345854][ T5696] ums-realtek 8-1:166.34: probe with driver ums-realtek failed with error -5 [ 304.380884][ T5696] uvcvideo 8-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 304.380905][ T5696] uvcvideo 8-1:166.34: No valid video chain found. [ 304.426705][ T5696] usb 8-1: USB disconnect, device number 3 [ 304.467531][ T5725] usb 4-1: USB disconnect, device number 39 [ 304.729917][ T8754] FAULT_INJECTION: forcing a failure. [ 304.729917][ T8754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.729939][ T8754] CPU: 0 UID: 0 PID: 8754 Comm: syz.2.793 Tainted: G L syzkaller #0 PREEMPT(full) [ 304.729956][ T8754] Tainted: [L]=SOFTLOCKUP [ 304.729960][ T8754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 304.729967][ T8754] Call Trace: [ 304.729971][ T8754] [ 304.729975][ T8754] dump_stack_lvl+0x100/0x190 [ 304.729997][ T8754] should_fail_ex.cold+0x5/0xa [ 304.730014][ T8754] _copy_to_user+0x32/0xd0 [ 304.730030][ T8754] simple_read_from_buffer+0xcb/0x170 [ 304.730048][ T8754] proc_fail_nth_read+0x1af/0x230 [ 304.730065][ T8754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.730082][ T8754] ? rw_verify_area+0xce/0x6d0 [ 304.730093][ T8754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.730109][ T8754] vfs_read+0x1e4/0xb40 [ 304.730122][ T8754] ? lock_acquire+0x1d1/0x380 [ 304.730135][ T8754] ? __fget_files+0x34/0x3d0 [ 304.730151][ T8754] ? __pfx_vfs_read+0x10/0x10 [ 304.730162][ T8754] ? find_held_lock+0x2b/0x80 [ 304.730180][ T8754] ? __fget_files+0x215/0x3d0 [ 304.730198][ T8754] ? __fget_files+0x21f/0x3d0 [ 304.730218][ T8754] ksys_read+0x12a/0x250 [ 304.730230][ T8754] ? __pfx_ksys_read+0x10/0x10 [ 304.730248][ T8754] do_syscall_64+0x123/0x790 [ 304.730263][ T8754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.730274][ T8754] RIP: 0033:0x7f712c75e98e [ 304.730284][ T8754] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 304.730295][ T8754] RSP: 002b:00007f712d588fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 304.730306][ T8754] RAX: ffffffffffffffda RBX: 00007f712d5896c0 RCX: 00007f712c75e98e [ 304.730314][ T8754] RDX: 000000000000000f RSI: 00007f712d5890a0 RDI: 0000000000000005 [ 304.730320][ T8754] RBP: 00007f712d589090 R08: 0000000000000000 R09: 0000000000000000 [ 304.730327][ T8754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.730334][ T8754] R13: 00007f712ca26038 R14: 00007f712ca25fa0 R15: 00007fff6533bc78 [ 304.730350][ T8754] [ 305.046962][ T8592] veth0_vlan: entered promiscuous mode [ 305.096932][ T8592] veth1_vlan: entered promiscuous mode [ 305.169771][ T8592] veth0_macvtap: entered promiscuous mode [ 305.198008][ T8592] veth1_macvtap: entered promiscuous mode [ 305.246334][ T8592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.280273][ T8592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.374826][ T50] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.389081][ T4034] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.389927][ T4034] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.389947][ T4034] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.722342][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.722362][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.803271][ T31] audit: type=1400 audit(1791039761.068:862): avc: denied { watch } for pid=8770 comm="syz.7.799" path="/16/file2" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 305.803303][ T31] audit: type=1400 audit(1791039761.068:863): avc: denied { watch_sb watch_reads } for pid=8770 comm="syz.7.799" path="/16/file2" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 307.296746][ T4088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.296760][ T4088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.769389][ T31] audit: type=1400 audit(1791039763.038:864): avc: denied { map } for pid=8779 comm="syz.8.752" path="socket:[29693]" dev="sockfs" ino=29693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 307.809314][ T8780] netlink: 20 bytes leftover after parsing attributes in process `syz.8.752'. [ 308.123155][ T8795] netlink: 400 bytes leftover after parsing attributes in process `syz.8.805'. [ 309.249160][ T8795] 9p: Bad value for 'rfdno' [ 309.711133][ T8804] dlm: non-version read from control device 0 [ 309.823661][ T8811] FAULT_INJECTION: forcing a failure. [ 309.823661][ T8811] name failslab, interval 1, probability 0, space 0, times 0 [ 309.823684][ T8811] CPU: 0 UID: 0 PID: 8811 Comm: syz.3.811 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.823701][ T8811] Tainted: [L]=SOFTLOCKUP [ 309.823705][ T8811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 309.823712][ T8811] Call Trace: [ 309.823716][ T8811] [ 309.823720][ T8811] dump_stack_lvl+0x100/0x190 [ 309.823741][ T8811] should_fail_ex.cold+0x5/0xa [ 309.823758][ T8811] should_failslab+0xc2/0x120 [ 309.823775][ T8811] kmem_cache_alloc_noprof+0x92/0x6a0 [ 309.823789][ T8811] ? alloc_empty_file+0x5b/0x1c0 [ 309.823809][ T8811] alloc_empty_file+0x5b/0x1c0 [ 309.823827][ T8811] path_openat+0xdb/0x2440 [ 309.823845][ T8811] ? __pfx_path_openat+0x10/0x10 [ 309.823865][ T8811] do_file_open+0x20e/0x430 [ 309.823882][ T8811] ? __pfx_do_file_open+0x10/0x10 [ 309.823908][ T8811] ? _raw_spin_unlock+0x28/0x50 [ 309.823926][ T8811] ? alloc_fd+0x471/0x7a0 [ 309.823946][ T8811] do_sys_openat2+0x10f/0x1e0 [ 309.823966][ T8811] ? __pfx_do_sys_openat2+0x10/0x10 [ 309.823984][ T8811] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 309.823997][ T8811] ? __fget_files+0x21f/0x3d0 [ 309.824015][ T8811] __x64_sys_openat+0x12d/0x210 [ 309.824033][ T8811] ? __pfx___x64_sys_openat+0x10/0x10 [ 309.824049][ T8811] ? ksys_write+0x1ac/0x250 [ 309.824067][ T8811] do_syscall_64+0x123/0x790 [ 309.824081][ T8811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.824093][ T8811] RIP: 0033:0x7f0c95f9e159 [ 309.824103][ T8811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.824114][ T8811] RSP: 002b:00007f0c96ef2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 309.824125][ T8811] RAX: ffffffffffffffda RBX: 00007f0c96226090 RCX: 00007f0c95f9e159 [ 309.824132][ T8811] RDX: 0000000000000042 RSI: 00002000000013c0 RDI: ffffffffffffff9c [ 309.824139][ T8811] RBP: 00007f0c96ef2090 R08: 0000000000000000 R09: 0000000000000000 [ 309.824146][ T8811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.824153][ T8811] R13: 00007f0c96226128 R14: 00007f0c96226090 R15: 00007fff4ed0cc28 [ 309.824168][ T8811] [ 310.143973][ T8812] netlink: 400 bytes leftover after parsing attributes in process `syz.7.801'. [ 310.185763][ T8812] 9p: Bad value for 'rfdno' [ 310.359403][ T8815] FAULT_INJECTION: forcing a failure. [ 310.359403][ T8815] name failslab, interval 1, probability 0, space 0, times 0 [ 310.359432][ T8815] CPU: 0 UID: 60928 PID: 8815 Comm: syz.8.814 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.359449][ T8815] Tainted: [L]=SOFTLOCKUP [ 310.359453][ T8815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 310.359460][ T8815] Call Trace: [ 310.359464][ T8815] [ 310.359469][ T8815] dump_stack_lvl+0x100/0x190 [ 310.359491][ T8815] should_fail_ex.cold+0x5/0xa [ 310.359509][ T8815] should_failslab+0xc2/0x120 [ 310.359527][ T8815] kmem_cache_alloc_noprof+0x92/0x6a0 [ 310.359542][ T8815] ? prepare_creds+0x2c/0x950 [ 310.359557][ T8815] prepare_creds+0x2c/0x950 [ 310.359569][ T8815] lookup_user_key+0x5d0/0x1300 [ 310.359586][ T8815] ? __pfx_lookup_user_key+0x10/0x10 [ 310.359603][ T8815] ? lock_acquire+0x1d1/0x380 [ 310.359617][ T8815] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 310.359639][ T8815] __do_sys_add_key+0x2a6/0x460 [ 310.359652][ T8815] ? __pfx___do_sys_add_key+0x10/0x10 [ 310.359671][ T8815] do_syscall_64+0x123/0x790 [ 310.359685][ T8815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.359697][ T8815] RIP: 0033:0x7fcc8d59e159 [ 310.359708][ T8815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.359718][ T8815] RSP: 002b:00007fcc8e480028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 310.359730][ T8815] RAX: ffffffffffffffda RBX: 00007fcc8d825fa0 RCX: 00007fcc8d59e159 [ 310.359738][ T8815] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 310.359746][ T8815] RBP: 00007fcc8d63506b R08: fffffffffffffffe R09: 0000000000000000 [ 310.359753][ T8815] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000 [ 310.359760][ T8815] R13: 00007fcc8d826038 R14: 00007fcc8d825fa0 R15: 00007ffc2fcbb6e8 [ 310.359776][ T8815] [ 311.334426][ T8832] FAULT_INJECTION: forcing a failure. [ 311.334426][ T8832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.334448][ T8832] CPU: 0 UID: 0 PID: 8832 Comm: syz.7.820 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.334465][ T8832] Tainted: [L]=SOFTLOCKUP [ 311.334469][ T8832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 311.334476][ T8832] Call Trace: [ 311.334480][ T8832] [ 311.334484][ T8832] dump_stack_lvl+0x100/0x190 [ 311.334505][ T8832] should_fail_ex.cold+0x5/0xa [ 311.334522][ T8832] _copy_from_iter+0x1f4/0x1690 [ 311.334541][ T8832] ? __pfx__copy_from_iter+0x10/0x10 [ 311.334558][ T8832] ? lock_acquire+0x1d1/0x380 [ 311.334571][ T8832] ? avc_has_perm_noaudit+0x56/0x470 [ 311.334592][ T8832] ping_common_sendmsg+0xc4/0x2e0 [ 311.334606][ T8832] ping_v6_sendmsg+0x1fa/0x1600 [ 311.334627][ T8832] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 311.334642][ T8832] ? __lock_acquire+0x5c0/0x1f40 [ 311.334661][ T8832] ? reacquire_held_locks+0xdd/0x1f0 [ 311.334674][ T8832] ? release_sock+0x21/0x280 [ 311.334693][ T8832] ? inet_autobind+0x145/0x1a0 [ 311.334707][ T8832] ? lockdep_hardirqs_on+0x7d/0x110 [ 311.334719][ T8832] ? inet_autobind+0x145/0x1a0 [ 311.334749][ T8832] ? __local_bh_enable_ip+0xa5/0x120 [ 311.334763][ T8832] ? inet_autobind+0x14a/0x1a0 [ 311.334772][ T8832] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 311.334790][ T8832] inet_sendmsg+0x11c/0x140 [ 311.334803][ T8832] ____sys_sendmsg+0x9c9/0xbe0 [ 311.334814][ T8832] ? __pfx_inet_sendmsg+0x10/0x10 [ 311.334828][ T8832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.334842][ T8832] ? _kstrtoull+0x144/0x200 [ 311.334859][ T8832] ? __pfx__kstrtoull+0x10/0x10 [ 311.334878][ T8832] ___sys_sendmsg+0x190/0x1e0 [ 311.334891][ T8832] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.334912][ T8832] ? __fget_files+0x34/0x3d0 [ 311.334939][ T8832] __sys_sendmmsg+0x20c/0x440 [ 311.334957][ T8832] ? __pfx___sys_sendmmsg+0x10/0x10 [ 311.334973][ T8832] ? ksys_write+0x190/0x250 [ 311.334997][ T8832] ? fput+0x7c/0x100 [ 311.335013][ T8832] ? ksys_write+0x1ac/0x250 [ 311.335025][ T8832] ? __pfx_ksys_write+0x10/0x10 [ 311.335041][ T8832] __x64_sys_sendmmsg+0x9c/0x100 [ 311.335057][ T8832] ? lockdep_hardirqs_on+0x7d/0x110 [ 311.335069][ T8832] do_syscall_64+0x123/0x790 [ 311.335083][ T8832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.335095][ T8832] RIP: 0033:0x7fe2f019e159 [ 311.335105][ T8832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.335116][ T8832] RSP: 002b:00007fe2f103f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 311.335127][ T8832] RAX: ffffffffffffffda RBX: 00007fe2f0425fa0 RCX: 00007fe2f019e159 [ 311.335135][ T8832] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000003 [ 311.335142][ T8832] RBP: 00007fe2f103f090 R08: 0000000000000000 R09: 0000000000000000 [ 311.335148][ T8832] R10: 000000000004c0c0 R11: 0000000000000246 R12: 0000000000000001 [ 311.335155][ T8832] R13: 00007fe2f0426038 R14: 00007fe2f0425fa0 R15: 00007fffa1738ed8 [ 311.335170][ T8832] [ 312.223872][ T8851] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 314.149773][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.830'. [ 314.356633][ T8869] comedi comedi1: Minor 4 specified more than once! [ 314.387083][ T8874] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 314.423647][ T190] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 314.429088][ T8873] input: syz1 as /devices/virtual/input/input25 [ 314.573244][ T190] usb 9-1: Using ep0 maxpacket: 32 [ 314.573724][ T190] usb 9-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 314.575598][ T190] usb 9-1: config 0 has no interfaces? [ 314.579353][ T190] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.579369][ T190] usb 9-1: Product: syz [ 314.579377][ T190] usb 9-1: Manufacturer: syz [ 314.579400][ T190] usb 9-1: SerialNumber: syz [ 314.637904][ T190] usb 9-1: config 0 descriptor?? [ 314.867779][ T5725] usb 9-1: USB disconnect, device number 2 [ 315.037140][ T8889] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 315.037156][ T8889] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 315.038024][ T8889] vhci_hcd vhci_hcd.0: Device attached [ 315.069479][ T8893] usbip_core: unknown command [ 315.069488][ T8893] vhci_hcd: unknown pdu 0 [ 315.069504][ T8893] usbip_core: unknown command [ 315.071197][ T4034] vhci_hcd vhci_hcd.3: stop threads [ 315.071209][ T4034] vhci_hcd vhci_hcd.3: release socket [ 315.111146][ T4034] vhci_hcd vhci_hcd.3: disconnect device [ 315.367055][ T31] audit: type=1800 audit(1791039770.638:865): pid=8877 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.826" name="file1" dev="fuse" ino=68719476738 res=0 errno=0 [ 315.426744][ T8889] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8) [ 315.426762][ T8889] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 315.428870][ T8889] vhci_hcd vhci_hcd.0: Device attached [ 315.466989][ T8898] usbip_core: unknown command [ 315.466998][ T8898] vhci_hcd: unknown pdu 0 [ 315.467003][ T8898] usbip_core: unknown command [ 315.467348][ T50] vhci_hcd vhci_hcd.3: stop threads [ 315.467358][ T50] vhci_hcd vhci_hcd.3: release socket [ 315.468868][ T50] vhci_hcd vhci_hcd.3: disconnect device [ 315.718879][ T31] audit: type=1400 audit(1791039770.988:866): avc: denied { connect } for pid=8904 comm="syz.0.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 315.749331][ T8905] overlayfs: missing 'lowerdir' [ 315.829275][ T8905] xt_hashlimit: size too large, truncated to 1048576 [ 315.875484][ T8907] netlink: 400 bytes leftover after parsing attributes in process `syz.7.843'. [ 315.905027][ T8907] 9p: Bad value for 'rfdno' [ 316.027251][ T31] audit: type=1326 audit(1791039771.298:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.8.844" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc8d59e159 code=0x0 [ 316.319763][ T8913] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 316.893421][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.893456][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.184040][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.848'. [ 317.184057][ T8923] openvswitch: netlink: Message has 1 unknown bytes. [ 317.284145][ T8928] sysfs: Unknown parameter './sys' [ 317.553316][ T8929] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 317.603720][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 318.376633][ T31] audit: type=1400 audit(1791039773.648:868): avc: denied { read } for pid=8930 comm="syz.0.851" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 318.376674][ T31] audit: type=1400 audit(1791039773.648:869): avc: denied { open } for pid=8930 comm="syz.0.851" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 318.376697][ T31] audit: type=1400 audit(1791039773.648:870): avc: denied { mount } for pid=8930 comm="syz.0.851" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 318.467971][ T10] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 318.483939][ T10] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.483957][ T10] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.483970][ T10] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.483985][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 318.484004][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.500622][ T10] usb 4-1: config 0 descriptor?? [ 318.597448][ T31] audit: type=1400 audit(1791039773.868:871): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 318.904517][ T10] elan 0003:04F3:074D.0002: ignoring exceeding usage max [ 318.924653][ T10] elan 0003:04F3:074D.0002: failed to start in urb: -90 [ 318.953354][ T10] elan 0003:04F3:074D.0002: hidraw0: USB HID v0.10 Joystick [HID 04f3:074d] on usb-dummy_hcd.3-1/input0 [ 319.158658][ T5725] usb 4-1: USB disconnect, device number 40 [ 319.173173][ T8934] fido_id[8934]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:04F3:074D.0002/report_descriptor': No such file or directory [ 319.527975][ T5603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.529270][ T5603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.529789][ T5603] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.530262][ T5603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.530545][ T5603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 319.909230][ T31] audit: type=1400 audit(1791039775.178:872): avc: denied { ioctl } for pid=8949 comm="syz.3.856" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 320.024697][ T5725] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 320.175158][ T5725] usb 9-1: Using ep0 maxpacket: 16 [ 320.180966][ T5725] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 320.194882][ T5725] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.194906][ T5725] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.194919][ T5725] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 320.194942][ T5725] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.196369][ T5725] usb 9-1: config 0 descriptor?? [ 321.667949][ T5725] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0003/input/input27 [ 321.686297][ T5603] Bluetooth: hci3: command tx timeout [ 321.775585][ T5725] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 321.986464][ T5725] usb 9-1: USB disconnect, device number 3 [ 322.077008][ T8971] fido_id[8971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 322.288453][ T31] audit: type=1400 audit(1791039777.558:873): avc: denied { setopt } for pid=8974 comm="syz.2.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 322.369820][ T8966] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 322.494906][ T8941] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.494997][ T8941] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.496904][ T8941] bridge_slave_0: entered allmulticast mode [ 322.499547][ T8941] bridge_slave_0: entered promiscuous mode [ 323.333474][ T8941] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.333547][ T8941] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.333761][ T8941] bridge_slave_1: entered allmulticast mode [ 323.334623][ T8941] bridge_slave_1: entered promiscuous mode [ 323.536882][ T8941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.538545][ T8941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.603084][ T5603] Bluetooth: hci2: command 0x0401 tx timeout [ 323.677715][ T8941] team0: Port device team_slave_0 added [ 323.695623][ T8941] team0: Port device team_slave_1 added [ 323.824794][ T5603] Bluetooth: hci3: command tx timeout [ 324.684979][ T8941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.684992][ T8941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.685007][ T8941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.685972][ T8941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.685980][ T8941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.685994][ T8941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.813095][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.8.866'. [ 324.818185][ T31] audit: type=1400 audit(1791039780.088:874): avc: denied { nlmsg_read } for pid=8988 comm="syz.8.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 324.955167][ T8941] hsr_slave_0: entered promiscuous mode [ 324.958768][ T8941] hsr_slave_1: entered promiscuous mode [ 324.959810][ T8941] debugfs: 'hsr0' already exists in 'hsr' [ 324.959824][ T8941] Cannot create hsr debugfs directory [ 325.050812][ T31] audit: type=1400 audit(1791039780.318:875): avc: denied { shutdown } for pid=9000 comm="syz.0.869" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 P-D Tiw UEpΛS2 p* W~xVAg]XC4M3 !,|niޮAA {ޓ _B.aɑFӺwkL32cw g 2>U6,hƈ sJz&C>@V%ZbTTa_Έr1e B^awa}1Yۤ/$ldU}'zJ{xcϙ* <D! q3וS[)Mlw([0ilbyiSe, ȅg"ika T,>[ i33m=Ӑ?ŠM+P/zL6)νO6 1Pˬ4w!Bq… XzX0qɩDV٬-REH7{i,6fבƦRG\{{.)=ٹ>%LOO=OV;jqq%~f&`H-O1s԰K>(+r8}إA~`Z z(&epEЙ|Ydz&>ǀK#gT_2"뎀&g8CjG|X\v&V?T W쿑~!,&!q/a:[x2ayXhѾK*۩`:b+gmc!c73(ϝ s^: jH-;s~u>4ۇ0}ޖӸX?M~+M\A=m,*w IY86(EܥP9ڛԷ6fGYGsr&0@1kHU=G+P`ZMh%ESoy1۔^㻒Zˈ(YwDn͋̽4E;p ;.T$3#kOsh..g㳠q|PtS]XwdzMo (i q̺숿t^K`?@qS2ze,EȺjBy>G!=G ]N7\el|8+1׆=LFN#`tx8}^-k)qmȄw[1dU]!]a}1+g0~8}ιoe3osXA9h^0ZQSId$G ܸW]:>2_BA|% Fpҵ:ҁRV+ؼS\+]HD .4?TLF@f-S#u]2"3W )MwQWd` %>^PvEB ;ӵسBjM Tqcʺ4xP4Z@%*aDqgP"n<ŖkB8#tƠ _N~&r$wt )ni =&peUBn6H4oSUW0Rh+SMB5P ɗU)**7E>ZI&*lADb,$Ib\9m5lyD |.$Ԏqd( jSbFIOR\oNqlrVV#!&2bBXpBVt%(⽚IYH1T硵6&%͙x%8y + l iDEfam<ƚ沸= xml3{q%zN$N>DPiA@oߎ1egngd0jS4b,20cSRAO;dzOLKṕe 41r@Fz΃qF]6vr!Che4/֑*g6G%@GK/M%‟Y 1

_Gt6vgw<65WBf#ڽsRȏ"# rMrfW&'N>VУVk]EbI.aߙ,0D !hsb5G6wu 9YIg@aGzӟwxx)|XZ_(4%Pg*4:! PRb d!+|J mGoFS'CGm?1#=o'tW5_=a{7?$W枸-6"bK0,tk[ "W;opvqd5%IlisQF&`F#9 SY =>iZd~B,QԒ5!E$dt[ 325.583011][ T5725] usb 1-1: new high-speed USB device number 33 using dummy_hcd D8)W e?z ,lS-,ዺ&IzMl2v T£dL0= CbZe_ëYŷD6~6ίC9=v5ɶ2-de'vXGMvx!O[d27kvfW;>z|5aAA 6M`W(DNoWTߑWmkɟ T}`GQ91=|-~fzi$;#)ƛҡ!łVP;cd ҝSuB<ΫVkvXȆ@rV@ UvkAͤ>;W/Us(P0+d,V 'I0v0^ ô/@[ oUy ]iiNetatq*1r[EY׭'p&r|7pԈ!Amp| @+Ԍ=g]+1݃%qBM"ݸ'溈aRN)me#A!ڞ4 &tl2aHjڮe%_Җۻ-Y5 I+c*% qEy&hk&*?ˡ0hďҪ!}V!B&0@FP;>]Lї{qŦKX麭u 2Ta}:$hj9Zw| , >Kpn H ŊUK i%.gprG}Cu>$̃AԕZ72 ڐ:?#/,ʛۨ5|m@}>՞-5MǓX;@!qdkʅ5|ѬxTYiw>VSsYrVB6gN LQ⥰{zMyjrV5̟:b%-\)r#yPK@]/&e,LH%ㅫĹM;^rxFUmO `3%OAJ,TX)WKgf'*B/8hwUs 6xFG=d9>iG$l7 n[ #F 충 x{Z!u4oȖ M_(1WGKe4^=nܢ7 Ԝk v^#[a{%D C%4X k9KPşu_*ɪߊ+IRudS9BAg]T 1ir/ g瞐H?[ 325.733273][ T5725] usb 1-1: Using ep0 maxpacket: 8 o  [ 325.735479][ T5725] usb 1-1: unable to get BOS descriptor or descriptor too short 9Ol)Hn)'Uؽ>:QG/s/O)2so'C@`жAlrHX\}}.*E&\D%7uj![ 325.735523][ T5725] usb 1-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 7bwohy!7xt/N[ 325.736416][ T5725] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config q"ЍVo Uw=r5ɇ.3(&_~BW>+e:FͪF6( 5TG[ 325.736429][ T5725] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 pë|vA>c-z,ǾZG0@H5 DΉ"K86$tr >)vA~" K.eY@Cqh1&Y' ER܁rsθ8}S̺C aZ6).9 ([-dP77HY4t[ 325.814716][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 Vr CreƂ'[ûln[ 325.814735][ T5725] usb 1-1: Product: syz ў/"àa{![ 325.814744][ T5725] usb 1-1: Manufacturer: syz pZq!z~ ʔgப=`7-2#[ 325.814753][ T5725] usb 1-1: SerialNumber: syz s8f˻Wg0`4Dxz70M t/[ 325.847080][ T5603] Bluetooth: hci3: command tx timeout !wWb] < Rf8ҳe/kmbp$,ISy/><(SfS({jNh^ k!VNaLm@2탍Lazh՛,%kuh%ЦID6#brpU-8~pE<ɺ&Z1O0U]p*kAT7A[ Z-rG71fJjO W 1Yu߼usC[ 325.877307][ T8941] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 ME.g S[H"E [ 326.035928][ T4034] Bluetooth: hci5: Frame reassembly failed (-84) [ 326.054319][ T5725] usb 1-1: USB disconnect, device number 33 [ 326.056981][ T9015] Bluetooth: hci5: Frame reassembly failed (-84) [ 326.090608][ T8941] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.203793][ T8941] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.279125][ T8941] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.323030][ T5703] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 326.476998][ T5703] usb 3-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 326.479485][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 326.479500][ T5703] usb 3-1: Product: syz [ 326.479509][ T5703] usb 3-1: Manufacturer: syz [ 326.533498][ T5725] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 326.600867][ T31] audit: type=1400 audit(1791039781.868:876): avc: denied { wake_alarm } for pid=9021 comm="syz.3.875" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 326.687866][ T5725] usb 1-1: unable to get BOS descriptor or descriptor too short [ 326.687895][ T5725] usb 1-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 326.690400][ T5725] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.690416][ T5725] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 326.755519][ T5725] usb 1-1: string descriptor 0 read error: -22 [ 326.755589][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.824523][ T10] usb 3-1: USB disconnect, device number 38 [ 326.840918][ T9024] FAULT_INJECTION: forcing a failure. [ 326.840918][ T9024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.840939][ T9024] CPU: 0 UID: 0 PID: 9024 Comm: syz.3.876 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.840955][ T9024] Tainted: [L]=SOFTLOCKUP [ 326.840959][ T9024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 326.840967][ T9024] Call Trace: [ 326.840971][ T9024] [ 326.840976][ T9024] dump_stack_lvl+0x100/0x190 [ 326.840998][ T9024] should_fail_ex.cold+0x5/0xa [ 326.841014][ T9024] _copy_from_user+0x2e/0xd0 [ 326.841030][ T9024] bpf_test_init.isra.0+0xaf/0x100 [ 326.841047][ T9024] bpf_prog_test_run_xdp+0x587/0x1670 [ 326.841067][ T9024] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 326.841086][ T9024] ? fput+0x7c/0x100 [ 326.841102][ T9024] ? __bpf_prog_get+0x97/0x290 [ 326.841119][ T9024] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 326.841134][ T9024] __sys_bpf+0x2265/0x4a30 [ 326.841150][ T9024] ? __pfx___sys_bpf+0x10/0x10 [ 326.841162][ T9024] ? find_held_lock+0x2b/0x80 [ 326.841179][ T9024] ? get_pid_task+0xfc/0x250 [ 326.841194][ T9024] ? get_pid_task+0xfc/0x250 [ 326.841217][ T9024] ? find_held_lock+0x2b/0x80 [ 326.841243][ T9024] ? rcu_read_lock_any_held+0x6a/0x90 [ 326.841261][ T9024] ? find_held_lock+0x2b/0x80 [ 326.841277][ T9024] ? ksys_write+0x190/0x250 [ 326.841289][ T9024] ? ksys_write+0x190/0x250 [ 326.841302][ T9024] ? lock_acquire+0x1d1/0x380 [ 326.841325][ T9024] ? fput+0x7c/0x100 [ 326.841340][ T9024] ? ksys_write+0x1ac/0x250 [ 326.841355][ T9024] ? __x64_sys_bpf+0xce/0x140 [ 326.841367][ T9024] __x64_sys_bpf+0xce/0x140 [ 326.841379][ T9024] ? do_syscall_64+0xae/0x790 [ 326.841394][ T9024] do_syscall_64+0x123/0x790 [ 326.841407][ T9024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.841420][ T9024] RIP: 0033:0x7f0c95f9e159 [ 326.841430][ T9024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.841440][ T9024] RSP: 002b:00007f0c96f13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.841451][ T9024] RAX: ffffffffffffffda RBX: 00007f0c96225fa0 RCX: 00007f0c95f9e159 [ 326.841459][ T9024] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 326.841466][ T9024] RBP: 00007f0c96f13090 R08: 0000000000000000 R09: 0000000000000000 [ 326.841472][ T9024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.841479][ T9024] R13: 00007f0c96226038 R14: 00007f0c96225fa0 R15: 00007fff4ed0cc28 [ 326.841495][ T9024] [ 327.266122][ T8941] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 327.268092][ T8941] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 327.268654][ T8941] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 327.270324][ T8941] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 327.270853][ T8941] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 327.321187][ T8941] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 327.331034][ T8941] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 327.343128][ T8941] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 327.414763][ T8941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.437504][ T8941] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.478303][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.478358][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.504561][ T10] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 327.519404][ T4128] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.519457][ T4128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.664871][ T10] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 327.665617][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.665649][ T10] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 327.667131][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.667152][ T10] usb 4-1: Product: syz [ 327.667161][ T10] usb 4-1: Manufacturer: syz [ 327.667169][ T10] usb 4-1: SerialNumber: syz [ 327.892769][ T5725] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 327.923146][ T4922] Bluetooth: hci3: command tx timeout [ 328.036883][ T8941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.053430][ T5725] usb 3-1: Using ep0 maxpacket: 8 [ 328.060100][ T5725] usb 3-1: unable to get BOS descriptor or descriptor too short [ 328.060137][ T5725] usb 3-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 328.060937][ T5725] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.060962][ T5725] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 328.060976][ T5725] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 328.083284][ T4922] Bluetooth: hci5: command 0x1003 tx timeout [ 328.084908][ T5603] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 328.149810][ C0] usb 4-1: received EP1 urb->status = -2 [ 328.150188][ T10] usb 4-1: unable to init card! (ret=-110) [ 328.150534][ T10] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 328.178492][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.178508][ T5725] usb 3-1: Product: syz [ 328.178517][ T5725] usb 3-1: Manufacturer: syz [ 328.178525][ T5725] usb 3-1: SerialNumber: syz [ 328.468083][ T5725] usb 3-1: can't set first interface for hiFace device. [ 328.468103][ T5725] snd-usb-hiface 3-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 328.500553][ T5725] usb 3-1: USB disconnect, device number 39 [ 328.631061][ T5696] usb 1-1: USB disconnect, device number 34 [ 328.729006][ T9056] tipc: Started in network mode [ 328.729023][ T9056] tipc: Node identity ac14142f, cluster identity 4711 [ 328.729720][ T9056] tipc: New replicast peer: 127.0.0.1 [ 328.729930][ T9056] tipc: Enabled bearer , priority 10 [ 328.982912][ T5725] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 329.857864][ T5725] usb 3-1: unable to get BOS descriptor or descriptor too short [ 329.857896][ T5725] usb 3-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 329.925911][ T5696] tipc: Node number set to 2886997039 [ 330.034936][ T5725] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.034965][ T5725] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 is Bulk; changing to Interrupt [ 330.034978][ T5725] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 330.038160][ T5725] usb 3-1: string descriptor 0 read error: -22 [ 330.038448][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.215852][ T8941] veth0_vlan: entered promiscuous mode [ 330.238752][ T8941] veth1_vlan: entered promiscuous mode [ 330.353917][ T5696] usb 4-1: USB disconnect, device number 41 [ 330.378552][ T8941] veth0_macvtap: entered promiscuous mode [ 330.410830][ T8941] veth1_macvtap: entered promiscuous mode [ 330.610637][ T8941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.495626][ T8941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.909475][ T4064] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.910034][ T4064] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.910201][ T4064] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.910355][ T4064] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.435172][ T5725] usb 3-1: can't set first interface for hiFace device. [ 332.435193][ T5725] snd-usb-hiface 3-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 332.469823][ T5725] usb 3-1: USB disconnect, device number 40 [ 332.566552][ T9078] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 332.606672][ T31] audit: type=1400 audit(1791039787.878:877): avc: denied { write } for pid=9075 comm="syz.0.884" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 332.608222][ T31] audit: type=1400 audit(1791039787.878:878): avc: denied { open } for pid=9075 comm="syz.0.884" path="/186/dev/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 332.696920][ T31] audit: type=1400 audit(1791039787.968:879): avc: denied { mounton } for pid=9075 comm="syz.0.884" path="/186/dev/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 332.740429][ T31] audit: type=1400 audit(1791039788.008:880): avc: denied { read } for pid=9074 comm="syz.8.885" name="usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 332.740463][ T31] audit: type=1400 audit(1791039788.008:881): avc: denied { open } for pid=9074 comm="syz.8.885" path="/dev/usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 332.807568][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.807582][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.843301][ T31] audit: type=1400 audit(1791039788.118:882): avc: denied { lock } for pid=9074 comm="syz.8.885" path="socket:[31878]" dev="sockfs" ino=31878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 333.048939][ T4064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.048954][ T4064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.143319][ T31] audit: type=1400 audit(1791039788.408:883): avc: denied { append } for pid=9085 comm="syz.2.889" name="cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 333.143440][ T31] audit: type=1400 audit(1791039788.408:884): avc: denied { open } for pid=9085 comm="syz.2.889" path="/165/dev/cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 333.307426][ T9094] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 333.307443][ T9094] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 333.307516][ T9094] vhci_hcd vhci_hcd.0: Device attached [ 333.310010][ T9092] ip_tables: iptables: counters copy to user failed while replacing table [ 333.497509][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 333.585811][ T5725] usb 38-1: SetAddress Request (2) to port 0 [ 333.586050][ T5725] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 333.598804][ T5703] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 333.774064][ T5703] usb 3-1: Using ep0 maxpacket: 32 [ 333.779876][ T9094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.780123][ T9094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.827270][ T9095] vhci_hcd: cannot find a urb of seqnum 6 max seqnum 1 [ 333.828101][ T4064] vhci_hcd vhci_hcd.2: stop threads [ 333.828112][ T4064] vhci_hcd vhci_hcd.2: release socket [ 333.828149][ T4064] vhci_hcd vhci_hcd.2: disconnect device [ 333.830072][ T5703] usb 3-1: unable to get BOS descriptor or descriptor too short [ 333.830099][ T5703] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 333.856038][ T5703] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 333.856059][ T5703] usb 3-1: can't read configurations, error -71 [ 333.983567][ T9104] Could not find key with description: [syz] [ 333.983578][ T9104] process_request_key_err: No key [ 333.983583][ T9104] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 333.983589][ T9104] One or more global auth toks could not properly register; rc = [-2] [ 333.983614][ T9104] Error validating options; rc = [-2] [ 334.057532][ T9108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.895'. [ 334.172702][ T9103] kernel profiling enabled (shift: 7) [ 334.330739][ T9110] kvm: pic: non byte write [ 334.473037][ T190] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 334.613377][ T190] usb 4-1: device descriptor read/64, error -71 [ 334.853624][ T190] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 334.886598][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.7.902'. [ 334.912883][ T5703] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 334.958379][ T31] audit: type=1400 audit(1791039790.228:885): avc: denied { append } for pid=9138 comm="syz.7.903" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 334.988532][ T190] usb 4-1: device descriptor read/64, error -71 [ 335.035910][ T9142] input: syz0 as /devices/virtual/input/input28 [ 335.078092][ T5703] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 335.092965][ T190] usb usb4-port1: attempt power cycle [ 335.105813][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.105830][ T5703] usb 3-1: Product: syz [ 335.105838][ T5703] usb 3-1: Manufacturer: syz [ 335.105847][ T5703] usb 3-1: SerialNumber: syz [ 335.165026][ T5703] ums_eneub6250 3-1:1.0: USB Mass Storage device detected [ 335.314415][ T5703] usb 3-1: USB disconnect, device number 42 [ 335.432711][ T190] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 335.458061][ T190] usb 4-1: device descriptor read/8, error -71 [ 335.693195][ T190] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 335.715754][ T190] usb 4-1: device descriptor read/8, error -71 [ 335.823029][ T190] usb usb4-port1: unable to enumerate USB device [ 335.855077][ T9156] FAULT_INJECTION: forcing a failure. [ 335.855077][ T9156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.855100][ T9156] CPU: 0 UID: 0 PID: 9156 Comm: syz.7.908 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.855116][ T9156] Tainted: [L]=SOFTLOCKUP [ 335.855121][ T9156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 335.855127][ T9156] Call Trace: [ 335.855131][ T9156] [ 335.855136][ T9156] dump_stack_lvl+0x100/0x190 [ 335.855156][ T9156] should_fail_ex.cold+0x5/0xa [ 335.855173][ T9156] _copy_from_user+0x2e/0xd0 [ 335.855188][ T9156] do_handle_open+0x6ba/0xf20 [ 335.855210][ T9156] ? __pfx_do_handle_open+0x10/0x10 [ 335.855226][ T9156] ? ksys_write+0x1ac/0x250 [ 335.855240][ T9156] ? __pfx_ksys_write+0x10/0x10 [ 335.855257][ T9156] ? do_syscall_64+0x123/0x790 [ 335.855270][ T9156] do_syscall_64+0x123/0x790 [ 335.855283][ T9156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.855295][ T9156] RIP: 0033:0x7f0171b9e159 [ 335.855305][ T9156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.855316][ T9156] RSP: 002b:00007f01729fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 335.855327][ T9156] RAX: ffffffffffffffda RBX: 00007f0171e25fa0 RCX: 00007f0171b9e159 [ 335.855335][ T9156] RDX: 0000000000484080 RSI: 0000200000000000 RDI: 0000000000000003 [ 335.855342][ T9156] RBP: 00007f01729fa090 R08: 0000000000000000 R09: 0000000000000000 [ 335.855349][ T9156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.855355][ T9156] R13: 00007f0171e26038 R14: 00007f0171e25fa0 R15: 00007ffe323c6f38 [ 335.855371][ T9156] [ 336.122702][ T9154] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 336.122951][ T9157] ip6t_srh: unknown srh match flags 45F8 [ 336.123474][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.8.907'. [ 336.123487][ T9153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.123497][ T9153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.124060][ T9153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.124070][ T9153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.209774][ T31] audit: type=1326 audit(1791039791.478:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.2.909" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712c79e159 code=0x7ffc0000 [ 336.285160][ T9161] ip_tables: iptables: counters copy to user failed while replacing table [ 336.503028][ T190] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 336.524993][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.8.912'. [ 336.525064][ T9166] bridge0: entered allmulticast mode [ 336.584795][ T9168] FAULT_INJECTION: forcing a failure. [ 336.584795][ T9168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.584818][ T9168] CPU: 0 UID: 0 PID: 9168 Comm: syz.8.913 Tainted: G L syzkaller #0 PREEMPT(full) [ 336.584834][ T9168] Tainted: [L]=SOFTLOCKUP [ 336.584840][ T9168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 336.584848][ T9168] Call Trace: [ 336.584852][ T9168] [ 336.584856][ T9168] dump_stack_lvl+0x100/0x190 [ 336.584878][ T9168] should_fail_ex.cold+0x5/0xa [ 336.584895][ T9168] _copy_from_user+0x2e/0xd0 [ 336.584910][ T9168] restore_altstack+0x98/0x170 [ 336.584927][ T9168] ? __pfx_restore_altstack+0x10/0x10 [ 336.584944][ T9168] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.584962][ T9168] ? lockdep_hardirqs_on+0x7d/0x110 [ 336.584974][ T9168] ? _raw_spin_unlock_irq+0x2e/0x50 [ 336.584993][ T9168] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 336.585011][ T9168] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 336.585034][ T9168] do_syscall_64+0x123/0x790 [ 336.585048][ T9168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.585059][ T9168] RIP: 0033:0x7fcc8d53f4d9 [ 336.585069][ T9168] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 336.585080][ T9168] RSP: 002b:00007fcc8e47f300 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 336.585092][ T9168] RAX: ffffffffffffffda RBX: 00007fcc8e4806c0 RCX: 00007fcc8d53f4d9 [ 336.585100][ T9168] RDX: 00007fcc8e47f300 RSI: 00007fcc8e47f430 RDI: 0000000000000021 [ 336.585107][ T9168] RBP: 00007fcc8e480090 R08: 0000000000000000 R09: 0000000000000000 [ 336.585114][ T9168] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003 [ 336.585121][ T9168] R13: 00007fcc8d826038 R14: 00007fcc8d825fa0 R15: 00007ffc2fcbb6e8 [ 336.585136][ T9168] [ 336.845096][ T190] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 336.867521][ T190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.867537][ T190] usb 3-1: Product: syz [ 336.867545][ T190] usb 3-1: Manufacturer: syz [ 336.867554][ T190] usb 3-1: SerialNumber: syz [ 336.908301][ T190] usb 3-1: config 0 descriptor?? [ 336.927005][ T190] hub 3-1:0.0: bad descriptor, ignoring hub [ 336.927021][ T190] hub 3-1:0.0: probe with driver hub failed with error -5 [ 337.139529][ T190] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 337.154290][ T190] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 337.155840][ T190] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 337.155868][ T190] usb 3-1: media controller created [ 337.205671][ T190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.349781][ T190] DVB: Unable to find symbol dib7000p_attach() [ 337.349792][ T190] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 337.385098][ T5703] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 337.420583][ T9159] ------------[ cut here ]------------ [ 337.420597][ T9159] usb 3-1: BOGUS control dir, pipe 80002b80 doesn't match bRequestType c0 [ 337.420608][ T9159] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#0: syz.2.909/9159 [ 337.450994][ T9159] Modules linked in: [ 337.456540][ T9159] CPU: 0 UID: 0 PID: 9159 Comm: syz.2.909 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.469080][ T9159] Tainted: [L]=SOFTLOCKUP [ 337.474995][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 337.487090][ T9159] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 337.494342][ T9159] Code: 48 89 54 24 40 e8 13 f2 7b fa 4c 89 e7 e8 7b d0 da fe 48 89 c6 48 8d 3d 71 2e c2 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 e4 f1 7b fa 89 ee bf ff 00 00 00 [ 337.515598][ T9159] RSP: 0018:ffffc9000409f970 EFLAGS: 00010283 [ 337.523295][ T9159] RAX: ffffffff8cc86e00 RBX: ffff888074b69e00 RCX: 0000000080002b80 [ 337.534483][ T9159] RDX: ffff88803558c860 RSI: ffffffff8cc86e00 RDI: ffffffff91528640 [ 337.544567][ T9159] RBP: ffff88807d13b058 R08: 00000000000000c0 R09: 0000000000000000 [ 337.554151][ T9159] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807d13b0b0 [ 337.563700][ T9159] R13: ffff8880593a8a60 R14: ffff8880593a8a66 R15: ffff8880593a8a67 [ 337.573263][ T9159] FS: 00007f712d5896c0(0000) GS:ffff888123b4e000(0000) knlGS:0000000000000000 [ 337.583773][ T9159] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.590340][ T9159] CR2: 00007f689dbbd000 CR3: 0000000041f7c000 CR4: 00000000003526f0 [ 337.599880][ T9159] Call Trace: [ 337.604865][ T9159] [ 337.607784][ T9159] ? __init_swait_queue_head+0xca/0x150 [ 337.614970][ T9159] usb_start_wait_urb+0x10e/0x580 [ 337.619994][ T9159] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 337.627146][ T9159] ? __asan_memset+0x23/0x50 [ 337.633343][ T9159] usb_control_msg+0x328/0x4b0 [ 337.639618][ T9159] ? __pfx_usb_control_msg+0x10/0x10 [ 337.647587][ T9159] ? look_up_lock_class+0x55/0x120 [ 337.654382][ T9159] dib0700_ctrl_rd+0x1b5/0x320 [ 337.659147][ T9159] dib0700_i2c_xfer+0x460/0xd90 [ 337.665646][ T9159] __i2c_transfer+0x5d4/0x1740 [ 337.670401][ T9159] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 337.677796][ T9159] ? __pfx___i2c_transfer+0x10/0x10 [ 337.684941][ T9159] ? rt_mutex_slowtrylock+0x93/0x100 [ 337.690218][ T9159] i2c_transfer+0x158/0x380 [ 337.696313][ T9159] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 337.702828][ T9159] i2cdev_ioctl+0x19d/0x830 [ 337.707316][ T9159] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 337.713904][ T9159] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 337.718928][ T9159] __x64_sys_ioctl+0x18e/0x210 [ 337.725329][ T9159] do_syscall_64+0x123/0x790 [ 337.729908][ T9159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.737502][ T9159] RIP: 0033:0x7f712c79e159 [ 337.745034][ T9159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.767173][ T9159] RSP: 002b:00007f712d589028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 337.776155][ T9159] RAX: ffffffffffffffda RBX: 00007f712ca25fa0 RCX: 00007f712c79e159 [ 337.785704][ T9159] RDX: 0000200000000100 RSI: 0000000000000707 RDI: 0000000000000005 [ 337.795242][ T9159] RBP: 00007f712c83506b R08: 0000000000000000 R09: 0000000000000000 [ 337.804782][ T9159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.814325][ T9159] R13: 00007f712ca26038 R14: 00007f712ca25fa0 R15: 00007fff6533bc78 [ 337.823861][ T9159] [ 337.826862][ T9159] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 337.834114][ T9159] CPU: 0 UID: 0 PID: 9159 Comm: syz.2.909 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.844858][ T9159] Tainted: [L]=SOFTLOCKUP [ 337.849153][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 337.859179][ T9159] Call Trace: [ 337.862434][ T9159] [ 337.865341][ T9159] dump_stack_lvl+0x100/0x190 [ 337.870000][ T9159] vpanic+0x553/0x970 [ 337.873954][ T9159] ? __pfx_vpanic+0x10/0x10 [ 337.878432][ T9159] panic+0xd1/0xe0 [ 337.882123][ T9159] ? __pfx_panic+0x10/0x10 [ 337.886523][ T9159] check_panic_on_warn.cold+0x19/0x34 [ 337.891870][ T9159] ? usb_submit_urb+0x15ff/0x19b0 [ 337.896870][ T9159] __warn.cold+0x191/0x318 [ 337.901258][ T9159] __report_bug+0x30f/0x440 [ 337.905735][ T9159] ? usb_submit_urb+0x15ff/0x19b0 [ 337.910735][ T9159] ? __pfx___report_bug+0x10/0x10 [ 337.915729][ T9159] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 337.921513][ T9159] ? lockdep_hardirqs_on+0x7d/0x110 [ 337.926694][ T9159] ? kasan_save_stack+0x3f/0x50 [ 337.931520][ T9159] report_bug_entry+0xe2/0x290 [ 337.936287][ T9159] ? usb_submit_urb+0x160d/0x19b0 [ 337.941291][ T9159] handle_bug+0x1cd/0x2a0 [ 337.945592][ T9159] exc_invalid_op+0x17/0x50 [ 337.950067][ T9159] asm_exc_invalid_op+0x1a/0x20 [ 337.954892][ T9159] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 337.960499][ T9159] Code: 48 89 54 24 40 e8 13 f2 7b fa 4c 89 e7 e8 7b d0 da fe 48 89 c6 48 8d 3d 71 2e c2 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 e4 f1 7b fa 89 ee bf ff 00 00 00 [ 337.980078][ T9159] RSP: 0018:ffffc9000409f970 EFLAGS: 00010283 [ 337.986119][ T9159] RAX: ffffffff8cc86e00 RBX: ffff888074b69e00 RCX: 0000000080002b80 [ 337.994060][ T9159] RDX: ffff88803558c860 RSI: ffffffff8cc86e00 RDI: ffffffff91528640 [ 338.002002][ T9159] RBP: ffff88807d13b058 R08: 00000000000000c0 R09: 0000000000000000 [ 338.009946][ T9159] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807d13b0b0 [ 338.017887][ T9159] R13: ffff8880593a8a60 R14: ffff8880593a8a66 R15: ffff8880593a8a67 [ 338.025844][ T9159] ? __init_swait_queue_head+0xca/0x150 [ 338.031367][ T9159] usb_start_wait_urb+0x10e/0x580 [ 338.036372][ T9159] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 338.041900][ T9159] ? __asan_memset+0x23/0x50 [ 338.046464][ T9159] usb_control_msg+0x328/0x4b0 [ 338.051203][ T9159] ? __pfx_usb_control_msg+0x10/0x10 [ 338.056464][ T9159] ? look_up_lock_class+0x55/0x120 [ 338.061551][ T9159] dib0700_ctrl_rd+0x1b5/0x320 [ 338.066290][ T9159] dib0700_i2c_xfer+0x460/0xd90 [ 338.071464][ T9159] __i2c_transfer+0x5d4/0x1740 [ 338.076202][ T9159] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 338.081987][ T9159] ? __pfx___i2c_transfer+0x10/0x10 [ 338.087160][ T9159] ? rt_mutex_slowtrylock+0x93/0x100 [ 338.092422][ T9159] i2c_transfer+0x158/0x380 [ 338.096901][ T9159] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 338.101817][ T9159] i2cdev_ioctl+0x19d/0x830 [ 338.106306][ T9159] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 338.111306][ T9159] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 338.116305][ T9159] __x64_sys_ioctl+0x18e/0x210 [ 338.121045][ T9159] do_syscall_64+0x123/0x790 [ 338.125612][ T9159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.131476][ T9159] RIP: 0033:0x7f712c79e159 [ 338.135866][ T9159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.155443][ T9159] RSP: 002b:00007f712d589028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 338.163826][ T9159] RAX: ffffffffffffffda RBX: 00007f712ca25fa0 RCX: 00007f712c79e159 [ 338.171777][ T9159] RDX: 0000200000000100 RSI: 0000000000000707 RDI: 0000000000000005 [ 338.179730][ T9159] RBP: 00007f712c83506b R08: 0000000000000000 R09: 0000000000000000 [ 338.187680][ T9159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.195629][ T9159] R13: 00007f712ca26038 R14: 00007f712ca25fa0 R15: 00007fff6533bc78 [ 338.203590][ T9159] [ 338.206642][ T9159] Kernel Offset: disabled [ 338.210941][ T9159] Rebooting in 86400 seconds..