last executing test programs: 8m21.976122852s ago: executing program 32 (id=10): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe4a}]}, 0x40}, 0x1, 0x0, 0x0, 0x4050}, 0x20000042) 8m15.592066336s ago: executing program 33 (id=26): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) eventfd(0xfffffff9) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x6cc0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x5b0, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x9}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x580, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_CGROUP_ACT={0x56c, 0x1, [@m_skbmod={0x68, 0x10, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80, 0x3, 0x3, 0x9, 0x7ff}, 0xd}}]}, {0x18, 0x6, "e89718adf4828127be9e20c6a270b380e8d28f7d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x100, 0x17, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfff8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xc5}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x1}]}]}, {0xab, 0x6, "0e99bfe35fc7c9c334702bbf4a5cdee93659b45731b9c96ec0cf18dc94b0d299654a697857f56e182b0c1dfcb2891f9bff160ff79813511a06437d7690019fa789df177ff505a4f48ee49fa2ff64806ab7ef84913a25d7d10f4931b59c4b6ffcf8c394245748bfc2b4b011a8480ba6c0db11741c82b5f7b9e617509a64a9fb0f90ab91c48cc15973f0b3ffc83aa889abd900b75203ceb899c0f12998adcb2450fad5364a6b76c4"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_simple={0x118, 0x1a, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xffffffff, 0x7, 0x5, 0xfff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x5, 0x20000000, 0xa, 0xd19}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x2, 0x8, 0x7fff, 0x101}}]}, {0xa1, 0x6, "45bb4f243393e0a8b2cec7205ed1ad39ee8f1c7dea20997580858b5933f608bc017d0bd2903e3527363c1d6cf2cc6dae630534b62fd2b99bf74fc7b432682b2b1b39e82f06083002f897f30bc8b319c328cddf96631f97567aa5518749031ec847dd092f1154fe03d6eec5539d030da18dd2f581073e5d5dbefb59982f70673d9e4fa988daab7ab912d0d3011877d39f6390285642b3848858eaed1ab0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x204, 0x7, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x1, 0x0, 0x3, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x6, 0x2, 0x3, 0xfffff013}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x3, 0x3, 0x9, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0xd, 0x1, 0x1, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fff, 0x10001, 0x10000000, 0x5, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2fe, 0xfffffff2, 0x20000000, 0x40, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffff723, 0x5, 0x3, 0x0, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10, 0x7, 0x5, 0x40, 0x101}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xd3cd, 0x3, 0x3, 0xbd}}]}, {0xf8, 0x6, "cfa3534cbd285d3044294b223ba212d1a47334e5f2981418d93e12d94f2f134579a2dc69efcefb0d59434b92a526bc91892db13c8c8748598e49b1a2cf03556ada132268d2b685e399e3d9c8b9886c4c6de4d4d3ed7027af71cd274e366ac402ce8c4c1aba0c4e251514c96acbd487faa7fdc6d59165838be3085635b18892533a45a5a31aa4808180e08bd6f566a52a17f42512c06b8cc144dfbbc7f7c8ecf136e71756be2008a3445df986c75a3e2f2faf268034c1b0e77d8d32865a75c90d7e35bd5e7660a6fb9d1e91ebd7102463d461ceaa2f62e746615a0a67646f4e25e3c1f7848c9d22e34fa9d523184db8ce2ac7aeb1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0xe4, 0x1d, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffe01}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc0}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfd}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x0, 0x9, 0x3, 0x6, {0x3, 0x1, 0x3, 0x4, 0x400, 0x8}, {0xf, 0x1, 0x4, 0x2, 0xea10, 0x6}, 0x9, 0x4, 0xfffffff7}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0x8001, 0x7f, 0x5, {0x2, 0x0, 0x6, 0x8, 0x1, 0x3}, {0x4, 0x0, 0x6, 0x15ab, 0x3fc9, 0x9}, 0x5, 0x1, 0x2}}]]}, {0x22, 0x6, "ed90e1244235c5b1588681fd9adbf71b0c3f22c647b5a99d52ba71534215"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) r8 = socket$netlink(0x10, 0x3, 0xb) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8) 8m15.51088083s ago: executing program 34 (id=27): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) epoll_create1(0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz1\x00', 0x1}, 0x3, 0x20000000, 0xffff, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, 0x0, 0x8060010) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa107}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601020000000000000000000000001400078008001740fffff801080008400000003005000100"], 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 7m53.796529592s ago: executing program 35 (id=62): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000000) 6m12.891645798s ago: executing program 36 (id=405): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x80006) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x2}]}}]}, 0x98}}, 0x0) r6 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) setsockopt$MRT_DONE(r6, 0x0, 0xc9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000121000, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="d06d0b76b77dbbbbbbbbbbbb88a8400081000000080045f5002800680000aa069078ac1414aaac1414144e224e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="840125a6ad9b850c"], 0x3e) syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240), &(0x7f0000000280)) 6m8.962209733s ago: executing program 37 (id=420): r0 = syz_io_uring_setup(0x31c5, &(0x7f0000000340)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0)) unshare(0x20000400) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300)) (fail_nth: 2) 4m47.275140521s ago: executing program 38 (id=707): mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x10005}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) ioctl$VT_DISALLOCATE(r1, 0x5608) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x20000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c05, r4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000180)=0xd6d) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000100), 0x6) 4m1.87677303s ago: executing program 8 (id=906): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x5, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r5}}], 0x20, 0x2400e044}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r6, 0x74077000) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0xfffffffffffffdeb, 0x0, 0x1, 0x10000}, 0x28) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="020000000100002000"/28], 0x50) syz_open_dev$usbmon(&(0x7f00000004c0), 0x3, 0x80040) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80101800}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x454, 0x12, 0x4, 0x70bd29, 0x25dfdbfe, {0x1d, 0x3, 0xb7, 0xe1, {0x4e24, 0x4e23, [0x8, 0xfffffffb, 0x9, 0x1], [0xfffffffd, 0xd, 0x400, 0xc87], r2, [0x80, 0x2]}, 0xffffffc4}, [@INET_DIAG_REQ_BYTECODE={0x38, 0x1, "b0b66b2c30bbb7a41b56db6a2806a822ea643621feff7eefe1b5b3c654388b0b4ee7bbf9b5d403aa64c4bc86aa11e4e1477fdce0"}, @INET_DIAG_REQ_BYTECODE={0x61, 0x1, "a0ad093e5f788b90bd99fbb64abb68eab68eb6c86425ce24ec5683222de1cccc3bd8b42b3c606c9a9040e35069cc5a263acc7e360533c974218d98c42dec4b7424e6dae446b4e2d0f33bb53dfd740a5a3b8074425c43d2ed74e4aaccc9"}, @INET_DIAG_REQ_BYTECODE={0x103, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x52, 0x1, "ce683748003bfa10681c59b02cdf26bafbd1613e9d69405e37ebfcc305cf7c1bcce2bb00eaa06d6bbac844ad1f155bec3ccec594ad8e8c94719c0fd84dcc1332cb74a7fe6da49c108e0a28414a33"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "11add667631740b94dbfeb67fc064ea00328d9819c25a71c21df92ae75c495eab910501b9989e5e9f4607ee33485f6400567ffeb33cd1dd6bbf13c93f29b5b2023013bad2606f6ee99571688c54d99dcf48794f6d7b5c1bfe176152777f970ec7c8200a6983f131f40e1dc6c455db7ab5558064a2fca81335f3674cf4e1ab7e7d7c47ea34365066d3a972b86e3dc16a2527aabbd51188a38b9964eb8e43ab88bce197181d34635363301429652ce11ce6077d3d4d0b60e015015c576a5518a642a"}, @INET_DIAG_REQ_BYTECODE={0x4c, 0x1, "96119979b7fbde22cb0bf8907a2ab52102f6ce439da964a7e9ed3514915295ad8a6102e64e27f10bc308b8e9c714e6de6b1b1fba88177541701bdbd02b368efd3f070c13aee383df"}, @INET_DIAG_REQ_BYTECODE={0x96, 0x1, "34f243014042a7728d4e3d2eca5f10c19f88b23f87bdadd96c03c23447c3235f76a7915ee5efaaa2a7962a48507fbe4bebb3d0f4464a82f8d8c43e8b4c59abc6a389e7f898857a82a4002bc91ea16d98175a15a06a76e5e77907c096233c5ee1c227bbaba358ab4dd72189929262727c426987da0905eed87f20faf4bdf77f641d44bc7b2e7c1c193b68a137ea6aa7c04c87"}, @INET_DIAG_REQ_BYTECODE={0x68, 0x1, "96bc5e1cf4b18c601753665c341a6e93467e4e7ed03b754f5bf35a10e842e02e0e3a6c2d19491903ca4c90dbdc82a1f99b8638b10bc3fdf47d8d70d0d3d247cb3fbf0bfdce5b51892950233b3abbb8aaab961aac26fae90db111250ca46d88f04ebe41ac"}]}, 0x454}, 0x1, 0x0, 0x0, 0x4}, 0x40000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r9}, 0x38) setresuid(0x0, 0xee00, 0x0) setuid(0xee00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg$unix(r11, &(0x7f0000000500), 0x0, 0x40004) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/85}, 0x20) 3m57.3539656s ago: executing program 8 (id=911): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d01"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 3m54.470030026s ago: executing program 8 (id=920): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m53.699210211s ago: executing program 39 (id=881): prctl$PR_SCHED_CORE(0x4d, 0x40003, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpgid(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000005c0)={'adl_pci9118\x00', [0x35b7, 0x71af, 0x8001, 0x48, 0x2, 0x6, 0x6, 0x3, 0x14, 0x40, 0x7, 0x7fff, 0x2, 0x9, 0x1ff, 0x4, 0x7ff, 0x5, 0x2, 0x5, 0x7, 0x0, 0xffff7fff, 0x1, 0x9, 0x8, 0x10, 0x9, 0xff, 0x9, 0x8, 0xffffffc0]}) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x20}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x34}}, 0x20048010) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)="42f7a85b"}) 3m53.487959253s ago: executing program 8 (id=924): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x2, 0xa, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/219, 0xdb}], 0x1, 0xbd, 0x0) 3m50.790314692s ago: executing program 8 (id=934): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xfd, 0x5ae9}, {0x30, 0x7f, 0x0, 0x5753a39e}, {0x6, 0x0, 0x7, 0x3}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000003c0)={'veth0_to_team\x00', &(0x7f0000000500)=@ethtool_rxnfc={0x32, 0x3, 0x3, {0x18, @usr_ip6_spec={@empty, @local, 0x3ff, 0x4, 0x8a}, {0x0, @random="7d3cbb0463c9", 0x8000, 0x200, [0x0, 0x6]}, @hdata="8668ae810e1ac0d6bf547065e3ee0bb0f6bcbfbfea375a92fc26f6a278f183f0e6ee0e8d6060d8b5f51ed9326638bffe07baa003", {0x0, @empty, 0x4, 0x9, [0x374d, 0x1]}, 0x200, 0x1ff}}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000240)) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000180)=0x1e) r4 = accept(r0, &(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000c40)=0x80) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0x58, &(0x7f0000000180)}, 0x10) 3m50.467335119s ago: executing program 8 (id=936): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x2, 0xa, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/219, 0xdb}], 0x1, 0xbd, 0x0) 3m35.283986889s ago: executing program 40 (id=936): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x2, 0xa, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/219, 0xdb}], 0x1, 0xbd, 0x0) 3m16.875748568s ago: executing program 4 (id=1049): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x86, 0x0, &(0x7f0000000440)="e02742e8680d85ff9782762f86dd212a896b25b26f0482490c2436838dbfcb14eb3d3068f29e9db32ff714c2ed9e02a717b0c0c738d148b8d5246cc4b104007c178eadf704ebc596271396d32673ce696f3a4eb256f060672e7b4938a6e285a609b2b380837d0f0a72a2f2b392c15e43a496e83f11e387dc0a494f4e0e9664721861773a0400", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m15.270307017s ago: executing program 4 (id=1059): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a", 0xa}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000244000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x61, &(0x7f0000000100)=[@cr4={0x1, 0x529f8}], 0x1) 3m14.361621319s ago: executing program 4 (id=1065): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) getuid() ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1) 3m13.660146036s ago: executing program 4 (id=1066): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{r4}, &(0x7f0000001880), &(0x7f0000001900)}, 0x20) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000180)=0x3, 0x8) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 3m12.622321678s ago: executing program 4 (id=1070): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xfd, 0x5ae9}, {0x30, 0x7f, 0x0, 0x5753a39e}, {0x6, 0x0, 0x7, 0x3}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000003c0)={'veth0_to_team\x00', &(0x7f0000000500)=@ethtool_rxnfc={0x32, 0x3, 0x3, {0x18, @usr_ip6_spec={@empty, @local, 0x3ff, 0x4, 0x8a}, {0x0, @random="7d3cbb0463c9", 0x8000, 0x200, [0x0, 0x6]}, @hdata="8668ae810e1ac0d6bf547065e3ee0bb0f6bcbfbfea375a92fc26f6a278f183f0e6ee0e8d6060d8b5f51ed9326638bffe07baa003", {0x0, @empty, 0x4, 0x9, [0x374d, 0x1]}, 0x200, 0x1ff}}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000240)) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000180)=0x1e) r4 = accept(r0, &(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000c40)=0x80) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0x58, &(0x7f0000000180)}, 0x10) 3m12.20681088s ago: executing program 4 (id=1073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4, 0x98d) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x20, r2, 0x605, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1fc, r4, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x12c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x4, 0x1}, {0x1, 0x6}, {0x2, 0x8}, {0x6, 0xa}, {0x2, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf801, 0x2, 0x8, 0x10, 0x8, 0x9, 0x8, 0xfe5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x81, 0x7, 0x7, 0x9, 0x401, 0xd, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x4, 0x3]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0xa}, {0x5, 0xa}, {0x0, 0x3}, {0x6, 0x5}, {0x1, 0x9}, {0x1, 0x5}, {0x5, 0xa}, {0x6, 0x9}, {0x1, 0x7}, {0x7, 0xa}, {0x2, 0x3}, {0x4, 0x6}, {0x7, 0x5}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x8}, {0x3}, {0x7, 0x7}, {0x3, 0x8}, {}, {0x3, 0x6}, {0x2, 0x1}, {0x2, 0x8}, {0x0, 0x5}, {0x0, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x5}, {0x7, 0x4}, {0x5, 0x5}, {0x4, 0x9}, {0x0, 0x5}, {0x0, 0x8}, {0x5, 0x6}, {0x2, 0x3}, {0x0, 0x2}, {0x1, 0x6}, {0x3, 0xa}, {0x1, 0x5}, {0x1, 0x2}, {0x5, 0x7}, {0x7, 0x1}, {0x1, 0x5}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x3}, {0x0, 0x1}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x3}, {0x1, 0x7}, {0x7, 0x9}, {0x2, 0x6}, {0x1, 0x2}, {0x3, 0x3}, {0x7, 0x2}, {0x1, 0xa}, {0x3, 0x5}, {0x0, 0x9}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x6}, {0x5}, {0x3, 0x3}, {0x7}, {0x5}, {0x0, 0x1}, {0x7, 0x6}]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x5}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0xa}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0xa}, {0x2}, {0x6, 0x5}, {0x4, 0x7}, {0x5, 0xa}, {0x4, 0x7}, {0x1, 0xa}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x1}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0x3}, {0x3}, {0x6, 0xa}, {}, {0x6, 0x4}, {0x1, 0x7}, {0x3, 0x9}, {0x7, 0x9}, {0x4, 0x2}, {0x4, 0x5}, {0x7, 0x1}, {0x3, 0x3}, {0x2, 0x4}, {0x2, 0x8}, {0x5, 0x5}, {0x5, 0x4}, {0x2, 0x2}, {0x3, 0x3}, {0x7, 0x1}, {0x4}, {0x2, 0x5}, {0x3, 0x9}, {0x5, 0x8}, {0x5, 0x1}, {0x5, 0x7}, {0x3, 0xa}, {0x2, 0x3}, {0x3, 0x2}, {0x2, 0x5}, {0x3, 0x9}, {0x6}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x6}, {0x0, 0x5}, {0x6, 0x4}, {0x2, 0x7}, {0x3, 0x3}, {0x4, 0x8}, {0x1, 0x2}, {0x0, 0x7}, {}, {0x4, 0x4}, {0x2, 0x2}, {0x0, 0x6}, {0x4, 0x8}, {0x1, 0x5}, {0x4, 0x6}, {0x6}, {0x0, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x60, 0x18, 0xb, 0x1, 0x12, 0x1b, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xb4, 0xb, 0x5, 0xf0, 0xc, 0x8, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0xb4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x9, 0x48, 0xc, 0x0, 0x4, 0x4, 0x30, 0x2, 0xb, 0x9, 0x6c, 0x30, 0x6, 0x5c, 0x4, 0x6, 0xb, 0x9, 0x6, 0x24, 0x9, 0x2, 0x6c, 0x36, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x401, 0x5, 0x8, 0xb, 0x6, 0x3, 0x5]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x16, 0xd, 0x16, 0x48, 0x6, 0x2a, 0x6, 0x36, 0xb, 0x4, 0x6c, 0xc, 0xf66e80f95159aeba, 0xc, 0x5, 0x60, 0x36, 0xfdb89d3bcc55cc3f]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0xb, 0xc5, 0x0, 0x7f, 0xf7, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe1f, 0x0, 0x5, 0x400, 0x1, 0x7, 0x7fff, 0x8001]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0x1}, {0x0, 0xa}, {0x1, 0x3}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0xa}, {0x1, 0x1}, {0x1, 0x4}, {}, {0x2, 0x4}, {0x0, 0x9}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0x9}, {0x7, 0x1}, {0x3, 0x6}, {0x5, 0x2}, {0x2, 0x7}, {0x6, 0xa}, {0x4, 0x1}, {0x1, 0x2}, {}, {0x3, 0x6}, {0x2, 0x6}, {0x7, 0x1}, {0x3, 0xa}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x2}, {0x2, 0x1}, {0x7, 0x3}, {0x5, 0x4}, {0x5, 0x5}, {0x1, 0x9}, {0x3}, {0x5, 0x6}, {0x6, 0x3}, {0x6, 0x4}, {0x0, 0x7}, {0x0, 0x9}, {0x7, 0x9}, {0x7, 0x3}, {0x2, 0x1}, {0x5, 0x2}, {0x0, 0x2}, {0x5, 0x5}, {0x7, 0x1}, {0x0, 0x9}, {0x3, 0x3}]}]}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000004a00010200004304486a8c554f3702d6a70000000000000a0000031c04eeb2b72f07a91daa526de475b3a8aa534df1216d1b37bf84a6edeade5d9b141a9bc0ab5cbab84c61007079257eb21291107e224d28fcf4a6bfd9a086b1032a066f9856e93b7275"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 3m10.438124858s ago: executing program 9 (id=1084): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x86, 0x0, &(0x7f0000000440)="e02742e8680d85ff9782762f86dd212a896b25b26f0482490c2436838dbfcb14eb3d3068f29e9db32ff714c2ed9e02a717b0c0c738d148b8d5246cc4b104007c178eadf704ebc596271396d32673ce696f3a4eb256f060672e7b4938a6e285a609b2b380837d0f0a72a2f2b392c15e43a496e83f11e387dc0a494f4e0e9664721861773a0400", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m9.301302262s ago: executing program 9 (id=1087): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) getuid() ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000340)={0x0, 0x7, 0x0, [0x2, 0x3, 0x1d4, 0x4, 0x2cf], [0x1, 0x4, 0x9117, 0x80000000, 0x1, 0x0, 0xd653, 0x1, 0xff, 0xa0, 0x207, 0x70206342, 0x6b78, 0x101, 0x3, 0xd, 0x5, 0x0, 0x3, 0x0, 0x401, 0x1ff, 0x1, 0xf, 0x6, 0x6d6e, 0x1eb, 0x3, 0xb, 0x0, 0x80000001, 0x6, 0xc, 0x2, 0x1, 0x21, 0x1, 0x0, 0xb594, 0x4, 0xc000000000, 0x9, 0x3, 0x5b3, 0x5, 0x4, 0xaf, 0x1c00, 0x1, 0xf, 0x8, 0x8, 0x8, 0x4, 0x8, 0x8000000000000001, 0x5, 0xffffffffffffffff, 0x2, 0x8, 0x5, 0x9, 0xc0b6, 0x7, 0x4, 0x7, 0xfffffffffffffc00, 0x46d, 0x7, 0x100000001, 0x0, 0x9, 0x2, 0x9, 0xfffffffffffeffff, 0x6, 0x80000000, 0xf5e, 0x9, 0x80000000, 0x8, 0x593d, 0xf7e8, 0x800, 0x3ff, 0x0, 0x3, 0x800000000000, 0x8, 0x80, 0xf, 0x8, 0x101, 0x6, 0x3, 0x9, 0x752, 0x4, 0x4b0, 0x5, 0x1, 0x5, 0x0, 0x100000000, 0x81, 0x80000000, 0x1ff, 0x8, 0x10001, 0x6, 0xffffffff, 0x7fff, 0x10001, 0x8, 0x1, 0x3, 0xfffffffffffffbff, 0x2800, 0x6, 0xc, 0x6]}) write$binfmt_aout(r1, 0x0, 0xfce1) 3m9.250453322s ago: executing program 9 (id=1088): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0x2b, @rand_addr, 0x0, 0x2, 'wlc\x00', 0x8, 0x2, 0x3}, {@private=0xa010100, 0xffff, 0x2, 0x8, 0x0, 0x2}}, 0x44) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r3, &(0x7f0000000140), 0x40000000, &(0x7f0000000280)) 3m7.681916888s ago: executing program 9 (id=1091): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000404, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x90) lstat(&(0x7f0000000380)='./file0/file1\x00', &(0x7f00000003c0)) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) writev(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="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", 0x80c}], 0x1) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r5, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="f6", 0x1}], 0x1}}, {{&(0x7f0000000000)=@un=@abs={0x92c999bae8c01c99, 0x0, 0x4e22}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)='\nv\"!', 0x4}], 0x1, &(0x7f0000000240)=[{0x10, 0x3a, 0xfa}], 0x10}}], 0x2, 0x0) read$FUSE(r1, &(0x7f0000006200)={0x2020}, 0x2020) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x19}) fcntl$notify(r0, 0x402, 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c4) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) r8 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r9 = dup(r8) r10 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r10, 0x200004) sendfile(r9, r10, 0x0, 0x80001d00c0d1) 3m7.31312259s ago: executing program 9 (id=1095): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xfd, 0x5ae9}, {0x30, 0x7f, 0x0, 0x5753a39e}, {0x6, 0x0, 0x7, 0x3}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000003c0)={'veth0_to_team\x00', &(0x7f0000000500)=@ethtool_rxnfc={0x32, 0x3, 0x3, {0x18, @usr_ip6_spec={@empty, @local, 0x3ff, 0x4, 0x8a}, {0x0, @random="7d3cbb0463c9", 0x8000, 0x200, [0x0, 0x6]}, @hdata="8668ae810e1ac0d6bf547065e3ee0bb0f6bcbfbfea375a92fc26f6a278f183f0e6ee0e8d6060d8b5f51ed9326638bffe07baa003", {0x0, @empty, 0x4, 0x9, [0x374d, 0x1]}, 0x200, 0x1ff}}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000240)) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000180)=0x1e) r4 = accept(r0, &(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000c40)=0x80) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0x58, &(0x7f0000000180)}, 0x10) 3m5.898287271s ago: executing program 9 (id=1098): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) getuid() ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000340)={0x0, 0x7, 0x0, [0x2, 0x3, 0x1d4, 0x4, 0x2cf], [0x1, 0x4, 0x9117, 0x80000000, 0x1, 0x0, 0xd653, 0x1, 0xff, 0xa0, 0x207, 0x70206342, 0x6b78, 0x101, 0x3, 0xd, 0x5, 0x0, 0x3, 0x0, 0x401, 0x1ff, 0x1, 0xf, 0x6, 0x6d6e, 0x1eb, 0x3, 0xb, 0x0, 0x80000001, 0x6, 0xc, 0x2, 0x1, 0x21, 0x1, 0x0, 0xb594, 0x4, 0xc000000000, 0x9, 0x3, 0x5b3, 0x5, 0x4, 0xaf, 0x1c00, 0x1, 0xf, 0x8, 0x8, 0x8, 0x4, 0x8, 0x8000000000000001, 0x5, 0xffffffffffffffff, 0x2, 0x8, 0x5, 0x9, 0xc0b6, 0x7, 0x4, 0x7, 0xfffffffffffffc00, 0x46d, 0x7, 0x100000001, 0x0, 0x9, 0x2, 0x9, 0xfffffffffffeffff, 0x6, 0x80000000, 0xf5e, 0x9, 0x80000000, 0x8, 0x593d, 0xf7e8, 0x800, 0x3ff, 0x0, 0x3, 0x800000000000, 0x8, 0x80, 0xf, 0x8, 0x101, 0x6, 0x3, 0x9, 0x752, 0x4, 0x4b0, 0x5, 0x1, 0x5, 0x0, 0x100000000, 0x81, 0x80000000, 0x1ff, 0x8, 0x10001, 0x6, 0xffffffff, 0x7fff, 0x10001, 0x8, 0x1, 0x3, 0xfffffffffffffbff, 0x2800, 0x6, 0xc, 0x6]}) write$binfmt_aout(r1, 0x0, 0xfce1) 2m56.491156951s ago: executing program 41 (id=1073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4, 0x98d) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x20, r2, 0x605, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1fc, r4, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x12c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x4, 0x1}, {0x1, 0x6}, {0x2, 0x8}, {0x6, 0xa}, {0x2, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf801, 0x2, 0x8, 0x10, 0x8, 0x9, 0x8, 0xfe5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x81, 0x7, 0x7, 0x9, 0x401, 0xd, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x4, 0x3]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0xa}, {0x5, 0xa}, {0x0, 0x3}, {0x6, 0x5}, {0x1, 0x9}, {0x1, 0x5}, {0x5, 0xa}, {0x6, 0x9}, {0x1, 0x7}, {0x7, 0xa}, {0x2, 0x3}, {0x4, 0x6}, {0x7, 0x5}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x8}, {0x3}, {0x7, 0x7}, {0x3, 0x8}, {}, {0x3, 0x6}, {0x2, 0x1}, {0x2, 0x8}, {0x0, 0x5}, {0x0, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x5}, {0x7, 0x4}, {0x5, 0x5}, {0x4, 0x9}, {0x0, 0x5}, {0x0, 0x8}, {0x5, 0x6}, {0x2, 0x3}, {0x0, 0x2}, {0x1, 0x6}, {0x3, 0xa}, {0x1, 0x5}, {0x1, 0x2}, {0x5, 0x7}, {0x7, 0x1}, {0x1, 0x5}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x3}, {0x0, 0x1}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x3}, {0x1, 0x7}, {0x7, 0x9}, {0x2, 0x6}, {0x1, 0x2}, {0x3, 0x3}, {0x7, 0x2}, {0x1, 0xa}, {0x3, 0x5}, {0x0, 0x9}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x6}, {0x5}, {0x3, 0x3}, {0x7}, {0x5}, {0x0, 0x1}, {0x7, 0x6}]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x5}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0xa}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0xa}, {0x2}, {0x6, 0x5}, {0x4, 0x7}, {0x5, 0xa}, {0x4, 0x7}, {0x1, 0xa}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x1}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0x3}, {0x3}, {0x6, 0xa}, {}, {0x6, 0x4}, {0x1, 0x7}, {0x3, 0x9}, {0x7, 0x9}, {0x4, 0x2}, {0x4, 0x5}, {0x7, 0x1}, {0x3, 0x3}, {0x2, 0x4}, {0x2, 0x8}, {0x5, 0x5}, {0x5, 0x4}, {0x2, 0x2}, {0x3, 0x3}, {0x7, 0x1}, {0x4}, {0x2, 0x5}, {0x3, 0x9}, {0x5, 0x8}, {0x5, 0x1}, {0x5, 0x7}, {0x3, 0xa}, {0x2, 0x3}, {0x3, 0x2}, {0x2, 0x5}, {0x3, 0x9}, {0x6}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x6}, {0x0, 0x5}, {0x6, 0x4}, {0x2, 0x7}, {0x3, 0x3}, {0x4, 0x8}, {0x1, 0x2}, {0x0, 0x7}, {}, {0x4, 0x4}, {0x2, 0x2}, {0x0, 0x6}, {0x4, 0x8}, {0x1, 0x5}, {0x4, 0x6}, {0x6}, {0x0, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x60, 0x18, 0xb, 0x1, 0x12, 0x1b, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xb4, 0xb, 0x5, 0xf0, 0xc, 0x8, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0xb4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x9, 0x48, 0xc, 0x0, 0x4, 0x4, 0x30, 0x2, 0xb, 0x9, 0x6c, 0x30, 0x6, 0x5c, 0x4, 0x6, 0xb, 0x9, 0x6, 0x24, 0x9, 0x2, 0x6c, 0x36, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x401, 0x5, 0x8, 0xb, 0x6, 0x3, 0x5]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x16, 0xd, 0x16, 0x48, 0x6, 0x2a, 0x6, 0x36, 0xb, 0x4, 0x6c, 0xc, 0xf66e80f95159aeba, 0xc, 0x5, 0x60, 0x36, 0xfdb89d3bcc55cc3f]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0xb, 0xc5, 0x0, 0x7f, 0xf7, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe1f, 0x0, 0x5, 0x400, 0x1, 0x7, 0x7fff, 0x8001]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0x1}, {0x0, 0xa}, {0x1, 0x3}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0xa}, {0x1, 0x1}, {0x1, 0x4}, {}, {0x2, 0x4}, {0x0, 0x9}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0x9}, {0x7, 0x1}, {0x3, 0x6}, {0x5, 0x2}, {0x2, 0x7}, {0x6, 0xa}, {0x4, 0x1}, {0x1, 0x2}, {}, {0x3, 0x6}, {0x2, 0x6}, {0x7, 0x1}, {0x3, 0xa}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x2}, {0x2, 0x1}, {0x7, 0x3}, {0x5, 0x4}, {0x5, 0x5}, {0x1, 0x9}, {0x3}, {0x5, 0x6}, {0x6, 0x3}, {0x6, 0x4}, {0x0, 0x7}, {0x0, 0x9}, {0x7, 0x9}, {0x7, 0x3}, {0x2, 0x1}, {0x5, 0x2}, {0x0, 0x2}, {0x5, 0x5}, {0x7, 0x1}, {0x0, 0x9}, {0x3, 0x3}]}]}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000004a00010200004304486a8c554f3702d6a70000000000000a0000031c04eeb2b72f07a91daa526de475b3a8aa534df1216d1b37bf84a6edeade5d9b141a9bc0ab5cbab84c61007079257eb21291107e224d28fcf4a6bfd9a086b1032a066f9856e93b7275"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 2m50.714022665s ago: executing program 42 (id=1098): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) getuid() ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000340)={0x0, 0x7, 0x0, [0x2, 0x3, 0x1d4, 0x4, 0x2cf], [0x1, 0x4, 0x9117, 0x80000000, 0x1, 0x0, 0xd653, 0x1, 0xff, 0xa0, 0x207, 0x70206342, 0x6b78, 0x101, 0x3, 0xd, 0x5, 0x0, 0x3, 0x0, 0x401, 0x1ff, 0x1, 0xf, 0x6, 0x6d6e, 0x1eb, 0x3, 0xb, 0x0, 0x80000001, 0x6, 0xc, 0x2, 0x1, 0x21, 0x1, 0x0, 0xb594, 0x4, 0xc000000000, 0x9, 0x3, 0x5b3, 0x5, 0x4, 0xaf, 0x1c00, 0x1, 0xf, 0x8, 0x8, 0x8, 0x4, 0x8, 0x8000000000000001, 0x5, 0xffffffffffffffff, 0x2, 0x8, 0x5, 0x9, 0xc0b6, 0x7, 0x4, 0x7, 0xfffffffffffffc00, 0x46d, 0x7, 0x100000001, 0x0, 0x9, 0x2, 0x9, 0xfffffffffffeffff, 0x6, 0x80000000, 0xf5e, 0x9, 0x80000000, 0x8, 0x593d, 0xf7e8, 0x800, 0x3ff, 0x0, 0x3, 0x800000000000, 0x8, 0x80, 0xf, 0x8, 0x101, 0x6, 0x3, 0x9, 0x752, 0x4, 0x4b0, 0x5, 0x1, 0x5, 0x0, 0x100000000, 0x81, 0x80000000, 0x1ff, 0x8, 0x10001, 0x6, 0xffffffff, 0x7fff, 0x10001, 0x8, 0x1, 0x3, 0xfffffffffffffbff, 0x2800, 0x6, 0xc, 0x6]}) write$binfmt_aout(r1, 0x0, 0xfce1) 2m7.419223638s ago: executing program 0 (id=1361): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f00000004c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x800455c9, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x7, &(0x7f0000000680)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @tail_call], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a4}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xffffffffffffffff, 0x88800) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) landlock_create_ruleset(&(0x7f00000001c0)={0x1407, 0x3, 0x1}, 0x14, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ni\x00'}, 0xffffffffffffffbd) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r3) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2ca77766646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r6, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2m7.217038004s ago: executing program 0 (id=1363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) syz_emit_ethernet(0x86, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) r5 = syz_pidfd_open(r4, 0x0) process_mrelease(r5, 0x700000000000000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40448d4) r6 = syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x0, 0xaa}, &(0x7f0000000000), &(0x7f0000000140)) eventfd2(0x6, 0x80000) io_uring_enter(r6, 0x474a, 0xdfffeff8, 0x48, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x2) 2m5.973038819s ago: executing program 0 (id=1365): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x80) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000080)=0x80000000) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x1, 0xe000, 0x0, 0x0}, {0x9, 0xf901, 0x0, 0x0}], 0x2}) 2m5.324897986s ago: executing program 3 (id=1370): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x11, 0x800000003, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000480)={0x2c, r2, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x2c, 0xa, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') preadv(r5, 0x0, 0x0, 0xffffffc0, 0x10000) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000080)={0x6, 0x5, 0x3, 0x6}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) r7 = semget(0x0, 0x4, 0x39c) semop(r7, &(0x7f0000000000)=[{0x0, 0x5, 0x800}], 0x1) semctl$SETALL(r7, 0x0, 0x11, &(0x7f0000000240)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000000200000a0500010007000008"], 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x181100) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GEM_OPEN(r9, 0xc010640b, &(0x7f0000000100)) 2m4.334226181s ago: executing program 0 (id=1375): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x2, 0xa, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/219, 0xdb}], 0x1, 0xbd, 0x0) 2m3.820989885s ago: executing program 0 (id=1381): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xfd, 0x5ae9}, {0x30, 0x7f, 0x0, 0x5753a39e}, {0x6, 0x0, 0x7, 0x3}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000003c0)={'veth0_to_team\x00', &(0x7f0000000500)=@ethtool_rxnfc={0x32, 0x3, 0x3, {0x18, @usr_ip6_spec={@empty, @local, 0x3ff, 0x4, 0x8a}, {0x0, @random="7d3cbb0463c9", 0x8000, 0x200, [0x0, 0x6]}, @hdata="8668ae810e1ac0d6bf547065e3ee0bb0f6bcbfbfea375a92fc26f6a278f183f0e6ee0e8d6060d8b5f51ed9326638bffe07baa003", {0x0, @empty, 0x4, 0x9, [0x374d, 0x1]}, 0x200, 0x1ff}}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000240)) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000180)=0x1e) r4 = accept(r0, &(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000c40)=0x80) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0x58, &(0x7f0000000180)}, 0x10) 2m3.623191335s ago: executing program 0 (id=1382): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@getqdisc={0x48, 0x26, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x1}, {0xfff4, 0xe}, {0x3, 0xffff}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}}, 0x3004c81c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffffe3, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002301040028bd7000ff0042000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e65772064656661756c7420747275737465643a203030303030303030303030303030303034303936006a8ef1b4058d076280cd0f5ae53c3daa8f6d87ae06a551a8363b7d95db1085b8f77d6121d3fc495786a84fac7988a977efc305aab36ba98b63e8078d9b9a1a29"], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$caif_seqpacket(0x25, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) (async) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x100000000000f7) read$watch_queue(r6, &(0x7f00000000c0)=""/16, 0x10) keyctl$revoke(0x3, r5) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f00000000c0)={0x9, {0x4, 0x1003, 0x1, 0x8}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000002000)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x4048000) 2m2.051437207s ago: executing program 3 (id=1386): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffe, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xf, 0x2, 0x1}}}}}]}}]}}, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4080) vmsplice(r1, &(0x7f0000001cc0)=[{&(0x7f0000001b40)="82f1", 0x2}], 0x1, 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x7, "a8"}, @global=@item_4={0x3, 0x1, 0x4, "a28f6fae"}]}}, 0x0}, 0x0) 1m59.677365441s ago: executing program 3 (id=1391): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x2, 0xa, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/219, 0xdb}], 0x1, 0xbd, 0x0) 1m59.314667441s ago: executing program 3 (id=1392): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x2, 0xa, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/219, 0xdb}], 0x1, 0xbd, 0x0) 1m59.081368828s ago: executing program 3 (id=1393): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xfd, 0x5ae9}, {0x30, 0x7f, 0x0, 0x5753a39e}, {0x6, 0x0, 0x7, 0x3}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000003c0)={'veth0_to_team\x00', &(0x7f0000000500)=@ethtool_rxnfc={0x32, 0x3, 0x3, {0x18, @usr_ip6_spec={@empty, @local, 0x3ff, 0x4, 0x8a}, {0x0, @random="7d3cbb0463c9", 0x8000, 0x200, [0x0, 0x6]}, @hdata="8668ae810e1ac0d6bf547065e3ee0bb0f6bcbfbfea375a92fc26f6a278f183f0e6ee0e8d6060d8b5f51ed9326638bffe07baa003", {0x0, @empty, 0x4, 0x9, [0x374d, 0x1]}, 0x200, 0x1ff}}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000240)) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000180)=0x1e) r4 = accept(r0, &(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000c40)=0x80) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0x58, &(0x7f0000000180)}, 0x10) 1m58.865103704s ago: executing program 3 (id=1394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@getqdisc={0x48, 0x26, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x1}, {0xfff4, 0xe}, {0x3, 0xffff}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}}, 0x3004c81c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffffe3, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002301040028bd7000ff0042000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e65772064656661756c7420747275737465643a203030303030303030303030303030303034303936006a8ef1b4058d076280cd0f5ae53c3daa8f6d87ae06a551a8363b7d95db1085b8f77d6121d3fc495786a84fac7988a977efc305aab36ba98b63e8078d9b9a1a29"], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$caif_seqpacket(0x25, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) (async) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x100000000000f7) read$watch_queue(r6, &(0x7f00000000c0)=""/16, 0x10) keyctl$revoke(0x3, r5) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f00000000c0)={0x9, {0x4, 0x1003, 0x1, 0x8}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000002000)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x4048000) 1m43.345407701s ago: executing program 44 (id=1394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000780)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "9c5a9748e4f10e5f91faca9fbc03337299c6ade02b1e40413709b2e6b047e41c48f882a580fb7cb8dc69f097922103e22f4fe886f7401b8206ee420a505b3b99", 0x3f}, 0x48, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f0000000080)={'bond0\x00', @random="e700"}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) 27.374244702s ago: executing program 2 (id=1703): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0xffff, 0xc2, 0x4f, 0x40, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x4, 0x100000000009}, {0xb, 0xa6f2, 0x4, 0xa, 0x5, 0xff, 0x4, 0x8, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x23, 0xbc, 0x0, 0xf7, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x95}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000100)=[@code={0xa, 0x72, {"f365d38dcd0004000f78edb8010000000f01c18f8840a69100800000038f1fa89a363966460f3881b600000000bc00bcf30f019906000000c74424005a639e9ec74424020e000000c7442406000000000f011c246c722a2a0faefcc4c1a1627100"}}], 0x72}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x80, 0xa, 0xb9, 0x1, 0x11, 0xd, 0x9}, {0x804, 0x1, 0x1, 0x49, 0x87, 0x2, 0x2, 0xff, 0x6, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x8, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5, 0x4}], 0xffffffff}) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xdb, 0x0, 0x8, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffff9, 0x2, 0x1136b2e5, 0x9, 0x0, 0x3, 0x0, 0x8000000000, 0xfffffffffffffffa], 0x25000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 26.889065716s ago: executing program 2 (id=1706): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) alarm(0xfffffffffffffffd) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000009b80)=""/102392, 0x18ff8) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r4, &(0x7f00000001c0)=""/95, 0x5f) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r5, 0x4, 0x2) r6 = openat$sequencer2(0xffffff9c, 0x0, 0x800040, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r6, 0x40045108, &(0x7f0000000080)=0x5) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000300)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0xfffffffb, 0x25, 'id1\x00', 'timer1\x00', 0x0, 0x9, 0x200, 0x38e41e62, 0x64}) 19.133538613s ago: executing program 2 (id=1737): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60b59f0000383afffe880000000000000000000000000001ff020000000000000000000000000001f50090780000000167d32d6200022c00fe80000000c7ef3f75000000000000aafe8000000000000000000000000000aae20faee2dfbdb001238e1838ef63fc3b2911a3d23e844e2bf77a38213c5dca5df08af14632d173a6d3c4e854e62cdabe68f0ff6ab4d0afe577f10488463446b36a15b9b19c31957a9f7d7da14f304552ea895aefdc854131e8057ecde72b66401f8e3b0eed9884eddd7c003d15ba4ab6e29d161f6b457ae1629d636e92ba27e1b216932c23dc88569ef02ce0c469d3baa1e0da8a2edbffc5985241ff1290fb20032212ace0b04fcef347f941981b6f81017312ecf4b140f696873d1011fc0767fc65ab20"], 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2c020400) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4000, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) pwritev(r2, 0x0, 0x0, 0x5, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000080)={{0xf, 0x3}, 0x0, 0x2, 0x2, {0x0, 0xb}, 0x6, 0x5}) r4 = syz_open_dev$mouse(0x0, 0x0, 0x2042) write$dsp(r4, 0x0, 0x58) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$selinux_context(r5, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c6}, 0x984e45ff733bc95) 18.08945289s ago: executing program 2 (id=1746): fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x8) r8 = syz_io_uring_setup(0x893, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x0, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x12042, 0x1}) io_uring_enter(r8, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 9.377294508s ago: executing program 6 (id=1775): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x810) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0), 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x6, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r7, &(0x7f0000000340), 0x0, 0x40444c4) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x6c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000012140)={0x0, 0x0, &(0x7f0000012100)={&(0x7f0000012080)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc}, 0x840) 7.663191592s ago: executing program 6 (id=1780): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d01"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 7.028265507s ago: executing program 1 (id=1784): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0xffff, 0xc2, 0x4f, 0x40, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x4, 0x100000000009}, {0xb, 0xa6f2, 0x4, 0xa, 0x5, 0xff, 0x4, 0x8, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x23, 0xbc, 0x0, 0xf7, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000100)=[@code={0xa, 0x72, {"f365d38dcd0004000f78edb8010000000f01c18f8840a69100800000038f1fa89a363966460f3881b600000000bc00bcf30f019906000000c74424005a639e9ec74424020e000000c7442406000000000f011c246c722a2a0faefcc4c1a1627100"}}], 0x72}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x80, 0xa, 0xb9, 0x1, 0x11, 0xd, 0x9}, {0x804, 0x1, 0x1, 0x49, 0x87, 0x2, 0x2, 0xff, 0x6, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x8, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5, 0x4}], 0xffffffff}) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xdb, 0x0, 0x8, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffff9, 0x2, 0x1136b2e5, 0x9, 0x0, 0x3, 0x0, 0x8000000000, 0xfffffffffffffffa], 0x25000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.043133088s ago: executing program 1 (id=1785): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0xfff2, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = epoll_create1(0x80000) io_setup(0xdda, &(0x7f00000000c0)=0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$getregset(0x4204, r9, 0x200, &(0x7f0000000740)={0x0}) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x2}]) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140)={0x2016}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0xe6, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000070500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32], 0x4c}}, 0x40000) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfc) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) 4.85653733s ago: executing program 1 (id=1789): syz_usb_connect(0x3, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120109000000c5400d0521013b6f000000010902120001fe0000000904"], 0x0) syz_usb_connect$uac1(0x3, 0x101, &(0x7f0000000900)={{0x12, 0x1, 0x540, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x3, 0x1, 0x7, 0x20, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x3}, [@extension_unit={0x8, 0x24, 0x8, 0x6, 0x7, 0xe, "d8"}, @feature_unit={0xd, 0x24, 0x6, 0x1, 0x0, 0x3, [0x2, 0x7, 0x4], 0xca}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0x0, "850e3b33"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x300, 0x5, 0x5, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x4b, 0x7, 0x6, "872067"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x8001, 0x1, "ac"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x2, 0x3, 0x7, "8f6d", 'W\a-'}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf9, 0x2, 0x2, {0x7, 0x25, 0x1, 0x0, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x80, 0x1, 0x8, 0xd6, 'F', "5a00e9"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x9, 0x3, 0x8f, 0xcc, "44ff60cda1bb3e2371"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0x91d4, 0x1, "a8"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xe, 0x3, 0x5, 0x5, "", "a2ae"}, @as_header={0x7, 0x24, 0x1, 0xda, 0x0, 0x4}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x5, 0x5, "cdad919af4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x80, 0x0, 0x2, {0x7, 0x25, 0x1, 0x0, 0x4, 0x80}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xc, 0x3, 0x4, 0x8, 0x57}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x4, [{0xe5, &(0x7f0000000180)=@string={0xe5, 0x3, "7ec9b07de89d3a5ad60ad365d3764bfef06e0d0f183267ddf9044b708cc00a2e1c76e4abfb4d3db2e2b4fd1d9aaf90880d0dcb7cc820647fc5a38e7ec8eac29eb1531013b290eeb7f36b51222a596f9935d62eef4886c01e3cacd549a99492cbee5ee48f7d3bd72d60cf46e725d04bd3690cb2542f36a3a5f0eeec76eae9bb8ac884b65e46e1d77d14d23657a13b0d53f06f983e58e9ff2fbf53db0016d36d1a7286fab5296ef6218c71692d74def9eebf0300917f6b1bd4094aed52e9698acb508153b5fb42fcc67ff5b7f6473153b3483586392397186170ed4786ad40e942000000"}}, {0xb, &(0x7f0000000280)=@string={0xb, 0x3, "8a363f80babc01dba5"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x240a}}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3}, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000640)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x12, r3, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.547903043s ago: executing program 6 (id=1793): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001840)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0xd7, @string={0xd7, 0x3, "487a638a66018f6350388d53cecc196b0938128c8955fb4da65542c949ae075dfd4fc9a80a6b653cca91eb32edaf59c7691cc417d9c27f6884bf6fd70834400fa54328eaa49d4a5585475859dc0de11f6f8fefcda2350e902a8083d0313cf28b042fbcd3033adf10940838fea8a6b60e5fddb2d3120db0ce6e1121d42706c1004928a2e374dc3ce7196168b7d8faddb95f506324a1c6a10b55e2d2b18a483904a898785a4286f4756c70cb993c025caf66958fd832b603c5ef8510e7fef48eb931caff11b511f0ef4ba220c40c223820a4e7db4f85"}}}, 0x0) 3.313538836s ago: executing program 1 (id=1796): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000001c0)={0x3c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x400c4) 3.17790203s ago: executing program 5 (id=1797): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0xffff, 0xc2, 0x4f, 0x40, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x4, 0x100000000009}, {0xb, 0xa6f2, 0x4, 0xa, 0x5, 0xff, 0x4, 0x8, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x23, 0xbc, 0x0, 0xf7, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x95}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000100)=[@code={0xa, 0x72, {"f365d38dcd0004000f78edb8010000000f01c18f8840a69100800000038f1fa89a363966460f3881b600000000bc00bcf30f019906000000c74424005a639e9ec74424020e000000c7442406000000000f011c246c722a2a0faefcc4c1a1627100"}}], 0x72}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x80, 0xa, 0xb9, 0x1, 0x11, 0xd, 0x9}, {0x804, 0x1, 0x1, 0x49, 0x87, 0x2, 0x2, 0xff, 0x6, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x8, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5, 0x4}], 0xffffffff}) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xdb, 0x0, 0x8, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffff9, 0x2, 0x1136b2e5, 0x9, 0x0, 0x3, 0x0, 0x8000000000, 0xfffffffffffffffa], 0x25000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.917571565s ago: executing program 45 (id=1746): fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x8) r8 = syz_io_uring_setup(0x893, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x0, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x12042, 0x1}) io_uring_enter(r8, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 2.909869054s ago: executing program 6 (id=1801): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x4) flock(r0, 0x2) 2.906270964s ago: executing program 5 (id=1802): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f00001cc500)=[{0xa000005, 0x7ae, &(0x7f0000000100)=[0x3, 0x4, 0x8, 0x1, 0x5, 0x3, 0x4, 0x1, 0x10, 0x31, 0xfffffffa, 0x5, 0x2, 0x9ea4, 0x0, 0xb, 0xfff, 0x4, 0x6, 0xffffff80, 0x8, 0x2, 0x213, 0xa0, 0x5, 0x6, 0xf, 0x3, 0x8, 0x2, 0x9, 0x9, 0xae29, 0x0, 0x2, 0x0, 0xfffffffd, 0x7, 0x7, 0xf, 0x8, 0x80, 0x2, 0x4, 0x6, 0x2, 0x4, 0x8203, 0x7f, 0x7ff, 0x0, 0xfffffffe, 0x10, 0x9f, 0x6, 0xd9, 0x4, 0x3, 0x5, 0x0, 0x400, 0x6, 0x2, 0x5, 0x8, 0x8, 0x0, 0x3, 0x8, 0x8001, 0x7, 0x0, 0xffffff7c, 0x6, 0xc, 0x9, 0x3, 0x0, 0x90, 0x2, 0xe4d, 0x1000, 0x1, 0x3, 0x8, 0xe5, 0x100, 0x0, 0x13, 0x4, 0xffffffff, 0x2, 0x6, 0x9, 0x42587ff8, 0x8, 0x9, 0x7, 0x1, 0x6, 0xc44, 0x6, 0xffff8000, 0x8000, 0x7, 0xb, 0x2, 0x1, 0x7, 0x200, 0x80000001, 0x360f, 0xef7b, 0x800, 0x5, 0x1, 0x9, 0xffffffff, 0x2, 0x5, 0x8001, 0x8, 0xffffffff, 0x3, 0x3ff, 0x4000000, 0x1, 0x7, 0x24, 0x6, 0x4, 0x1, 0x401, 0x6, 0x0, 0x448b0e14, 0x80000000, 0x6, 0x48000, 0xc8, 0x8, 0x5, 0x2, 0x789aa8a7, 0x8, 0x10000, 0x16, 0x3, 0x7fffffff, 0x7, 0x9, 0x2ae874f4, 0xfffff764, 0x3, 0x8e, 0x487d, 0x7f, 0x8, 0x400, 0x95ea, 0x80000000, 0x4, 0x2000000, 0x7fffffff, 0x6, 0xc, 0x3, 0x7, 0x1, 0x7, 0x9b, 0x6, 0x7, 0x12, 0x100, 0xfffffff8, 0x2, 0x6a29812c, 0x8, 0xc88, 0x900, 0xf9, 0x8, 0x6, 0xffffffff, 0x0, 0x0, 0x4, 0x1, 0x9, 0x101, 0x7, 0x81, 0x31, 0x2, 0x0, 0x5, 0x3, 0x7f, 0x1, 0x0, 0x7, 0x2, 0x2, 0x97, 0x50, 0x4736000, 0x3, 0x5, 0x7, 0x140, 0x7, 0xffffffff, 0x2, 0x3ff, 0x101, 0x6, 0x2, 0x2, 0x100, 0x9, 0x100, 0x9, 0xfffffff0, 0x8, 0xffffffff, 0x1, 0x2, 0x17f2, 0x2, 0x1, 0x3, 0x2, 0x7, 0xfffffff9, 0xfffffff2, 0x4, 0x10000, 0x10, 0x4, 0x0, 0x5, 0x1, 0x8, 0x5934, 0x4, 0x70000000, 0x7000000, 0x8001, 0x10001, 0x63fa, 0x4, 0x0, 0xffff7fff, 0x68, 0x1, 0x9, 0x7, 0xfffffffa, 0x4a99, 0x3, 0x3, 0x85da, 0xfffffffb, 0x8, 0x8, 0x1, 0x401, 0x9, 0xfff, 0x9, 0x4, 0x4, 0x9a5, 0x8, 0x0, 0x54800000, 0x0, 0xf, 0x2, 0xd8, 0x1000, 0x100, 0x5, 0x6, 0x2, 0x3, 0x7, 0x5, 0x4, 0x2, 0x40, 0xf0c, 0xff, 0xff, 0x7, 0x9, 0x1, 0x7, 0x80000000, 0x400, 0xbe58, 0x5, 0xc0000000, 0x2, 0x6, 0x0, 0x0, 0x9, 0x8, 0x4, 0xb7bb, 0x4, 0x9, 0x8, 0x49, 0x27cc3f39, 0x5, 0x80000001, 0x9c32, 0x7ff, 0x3ff, 0x8, 0x2, 0x3, 0x100, 0x8, 0x7, 0x16e, 0x5, 0x10, 0x9, 0x1, 0x186c, 0x814d, 0x9, 0x18, 0x6, 0x2, 0x101, 0x8000, 0x56, 0x3, 0x39b6, 0x1200000, 0x1, 0x2, 0x0, 0xffffffff, 0x6a3, 0x3, 0x9, 0x0, 0xf8ba, 0xffffffff, 0x80000001, 0x1, 0x10, 0x3, 0x4, 0x9, 0x1, 0x2, 0x9eeb, 0x2, 0x10000, 0x0, 0x9, 0x16, 0x2f, 0x6703, 0x1, 0x2, 0xc, 0xef5, 0x4, 0x101, 0xe, 0xa4, 0x28c3, 0x7e6, 0x9, 0x9, 0x2, 0x8193, 0x2, 0xc0, 0x4, 0x5, 0x2, 0x6, 0x6, 0x4, 0x4, 0x0, 0x7fffffff, 0xffff, 0x16e, 0x5, 0x1ff, 0x9, 0x3, 0x0, 0x7f, 0xc, 0x2, 0x8, 0xfffff146, 0x4, 0x359c, 0x6, 0x4, 0x0, 0x9, 0x2, 0x80, 0x8, 0x9, 0x8, 0x7, 0x7, 0x3, 0x3, 0x81, 0xfffffffc, 0x7, 0x8, 0x4, 0x10000, 0x3, 0x3, 0x9, 0x9, 0x4, 0xb43, 0x2, 0x10, 0xffffffc0, 0xff, 0x1, 0x0, 0x3, 0x34430f57, 0x1, 0xffff, 0x4, 0x5, 0x10001, 0xff, 0x5, 0x10000, 0x9, 0x800, 0x3, 0x3, 0x2, 0x9, 0x7, 0x6, 0xea5, 0x1, 0x1000, 0xda, 0x9, 0xa, 0x5, 0xa, 0x8, 0x7, 0x1, 0x0, 0x2, 0xfffffff8, 0x400, 0xf, 0x9, 0x6, 0x4, 0x9, 0x9, 0x100, 0x1f2a, 0x5, 0x0, 0x80000000, 0x5be, 0x7, 0xe0000, 0x9, 0xd46a, 0x1, 0xf5f, 0x1, 0x2, 0x8, 0x8001, 0x4, 0x3ff, 0x3ff, 0x3, 0x7fffffff, 0x3c33, 0x9, 0x1d1, 0x3, 0x80, 0x7fff, 0x8, 0x3, 0x4, 0x5, 0x8, 0xa41, 0x0, 0x347, 0x5, 0x3, 0x10000, 0x1, 0x0, 0x9, 0x1, 0xfffffff9, 0x6, 0x8, 0x6, 0x9, 0x8, 0x6, 0x41, 0x3, 0x7, 0xffffa261, 0x7097, 0x2, 0x4, 0x80000000, 0xfffffffb, 0x1487, 0x80000000, 0xfff, 0x2, 0x8, 0x8000, 0x8, 0xf, 0x4, 0x4, 0x1c80, 0x6c8, 0x1, 0xfffffffc, 0x1, 0xcc, 0x10000, 0x8, 0xfffffffa, 0x2, 0x5, 0x1, 0x5, 0x0, 0x0, 0xffff6c09, 0x800, 0x72f1, 0x6, 0x6, 0x8, 0x40, 0x10001, 0x8, 0xffff, 0x4, 0x10000, 0x1, 0x4, 0x5, 0xa7, 0x1, 0x8, 0x0, 0x200, 0xfffffffd, 0xf, 0x7, 0xe, 0x0, 0x2, 0x12db, 0xba2b, 0x800, 0x9f04, 0x7d6d, 0x5, 0x9, 0x3, 0x1800000, 0x1, 0x7, 0x2, 0x10, 0xc, 0x3, 0x6, 0x80000, 0x10, 0x7050, 0x2, 0x1, 0x2, 0xffff7a52, 0x10, 0x6, 0x8, 0x3, 0x1, 0xa, 0x2, 0xb5, 0x1, 0x100, 0x6, 0x3, 0x7ab, 0x331c, 0x2c40, 0x100, 0x8, 0x7, 0x1, 0x9, 0x0, 0x4, 0x1, 0x7, 0xfffff800, 0x39, 0x2, 0x7000000, 0x1, 0xa8, 0x10, 0x100, 0xa0b, 0x9, 0x10000, 0x2, 0x3, 0x4, 0x400, 0x8, 0xab, 0x800, 0xfffffff7, 0x6, 0x3, 0x0, 0xffffffff, 0x9, 0x9, 0xa, 0xe, 0x2, 0x80000000, 0x7, 0x80000000, 0x2, 0x3ff, 0x2, 0x6, 0x7f, 0x7, 0x0, 0x800, 0x10000, 0x4, 0x400, 0x6000, 0x4, 0x7, 0x8591, 0x7, 0x8, 0x1, 0x1, 0x8, 0xb, 0x9, 0x7, 0x7fff, 0x1, 0x10001, 0x0, 0xfffffffe, 0xff, 0x1, 0x9, 0xf, 0x6, 0xfffffff8, 0x2000000, 0x2, 0x6, 0x2366286e, 0x2a, 0x65ecea85, 0x0, 0xd, 0xe16a, 0x7ff, 0x40000, 0x87a6f85a, 0x8, 0x8, 0x80000000, 0xffffffff, 0x2, 0x6, 0x2, 0xec, 0x1, 0xff, 0x8, 0x1, 0x4, 0x2, 0x9, 0x5, 0x4, 0x6, 0x1ff, 0x1000, 0x9, 0x5, 0x334b, 0xa, 0x7ff, 0x3, 0xfffff19d, 0x40, 0x8, 0x9, 0xff, 0x0, 0xe, 0x2, 0x0, 0x8, 0x1, 0x6, 0xa, 0x7, 0x8, 0x3ef4, 0x8, 0xfffffffa, 0x0, 0x401, 0x6, 0x1, 0x3, 0x2, 0x2, 0x7, 0x0, 0x7, 0xa, 0x401, 0x1, 0x3, 0x3, 0xa, 0x6, 0xfffffff5, 0x6, 0x6, 0x0, 0x81, 0x9, 0x3, 0x200, 0x40000, 0xe, 0xd2, 0x99, 0x4, 0x7, 0x2, 0x3, 0x8, 0x3, 0x8, 0x200, 0xffffff81, 0x9, 0xe3c9, 0x2, 0x8, 0x9, 0x8, 0x1, 0x2, 0x7, 0x5, 0x8001, 0x101, 0x6, 0x3527, 0x6b4, 0xffffffff, 0x5, 0x17e6, 0x3, 0x2, 0x2, 0x5, 0xd9, 0x7, 0x6, 0x7, 0x3, 0x6, 0x13b4c30c, 0xf8, 0x2, 0x7e5, 0x0, 0x1, 0x2, 0x2, 0x2, 0x7fffffff, 0x6, 0x2, 0x6, 0x4, 0x5, 0x75, 0x4, 0x80, 0x5, 0xf0, 0x2, 0x2, 0xc, 0x7f, 0x0, 0x55, 0x0, 0x1ff, 0x9, 0x2, 0x2, 0xfff, 0x8, 0x1, 0x0, 0x5, 0x2, 0x80, 0x2, 0xd, 0x8, 0xd5e4, 0x40, 0x9, 0xfba, 0x1, 0x68b30bd1, 0x8, 0xffff, 0x5, 0x5, 0x1, 0xc02f, 0xf, 0x0, 0x4500, 0x81, 0x800, 0xf0400000, 0x5, 0x0, 0x4, 0xd, 0x7c1, 0x9, 0x80000001, 0xfffffffd, 0x1, 0x4, 0x0, 0x8, 0x1000, 0x4, 0x4, 0x0, 0xe, 0x101, 0x5, 0xad, 0xfffffffb, 0x9, 0x0, 0x9, 0x5, 0x4, 0x74407118, 0x2, 0x0, 0x4, 0x4, 0x5, 0x9, 0x6, 0x7, 0x9, 0x4, 0x800, 0x4, 0x1, 0x2, 0x400, 0xdf42, 0x1, 0x1, 0x1, 0x9, 0x0, 0x2, 0x80000000, 0x2f, 0x1, 0x6, 0xffffff5c, 0x1, 0xfff, 0x0, 0x4, 0x9b, 0x4, 0x4, 0xa, 0x1, 0x5, 0x8, 0x4, 0xd1d9, 0x0, 0x8, 0x52, 0x8, 0x0, 0x6, 0x0, 0x9, 0x7, 0x3, 0xfffffff8, 0x4ff, 0x7f, 0x9, 0x8000, 0x8001, 0x39e, 0x2, 0xffff, 0x118c, 0xb28, 0x5772, 0xc32e, 0xc098, 0x7, 0x24, 0x5, 0x7, 0x2, 0x100, 0xffffff7f, 0x4, 0xa23, 0x8, 0x0, 0x800, 0x2, 0xfffff800, 0x6, 0x2, 0x8, 0x4, 0x8, 0x9, 0x8e5, 0x7, 0x6, 0x400, 0x0, 0xbc, 0x5, 0xe9c, 0x5, 0x1, 0xff, 0x5, 0x8000, 0x9, 0x5ea, 0x6, 0x5, 0x4, 0x8, 0xffffffff, 0x38000, 0x8, 0x2, 0x81, 0x2, 0xe, 0xc, 0xb2, 0x5, 0xffffffff, 0x5, 0x2, 0x7, 0x1, 0x4, 0x1, 0x3, 0x7fff, 0x5, 0x100, 0x1000, 0xa51c, 0x2, 0x8, 0x9, 0x8, 0x6, 0x6630, 0x7, 0x4, 0x7, 0x2, 0x4, 0xdd1d, 0x2, 0x0, 0x25, 0x3, 0x8, 0xff, 0x8, 0x7ff, 0x81, 0x7, 0x7, 0x7, 0x8, 0x5, 0xffffff96, 0x1900, 0x2, 0x2, 0x44, 0x3, 0x800, 0xffffffff, 0x10001, 0xf3, 0x6, 0x6, 0x4e0a325e, 0x1, 0x400, 0xd, 0x4, 0x85, 0x3, 0x38, 0x2, 0x7, 0x89a3, 0x2b, 0x898, 0x7, 0x1a8b, 0x0, 0x9, 0x6, 0x0, 0x0, 0xffff, 0x380c, 0x7, 0xf, 0xfffffffb, 0x9, 0xf, 0x2, 0xa, 0x3, 0xff, 0x80000000, 0x2, 0x8, 0x6, 0x5, 0x7, 0x6, 0x80, 0x5, 0x220f, 0x2, 0x2, 0x0, 0x8000, 0xe844, 0x9, 0x3, 0x6, 0x5, 0x2, 0xd76d, 0x0, 0x3c7, 0x1, 0x2, 0x7, 0xcacf, 0x4, 0x80, 0x3, 0x2d0, 0x1, 0x3, 0xa15, 0x1ff, 0xbb, 0xfffffffd, 0x7, 0x384, 0x2, 0x80, 0xc, 0x80, 0x8, 0xfffffff9, 0x6, 0x3, 0x3, 0x8, 0xb25, 0x9, 0x7, 0xffffff96, 0x7fff, 0x8001, 0x6b71ae0f, 0x6, 0x9664, 0x9, 0x2, 0x9, 0xfffffff9, 0x5, 0x400, 0x6, 0x5, 0x9f4, 0x101, 0x8, 0x3ff, 0x1, 0x3, 0x9, 0x4c, 0x2, 0x4, 0xffff1223, 0x7fff, 0x2, 0xfffffffe, 0x0, 0x5, 0xfec, 0x120000, 0x6, 0x4, 0x3, 0x3d, 0xe, 0x81, 0xa, 0x2f73d58b, 0x1, 0x8, 0x6, 0xfffffff9, 0x9, 0x2, 0x1, 0x69d4, 0x7ff, 0x17af16ec, 0x1ff, 0x1, 0x1, 0x35f, 0x3, 0x43, 0x4f, 0xec4, 0x9, 0x0, 0x0, 0x1, 0x7, 0x3ff, 0x9, 0x9d00, 0xff, 0x1000, 0x2, 0x65, 0x9, 0x3ff, 0x1, 0x1, 0x1000, 0x3, 0x200, 0x3, 0x10000, 0x4bd57dce, 0x1, 0xfffffffa, 0x200, 0xc00000, 0xc93c, 0xef8a, 0x1, 0x80, 0x1, 0x10001, 0x1, 0xffffffff, 0x7, 0xc35c, 0x1, 0x9, 0x7f, 0xa77, 0x4, 0x956, 0x0, 0xf, 0x9, 0x37, 0x7, 0x1000, 0x5, 0x10000, 0xfffffffb, 0x1, 0x2, 0xffff8000, 0x5, 0x2, 0x8, 0x3, 0x2, 0x80, 0x1, 0x6, 0x4, 0xffff99bb, 0x7, 0x80000001, 0x3, 0x1, 0x1, 0x6, 0x8, 0x74, 0x38de, 0x101, 0x9, 0x5, 0x1, 0xffffad65, 0x8001, 0x2, 0x7, 0x8001, 0xd, 0x1, 0x2, 0x4000000, 0x2, 0x1, 0x9, 0x2b202f7, 0x1ff, 0x2, 0x2, 0x7fff, 0x9, 0x0, 0x3, 0xb, 0x7, 0x0, 0x8, 0x0, 0x3, 0x7, 0x3, 0x47cb, 0x1, 0x8, 0x1, 0x3349, 0x4, 0x0, 0x0, 0x0, 0x3, 0x5, 0x9, 0xffffffff, 0x40, 0x2, 0x7, 0xfffffa39, 0x9, 0x28a, 0x1, 0x7f, 0xffff, 0x6, 0x2, 0x7, 0x4da3, 0x2, 0x6, 0x4, 0x5, 0x7, 0x4, 0x7ff, 0x4, 0x0, 0x10001, 0x5, 0x1, 0x3, 0x9, 0x3, 0x7, 0x2, 0x0, 0x2, 0x80000001, 0xa, 0x2, 0xff, 0x8, 0xfffff10b, 0x3, 0xb5a, 0x8, 0x5, 0x6, 0x4, 0x3, 0x8, 0xfffffff9, 0x3, 0x9df, 0x9, 0x8, 0x0, 0x17790000, 0x0, 0x2, 0xfffffffd, 0x7, 0x200, 0x9, 0x41, 0x0, 0x5, 0x3, 0x9, 0x0, 0x9, 0xfffffff7, 0x8, 0xf35d, 0x4, 0x1000, 0x692, 0xbaa, 0x2, 0x8, 0x7, 0x1, 0xc, 0x14, 0x8, 0x8b, 0x6, 0xffffffb0, 0x6, 0x2, 0x4, 0xc0000000, 0x81, 0x1ec, 0x7, 0x80, 0x1ff, 0xd, 0xfffffff7, 0xffffffff, 0x1, 0xfffffe01, 0x19d000, 0x5, 0x3, 0x7, 0x6, 0xfffffffb, 0x10001, 0x9, 0x40, 0x0, 0x5, 0x1, 0x61d, 0x1, 0x9, 0x7ff, 0x2, 0xfffffffb, 0x10, 0x101, 0x8, 0x297, 0x6, 0x1000, 0x74bf, 0x6, 0xdd7, 0x9, 0xf, 0x3, 0x1, 0x2, 0x1, 0x6, 0x9, 0xf, 0xb63, 0x6, 0x7f, 0x3, 0x9, 0x4ec3bf9, 0x2bb5, 0x64, 0x3, 0x4, 0x9, 0xffffa7e2, 0x0, 0x4, 0x200, 0x1, 0x5, 0x7fffffff, 0x7c, 0x5, 0x3, 0xb1ff, 0x5, 0x6, 0x4, 0x80000001, 0x3, 0x94b1, 0x3, 0x1, 0x3, 0x6, 0x0, 0xfffffff8, 0x5, 0xa7, 0x2, 0x6, 0x80000001, 0x34dfc0, 0x8, 0x3, 0x9, 0x1, 0x9, 0x0, 0x7fff, 0x0, 0x3, 0x4, 0xffff8000, 0x7, 0x1, 0x90, 0x7, 0xe, 0x3, 0x4, 0x0, 0x45, 0xfffffff9, 0xa, 0x7, 0x9641, 0x80000000, 0x5, 0x800, 0x206, 0xfffffff7, 0xa, 0x7f, 0xffff7fff, 0xa3, 0x7, 0x8, 0x7ff, 0x5, 0x4, 0xb, 0x7, 0xb, 0x8, 0x0, 0x2, 0x8, 0xd, 0x2, 0x5, 0x5d, 0xffff, 0x401, 0xf, 0x9, 0x7, 0x3ff, 0x2, 0x80000001, 0xc, 0x2, 0xe16f, 0x6, 0x40, 0x7fffffff, 0xfffff52f, 0x9, 0x0, 0x8, 0xb, 0x5, 0xf7, 0x0, 0xfff, 0x245b, 0xffffffff, 0xfffffff9, 0x2, 0x2d9c, 0x2, 0x1000, 0x6, 0x5, 0x9, 0x8, 0x5, 0xc64, 0x2, 0x0, 0x1, 0x4, 0x6, 0x1, 0x6, 0x1000000, 0x5, 0x1, 0x4, 0x0, 0x3, 0x98d, 0xa4b7, 0x1ff, 0x4, 0x1ff, 0x8, 0x5, 0x2, 0x5, 0x1, 0x332b, 0x3, 0x2, 0x9345, 0x6, 0x5, 0x3, 0x4, 0x7f, 0x2, 0x0, 0xc, 0x5, 0x8, 0x3, 0xbd, 0x0, 0x7fffffff, 0xc9faf2e, 0xc, 0x7, 0x5, 0x100, 0x6, 0x2, 0xfffffffd, 0x9, 0x100, 0x10, 0x10000, 0x1, 0xd, 0x6, 0xfff, 0x3, 0x6, 0x1a, 0x9, 0x100, 0x6, 0x2, 0x4, 0x7, 0x98, 0x8001, 0xa, 0x4, 0x2, 0x80000001, 0x7, 0x1, 0x50000000, 0xd, 0x0, 0x29f, 0x68f, 0x79, 0x8, 0xe8e, 0x2, 0x7, 0x6, 0x10000, 0x7fff, 0x9, 0x401, 0x3, 0x3, 0x6, 0x3, 0x5, 0x6, 0xc141, 0x6, 0x0, 0x1d, 0xf493, 0x1, 0xc, 0x3ff, 0x4, 0xf, 0x100, 0x8, 0x800, 0xdb3b, 0x10000, 0x7, 0x8, 0xffff7fff, 0x5, 0x8, 0xb, 0x0, 0xfffffffb, 0x9, 0x0, 0x10000, 0x0, 0x1, 0x7f, 0x5, 0x7, 0x83c, 0x4, 0x4, 0x2, 0x7, 0xfffffffd, 0x6, 0x101, 0x401, 0x40, 0x0, 0x80000000, 0x3, 0x8, 0x6, 0x1, 0x8, 0x7, 0x7fff, 0x7c0, 0x7, 0x8, 0x6, 0x6, 0xfea, 0x6, 0x835, 0x4, 0x34, 0x1ff, 0xfff, 0x6, 0x2, 0xc75, 0x9, 0x80000000, 0x0, 0x0, 0x40, 0x7fff, 0x80800, 0x10002, 0x9, 0x1, 0x9, 0xc7, 0x7, 0x982, 0x0, 0x0, 0x80000000, 0x5, 0xc0000000, 0x3, 0x74, 0x100, 0x7, 0xfffffff8, 0x8, 0x8, 0x3, 0x9, 0x6, 0x6ccd, 0x6, 0x9, 0x7, 0x6, 0x4, 0xc05b, 0x7, 0x10000, 0x7, 0x0, 0xf3, 0x6, 0x9, 0x1, 0x8, 0x540, 0xb, 0x2, 0x2d1d, 0x6, 0x6084, 0x10, 0x6, 0x1, 0x7, 0x4, 0x5, 0x0, 0x9, 0xa8e, 0x6, 0x9, 0x53c, 0x9, 0x7, 0x1, 0xdc, 0x80000001, 0x5, 0x5, 0x80000001, 0x2, 0xff, 0xd7bf, 0x5, 0xf733, 0x8, 0x1ff, 0x200, 0x7, 0x0, 0x1fc00, 0x4, 0x9, 0x7ff, 0xffffffff, 0x7, 0x1ff, 0xa3f7, 0x4, 0x3ff, 0x5, 0xe79c, 0x2, 0x182b, 0xc6, 0x400ded6c, 0x88c, 0x2, 0x4, 0x8, 0x3, 0x3, 0x2008, 0x1, 0x0, 0x80, 0x9, 0x4, 0x10000, 0x0, 0x1ff, 0x7, 0x9, 0xedd, 0x0, 0x77, 0x4, 0x3ff, 0x1, 0x0, 0x80000000, 0x6, 0xffff, 0x3, 0x0, 0xcb1, 0xae, 0x5, 0x10001, 0xffffffff, 0xfff, 0x401, 0x5, 0x4, 0xa5, 0x1, 0x2, 0x100, 0xd, 0xfffffff7, 0xcf81, 0xfff, 0xc25f, 0x0, 0x1000, 0x4, 0x100, 0x80000001, 0x0, 0x8aa, 0x64, 0x4, 0x80000000, 0x2, 0x8, 0x8, 0x101, 0x9, 0x4dc95dd3, 0xfff, 0x8, 0x800, 0x7, 0x100, 0x200, 0x0, 0x7, 0x7, 0xef, 0x8001, 0x1, 0x6, 0x1, 0x10001, 0x726ed39, 0x7ff, 0x0, 0xb0fd, 0x4fa57480, 0x4, 0x43, 0xf, 0x7fff, 0x9, 0x0, 0x9, 0x3, 0x7, 0xe1, 0x43cb, 0x7fff, 0x7, 0x2, 0xa6d, 0x3, 0x8, 0x401, 0x9, 0x4, 0xffffffff, 0x5, 0x9, 0xdc7, 0x3, 0x7, 0x9, 0x5, 0xfffffff8, 0x2, 0xb, 0x30f, 0x3, 0x9, 0x6, 0x8], 0x0, 0x8}]}) 2.592413677s ago: executing program 6 (id=1803): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7f"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d01"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 2.566798038s ago: executing program 5 (id=1804): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.556341433s ago: executing program 5 (id=1807): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1.433265012s ago: executing program 5 (id=1808): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x60, 0x0, &(0x7f0000000080)) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, r1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000081000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000850000001100000095000000000000008c4e90531d7676ea99d259813152a2f475dbb7b22bffc3677e3d45013a17017b6e17c6ed723cd18ff58448de1638017dacce630e0e6cc6100dcb16360ae68381e5091bb17783fba31fa2fa4b9f50ef43e5d0cbe1b99f174defceeee7aa2b6278fde38b29ab7b16753156f390b50b41970598e4a77bff7b450b571e356c4113a6e7f0613e185ebaeb247813d2ec97a24f68b7acd1e5e9afa943249a29a2eb22d8247c0f000de8ea22b79603ff5dea9718df6d1f505546ff9970b2d30c8fc20d9595d529b7a139cb38d502c5d1dbb991a8f10000000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x601040, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, 0x0, 0x884) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xae30, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, 0x0, 0x0) getsockopt(r8, 0x111, 0x3, 0x0, &(0x7f0000000080)) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f0000000240)={0x18, r9}) socket$nl_route(0x10, 0x3, 0x0) 1.049834475s ago: executing program 1 (id=1809): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) landlock_restrict_self(0xffffffffffffffff, 0xe837cd994334571b) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'wlan1\x00', &(0x7f0000000340)=@ethtool_stats}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x3c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 841.460165ms ago: executing program 7 (id=1810): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = eventfd(0x5f0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r6, 0x801, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r6, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x9, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r3, 0x900000}) 704.69266ms ago: executing program 7 (id=1811): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x9e54f29ff072a93b}, 0x14}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180ff0700000c00186e16bedfe16a4a1881c9b718b69dae84df74ce", 0x42}], 0x1}, 0x0) 653.258403ms ago: executing program 7 (id=1812): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x4) flock(r0, 0x2) 623.013456ms ago: executing program 7 (id=1813): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$kcm(0xa, 0x2, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) (async) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) 536.998002ms ago: executing program 7 (id=1814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000100007010000000000000000037c0000"], 0x2c}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 323.274767ms ago: executing program 6 (id=1815): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40005200060010"], 0x24}}, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)={0xdc, 0xa, 0x6, 0x101, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe0}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x46bd7daa}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}]}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000800) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00') lseek(r2, 0x8, 0x0) mprotect(&(0x7f00001ae000/0x3000)=nil, 0x3000, 0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc400, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x17, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r6 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r6, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 272.132585ms ago: executing program 1 (id=1816): socket$kcm(0x2b, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749da00000097f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff472558014391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d74e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00000000000000000000000000c8b8b5b137dcb7a7949e12307d1fce56fe5b76d2f3f5a7692379542e3fd9a5a7dc57e1dec0bdce65b5db59a0733c9b9da612adb91948ecbfaff8fc206b8350fe268b98aaa2e288be77aedddcc7fb7d631e69b176e2e6678fe1237cb2"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03076844268cb8be14f0884703", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 224.109057ms ago: executing program 7 (id=1817): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 0s ago: executing program 5 (id=1818): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000001c0)={0x3c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x400c4) kernel console output (not intermixed with test programs): t tclass=rose_socket permissive=1 [ 504.894649][T11849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11849 comm=syz.5.1496 [ 505.009540][T11846] RDS: rds_bind could not find a transport for ::ffff:172.30.1.8, load rds_tcp or rds_rdma? [ 505.026399][ T30] audit: type=1326 audit(1768547192.086:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.7.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a158f749 code=0x7ffc0000 [ 505.087132][ T30] audit: type=1326 audit(1768547192.086:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.7.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f74a158f749 code=0x7ffc0000 [ 505.496615][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 505.622622][ T30] audit: type=1326 audit(1768547192.086:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.7.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a158f749 code=0x7ffc0000 [ 505.870268][ T30] audit: type=1326 audit(1768547192.086:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.7.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a158f749 code=0x7ffc0000 [ 506.197063][T11845] syz.5.1496 (11845) used greatest stack depth: 19688 bytes left [ 506.202981][ T30] audit: type=1326 audit(1768547192.086:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.7.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a158f749 code=0x7ffc0000 [ 506.228849][ T30] audit: type=1326 audit(1768547192.086:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.7.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a158f749 code=0x7ffc0000 [ 506.254466][ T30] audit: type=1326 audit(1768547192.096:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.7.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a158f749 code=0x7ffc0000 [ 506.278791][ T30] audit: type=1326 audit(1768547192.096:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.7.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a158f749 code=0x7ffc0000 [ 506.326669][ T30] audit: type=1326 audit(1768547192.096:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.7.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f74a158f749 code=0x7ffc0000 [ 506.411324][T11871] FAULT_INJECTION: forcing a failure. [ 506.411324][T11871] name failslab, interval 1, probability 0, space 0, times 0 [ 506.647058][T11871] CPU: 1 UID: 0 PID: 11871 Comm: syz.7.1502 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.647087][T11871] Tainted: [L]=SOFTLOCKUP [ 506.647094][T11871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 506.647104][T11871] Call Trace: [ 506.647110][T11871] [ 506.647117][T11871] dump_stack_lvl+0x16c/0x1f0 [ 506.647146][T11871] should_fail_ex+0x512/0x640 [ 506.647161][T11871] ? fs_reclaim_acquire+0xae/0x150 [ 506.647186][T11871] should_failslab+0xc2/0x120 [ 506.647208][T11871] kmem_cache_alloc_noprof+0x83/0x770 [ 506.647224][T11871] ? __pfx_map_id_range_down+0x10/0x10 [ 506.647242][T11871] ? security_inode_alloc+0x3b/0x2b0 [ 506.647266][T11871] ? security_inode_alloc+0x3b/0x2b0 [ 506.647283][T11871] security_inode_alloc+0x3b/0x2b0 [ 506.647305][T11871] inode_init_always_gfp+0xced/0x1040 [ 506.647333][T11871] alloc_inode+0x86/0x240 [ 506.647352][T11871] sock_alloc+0x40/0x280 [ 506.647374][T11871] do_accept+0xf7/0x530 [ 506.647398][T11871] ? do_raw_spin_lock+0x12c/0x2b0 [ 506.647422][T11871] ? __pfx_do_accept+0x10/0x10 [ 506.647461][T11871] __sys_accept4_file+0xcd/0x210 [ 506.647486][T11871] ? __pfx___sys_accept4_file+0x10/0x10 [ 506.647518][T11871] __x64_sys_accept4+0xd5/0x150 [ 506.647535][T11871] do_syscall_64+0xcd/0xf80 [ 506.647560][T11871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.647577][T11871] RIP: 0033:0x7f74a158f749 [ 506.647590][T11871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.647606][T11871] RSP: 002b:00007f749f7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 506.647622][T11871] RAX: ffffffffffffffda RBX: 00007f74a17e5fa0 RCX: 00007f74a158f749 [ 506.647633][T11871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 506.647643][T11871] RBP: 00007f749f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 506.647653][T11871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.647663][T11871] R13: 00007f74a17e6038 R14: 00007f74a17e5fa0 R15: 00007fff7ffb0768 [ 506.647687][T11871] [ 506.877369][ T7912] udevd[7912]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 506.897859][T11875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11875 comm=syz.5.1501 [ 507.206695][T11881] vivid-002: disconnect [ 507.674745][T11881] vivid-002: reconnect [ 507.902659][T11885] mkiss: ax0: crc mode is auto. [ 508.151917][T11899] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1507'. [ 508.336661][T11904] loop5: detected capacity change from 0 to 4095 [ 508.537032][ T5804] udevd[5804]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 509.067053][ T7912] udevd[7912]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 509.099031][ T5804] udevd[5804]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 509.815272][ T5985] udevd[5985]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 509.943659][ T5804] udevd[5804]: symlink '../../loop5' '/dev/disk/by-diskseq/79.tmp-b7:5' failed: Read-only file system [ 510.033465][ T7912] udevd[7912]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 510.034266][ T5804] udevd[5804]: symlink '../../loop5' '/dev/disk/by-diskseq/80.tmp-b7:5' failed: Read-only file system [ 510.091705][ T5948] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 510.105616][ T5804] udevd[5804]: symlink '../../loop5' '/dev/disk/by-diskseq/80.tmp-b7:5' failed: Read-only file system [ 510.222200][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 510.222215][ T30] audit: type=1400 audit(1768547197.316:919): avc: denied { create } for pid=11921 comm="syz.5.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 510.252652][T11926] FAULT_INJECTION: forcing a failure. [ 510.252652][T11926] name failslab, interval 1, probability 0, space 0, times 0 [ 510.265477][T11926] CPU: 0 UID: 0 PID: 11926 Comm: syz.2.1517 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.265502][T11926] Tainted: [L]=SOFTLOCKUP [ 510.265508][T11926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 510.265517][T11926] Call Trace: [ 510.265523][T11926] [ 510.265530][T11926] dump_stack_lvl+0x16c/0x1f0 [ 510.265558][T11926] should_fail_ex+0x512/0x640 [ 510.265574][T11926] ? fs_reclaim_acquire+0xae/0x150 [ 510.265599][T11926] should_failslab+0xc2/0x120 [ 510.265621][T11926] __kmalloc_noprof+0xeb/0x910 [ 510.265646][T11926] ? tomoyo_encode2+0x100/0x3e0 [ 510.265674][T11926] ? tomoyo_encode2+0x100/0x3e0 [ 510.265707][T11926] tomoyo_encode2+0x100/0x3e0 [ 510.265733][T11926] tomoyo_encode+0x29/0x50 [ 510.265756][T11926] tomoyo_realpath_from_path+0x18f/0x6e0 [ 510.265786][T11926] tomoyo_path_number_perm+0x245/0x580 [ 510.265806][T11926] ? tomoyo_path_number_perm+0x237/0x580 [ 510.265829][T11926] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 510.265850][T11926] ? find_held_lock+0x2b/0x80 [ 510.265897][T11926] ? find_held_lock+0x2b/0x80 [ 510.265920][T11926] ? hook_file_ioctl_common+0x144/0x410 [ 510.265942][T11926] ? __fget_files+0x20e/0x3c0 [ 510.265968][T11926] security_file_ioctl+0x9b/0x240 [ 510.265993][T11926] __x64_sys_ioctl+0xb7/0x210 [ 510.266014][T11926] do_syscall_64+0xcd/0xf80 [ 510.266045][T11926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.266062][T11926] RIP: 0033:0x7fa1e578f749 [ 510.266076][T11926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.266092][T11926] RSP: 002b:00007fa1e65b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.266108][T11926] RAX: ffffffffffffffda RBX: 00007fa1e59e6090 RCX: 00007fa1e578f749 [ 510.266119][T11926] RDX: 0000200000000280 RSI: 00000000806c4120 RDI: 0000000000000005 [ 510.266129][T11926] RBP: 00007fa1e65b7090 R08: 0000000000000000 R09: 0000000000000000 [ 510.266139][T11926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.266148][T11926] R13: 00007fa1e59e6128 R14: 00007fa1e59e6090 R15: 00007ffff0399e08 [ 510.266171][T11926] [ 510.281587][ T5948] usb 2-1: Using ep0 maxpacket: 8 [ 510.291663][T11926] ERROR: Out of memory at tomoyo_realpath_from_path. [ 510.398602][T11922] wlan0 speed is unknown, defaulting to 1000 [ 510.520917][ T5948] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 510.564552][ T5948] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 510.589909][ T5948] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 510.612515][ T5948] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 510.631193][ T5948] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 510.641225][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.803030][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 510.900996][ T5948] usb 2-1: GET_CAPABILITIES returned 0 [ 510.910461][ T5948] usbtmc 2-1:16.0: can't read capabilities [ 512.287925][T11915] FAULT_INJECTION: forcing a failure. [ 512.287925][T11915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.322391][T11915] CPU: 0 UID: 0 PID: 11915 Comm: syz.1.1513 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.322420][T11915] Tainted: [L]=SOFTLOCKUP [ 512.322427][T11915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 512.322437][T11915] Call Trace: [ 512.322443][T11915] [ 512.322450][T11915] dump_stack_lvl+0x16c/0x1f0 [ 512.322479][T11915] should_fail_ex+0x512/0x640 [ 512.322499][T11915] _copy_to_user+0x32/0xd0 [ 512.322527][T11915] simple_read_from_buffer+0xcb/0x170 [ 512.322553][T11915] proc_fail_nth_read+0x197/0x240 [ 512.322572][T11915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 512.322591][T11915] ? rw_verify_area+0xcf/0x6c0 [ 512.322614][T11915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 512.322632][T11915] vfs_read+0x1e4/0xcf0 [ 512.322654][T11915] ? __pfx___mutex_lock+0x10/0x10 [ 512.322682][T11915] ? __pfx_vfs_read+0x10/0x10 [ 512.322710][T11915] ? __fget_files+0x20e/0x3c0 [ 512.322731][T11915] ? ktime_get_ts64+0x200/0x400 [ 512.322759][T11915] ksys_read+0x12a/0x250 [ 512.322780][T11915] ? __pfx_ksys_read+0x10/0x10 [ 512.322808][T11915] do_syscall_64+0xcd/0xf80 [ 512.322833][T11915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.322850][T11915] RIP: 0033:0x7f2bc498e15c [ 512.322864][T11915] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 512.322879][T11915] RSP: 002b:00007f2bc581f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 512.322895][T11915] RAX: ffffffffffffffda RBX: 00007f2bc4be5fa0 RCX: 00007f2bc498e15c [ 512.322907][T11915] RDX: 000000000000000f RSI: 00007f2bc581f0a0 RDI: 0000000000000004 [ 512.322917][T11915] RBP: 00007f2bc581f090 R08: 0000000000000000 R09: 0000000000000000 [ 512.322927][T11915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.322937][T11915] R13: 00007f2bc4be6038 R14: 00007f2bc4be5fa0 R15: 00007ffcd1fdc668 [ 512.322962][T11915] [ 512.554862][ T5996] usb 2-1: USB disconnect, device number 5 [ 512.710710][T11944] FAULT_INJECTION: forcing a failure. [ 512.710710][T11944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.723906][T11944] CPU: 0 UID: 0 PID: 11944 Comm: syz.7.1522 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.723932][T11944] Tainted: [L]=SOFTLOCKUP [ 512.723938][T11944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 512.723946][T11944] Call Trace: [ 512.723952][T11944] [ 512.723958][T11944] dump_stack_lvl+0x16c/0x1f0 [ 512.723986][T11944] should_fail_ex+0x512/0x640 [ 512.724010][T11944] _copy_to_user+0x32/0xd0 [ 512.724034][T11944] simple_read_from_buffer+0xcb/0x170 [ 512.724058][T11944] proc_fail_nth_read+0x197/0x240 [ 512.724077][T11944] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 512.724097][T11944] ? rw_verify_area+0xcf/0x6c0 [ 512.724114][T11944] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 512.724131][T11944] vfs_read+0x1e4/0xcf0 [ 512.724152][T11944] ? __pfx___mutex_lock+0x10/0x10 [ 512.724179][T11944] ? __pfx_vfs_read+0x10/0x10 [ 512.724206][T11944] ? __fget_files+0x20e/0x3c0 [ 512.724237][T11944] ksys_read+0x12a/0x250 [ 512.724257][T11944] ? __pfx_ksys_read+0x10/0x10 [ 512.724285][T11944] do_syscall_64+0xcd/0xf80 [ 512.724311][T11944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.724328][T11944] RIP: 0033:0x7f74a158e15c [ 512.724342][T11944] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 512.724359][T11944] RSP: 002b:00007f749f7f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 512.724376][T11944] RAX: ffffffffffffffda RBX: 00007f74a17e5fa0 RCX: 00007f74a158e15c [ 512.724386][T11944] RDX: 000000000000000f RSI: 00007f749f7f60a0 RDI: 0000000000000004 [ 512.724397][T11944] RBP: 00007f749f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 512.724406][T11944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.724416][T11944] R13: 00007f74a17e6038 R14: 00007f74a17e5fa0 R15: 00007fff7ffb0768 [ 512.724440][T11944] [ 513.708411][ T5985] udevd[5985]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 513.720798][ T7912] udevd[7912]: symlink '../../loop5' '/dev/disk/by-diskseq/80.tmp-b7:5' failed: Read-only file system [ 513.769378][ T5804] udevd[5804]: symlink '../../loop5' '/dev/disk/by-diskseq/80.tmp-b7:5' failed: Read-only file system [ 513.781431][T11962] syz_tun: entered allmulticast mode [ 513.981535][ T30] audit: type=1400 audit(1768547201.066:920): avc: denied { connect } for pid=11967 comm="syz.7.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 514.264225][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1529'. [ 514.390463][ T7912] udevd[7912]: symlink '../../loop5' '/dev/disk/by-diskseq/80.tmp-b7:5' failed: Read-only file system [ 514.609710][T11979] FAULT_INJECTION: forcing a failure. [ 514.609710][T11979] name failslab, interval 1, probability 0, space 0, times 0 [ 514.622677][T11979] CPU: 1 UID: 0 PID: 11979 Comm: syz.7.1532 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.622701][T11979] Tainted: [L]=SOFTLOCKUP [ 514.622707][T11979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 514.622716][T11979] Call Trace: [ 514.622721][T11979] [ 514.622727][T11979] dump_stack_lvl+0x16c/0x1f0 [ 514.622745][T11979] should_fail_ex+0x512/0x640 [ 514.622755][T11979] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 514.622767][T11979] should_failslab+0xc2/0x120 [ 514.622783][T11979] kmem_cache_alloc_node_noprof+0x86/0x800 [ 514.622793][T11979] ? __alloc_skb+0x156/0x410 [ 514.622806][T11979] ? __alloc_skb+0x156/0x410 [ 514.622815][T11979] __alloc_skb+0x156/0x410 [ 514.622823][T11979] ? __alloc_skb+0x35d/0x410 [ 514.622832][T11979] ? __pfx___alloc_skb+0x10/0x10 [ 514.622843][T11979] ? netlink_autobind.isra.0+0x158/0x370 [ 514.622860][T11979] netlink_alloc_large_skb+0x69/0x140 [ 514.622875][T11979] netlink_sendmsg+0x698/0xdd0 [ 514.622891][T11979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.622914][T11979] ____sys_sendmsg+0xa5d/0xc30 [ 514.622929][T11979] ? copy_msghdr_from_user+0x10a/0x160 [ 514.622940][T11979] ? __pfx_____sys_sendmsg+0x10/0x10 [ 514.622960][T11979] ___sys_sendmsg+0x134/0x1d0 [ 514.622972][T11979] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.623000][T11979] __sys_sendmsg+0x16d/0x220 [ 514.623011][T11979] ? __pfx___sys_sendmsg+0x10/0x10 [ 514.623031][T11979] do_syscall_64+0xcd/0xf80 [ 514.623048][T11979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.623058][T11979] RIP: 0033:0x7f74a158f749 [ 514.623067][T11979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.623077][T11979] RSP: 002b:00007f749f7b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.623087][T11979] RAX: ffffffffffffffda RBX: 00007f74a17e6180 RCX: 00007f74a158f749 [ 514.623094][T11979] RDX: 0000000000000000 RSI: 0000200000002fc0 RDI: 0000000000000005 [ 514.623100][T11979] RBP: 00007f749f7b4090 R08: 0000000000000000 R09: 0000000000000000 [ 514.623106][T11979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.623112][T11979] R13: 00007f74a17e6218 R14: 00007f74a17e6180 R15: 00007fff7ffb0768 [ 514.623129][T11979] [ 514.641715][ T5996] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 515.366023][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 515.513950][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.525210][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.901007][ T5996] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 515.910342][ T5996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.939439][T11954] syz_tun: left allmulticast mode [ 515.957396][ T5996] usb 6-1: config 0 descriptor?? [ 516.379459][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 516.529527][ T5996] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 516.561079][ T5996] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 517.145373][ T5948] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 517.277998][ T5948] hid-generic 0000:0000:0000.0015: hidraw1: HID v0.00 Device [syz1] on syz0 [ 517.439327][ T7912] udevd[7912]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 517.450773][ T5996] cp2112 0003:10C4:EA90.0014: error requesting version [ 517.494444][ T5996] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -32 [ 518.064614][T12013] syzkaller0: entered promiscuous mode [ 518.080375][T12013] syzkaller0: entered allmulticast mode [ 518.534715][ T30] audit: type=1400 audit(1768547205.626:921): avc: denied { getopt } for pid=12017 comm="syz.7.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 518.545513][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 518.629053][ T30] audit: type=1400 audit(1768547205.696:922): avc: denied { map } for pid=12019 comm="syz.1.1543" path="socket:[47870]" dev="sockfs" ino=47870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 518.664893][ T30] audit: type=1400 audit(1768547205.696:923): avc: denied { read } for pid=12019 comm="syz.1.1543" path="socket:[47870]" dev="sockfs" ino=47870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 518.871718][ T5948] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 518.879349][ T7877] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 519.324178][ T79] usb 6-1: USB disconnect, device number 21 [ 519.371741][ T5948] usb 3-1: Using ep0 maxpacket: 16 [ 519.376896][ T7877] usb 8-1: Using ep0 maxpacket: 8 [ 519.386713][ T5948] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 519.398234][ T5948] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.413155][ T7877] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 519.424351][ T5948] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 519.435478][ T7877] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 519.446853][ T7877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.447674][ T5804] udevd[5804]: symlink '../../loop5' '/dev/disk/by-diskseq/80.tmp-b7:5' failed: Read-only file system [ 519.457843][ T5948] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 519.490959][ T7877] usb 8-1: config 0 descriptor?? [ 519.598671][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.607456][ T5948] usb 3-1: Product: syz [ 519.612386][ T5948] usb 3-1: Manufacturer: syz [ 519.618907][ T5948] usb 3-1: SerialNumber: syz [ 519.834211][ T7877] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 520.091194][T12043] fuse: Unknown parameter '' [ 520.589785][T12048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1552'. [ 520.726759][T12046] QAT: failed to copy from user. [ 520.920206][ T5804] udevd[5804]: symlink '../../loop5' '/dev/disk/by-diskseq/80.tmp-b7:5' failed: Read-only file system [ 520.943465][ T7877] usb 8-1: USB disconnect, device number 17 [ 521.047541][T12054] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1551'. [ 521.301442][ T5948] usb 3-1: 0:2 : does not exist [ 521.459765][ T5996] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 521.491923][T12050] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 521.702142][T12050] usb 2-1: Using ep0 maxpacket: 32 [ 521.772880][T12050] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 521.825599][T12050] usb 2-1: config 0 has no interface number 0 [ 521.875349][T12050] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 521.888920][T12050] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.912546][ T7877] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 521.929406][T12050] usb 2-1: Product: syz [ 521.943794][T12050] usb 2-1: Manufacturer: syz [ 521.948422][T12050] usb 2-1: SerialNumber: syz [ 521.953617][ T5948] usb 3-1: USB disconnect, device number 61 [ 521.961736][ T5996] usb 6-1: Using ep0 maxpacket: 32 [ 521.969781][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.972591][T12050] usb 2-1: config 0 descriptor?? [ 521.985962][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.999489][T12050] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 522.002115][ T5996] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 522.032335][T12050] usb 2-1: selecting invalid altsetting 1 [ 522.038091][T12050] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 522.045318][ T5996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.058046][T12050] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 522.068393][ T7877] usb 7-1: device descriptor read/64, error -71 [ 522.080671][T12050] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 522.094152][T12050] usb 2-1: media controller created [ 522.094202][ T5996] usb 6-1: config 0 descriptor?? [ 522.105742][ T30] audit: type=1400 audit(1768547209.196:924): avc: denied { create } for pid=12065 comm="syz.7.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 522.108598][T12050] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 522.151983][ T30] audit: type=1400 audit(1768547209.236:925): avc: denied { bind } for pid=12065 comm="syz.7.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 522.171364][ T30] audit: type=1400 audit(1768547209.236:926): avc: denied { setopt } for pid=12065 comm="syz.7.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 522.202310][T12056] FAULT_INJECTION: forcing a failure. [ 522.202310][T12056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.215401][T12056] CPU: 0 UID: 0 PID: 12056 Comm: syz.1.1554 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.215425][T12056] Tainted: [L]=SOFTLOCKUP [ 522.215431][T12056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 522.215441][T12056] Call Trace: [ 522.215447][T12056] [ 522.215454][T12056] dump_stack_lvl+0x16c/0x1f0 [ 522.215480][T12056] should_fail_ex+0x512/0x640 [ 522.215501][T12056] _copy_from_user+0x2e/0xd0 [ 522.215519][T12056] kstrtouint_from_user+0xd6/0x1d0 [ 522.215532][T12056] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 522.215545][T12056] ? __lock_acquire+0x436/0x2890 [ 522.215568][T12056] ? lock_acquire+0x179/0x330 [ 522.215591][T12056] proc_fail_nth_write+0x83/0x220 [ 522.215607][T12056] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 522.215629][T12056] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 522.215640][T12056] vfs_write+0x2a0/0x11d0 [ 522.215654][T12056] ? __pfx___mutex_lock+0x10/0x10 [ 522.215676][T12056] ? __pfx_vfs_write+0x10/0x10 [ 522.215694][T12056] ? __fget_files+0x20e/0x3c0 [ 522.215722][T12056] ksys_write+0x12a/0x250 [ 522.215741][T12056] ? __pfx_ksys_write+0x10/0x10 [ 522.215760][T12056] ? fdget+0x187/0x210 [ 522.215782][T12056] do_syscall_64+0xcd/0xf80 [ 522.215798][T12056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.215808][T12056] RIP: 0033:0x7f2bc498e1ff [ 522.215817][T12056] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 522.215828][T12056] RSP: 002b:00007f2bc581f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 522.215838][T12056] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2bc498e1ff [ 522.215847][T12056] RDX: 0000000000000001 RSI: 00007f2bc581f0a0 RDI: 0000000000000004 [ 522.215857][T12056] RBP: 00007f2bc581f090 R08: 0000000000000000 R09: 0000000000000000 [ 522.215866][T12056] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 522.215875][T12056] R13: 00007f2bc4be6038 R14: 00007f2bc4be5fa0 R15: 00007ffcd1fdc668 [ 522.215898][T12056] [ 522.341948][ T7877] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 522.405948][T12053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.437449][T12053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.626860][T12050] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 523.099742][ T7877] usb 7-1: device descriptor read/64, error -71 [ 523.113325][ T30] audit: type=1400 audit(1768547209.796:927): avc: denied { accept } for pid=12052 comm="syz.5.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 523.153679][T12050] zl10353_read_register: readreg error (reg=127, ret==-71) [ 523.252526][ T7877] usb usb7-port1: attempt power cycle [ 523.544227][T12050] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 523.877990][ T7877] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 523.945368][ T7877] usb 7-1: device descriptor read/8, error -71 [ 523.961016][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 523.977545][T12050] usb 2-1: USB disconnect, device number 6 [ 524.690788][T12061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.699647][T12061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.748007][ T7877] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 524.915503][ T5996] usbhid 6-1:0.0: can't add hid device: -71 [ 524.922163][ T5996] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 525.222355][ T7877] usb 7-1: device descriptor read/8, error -71 [ 525.285760][ T5996] usb 6-1: USB disconnect, device number 22 [ 525.305072][ T5805] udevd[5805]: symlink '../../loop5' '/dev/disk/by-diskseq/80.tmp-b7:5' failed: Read-only file system [ 525.371537][ T7877] usb usb7-port1: unable to enumerate USB device [ 525.371651][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 525.419640][T12086] FAULT_INJECTION: forcing a failure. [ 525.419640][T12086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.444198][T12086] CPU: 1 UID: 0 PID: 12086 Comm: syz.5.1562 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.444224][T12086] Tainted: [L]=SOFTLOCKUP [ 525.444230][T12086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 525.444240][T12086] Call Trace: [ 525.444245][T12086] [ 525.444249][T12086] dump_stack_lvl+0x16c/0x1f0 [ 525.444269][T12086] should_fail_ex+0x512/0x640 [ 525.444281][T12086] strncpy_from_user+0x3b/0x2e0 [ 525.444298][T12086] getname_flags.part.0+0x8f/0x550 [ 525.444309][T12086] ? __pfx_ksys_write+0x10/0x10 [ 525.444324][T12086] getname_flags+0x93/0xf0 [ 525.444337][T12086] __x64_sys_mknodat+0x9f/0xe0 [ 525.444353][T12086] do_syscall_64+0xcd/0xf80 [ 525.444368][T12086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.444379][T12086] RIP: 0033:0x7f7d9c38f749 [ 525.444388][T12086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.444398][T12086] RSP: 002b:00007f7d9d214038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 525.444409][T12086] RAX: ffffffffffffffda RBX: 00007f7d9c5e5fa0 RCX: 00007f7d9c38f749 [ 525.444415][T12086] RDX: 0000000000000040 RSI: 0000200000000080 RDI: 0000000000000003 [ 525.444421][T12086] RBP: 00007f7d9d214090 R08: 0000000000000000 R09: 0000000000000000 [ 525.444427][T12086] R10: 000000000000070b R11: 0000000000000246 R12: 0000000000000001 [ 525.444433][T12086] R13: 00007f7d9c5e6038 R14: 00007f7d9c5e5fa0 R15: 00007ffcf3c740d8 [ 525.444446][T12086] [ 525.708461][ T5804] udevd[5804]: symlink '../../loop5' '/dev/disk/by-diskseq/80.tmp-b7:5' failed: Read-only file system [ 526.049147][T12096] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1566'. [ 526.534486][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 526.739183][T12111] bridge0: port 3(ipvlan2) entered blocking state [ 526.829667][T12111] bridge0: port 3(ipvlan2) entered disabled state [ 526.847580][T12111] ipvlan2: entered allmulticast mode [ 526.858455][T12111] bridge0: entered allmulticast mode [ 526.882337][ T790] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 527.153603][T12111] ipvlan2: left allmulticast mode [ 527.634589][T12111] bridge0: left allmulticast mode [ 527.826313][ T790] usb 3-1: Using ep0 maxpacket: 8 [ 527.847057][ T790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 527.864329][ T790] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 527.874559][T12126] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 527.891597][ T30] audit: type=1400 audit(1768547214.976:928): avc: denied { read } for pid=12118 comm="syz.7.1573" path="socket:[49157]" dev="sockfs" ino=49157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 527.920616][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.936243][ T790] usb 3-1: config 0 descriptor?? [ 528.171135][ T790] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 528.390323][T12050] usb 3-1: USB disconnect, device number 62 [ 528.581667][ T30] audit: type=1400 audit(1768547215.656:929): avc: denied { getopt } for pid=12138 comm="syz.6.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 528.748953][T12142] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1578'. [ 529.180893][T12144] FAULT_INJECTION: forcing a failure. [ 529.180893][T12144] name failslab, interval 1, probability 0, space 0, times 0 [ 529.194703][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 529.217841][T12144] CPU: 0 UID: 0 PID: 12144 Comm: syz.6.1580 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.217868][T12144] Tainted: [L]=SOFTLOCKUP [ 529.217874][T12144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 529.217884][T12144] Call Trace: [ 529.217890][T12144] [ 529.217896][T12144] dump_stack_lvl+0x16c/0x1f0 [ 529.217923][T12144] should_fail_ex+0x512/0x640 [ 529.217938][T12144] ? fs_reclaim_acquire+0xae/0x150 [ 529.217963][T12144] should_failslab+0xc2/0x120 [ 529.217983][T12144] __kmalloc_noprof+0xeb/0x910 [ 529.218007][T12144] ? tomoyo_encode2+0x100/0x3e0 [ 529.218024][T12144] ? tomoyo_encode2+0x100/0x3e0 [ 529.218038][T12144] tomoyo_encode2+0x100/0x3e0 [ 529.218054][T12144] tomoyo_encode+0x29/0x50 [ 529.218068][T12144] tomoyo_realpath_from_path+0x18f/0x6e0 [ 529.218087][T12144] tomoyo_path_number_perm+0x245/0x580 [ 529.218099][T12144] ? tomoyo_path_number_perm+0x237/0x580 [ 529.218113][T12144] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 529.218127][T12144] ? find_held_lock+0x2b/0x80 [ 529.218154][T12144] ? find_held_lock+0x2b/0x80 [ 529.218169][T12144] ? hook_file_ioctl_common+0x144/0x410 [ 529.218183][T12144] ? __fget_files+0x20e/0x3c0 [ 529.218200][T12144] security_file_ioctl+0x9b/0x240 [ 529.218216][T12144] __x64_sys_ioctl+0xb7/0x210 [ 529.218232][T12144] do_syscall_64+0xcd/0xf80 [ 529.218256][T12144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.218272][T12144] RIP: 0033:0x7f9aa2b8f749 [ 529.218286][T12144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.218298][T12144] RSP: 002b:00007f9aa3a00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 529.218309][T12144] RAX: ffffffffffffffda RBX: 00007f9aa2de6090 RCX: 00007f9aa2b8f749 [ 529.218315][T12144] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 529.218321][T12144] RBP: 00007f9aa3a00090 R08: 0000000000000000 R09: 0000000000000000 [ 529.218327][T12144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.218333][T12144] R13: 00007f9aa2de6128 R14: 00007f9aa2de6090 R15: 00007ffc4af26568 [ 529.218347][T12144] [ 529.218358][T12144] ERROR: Out of memory at tomoyo_realpath_from_path. [ 529.224807][T12147] FAULT_INJECTION: forcing a failure. [ 529.224807][T12147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.474890][T12147] CPU: 1 UID: 0 PID: 12147 Comm: syz.2.1582 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.474918][T12147] Tainted: [L]=SOFTLOCKUP [ 529.474924][T12147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 529.474933][T12147] Call Trace: [ 529.474939][T12147] [ 529.474945][T12147] dump_stack_lvl+0x16c/0x1f0 [ 529.474972][T12147] should_fail_ex+0x512/0x640 [ 529.474991][T12147] ? __pfx_bm_entry_write+0x10/0x10 [ 529.475006][T12147] _copy_from_user+0x2e/0xd0 [ 529.475030][T12147] parse_command+0xa0/0x270 [ 529.475043][T12147] ? __pfx_parse_command+0x10/0x10 [ 529.475063][T12147] bm_entry_write+0x77/0x420 [ 529.475080][T12147] ? __pfx_bm_entry_write+0x10/0x10 [ 529.475092][T12147] vfs_writev+0x5df/0xde0 [ 529.475110][T12147] ? get_pid_task+0x106/0x250 [ 529.475133][T12147] ? __pfx_vfs_writev+0x10/0x10 [ 529.475151][T12147] ? find_held_lock+0x2b/0x80 [ 529.475187][T12147] ? __fget_files+0x20e/0x3c0 [ 529.475214][T12147] ? do_pwritev+0x1a6/0x270 [ 529.475230][T12147] do_pwritev+0x1a6/0x270 [ 529.475251][T12147] ? __pfx_do_pwritev+0x10/0x10 [ 529.475276][T12147] do_syscall_64+0xcd/0xf80 [ 529.475300][T12147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.475315][T12147] RIP: 0033:0x7fa1e578f749 [ 529.475329][T12147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.475343][T12147] RSP: 002b:00007fa1e65d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 529.475359][T12147] RAX: ffffffffffffffda RBX: 00007fa1e59e5fa0 RCX: 00007fa1e578f749 [ 529.475369][T12147] RDX: 0000000000000030 RSI: 00002000000000c0 RDI: 0000000000000003 [ 529.475378][T12147] RBP: 00007fa1e65d8090 R08: 0000000000000001 R09: 0000000000000000 [ 529.475387][T12147] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 529.475396][T12147] R13: 00007fa1e59e6038 R14: 00007fa1e59e5fa0 R15: 00007ffff0399e08 [ 529.475418][T12147] [ 529.928148][T12158] netlink: 'syz.5.1584': attribute type 1 has an invalid length. [ 529.936334][T12157] bridge0: port 3(ipvlan2) entered blocking state [ 529.942981][T12157] bridge0: port 3(ipvlan2) entered disabled state [ 529.956551][T12158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.975920][T12157] ipvlan2: entered allmulticast mode [ 529.989898][T12157] bridge0: entered allmulticast mode [ 529.997626][T12158] netlink: 'syz.5.1584': attribute type 1 has an invalid length. [ 530.023159][T12157] ipvlan2: left allmulticast mode [ 530.040831][T12157] bridge0: left allmulticast mode [ 530.082644][T12165] FAULT_INJECTION: forcing a failure. [ 530.082644][T12165] name failslab, interval 1, probability 0, space 0, times 0 [ 530.085914][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 530.198937][T12168] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 530.209376][T12168] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 530.435548][T12165] CPU: 0 UID: 0 PID: 12165 Comm: syz.6.1586 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.435577][T12165] Tainted: [L]=SOFTLOCKUP [ 530.435584][T12165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 530.435594][T12165] Call Trace: [ 530.435600][T12165] [ 530.435606][T12165] dump_stack_lvl+0x16c/0x1f0 [ 530.435625][T12165] should_fail_ex+0x512/0x640 [ 530.435637][T12165] ? fs_reclaim_acquire+0xae/0x150 [ 530.435661][T12165] should_failslab+0xc2/0x120 [ 530.435682][T12165] __kmalloc_noprof+0xeb/0x910 [ 530.435704][T12165] ? tomoyo_encode2+0x100/0x3e0 [ 530.435726][T12165] ? tomoyo_encode2+0x100/0x3e0 [ 530.435740][T12165] tomoyo_encode2+0x100/0x3e0 [ 530.435756][T12165] tomoyo_encode+0x29/0x50 [ 530.435771][T12165] tomoyo_realpath_from_path+0x18f/0x6e0 [ 530.435790][T12165] tomoyo_path_number_perm+0x245/0x580 [ 530.435802][T12165] ? tomoyo_path_number_perm+0x237/0x580 [ 530.435816][T12165] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 530.435832][T12165] ? find_held_lock+0x2b/0x80 [ 530.435875][T12165] ? find_held_lock+0x2b/0x80 [ 530.435898][T12165] ? hook_file_ioctl_common+0x144/0x410 [ 530.435912][T12165] ? __fget_files+0x20e/0x3c0 [ 530.435930][T12165] security_file_ioctl+0x9b/0x240 [ 530.435948][T12165] __x64_sys_ioctl+0xb7/0x210 [ 530.435969][T12165] do_syscall_64+0xcd/0xf80 [ 530.435993][T12165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.436009][T12165] RIP: 0033:0x7f9aa2b8f749 [ 530.436021][T12165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.436036][T12165] RSP: 002b:00007f9aa3a21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 530.436046][T12165] RAX: ffffffffffffffda RBX: 00007f9aa2de5fa0 RCX: 00007f9aa2b8f749 [ 530.436053][T12165] RDX: 0000200000000080 RSI: 00000000c02c564a RDI: 0000000000000003 [ 530.436059][T12165] RBP: 00007f9aa3a21090 R08: 0000000000000000 R09: 0000000000000000 [ 530.436065][T12165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.436071][T12165] R13: 00007f9aa2de6038 R14: 00007f9aa2de5fa0 R15: 00007ffc4af26568 [ 530.436084][T12165] [ 530.436097][T12165] ERROR: Out of memory at tomoyo_realpath_from_path. [ 530.453836][T12158] bond2: entered promiscuous mode [ 530.692517][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 530.709307][T12158] 8021q: adding VLAN 0 to HW filter on device bond2 [ 530.753519][T12163] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 530.763898][T12168] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 530.805739][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 530.879129][T12177] FAULT_INJECTION: forcing a failure. [ 530.879129][T12177] name failslab, interval 1, probability 0, space 0, times 0 [ 530.917552][T12177] CPU: 0 UID: 0 PID: 12177 Comm: syz.2.1591 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.917581][T12177] Tainted: [L]=SOFTLOCKUP [ 530.917586][T12177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 530.917596][T12177] Call Trace: [ 530.917602][T12177] [ 530.917609][T12177] dump_stack_lvl+0x16c/0x1f0 [ 530.917637][T12177] should_fail_ex+0x512/0x640 [ 530.917653][T12177] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 530.917672][T12177] should_failslab+0xc2/0x120 [ 530.917695][T12177] kmem_cache_alloc_node_noprof+0x86/0x800 [ 530.917710][T12177] ? __alloc_skb+0x156/0x410 [ 530.917736][T12177] ? __alloc_skb+0x156/0x410 [ 530.917750][T12177] __alloc_skb+0x156/0x410 [ 530.917764][T12177] ? __alloc_skb+0x35d/0x410 [ 530.917777][T12177] ? __pfx___alloc_skb+0x10/0x10 [ 530.917792][T12177] ? netlink_autobind.isra.0+0x158/0x370 [ 530.917820][T12177] netlink_alloc_large_skb+0x69/0x140 [ 530.917843][T12177] netlink_sendmsg+0x698/0xdd0 [ 530.917870][T12177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.917900][T12177] ____sys_sendmsg+0xa5d/0xc30 [ 530.917923][T12177] ? copy_msghdr_from_user+0x10a/0x160 [ 530.917941][T12177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 530.917974][T12177] ___sys_sendmsg+0x134/0x1d0 [ 530.917994][T12177] ? __pfx____sys_sendmsg+0x10/0x10 [ 530.918042][T12177] __sys_sendmsg+0x16d/0x220 [ 530.918061][T12177] ? __pfx___sys_sendmsg+0x10/0x10 [ 530.918095][T12177] do_syscall_64+0xcd/0xf80 [ 530.918119][T12177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.918136][T12177] RIP: 0033:0x7fa1e578f749 [ 530.918150][T12177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.918166][T12177] RSP: 002b:00007fa1e65d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.918183][T12177] RAX: ffffffffffffffda RBX: 00007fa1e59e5fa0 RCX: 00007fa1e578f749 [ 530.918194][T12177] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000005 [ 530.918204][T12177] RBP: 00007fa1e65d8090 R08: 0000000000000000 R09: 0000000000000000 [ 530.918213][T12177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.918223][T12177] R13: 00007fa1e59e6038 R14: 00007fa1e59e5fa0 R15: 00007ffff0399e08 [ 530.918247][T12177] [ 531.264220][ T7912] udevd[7912]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 531.454109][T12193] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1596'. [ 531.503315][ T7912] udevd[7912]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 531.559343][T12178] wlan0 speed is unknown, defaulting to 1000 [ 531.587097][T12193] bond1 (unregistering): Released all slaves [ 531.704332][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 532.315543][T12208] bridge0: port 1(ipvlan2) entered blocking state [ 532.326099][T12208] bridge0: port 1(ipvlan2) entered disabled state [ 532.333072][T12208] ipvlan2: entered allmulticast mode [ 532.338391][T12208] bridge0: entered allmulticast mode [ 532.353268][T12208] ipvlan2: left allmulticast mode [ 532.358312][T12208] bridge0: left allmulticast mode [ 532.456020][T12217] FAULT_INJECTION: forcing a failure. [ 532.456020][T12217] name failslab, interval 1, probability 0, space 0, times 0 [ 532.468762][T12217] CPU: 0 UID: 0 PID: 12217 Comm: syz.5.1602 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.468788][T12217] Tainted: [L]=SOFTLOCKUP [ 532.468794][T12217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 532.468804][T12217] Call Trace: [ 532.468811][T12217] [ 532.468817][T12217] dump_stack_lvl+0x16c/0x1f0 [ 532.468837][T12217] should_fail_ex+0x512/0x640 [ 532.468847][T12217] ? fs_reclaim_acquire+0xae/0x150 [ 532.468864][T12217] should_failslab+0xc2/0x120 [ 532.468878][T12217] __kmalloc_noprof+0xeb/0x910 [ 532.468895][T12217] ? tomoyo_encode2+0x100/0x3e0 [ 532.468913][T12217] ? tomoyo_encode2+0x100/0x3e0 [ 532.468926][T12217] tomoyo_encode2+0x100/0x3e0 [ 532.468943][T12217] tomoyo_encode+0x29/0x50 [ 532.468956][T12217] tomoyo_realpath_from_path+0x18f/0x6e0 [ 532.468976][T12217] tomoyo_path_number_perm+0x245/0x580 [ 532.468994][T12217] ? tomoyo_path_number_perm+0x237/0x580 [ 532.469015][T12217] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 532.469036][T12217] ? find_held_lock+0x2b/0x80 [ 532.469068][T12217] ? find_held_lock+0x2b/0x80 [ 532.469083][T12217] ? hook_file_ioctl_common+0x144/0x410 [ 532.469096][T12217] ? __fget_files+0x20e/0x3c0 [ 532.469113][T12217] security_file_ioctl+0x9b/0x240 [ 532.469129][T12217] __x64_sys_ioctl+0xb7/0x210 [ 532.469142][T12217] do_syscall_64+0xcd/0xf80 [ 532.469159][T12217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.469170][T12217] RIP: 0033:0x7f7d9c38f749 [ 532.469178][T12217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.469188][T12217] RSP: 002b:00007f7d9d1f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.469199][T12217] RAX: ffffffffffffffda RBX: 00007f7d9c5e6090 RCX: 00007f7d9c38f749 [ 532.469206][T12217] RDX: 0000200000000500 RSI: 00000000c0306201 RDI: 0000000000000005 [ 532.469212][T12217] RBP: 00007f7d9d1f3090 R08: 0000000000000000 R09: 0000000000000000 [ 532.469218][T12217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.469224][T12217] R13: 00007f7d9c5e6128 R14: 00007f7d9c5e6090 R15: 00007ffcf3c740d8 [ 532.469237][T12217] [ 532.469247][T12217] ERROR: Out of memory at tomoyo_realpath_from_path. [ 532.729792][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 533.237117][T12234] FAULT_INJECTION: forcing a failure. [ 533.237117][T12234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.250290][T12234] CPU: 1 UID: 0 PID: 12234 Comm: syz.7.1606 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.250315][T12234] Tainted: [L]=SOFTLOCKUP [ 533.250321][T12234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 533.250331][T12234] Call Trace: [ 533.250338][T12234] [ 533.250345][T12234] dump_stack_lvl+0x16c/0x1f0 [ 533.250372][T12234] should_fail_ex+0x512/0x640 [ 533.250392][T12234] _copy_to_user+0x32/0xd0 [ 533.250420][T12234] simple_read_from_buffer+0xcb/0x170 [ 533.250451][T12234] proc_fail_nth_read+0x197/0x240 [ 533.250471][T12234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.250491][T12234] ? rw_verify_area+0xcf/0x6c0 [ 533.250511][T12234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.250529][T12234] vfs_read+0x1e4/0xcf0 [ 533.250552][T12234] ? irqentry_exit+0x1dd/0x8c0 [ 533.250575][T12234] ? lockdep_hardirqs_on+0x7c/0x110 [ 533.250598][T12234] ? __pfx_vfs_read+0x10/0x10 [ 533.250616][T12234] ? rcu_is_watching+0x12/0xc0 [ 533.250642][T12234] ? ksys_read+0x7e/0x250 [ 533.250660][T12234] ? ksys_read+0x8c/0x250 [ 533.250683][T12234] ksys_read+0x12a/0x250 [ 533.250703][T12234] ? __pfx_ksys_read+0x10/0x10 [ 533.250722][T12234] ? rcu_is_watching+0x12/0xc0 [ 533.250745][T12234] do_syscall_64+0xcd/0xf80 [ 533.250770][T12234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.250787][T12234] RIP: 0033:0x7f74a158e15c [ 533.250800][T12234] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 533.250816][T12234] RSP: 002b:00007f749f7b4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 533.250832][T12234] RAX: ffffffffffffffda RBX: 00007f74a17e6180 RCX: 00007f74a158e15c [ 533.250843][T12234] RDX: 000000000000000f RSI: 00007f749f7b40a0 RDI: 0000000000000008 [ 533.250853][T12234] RBP: 00007f749f7b4090 R08: 0000000000000000 R09: 0000000000000000 [ 533.250862][T12234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.250872][T12234] R13: 00007f74a17e6218 R14: 00007f74a17e6180 R15: 00007fff7ffb0768 [ 533.250897][T12234] [ 533.719749][T12232] kAFS: unable to lookup cell 'ÿ' [ 533.761740][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 534.251694][ T790] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 534.386971][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 534.441238][ T790] usb 2-1: Using ep0 maxpacket: 32 [ 534.476712][ T790] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 534.514736][ T790] usb 2-1: config 0 has no interface number 0 [ 534.546401][ T790] usb 2-1: config 0 interface 184 has no altsetting 0 [ 534.623420][ T790] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 534.663167][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.671300][ T790] usb 2-1: Product: syz [ 534.675706][ T790] usb 2-1: Manufacturer: syz [ 534.680356][ T790] usb 2-1: SerialNumber: syz [ 534.694766][ T790] usb 2-1: config 0 descriptor?? [ 534.704537][ T790] smsc75xx v1.0.0 [ 534.811749][ T5925] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 535.020967][T12259] netlink: 'syz.6.1613': attribute type 1 has an invalid length. [ 535.061682][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 535.102247][T12259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 535.134308][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 535.155963][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 535.156056][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 535.158331][ T5925] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 535.175717][ T30] audit: type=1400 audit(1768547222.266:930): avc: denied { connect } for pid=12262 comm="syz.7.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 535.181268][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.192423][ T30] audit: type=1400 audit(1768547222.286:931): avc: denied { getopt } for pid=12262 comm="syz.7.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 535.207630][ T5925] usb 3-1: Product: syz [ 535.241858][ T5925] usb 3-1: Manufacturer: syz [ 535.246632][ T5925] usb 3-1: SerialNumber: syz [ 535.269657][ T5925] usb 3-1: config 0 descriptor?? [ 535.276295][T12252] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 535.405368][ T790] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 535.461745][ T5925] rc_core: IR keymap rc-streamzap not found [ 535.551095][T12252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.570013][T12252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.614743][ T790] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 535.705698][ T30] audit: type=1400 audit(1768547222.786:932): avc: denied { getopt } for pid=12248 comm="syz.2.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 535.737419][ T790] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 535.795810][ T790] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 535.814018][ T5925] Registered IR keymap rc-empty [ 535.833688][ T790] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 535.833877][ T5925] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 535.853736][ T790] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 535.857476][ T5925] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input85 [ 535.887199][ T790] usb 2-1: USB disconnect, device number 7 [ 536.509963][T12284] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1618'. [ 537.041411][T12272] [U]  [ 537.425198][T12289] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1621'. [ 537.678846][ T5996] usb 3-1: USB disconnect, device number 63 [ 538.717079][ T5830] udevd[5830]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 539.237243][ T30] audit: type=1400 audit(1768547226.326:933): avc: denied { bind } for pid=12307 comm="syz.1.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 539.251702][ T5948] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 539.262400][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 539.741861][T12317] FAULT_INJECTION: forcing a failure. [ 539.741861][T12317] name failslab, interval 1, probability 0, space 0, times 0 [ 539.754979][T12317] CPU: 0 UID: 0 PID: 12317 Comm: syz.2.1627 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.755005][T12317] Tainted: [L]=SOFTLOCKUP [ 539.755011][T12317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 539.755022][T12317] Call Trace: [ 539.755029][T12317] [ 539.755037][T12317] dump_stack_lvl+0x16c/0x1f0 [ 539.755065][T12317] should_fail_ex+0x512/0x640 [ 539.755080][T12317] ? __kmalloc_noprof+0xca/0x910 [ 539.755108][T12317] should_failslab+0xc2/0x120 [ 539.755130][T12317] __kmalloc_noprof+0xeb/0x910 [ 539.755156][T12317] ? do_raw_spin_lock+0x12c/0x2b0 [ 539.755179][T12317] ? tls_get_rec+0xfa/0x730 [ 539.755205][T12317] ? tls_get_rec+0xfa/0x730 [ 539.755225][T12317] tls_get_rec+0xfa/0x730 [ 539.755246][T12317] ? __local_bh_enable_ip+0xa4/0x120 [ 539.755274][T12317] tls_sw_sendmsg+0x1064/0x24e0 [ 539.755305][T12317] ? __pfx_avc_has_perm+0x10/0x10 [ 539.755327][T12317] ? __pfx___schedule+0x10/0x10 [ 539.755352][T12317] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 539.755376][T12317] ? selinux_ip_forward+0x537/0x550 [ 539.755399][T12317] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 539.755433][T12317] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 539.755457][T12317] inet6_sendmsg+0x11c/0x140 [ 539.755481][T12317] ____sys_sendmsg+0x705/0xc30 [ 539.755505][T12317] ? copy_msghdr_from_user+0x10a/0x160 [ 539.755524][T12317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.755554][T12317] ? __lock_acquire+0x436/0x2890 [ 539.755577][T12317] ___sys_sendmsg+0x134/0x1d0 [ 539.755597][T12317] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.755616][T12317] ? lock_acquire+0x179/0x330 [ 539.755665][T12317] __sys_sendmsg+0x16d/0x220 [ 539.755689][T12317] ? __pfx___sys_sendmsg+0x10/0x10 [ 539.755707][T12317] ? __pfx___schedule+0x10/0x10 [ 539.755734][T12317] ? rcu_is_watching+0x12/0xc0 [ 539.755758][T12317] do_syscall_64+0xcd/0xf80 [ 539.755783][T12317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.755800][T12317] RIP: 0033:0x7fa1e578f749 [ 539.755814][T12317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.755830][T12317] RSP: 002b:00007fa1e6596038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.755846][T12317] RAX: ffffffffffffffda RBX: 00007fa1e59e6180 RCX: 00007fa1e578f749 [ 539.755857][T12317] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 539.755867][T12317] RBP: 00007fa1e6596090 R08: 0000000000000000 R09: 0000000000000000 [ 539.755877][T12317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.755887][T12317] R13: 00007fa1e59e6218 R14: 00007fa1e59e6180 R15: 00007ffff0399e08 [ 539.755912][T12317] [ 540.020806][ T5948] usb 8-1: Using ep0 maxpacket: 8 [ 540.044190][ T5948] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 540.054478][ T5948] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 540.073183][ T5948] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 540.083557][ T5948] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 540.097107][ T5948] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 540.106301][ T5948] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.373820][ T30] audit: type=1400 audit(1768547227.436:934): avc: denied { ioctl } for pid=12321 comm="syz.5.1630" path="socket:[50187]" dev="sockfs" ino=50187 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 540.672636][ T5948] usb 8-1: GET_CAPABILITIES returned 0 [ 540.678160][ T5948] usbtmc 8-1:16.0: can't read capabilities [ 540.711489][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 540.741714][ T5925] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 541.354643][ T5925] usb 7-1: Using ep0 maxpacket: 16 [ 541.363994][ T5925] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 541.374619][ T5925] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.427406][ T5925] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.444331][ T5925] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 541.453880][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.480591][ T5925] usb 7-1: Product: syz [ 541.494285][ T5925] usb 7-1: Manufacturer: syz [ 541.506478][ T5925] usb 7-1: SerialNumber: syz [ 541.559691][ T5948] usb 8-1: USB disconnect, device number 18 [ 541.735462][ T7912] udevd[7912]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 541.828352][T12338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1634'. [ 541.888426][ T7912] udevd[7912]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 542.011531][ T5925] usb 7-1: 0:2 : does not exist [ 542.553544][ T7877] libceph: connect (1)[c::]:6789 error -22 [ 542.569406][ T5925] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 542.582464][ T7877] libceph: mon0 (1)[c::]:6789 connect error [ 542.629479][T12350] FAULT_INJECTION: forcing a failure. [ 542.629479][T12350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.645767][T12350] CPU: 0 UID: 0 PID: 12350 Comm: syz.7.1636 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.645793][T12350] Tainted: [L]=SOFTLOCKUP [ 542.645799][T12350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 542.645808][T12350] Call Trace: [ 542.645813][T12350] [ 542.645820][T12350] dump_stack_lvl+0x16c/0x1f0 [ 542.645846][T12350] should_fail_ex+0x512/0x640 [ 542.645863][T12350] _copy_to_user+0x32/0xd0 [ 542.645887][T12350] simple_read_from_buffer+0xcb/0x170 [ 542.645910][T12350] proc_fail_nth_read+0x197/0x240 [ 542.645928][T12350] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 542.645946][T12350] ? rw_verify_area+0xcf/0x6c0 [ 542.645964][T12350] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 542.645981][T12350] vfs_read+0x1e4/0xcf0 [ 542.646002][T12350] ? __pfx___mutex_lock+0x10/0x10 [ 542.646028][T12350] ? __pfx_vfs_read+0x10/0x10 [ 542.646055][T12350] ? __fget_files+0x20e/0x3c0 [ 542.646085][T12350] ksys_read+0x12a/0x250 [ 542.646104][T12350] ? __pfx_ksys_read+0x10/0x10 [ 542.646130][T12350] do_syscall_64+0xcd/0xf80 [ 542.646152][T12350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.646168][T12350] RIP: 0033:0x7f74a158e15c [ 542.646183][T12350] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 542.646199][T12350] RSP: 002b:00007f749f7f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 542.646215][T12350] RAX: ffffffffffffffda RBX: 00007f74a17e5fa0 RCX: 00007f74a158e15c [ 542.646227][T12350] RDX: 000000000000000f RSI: 00007f749f7f60a0 RDI: 0000000000000004 [ 542.646237][T12350] RBP: 00007f749f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 542.646247][T12350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.646255][T12350] R13: 00007f74a17e6038 R14: 00007f74a17e5fa0 R15: 00007fff7ffb0768 [ 542.646278][T12350] [ 542.862891][T12344] ceph: No mds server is up or the cluster is laggy [ 542.886672][ T5925] usb 7-1: USB disconnect, device number 29 [ 542.912784][ T7877] libceph: connect (1)[c::]:6789 error -22 [ 542.951821][ T7877] libceph: mon0 (1)[c::]:6789 connect error [ 543.033405][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 543.137223][T12352] mkiss: ax0: crc mode is auto. [ 543.294036][ T7912] udevd[7912]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 543.390125][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 543.487196][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 544.225398][ T30] audit: type=1400 audit(1768547231.316:935): avc: denied { read } for pid=12384 comm="syz.6.1649" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 544.557086][ T790] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 545.047599][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 545.101705][ T5868] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 545.131985][ T790] usb 6-1: Using ep0 maxpacket: 32 [ 545.143815][ T790] usb 6-1: config 2 has no interfaces? [ 545.149283][ T790] usb 6-1: New USB device found, idVendor=19d2, idProduct=1170, bcdDevice=11.0a [ 545.160774][ T790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.274832][ T5868] usb 8-1: Using ep0 maxpacket: 16 [ 545.283982][ T5868] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 545.294053][ T5868] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.310075][ T5868] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.321803][ T5925] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 545.323640][ T5868] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 545.339011][ T5868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.348222][ T5868] usb 8-1: Product: syz [ 545.352633][ T5868] usb 8-1: Manufacturer: syz [ 545.357297][ T5868] usb 8-1: SerialNumber: syz [ 545.413211][ T790] usb 6-1: string descriptor 0 read error: -71 [ 545.471404][T12402] wlan0 speed is unknown, defaulting to 1000 [ 545.471891][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 545.494900][ T790] usb 6-1: USB disconnect, device number 23 [ 545.658048][ T5925] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 545.725145][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.757434][ T5925] usb 3-1: Product: syz [ 545.767534][ T5925] usb 3-1: Manufacturer: syz [ 545.783761][ T5925] usb 3-1: SerialNumber: syz [ 545.809221][ T5925] usb 3-1: config 0 descriptor?? [ 545.829519][ T5925] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 545.847980][ T5925] pctv452e: pctv452e_power_ctrl: 1 [ 545.847980][ T5925] [ 545.871715][ T5925] usb 3-1: selecting invalid altsetting 3 [ 545.891662][ T5925] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 545.891662][ T5925] [ 545.908723][ T5925] dvb-usb: bulk message failed: -22 (5/0) [ 545.924301][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 545.926638][T12410] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1656'. [ 545.946800][ T5925] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 545.957467][ T5868] usb 8-1: 0:2 : does not exist [ 545.964331][ T5925] usb 3-1: media controller created [ 545.965682][ T5868] usb 8-1: 1:0: failed to get current value for ch 0 (-22) [ 545.971183][ T5925] dvb-usb: bulk message failed: -22 (8/0) [ 545.994405][ T5925] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 546.094640][ T5925] dvb-usb: MAC address reading failed. [ 546.209566][T12411] overlayfs: failed to get inode (-116) [ 546.222721][T12411] overlayfs: failed to get inode (-116) [ 546.251955][T12411] overlayfs: failed to get inode (-116) [ 546.268296][T12411] overlayfs: failed to get inode (-116) [ 546.279391][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 546.286729][ T5868] usb 8-1: USB disconnect, device number 19 [ 546.553983][ T5925] DVB: Unable to find symbol stb0899_attach() [ 546.622475][ T5925] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 546.691140][T12420] FAULT_INJECTION: forcing a failure. [ 546.691140][T12420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.704391][T12420] CPU: 0 UID: 0 PID: 12420 Comm: syz.6.1658 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.704417][T12420] Tainted: [L]=SOFTLOCKUP [ 546.704423][T12420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 546.704439][T12420] Call Trace: [ 546.704445][T12420] [ 546.704442][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 546.704453][T12420] dump_stack_lvl+0x16c/0x1f0 [ 546.704480][T12420] should_fail_ex+0x512/0x640 [ 546.704497][T12420] strncpy_from_user+0x3b/0x2e0 [ 546.704520][T12420] getname_flags.part.0+0x8f/0x550 [ 546.704538][T12420] getname_flags+0x93/0xf0 [ 546.704560][T12420] do_sys_openat2+0xb9/0x290 [ 546.704575][T12420] ? __pfx_do_sys_openat2+0x10/0x10 [ 546.704591][T12420] ? __fget_files+0x20e/0x3c0 [ 546.704608][T12420] ? __x64_sys_openat+0x60/0x210 [ 546.704626][T12420] __x64_sys_open+0x153/0x1e0 [ 546.704640][T12420] ? __pfx___x64_sys_open+0x10/0x10 [ 546.704658][T12420] ? rcu_is_watching+0x12/0xc0 [ 546.704676][T12420] do_syscall_64+0xcd/0xf80 [ 546.704697][T12420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.704712][T12420] RIP: 0033:0x7f9aa2b8f749 [ 546.704725][T12420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.704739][T12420] RSP: 002b:00007f9aa39df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 546.704753][T12420] RAX: ffffffffffffffda RBX: 00007f9aa2de6180 RCX: 00007f9aa2b8f749 [ 546.704763][T12420] RDX: 0000000000000095 RSI: 0000000000105101 RDI: 0000200000000000 [ 546.704772][T12420] RBP: 00007f9aa39df090 R08: 0000000000000000 R09: 0000000000000000 [ 546.704781][T12420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.704790][T12420] R13: 00007f9aa2de6218 R14: 00007f9aa2de6180 R15: 00007ffc4af26568 [ 546.704811][T12420] [ 547.151262][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 547.167387][ T5925] rc_core: IR keymap rc-tt-1500 not found [ 547.173215][ T5925] Registered IR keymap rc-empty [ 547.179116][ T5925] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 547.193503][ T5925] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input86 [ 547.212368][ T5925] dvb-usb: schedule remote query interval to 100 msecs. [ 547.228002][ T5925] pctv452e: pctv452e_power_ctrl: 0 [ 547.228002][ T5925] [ 547.244488][ T5925] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 547.257914][ T5925] usb 3-1: USB disconnect, device number 64 [ 547.336790][ T5925] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 547.352155][ T24] usb 6-1: too many configurations: 72, using maximum allowed: 8 [ 547.372436][ T24] usb 6-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 547.381486][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.393508][ T24] usb 6-1: config 0 descriptor?? [ 547.451775][ T5868] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 547.623948][ T5868] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 547.638068][ T5868] usb 8-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 547.647668][ T5868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.656435][ T5925] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 547.660294][ T5868] usb 8-1: config 0 descriptor?? [ 547.673884][T12424] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 547.791719][ T5925] usb 3-1: device descriptor read/64, error -71 [ 548.031731][ T5925] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 548.163571][ T5925] usb 3-1: device descriptor read/64, error -71 [ 548.171953][ T24] usb 6-1: USB disconnect, device number 24 [ 548.271893][ T5925] usb usb3-port1: attempt power cycle [ 548.331397][T12441] input: syz0 as /devices/virtual/input/input87 [ 548.440357][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1664'. [ 548.483204][ T5868] usbhid 8-1:0.0: can't add hid device: -71 [ 548.638108][ T30] audit: type=1400 audit(1768547235.716:936): avc: denied { append } for pid=12438 comm="syz.6.1664" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 548.661813][ T5868] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 549.091898][ T5925] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 549.121577][ T5868] usb 8-1: USB disconnect, device number 20 [ 549.133333][ T5925] usb 3-1: device descriptor read/8, error -71 [ 549.386975][ T5925] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 549.432168][ T5925] usb 3-1: device descriptor read/8, error -71 [ 549.473830][T12453] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 549.487554][T12453] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 549.556543][ T5925] usb usb3-port1: unable to enumerate USB device [ 549.836642][T12453] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 549.864227][T12453] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 549.898494][T12453] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 549.911084][T12453] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 549.933024][T12453] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 549.948646][T12453] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 549.965174][T12453] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 549.986521][T12453] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 550.008521][T12453] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 550.028844][T12453] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 550.052108][T12453] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 550.094643][T12453] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 550.335964][ T30] audit: type=1400 audit(1768547237.426:937): avc: denied { write } for pid=12467 comm="syz.5.1670" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 550.460578][T12478] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1672'. [ 550.508534][ T5985] udevd[5985]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 551.339648][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 552.287270][ T5825] Bluetooth: hci4: command 0x0c1a tx timeout [ 552.300270][ T5825] Bluetooth: hci5: command 0x0406 tx timeout [ 552.307660][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 552.314341][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 553.126256][T12492] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 553.345953][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 553.372661][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 553.590008][ T30] audit: type=1400 audit(1768547240.676:938): avc: denied { bind } for pid=12498 comm="syz.2.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 553.768571][T12505] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.775988][T12505] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.865764][ T30] audit: type=1400 audit(1768547240.956:939): avc: denied { write } for pid=12510 comm="syz.6.1680" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 554.017519][ T30] audit: type=1400 audit(1768547241.106:940): avc: denied { connect } for pid=12510 comm="syz.6.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 554.046195][ T30] audit: type=1400 audit(1768547241.136:941): avc: denied { write } for pid=12510 comm="syz.6.1680" path="socket:[50810]" dev="sockfs" ino=50810 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 554.337232][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 554.405431][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 554.411865][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 554.412083][ T5825] Bluetooth: hci5: command 0x0406 tx timeout [ 554.479254][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 554.602379][T12505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.625109][T12505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.742724][ T5868] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 554.894499][ T5868] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 554.916994][ T5868] usb 3-1: config 0 has no interface number 0 [ 554.927534][ T5868] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 554.939802][ T5868] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 554.958938][ T5868] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 554.972596][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.987751][ T5868] usb 3-1: config 0 descriptor?? [ 554.998738][T12525] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 555.016437][ T5868] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 555.057973][ T1104] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.078026][ T1104] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.098768][ T1104] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.111013][ T1104] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.172347][T12542] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1687'. [ 556.413027][ T5825] Bluetooth: hci4: command 0x0c1a tx timeout [ 556.438485][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1688'. [ 556.465197][ T30] audit: type=1400 audit(1768547243.556:942): avc: denied { setattr } for pid=12543 comm="syz.6.1688" name="NETLINK" dev="sockfs" ino=50874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 556.501419][T12202] Bluetooth: hci2: command 0x0c1a tx timeout [ 556.509901][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 556.529034][T12544] overlayfs: missing 'workdir' [ 556.575431][T12550] FAULT_INJECTION: forcing a failure. [ 556.575431][T12550] name failslab, interval 1, probability 0, space 0, times 0 [ 556.634508][T12550] CPU: 1 UID: 0 PID: 12550 Comm: syz.5.1690 Tainted: G L syzkaller #0 PREEMPT(full) [ 556.634536][T12550] Tainted: [L]=SOFTLOCKUP [ 556.634542][T12550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 556.634552][T12550] Call Trace: [ 556.634558][T12550] [ 556.634566][T12550] dump_stack_lvl+0x16c/0x1f0 [ 556.634594][T12550] should_fail_ex+0x512/0x640 [ 556.634610][T12550] ? fs_reclaim_acquire+0xae/0x150 [ 556.634635][T12550] should_failslab+0xc2/0x120 [ 556.634659][T12550] __kmalloc_noprof+0xeb/0x910 [ 556.634684][T12550] ? tomoyo_encode2+0x100/0x3e0 [ 556.634712][T12550] ? tomoyo_encode2+0x100/0x3e0 [ 556.634734][T12550] tomoyo_encode2+0x100/0x3e0 [ 556.634761][T12550] tomoyo_encode+0x29/0x50 [ 556.634783][T12550] tomoyo_realpath_from_path+0x18f/0x6e0 [ 556.634813][T12550] tomoyo_path_number_perm+0x245/0x580 [ 556.634832][T12550] ? tomoyo_path_number_perm+0x237/0x580 [ 556.634858][T12550] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 556.634880][T12550] ? find_held_lock+0x2b/0x80 [ 556.634928][T12550] ? find_held_lock+0x2b/0x80 [ 556.634952][T12550] ? hook_file_ioctl_common+0x144/0x410 [ 556.634974][T12550] ? __fget_files+0x20e/0x3c0 [ 556.635002][T12550] security_file_ioctl+0x9b/0x240 [ 556.635027][T12550] __x64_sys_ioctl+0xb7/0x210 [ 556.635049][T12550] do_syscall_64+0xcd/0xf80 [ 556.635075][T12550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.635092][T12550] RIP: 0033:0x7f7d9c38f749 [ 556.635107][T12550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.635123][T12550] RSP: 002b:00007f7d9d214038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.635139][T12550] RAX: ffffffffffffffda RBX: 00007f7d9c5e5fa0 RCX: 00007f7d9c38f749 [ 556.635149][T12550] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000003 [ 556.635157][T12550] RBP: 00007f7d9d214090 R08: 0000000000000000 R09: 0000000000000000 [ 556.635167][T12550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.635177][T12550] R13: 00007f7d9c5e6038 R14: 00007f7d9c5e5fa0 R15: 00007ffcf3c740d8 [ 556.635201][T12550] [ 556.637427][T12550] ERROR: Out of memory at tomoyo_realpath_from_path. [ 557.288037][T12319] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 557.566425][ T30] audit: type=1400 audit(1768547244.656:943): avc: denied { unmount } for pid=11538 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 557.671896][T12319] usb 2-1: Using ep0 maxpacket: 8 [ 557.680173][T12319] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 557.688993][T12319] usb 2-1: config 0 has no interface number 0 [ 557.699783][T12319] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 557.709667][T12319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.721355][T12319] usb 2-1: Product: syz [ 557.726865][T12319] usb 2-1: Manufacturer: syz [ 557.735184][T12319] usb 2-1: SerialNumber: syz [ 557.743090][T12319] usb 2-1: config 0 descriptor?? [ 557.801081][T12202] Bluetooth: hci2: unexpected event for opcode 0x2029 [ 558.571771][T12202] Bluetooth: hci4: command 0x0c1a tx timeout [ 559.192332][ T24] usb 3-1: USB disconnect, device number 69 [ 559.274693][T12593] FAULT_INJECTION: forcing a failure. [ 559.274693][T12593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.306962][ T5830] udevd[5830]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 559.317944][T12593] CPU: 1 UID: 0 PID: 12593 Comm: syz.6.1701 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.317972][T12593] Tainted: [L]=SOFTLOCKUP [ 559.317978][T12593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 559.317987][T12593] Call Trace: [ 559.317993][T12593] [ 559.317999][T12593] dump_stack_lvl+0x16c/0x1f0 [ 559.318025][T12593] should_fail_ex+0x512/0x640 [ 559.318044][T12593] _copy_to_user+0x32/0xd0 [ 559.318068][T12593] simple_read_from_buffer+0xcb/0x170 [ 559.318090][T12593] proc_fail_nth_read+0x197/0x240 [ 559.318108][T12593] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 559.318125][T12593] ? rw_verify_area+0xcf/0x6c0 [ 559.318141][T12593] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 559.318157][T12593] vfs_read+0x1e4/0xcf0 [ 559.318175][T12593] ? __pfx___mutex_lock+0x10/0x10 [ 559.318197][T12593] ? __pfx_vfs_read+0x10/0x10 [ 559.318220][T12593] ? __fget_files+0x20e/0x3c0 [ 559.318246][T12593] ksys_read+0x12a/0x250 [ 559.318263][T12593] ? __pfx_ksys_read+0x10/0x10 [ 559.318286][T12593] do_syscall_64+0xcd/0xf80 [ 559.318307][T12593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.318322][T12593] RIP: 0033:0x7f9aa2b8e15c [ 559.318335][T12593] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 559.318349][T12593] RSP: 002b:00007f9aa3a21030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 559.318369][T12593] RAX: ffffffffffffffda RBX: 00007f9aa2de5fa0 RCX: 00007f9aa2b8e15c [ 559.318379][T12593] RDX: 000000000000000f RSI: 00007f9aa3a210a0 RDI: 0000000000000004 [ 559.318388][T12593] RBP: 00007f9aa3a21090 R08: 0000000000000000 R09: 0000000000000000 [ 559.318396][T12593] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 559.318405][T12593] R13: 00007f9aa2de6038 R14: 00007f9aa2de5fa0 R15: 00007ffc4af26568 [ 559.318426][T12593] [ 559.741486][ T7912] udevd[7912]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 559.772316][T12319] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 559.884489][T12319] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 560.683876][T12319] usb 2-1: USB disconnect, device number 8 [ 561.013557][T12617] netlink: 'syz.6.1710': attribute type 1 has an invalid length. [ 561.029485][T12617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.110696][T12619] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1709'. [ 561.456578][T12620] netlink: 'syz.6.1710': attribute type 1 has an invalid length. [ 561.510124][T12620] bond2: entered promiscuous mode [ 561.531921][T12620] 8021q: adding VLAN 0 to HW filter on device bond2 [ 561.586925][T12618] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 561.594207][T12618] IPv6: NLM_F_CREATE should be set when creating new route [ 561.601436][T12618] IPv6: NLM_F_CREATE should be set when creating new route [ 561.605692][T12624] fuse: Bad value for 'fd' [ 561.637389][T12617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 561.652911][T12624] fuse: Unknown parameter 'user_i0000000000000000000000000000000000000000' [ 561.674102][T12617] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 561.699279][T12618] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 561.712944][T12617] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 561.815732][T12617] bond2: (slave wireguard0): making interface the new active one [ 561.864144][T12617] wireguard0: entered promiscuous mode [ 561.883094][T12617] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 561.922763][T12618] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 562.043424][T12618] bond2: (slave wireguard1): Enslaving as a backup interface with an up link [ 562.315333][T12641] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1715'. [ 562.324771][ T24] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 562.521552][ T30] audit: type=1400 audit(1768547249.606:944): avc: denied { read } for pid=12604 comm="syz.2.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 562.669997][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 562.709882][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.986354][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 564.030401][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.248297][ T24] usb 8-1: usb_control_msg returned -32 [ 564.269295][ T24] usbtmc 8-1:16.0: can't read capabilities [ 564.347457][T12664] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1720'. [ 565.063765][T12667] netlink: 'syz.1.1721': attribute type 3 has an invalid length. [ 565.073247][ T24] usb 8-1: USB disconnect, device number 21 [ 565.977660][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 566.118446][T12689] FAULT_INJECTION: forcing a failure. [ 566.118446][T12689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.151716][T12689] CPU: 0 UID: 0 PID: 12689 Comm: syz.5.1727 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.151744][T12689] Tainted: [L]=SOFTLOCKUP [ 566.151750][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 566.151759][T12689] Call Trace: [ 566.151765][T12689] [ 566.151771][T12689] dump_stack_lvl+0x16c/0x1f0 [ 566.151796][T12689] should_fail_ex+0x512/0x640 [ 566.151815][T12689] _copy_from_iter+0x2a4/0x16c0 [ 566.151846][T12689] ? __pfx__copy_from_iter+0x10/0x10 [ 566.151869][T12689] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 566.151899][T12689] copy_page_from_iter+0xde/0x180 [ 566.151926][T12689] tun_build_skb.constprop.0+0x2e8/0x1560 [ 566.151960][T12689] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 566.151989][T12689] ? arch_stack_walk+0xa6/0x100 [ 566.152025][T12689] ? _kstrtoull+0x145/0x200 [ 566.152047][T12689] tun_get_user+0x149c/0x3cc0 [ 566.152083][T12689] ? __pfx_tun_get_user+0x10/0x10 [ 566.152110][T12689] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 566.152133][T12689] ? find_held_lock+0x2b/0x80 [ 566.152159][T12689] ? tun_get+0x191/0x370 [ 566.152188][T12689] tun_chr_write_iter+0xdc/0x210 [ 566.152216][T12689] vfs_write+0x7d3/0x11d0 [ 566.152237][T12689] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 566.152263][T12689] ? __pfx_vfs_write+0x10/0x10 [ 566.152278][T12689] ? find_held_lock+0x2b/0x80 [ 566.152302][T12689] ksys_write+0x12a/0x250 [ 566.152314][T12689] ? __pfx_ksys_write+0x10/0x10 [ 566.152336][T12689] do_syscall_64+0xcd/0xf80 [ 566.152352][T12689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.152363][T12689] RIP: 0033:0x7f7d9c38e1ff [ 566.152373][T12689] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 566.152383][T12689] RSP: 002b:00007f7d9d214000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 566.152394][T12689] RAX: ffffffffffffffda RBX: 00007f7d9c5e5fa0 RCX: 00007f7d9c38e1ff [ 566.152400][T12689] RDX: 000000000000007d RSI: 00002000000000c0 RDI: 00000000000000c8 [ 566.152407][T12689] RBP: 00007f7d9d214090 R08: 0000000000000000 R09: 0000000000000000 [ 566.152413][T12689] R10: 000000000000007d R11: 0000000000000293 R12: 0000000000000001 [ 566.152419][T12689] R13: 00007f7d9c5e6038 R14: 00007f7d9c5e5fa0 R15: 00007ffcf3c740d8 [ 566.152432][T12689] [ 566.521691][ T5868] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 566.596470][T12700] FAULT_INJECTION: forcing a failure. [ 566.596470][T12700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.609840][T12700] CPU: 1 UID: 0 PID: 12700 Comm: syz.1.1730 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.609864][T12700] Tainted: [L]=SOFTLOCKUP [ 566.609869][T12700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 566.609878][T12700] Call Trace: [ 566.609884][T12700] [ 566.609890][T12700] dump_stack_lvl+0x16c/0x1f0 [ 566.609918][T12700] should_fail_ex+0x512/0x640 [ 566.609937][T12700] _copy_from_user+0x2e/0xd0 [ 566.609964][T12700] move_addr_to_kernel+0x65/0x170 [ 566.609990][T12700] __copy_msghdr+0x386/0x470 [ 566.610009][T12700] copy_msghdr_from_user+0xc1/0x160 [ 566.610028][T12700] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 566.610059][T12700] ___sys_sendmsg+0xfe/0x1d0 [ 566.610086][T12700] ? __pfx____sys_sendmsg+0x10/0x10 [ 566.610135][T12700] __sys_sendmsg+0x16d/0x220 [ 566.610155][T12700] ? __pfx___sys_sendmsg+0x10/0x10 [ 566.610188][T12700] do_syscall_64+0xcd/0xf80 [ 566.610212][T12700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.610228][T12700] RIP: 0033:0x7f2bc498f749 [ 566.610242][T12700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.610257][T12700] RSP: 002b:00007f2bc57fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.610274][T12700] RAX: ffffffffffffffda RBX: 00007f2bc4be6090 RCX: 00007f2bc498f749 [ 566.610286][T12700] RDX: 0000000000000010 RSI: 0000200000000540 RDI: 0000000000000007 [ 566.610296][T12700] RBP: 00007f2bc57fe090 R08: 0000000000000000 R09: 0000000000000000 [ 566.610306][T12700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.610315][T12700] R13: 00007f2bc4be6128 R14: 00007f2bc4be6090 R15: 00007ffcd1fdc668 [ 566.610338][T12700] [ 566.873341][ T5868] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 566.905444][ T5868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.954461][ T5868] usb 8-1: config 0 descriptor?? [ 566.991178][ T5868] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 567.218349][T12691] binder: 12690:12691 ioctl b704 200000000140 returned -22 [ 567.296753][ T5868] gspca_cpia1: usb_control_msg 05, error -71 [ 567.327240][ T5868] gspca_cpia1: usb_control_msg 01, error -71 [ 567.334052][ T5868] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0) [ 567.349305][ T5868] usb 8-1: USB disconnect, device number 22 [ 567.511548][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 567.759983][ T30] audit: type=1400 audit(1768547254.846:945): avc: denied { mounton } for pid=12727 comm="syz.2.1737" path="/403/file1/file0" dev="autofs" ino=52238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 567.935951][T12733] FAULT_INJECTION: forcing a failure. [ 567.935951][T12733] name failslab, interval 1, probability 0, space 0, times 0 [ 567.953807][T12733] CPU: 0 UID: 0 PID: 12733 Comm: syz.5.1740 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.953837][T12733] Tainted: [L]=SOFTLOCKUP [ 567.953844][T12733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 567.953854][T12733] Call Trace: [ 567.953860][T12733] [ 567.953867][T12733] dump_stack_lvl+0x16c/0x1f0 [ 567.953898][T12733] should_fail_ex+0x512/0x640 [ 567.953914][T12733] ? kmem_cache_alloc_noprof+0x62/0x770 [ 567.953934][T12733] should_failslab+0xc2/0x120 [ 567.953955][T12733] kmem_cache_alloc_noprof+0x83/0x770 [ 567.953971][T12733] ? proc_fail_nth_write+0x20/0x220 [ 567.953988][T12733] ? do_epoll_ctl+0x1170/0x3790 [ 567.954009][T12733] ? do_epoll_ctl+0x1170/0x3790 [ 567.954023][T12733] do_epoll_ctl+0x1170/0x3790 [ 567.954038][T12733] ? find_held_lock+0x2b/0x80 [ 567.954063][T12733] ? ksys_write+0x190/0x250 [ 567.954092][T12733] ? __pfx_do_epoll_ctl+0x10/0x10 [ 567.954107][T12733] ? find_held_lock+0x2b/0x80 [ 567.954134][T12733] ? __might_fault+0xe3/0x190 [ 567.954150][T12733] ? __might_fault+0xe3/0x190 [ 567.954176][T12733] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 567.954191][T12733] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 567.954209][T12733] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 567.954232][T12733] do_syscall_64+0xcd/0xf80 [ 567.954258][T12733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.954275][T12733] RIP: 0033:0x7f7d9c38f749 [ 567.954290][T12733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.954306][T12733] RSP: 002b:00007f7d9d214038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 567.954322][T12733] RAX: ffffffffffffffda RBX: 00007f7d9c5e5fa0 RCX: 00007f7d9c38f749 [ 567.954332][T12733] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 567.954341][T12733] RBP: 00007f7d9d214090 R08: 0000000000000000 R09: 0000000000000000 [ 567.954351][T12733] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 567.954360][T12733] R13: 00007f7d9c5e6038 R14: 00007f7d9c5e5fa0 R15: 00007ffcf3c740d8 [ 567.954389][T12733] [ 569.383659][T12755] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1748'. [ 570.121696][ T5868] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 570.155438][ T30] audit: type=1400 audit(1768547257.246:946): avc: denied { read } for pid=12767 comm="syz.6.1753" name="file0" dev="tmpfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 570.155830][T12202] Bluetooth: hci2: unexpected event for opcode 0xd047 [ 570.191302][ T30] audit: type=1400 audit(1768547257.246:947): avc: denied { open } for pid=12767 comm="syz.6.1753" path="/62/file0" dev="tmpfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 570.424877][ T5868] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 570.611487][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.645727][ T5868] usb 2-1: config 0 descriptor?? [ 570.664671][ T5868] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 570.679892][T12769] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 570.687282][T12769] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 570.714764][T12769] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 570.728579][T12769] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 570.753024][T12769] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 570.765001][T12769] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 570.779863][T12769] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 570.797856][T12769] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 570.818195][T12769] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 570.846187][T12769] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 570.874647][T12757] binder: 12756:12757 ioctl b704 200000000140 returned -22 [ 570.949214][ T5868] gspca_cpia1: usb_control_msg 05, error -71 [ 570.961143][ T5868] gspca_cpia1: usb_control_msg 01, error -71 [ 570.967874][ T5868] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 570.994762][ T5868] usb 2-1: USB disconnect, device number 9 [ 571.081723][ T5815] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 571.244941][ T5815] usb 6-1: config 0 has no interfaces? [ 571.253350][ T5815] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 571.267223][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.277090][ T5815] usb 6-1: Product: syz [ 571.281362][ T5815] usb 6-1: Manufacturer: syz [ 571.295362][ T5815] usb 6-1: SerialNumber: syz [ 571.310297][ T5815] usb 6-1: config 0 descriptor?? [ 571.626429][ T30] audit: type=1400 audit(1768547258.716:948): avc: denied { ioctl } for pid=12783 comm="syz.1.1756" path="socket:[51595]" dev="sockfs" ino=51595 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 572.430914][ T5804] udevd[5804]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 572.921777][ T24] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 573.561740][ T24] usb 7-1: device descriptor read/64, error -71 [ 573.680682][ T5868] usb 6-1: USB disconnect, device number 25 [ 573.736961][T12816] loop8: detected capacity change from 0 to 8 [ 573.748087][ T5804] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 573.755201][ T5804] loop8: partition table partially beyond EOD, truncated [ 573.763307][ T5804] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 573.777563][T12816] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 573.783136][T12816] loop8: partition table partially beyond EOD, truncated [ 573.790290][T12816] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 573.821129][ T5804] udevd[5804]: symlink '../../loop8' '/dev/disk/by-diskseq/81.tmp-b7:8' failed: Read-only file system [ 573.842593][ T24] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 573.847389][T12819] ip_vti0: entered promiscuous mode [ 573.854911][ T5804] udevd[5804]: symlink '../../loop8' '/dev/disk/by-diskseq/81.tmp-b7:8' failed: Read-only file system [ 573.858641][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'. [ 573.876435][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 573.886294][ T5804] udevd[5804]: symlink '../../loop8' '/dev/disk/by-diskseq/81.tmp-b7:8' failed: Read-only file system [ 573.894036][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 574.066652][ T24] usb 7-1: device descriptor read/64, error -71 [ 574.254572][ T24] usb usb7-port1: attempt power cycle [ 574.281688][ T5868] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 574.503921][ T5868] usb 6-1: Using ep0 maxpacket: 16 [ 574.532887][ T5868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.551771][ T5868] usb 6-1: config 0 has no interfaces? [ 574.577646][ T5868] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 574.600956][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.609161][ T5815] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 574.627366][ T5868] usb 6-1: config 0 descriptor?? [ 574.651713][ T24] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 574.688729][ T24] usb 7-1: device descriptor read/8, error -71 [ 574.781661][ T5815] usb 2-1: Using ep0 maxpacket: 8 [ 574.795121][ T5815] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 574.811878][ T5815] usb 2-1: config 179 has no interface number 0 [ 574.824761][ T5815] usb 2-1: too many endpoints for config 179 interface 65 altsetting 12: 111, using maximum allowed: 30 [ 574.856639][ T5815] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 250, changing to 11 [ 574.886535][ T5815] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 574.920267][ T5815] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 574.940509][ T5815] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 574.941686][ T24] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 574.977660][T12050] usb 6-1: USB disconnect, device number 26 [ 575.108120][ T5985] udevd[5985]: symlink '../../loop8' '/dev/disk/by-diskseq/81.tmp-b7:8' failed: Read-only file system [ 575.142128][ T24] usb 7-1: device descriptor read/8, error -71 [ 575.297048][ T5804] udevd[5804]: symlink '../../loop8' '/dev/disk/by-diskseq/81.tmp-b7:8' failed: Read-only file system [ 575.309329][ T5815] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 111 [ 575.362028][ T24] usb usb7-port1: unable to enumerate USB device [ 575.381902][ T5815] usb 2-1: config 179 interface 65 has no altsetting 0 [ 575.399232][ T5815] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 575.429383][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.200525][T12839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.216289][T12839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.238095][T12839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1766'. [ 576.247610][T12839] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1766'. [ 576.258222][T12839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1766'. [ 576.308151][ T5868] usb 2-1: USB disconnect, device number 10 [ 577.104004][T12850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1774'. [ 579.181321][T12871] FAULT_INJECTION: forcing a failure. [ 579.181321][T12871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.233135][T12871] CPU: 1 UID: 0 PID: 12871 Comm: syz.1.1779 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.233162][T12871] Tainted: [L]=SOFTLOCKUP [ 579.233169][T12871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 579.233178][T12871] Call Trace: [ 579.233190][T12871] [ 579.233197][T12871] dump_stack_lvl+0x16c/0x1f0 [ 579.233226][T12871] should_fail_ex+0x512/0x640 [ 579.233247][T12871] _copy_from_user+0x2e/0xd0 [ 579.233274][T12871] move_addr_to_kernel+0x65/0x170 [ 579.233301][T12871] __copy_msghdr+0x386/0x470 [ 579.233321][T12871] copy_msghdr_from_user+0xc1/0x160 [ 579.233340][T12871] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 579.233368][T12871] ___sys_sendmsg+0xfe/0x1d0 [ 579.233387][T12871] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.233417][T12871] __sys_sendmsg+0x16d/0x220 [ 579.233429][T12871] ? __pfx___sys_sendmsg+0x10/0x10 [ 579.233449][T12871] do_syscall_64+0xcd/0xf80 [ 579.233465][T12871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.233476][T12871] RIP: 0033:0x7f2bc498f749 [ 579.233485][T12871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.233495][T12871] RSP: 002b:00007f2bc581f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.233506][T12871] RAX: ffffffffffffffda RBX: 00007f2bc4be5fa0 RCX: 00007f2bc498f749 [ 579.233513][T12871] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 579.233519][T12871] RBP: 00007f2bc581f090 R08: 0000000000000000 R09: 0000000000000000 [ 579.233524][T12871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.233530][T12871] R13: 00007f2bc4be6038 R14: 00007f2bc4be5fa0 R15: 00007ffcd1fdc668 [ 579.233544][T12871] [ 579.611682][ T24] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 580.262149][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 580.269412][ T24] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 580.277885][ T24] usb 7-1: config 179 has no interface number 0 [ 580.427142][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 580.454097][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 580.496400][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 580.515334][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 580.612592][ T24] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 580.626939][ T24] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 580.636448][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.653352][T12872] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 581.841550][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input89 [ 581.877647][T12906] FAULT_INJECTION: forcing a failure. [ 581.877647][T12906] name failslab, interval 1, probability 0, space 0, times 0 [ 581.919354][T12906] CPU: 0 UID: 0 PID: 12906 Comm: syz.7.1790 Tainted: G L syzkaller #0 PREEMPT(full) [ 581.919384][T12906] Tainted: [L]=SOFTLOCKUP [ 581.919390][T12906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 581.919400][T12906] Call Trace: [ 581.919406][T12906] [ 581.919413][T12906] dump_stack_lvl+0x16c/0x1f0 [ 581.919441][T12906] should_fail_ex+0x512/0x640 [ 581.919457][T12906] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 581.919478][T12906] should_failslab+0xc2/0x120 [ 581.919499][T12906] kmem_cache_alloc_node_noprof+0x86/0x800 [ 581.919516][T12906] ? __alloc_skb+0x156/0x410 [ 581.919538][T12906] ? __alloc_skb+0x156/0x410 [ 581.919552][T12906] __alloc_skb+0x156/0x410 [ 581.919566][T12906] ? __alloc_skb+0x35d/0x410 [ 581.919581][T12906] ? __pfx___alloc_skb+0x10/0x10 [ 581.919598][T12906] ? netlink_autobind.isra.0+0x158/0x370 [ 581.919626][T12906] netlink_alloc_large_skb+0x69/0x140 [ 581.919650][T12906] netlink_sendmsg+0x698/0xdd0 [ 581.919676][T12906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 581.919706][T12906] ____sys_sendmsg+0xa5d/0xc30 [ 581.919730][T12906] ? copy_msghdr_from_user+0x10a/0x160 [ 581.919749][T12906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 581.919783][T12906] ___sys_sendmsg+0x134/0x1d0 [ 581.919803][T12906] ? __pfx____sys_sendmsg+0x10/0x10 [ 581.919849][T12906] __sys_sendmsg+0x16d/0x220 [ 581.919867][T12906] ? __pfx___sys_sendmsg+0x10/0x10 [ 581.919902][T12906] do_syscall_64+0xcd/0xf80 [ 581.919925][T12906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.919942][T12906] RIP: 0033:0x7f74a158f749 [ 581.919956][T12906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.919971][T12906] RSP: 002b:00007f749f7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.919988][T12906] RAX: ffffffffffffffda RBX: 00007f74a17e5fa0 RCX: 00007f74a158f749 [ 581.919998][T12906] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 581.920008][T12906] RBP: 00007f749f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 581.920017][T12906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.920027][T12906] R13: 00007f74a17e6038 R14: 00007f74a17e5fa0 R15: 00007fff7ffb0768 [ 581.920050][T12906] [ 582.154607][T12907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.163366][T12907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.211699][T12002] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 582.373134][T12002] usb 2-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b [ 582.385290][T12002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.464982][ T5815] usb 7-1: USB disconnect, device number 34 [ 582.464997][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 582.623105][T12903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.638572][T12903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.684436][T12002] pegasus 2-1:254.0: probe with driver pegasus failed with error -71 [ 582.707398][T12002] usb 2-1: USB disconnect, device number 11 [ 582.734681][T12901] syz.5.1788 (12901): drop_caches: 2 [ 584.132799][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 584.154590][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 584.178218][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 584.186204][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 584.194002][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 584.208702][T12202] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 584.216023][T12202] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 584.223370][T12202] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 584.232977][T12202] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 584.240472][T12202] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 584.585257][T12002] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 584.648481][T12942] wlan0 speed is unknown, defaulting to 1000 [ 584.863978][T12002] usb 7-1: Using ep0 maxpacket: 8 [ 584.871154][T12002] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 584.880221][T12002] usb 7-1: config 179 has no interface number 0 [ 584.886893][T12002] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 584.898292][T12002] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 584.909704][T12002] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 584.921004][T12002] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 584.932925][T12002] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 584.946374][T12002] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 584.946538][T12956] netlink: 'syz.7.1806': attribute type 1 has an invalid length. [ 584.955466][T12002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.958376][T12947] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 585.036343][T12958] tmpfs: Bad value for 'mpol' [ 585.224698][T12002] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input90 [ 585.293452][ T30] audit: type=1400 audit(1768547272.386:949): avc: denied { getopt } for pid=12962 comm="syz.5.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 585.356350][T12942] chnl_net:caif_netlink_parms(): no params data found [ 585.425670][T12947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.464169][T12947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.713199][T12002] usb 7-1: USB disconnect, device number 35 [ 585.719166][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 585.719210][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 585.788082][T12942] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.796926][T12942] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.805327][T12942] bridge_slave_0: entered allmulticast mode [ 585.814887][T12942] bridge_slave_0: entered promiscuous mode [ 585.832607][T12942] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.853871][T12942] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.872690][T12942] bridge_slave_1: entered allmulticast mode [ 585.880048][T12942] bridge_slave_1: entered promiscuous mode [ 585.991242][T12981] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 586.069049][T12983] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1814'. [ 586.069815][T12942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.117793][T12983] syzkaller0: entered promiscuous mode [ 586.133058][T12983] syzkaller0: entered allmulticast mode [ 586.172048][T12942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.318536][T12942] team0: Port device team_slave_0 added [ 586.332237][T12202] Bluetooth: hci3: command tx timeout [ 586.346204][T12986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=12986 comm=syz.6.1815 [ 586.363098][T12942] team0: Port device team_slave_1 added [ 586.593153][T12942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.093331][T12942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.102572][T12942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.115673][T12942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.122660][T12942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.853928][T12999] syz.1.1816: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 687.867209][T12999] CPU: 1 UID: 0 PID: 12999 Comm: syz.1.1816 Tainted: G L syzkaller #0 PREEMPT(full) [ 687.867228][T12999] Tainted: [L]=SOFTLOCKUP [ 687.867231][T12999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 687.867238][T12999] Call Trace: [ 687.867242][T12999] [ 687.867247][T12999] dump_stack_lvl+0x16c/0x1f0 [ 687.867266][T12999] warn_alloc+0x248/0x3a0 [ 687.867279][T12999] ? __pfx_warn_alloc+0x10/0x10 [ 687.867297][T12999] __alloc_frozen_pages_noprof+0xe9b/0x2430 [ 687.867310][T12999] ? __kernel_text_address+0xd/0x40 [ 687.867329][T12999] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 687.867341][T12999] ? stack_trace_save+0x8e/0xc0 [ 687.867354][T12999] ? __pfx_stack_trace_save+0x10/0x10 [ 687.867366][T12999] ? __lock_acquire+0x436/0x2890 [ 687.867381][T12999] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 687.867395][T12999] ? policy_nodemask+0xea/0x4e0 [ 687.867409][T12999] alloc_pages_mpol+0x1fb/0x550 [ 687.867424][T12999] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 687.867441][T12999] new_slab+0x2e1/0x430 [ 687.867457][T12999] ___slab_alloc+0xe18/0x1c90 [ 687.867473][T12999] ? skb_clone+0x190/0x3f0 [ 687.867489][T12999] ? skb_clone+0x190/0x3f0 [ 687.867500][T12999] ? __slab_alloc.constprop.0+0x63/0x110 [ 687.867515][T12999] __slab_alloc.constprop.0+0x63/0x110 [ 687.867533][T12999] kmem_cache_alloc_noprof+0x44d/0x770 [ 687.867544][T12999] ? skb_clone+0x190/0x3f0 [ 687.867557][T12999] ? skb_clone+0x190/0x3f0 [ 687.867567][T12999] skb_clone+0x190/0x3f0 [ 687.867579][T12999] bpf_clone_redirect+0x166/0x500 [ 687.867595][T12999] bpf_prog_00acfd19bb8886f4+0x5f/0x68 [ 687.867605][T12999] ? __irq_alloc_descs+0x1b0/0x610 [ 687.867617][T12999] ? __schedule+0x114c/0x6150 [ 687.867629][T12999] ? __lock_acquire+0x436/0x2890 [ 687.867649][T12999] ? irqentry_exit+0x1dd/0x8c0 [ 687.867662][T12999] ? lockdep_hardirqs_on+0x7c/0x110 [ 687.867677][T12999] ? irqentry_exit+0x1dd/0x8c0 [ 687.867697][T12999] ? __pfx___cant_migrate+0x10/0x10 [ 687.867709][T12999] ? bpf_test_timer_continue+0x13e/0x610 [ 687.867721][T12999] ? lockdep_hardirqs_on+0x7c/0x110 [ 687.867735][T12999] bpf_test_run+0x3d2/0xb50 [ 687.867751][T12999] ? __pfx_bpf_test_run+0x10/0x10 [ 687.867772][T12999] ? eth_type_trans+0x2e3/0x740 [ 687.867788][T12999] bpf_prog_test_run_skb+0x1035/0x31a0 [ 687.867809][T12999] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 687.867824][T12999] ? fput+0x70/0xf0 [ 687.867835][T12999] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 687.867848][T12999] __sys_bpf+0x1035/0x4980 [ 687.867863][T12999] ? futex_private_hash_put+0x160/0x1b0 [ 687.867878][T12999] ? __pfx___sys_bpf+0x10/0x10 [ 687.867893][T12999] ? __pfx_futex_wait+0x10/0x10 [ 687.867909][T12999] ? do_futex+0x122/0x350 [ 687.867931][T12999] ? xfd_validate_state+0x61/0x180 [ 687.867945][T12999] __x64_sys_bpf+0x78/0xc0 [ 687.867960][T12999] ? lockdep_hardirqs_on+0x7c/0x110 [ 687.867973][T12999] do_syscall_64+0xcd/0xf80 [ 687.867988][T12999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.867999][T12999] RIP: 0033:0x7f2bc498f749 [ 687.868010][T12999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.868020][T12999] RSP: 002b:00007f2bc57dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 687.868029][T12999] RAX: ffffffffffffffda RBX: 00007f2bc4be6180 RCX: 00007f2bc498f749 [ 687.868036][T12999] RDX: 000000000000004c RSI: 0000200000001300 RDI: 000000000000000a [ 687.868042][T12999] RBP: 00007f2bc4a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 687.868048][T12999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.868054][T12999] R13: 00007f2bc4be6218 R14: 00007f2bc4be6180 R15: 00007ffcd1fdc668 [ 687.868067][T12999] [ 687.868070][T12999] Mem-Info: [ 688.181977][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 688.184882][T12999] active_anon:44402 inactive_anon:0 isolated_anon:0 [ 688.184882][T12999] active_file:19602 inactive_file:49180 isolated_file:0 [ 688.184882][T12999] unevictable:791 dirty:596 writeback:235 [ 688.184882][T12999] slab_reclaimable:13457 slab_unreclaimable:1326997 [ 688.184882][T12999] mapped:43082 shmem:34973 pagetables:1375 [ 688.184882][T12999] sec_pagetables:0 bounce:0 [ 688.184882][T12999] kernel_misc_reclaimable:0 [ 688.184882][T12999] free:8596 free_pcp:21175 free_cma:0 [ 688.193072][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 688.201021][T12999] Node 0 active_anon:177608kB inactive_anon:0kB active_file:78408kB inactive_file:196520kB unevictable:1628kB isolated(anon):0kB isolated(file):0kB mapped:172328kB dirty:2380kB writeback:940kB shmem:138356kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14108kB pagetables:5364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 688.208985][ C0] node 0: slabs: 75278, objs: 903336, free: 0 [ 688.216947][T12999] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 688.224904][ C0] node 1: slabs: 271747, objs: 3260964, free: 48 [ 688.227898][T12999] Node 0 DMA free:9900kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 688.401274][T12999] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 688.406997][T12999] Node 0 DMA32 free:4812kB boost:76696kB min:110788kB low:119308kB high:127828kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:177608kB inactive_anon:0kB active_file:78408kB inactive_file:196520kB unevictable:1628kB writepending:3320kB zspages:0kB present:3129332kB managed:2540808kB mlocked:92kB bounce:0kB free_pcp:62784kB local_pcp:15784kB free_cma:0kB [ 688.441131][T12999] lowmem_reserve[]: 0 0 1 1 1 [ 688.445807][T12999] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 688.475313][T12999] lowmem_reserve[]: 0 0 0 0 0 [ 688.479982][T12999] Node 1 Normal free:19672kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:4096KB free_highatomic:2608KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21792kB local_pcp:10348kB free_cma:0kB [ 688.512524][T12999] lowmem_reserve[]: 0 0 0 0 0 [ 688.517185][T12999] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 9892kB [ 688.531140][T12999] Node 0 DMA32: 0*4kB 0*8kB 1*16kB (M) 1*32kB (M) 1*64kB (M) 1*128kB (M) 0*256kB 9*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 4848kB [ 688.544471][T12999] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 688.555871][T12999] Node 1 Normal: 2*4kB (ME) 5*8kB (UME) 8*16kB (MEH) 6*32kB (MEH) 2*64kB (ME) 3*128kB (UME) 5*256kB (MEH) 2*512kB (M) 4*1024kB (MEH) 2*2048kB (UE) 2*4096kB (M) = 19568kB [ 688.572786][T12999] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 688.582317][T12999] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 688.591588][T12999] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 688.601098][T12999] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 688.610353][T12999] 103752 total pagecache pages [ 688.615099][T12999] 0 pages in swap cache [ 688.619217][T12999] Free swap = 124996kB [ 688.623353][T12999] Total swap = 124996kB [ 688.627472][T12999] 2097051 pages RAM [ 688.631239][T12999] 0 pages HighMem/MovableOnly [ 688.635889][T12999] 429823 pages reserved [ 688.640006][T12999] 0 pages cma reserved [ 688.644050][T12999] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 688.653833][T12999] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 688.664316][T12999] node 0: slabs: 75278, objs: 903336, free: 0 [ 688.670529][T12999] node 1: slabs: 271747, objs: 3260964, free: 48 [ 688.677701][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 688.688459][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 688.698242][ C1] node 0: slabs: 516, objs: 16512, free: 0 [ 688.704199][ C1] node 1: slabs: 246, objs: 7872, free: 0 [ 688.710082][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 688.720819][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 688.730600][ C1] node 0: slabs: 516, objs: 16512, free: 0 [ 688.736559][ C1] node 1: slabs: 246, objs: 7872, free: 0 [ 688.742449][T12999] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 688.752234][T12999] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 688.762708][T12999] node 0: slabs: 75279, objs: 903348, free: 0 [ 688.768915][T12999] node 1: slabs: 271747, objs: 3260964, free: 48 [ 688.775776][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 688.786522][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 688.796303][ C1] node 0: slabs: 516, objs: 16512, free: 0 [ 688.802259][ C1] node 1: slabs: 246, objs: 7872, free: 0 [ 688.808141][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 688.818891][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 688.828677][ C1] node 0: slabs: 516, objs: 16512, free: 0 [ 688.834643][ C1] node 1: slabs: 246, objs: 7872, free: 0 [ 688.840532][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 688.851268][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 688.861048][ C1] node 0: slabs: 516, objs: 16512, free: 0 [ 688.867007][ C1] node 1: slabs: 246, objs: 7872, free: 0 [ 688.872902][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 688.883639][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 688.893430][ C1] node 0: slabs: 516, objs: 16512, free: 0 [ 688.899372][ C1] node 1: slabs: 246, objs: 7872, free: 0 [ 688.905268][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 688.916006][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 688.925786][ C1] node 0: slabs: 516, objs: 16512, free: 0 [ 688.931741][ C1] node 1: slabs: 246, objs: 7872, free: 0 [ 693.171562][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 693.178520][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12999 [ 693.186302][ C1] rcu: (detected by 1, t=10502 jiffies, g=67289, q=266 ncpus=2) [ 693.193990][ C1] task:syz.1.1816 state:R running task stack:24904 pid:12999 tgid:12987 ppid:11592 task_flags:0x400140 flags:0x00080000 [ 693.208097][ C1] Call Trace: [ 693.211360][ C1] [ 693.214179][ C1] sched_show_task+0x423/0x630 [ 693.218922][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 693.224179][ C1] ? rcu_dump_cpu_stacks+0x376/0x530 [ 693.229433][ C1] ? wq_watchdog_touch+0xe2/0x190 [ 693.234427][ C1] rcu_sched_clock_irq+0x2634/0x31f0 [ 693.239690][ C1] ? __pfx_tmigr_requires_handle_remote_up+0x10/0x10 [ 693.246333][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 693.251941][ C1] ? tmigr_requires_handle_remote+0x13f/0x300 [ 693.257976][ C1] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 693.264360][ C1] ? __cgroup_account_cputime_field+0x12c/0x1f0 [ 693.270573][ C1] ? hrtimer_run_queues+0x97/0x500 [ 693.275654][ C1] update_process_times+0x178/0x2d0 [ 693.280825][ C1] ? __pfx_update_process_times+0x10/0x10 [ 693.286516][ C1] tick_nohz_handler+0x506/0x720 [ 693.291426][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 693.296853][ C1] ? __hrtimer_run_queues+0x58f/0xc40 [ 693.302199][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 693.307624][ C1] __hrtimer_run_queues+0x64e/0xc40 [ 693.312798][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 693.318485][ C1] ? read_tsc+0x9/0x20 [ 693.322529][ C1] hrtimer_interrupt+0x397/0x8e0 [ 693.327455][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3c0 [ 693.333449][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 693.339067][ C1] [ 693.341973][ C1] [ 693.344876][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 693.350838][ C1] RIP: 0010:kasan_check_range+0x62/0x1b0 [ 693.356459][ C1] Code: 00 80 ff ff 48 39 c7 0f 82 b3 00 00 00 4c 8d 54 37 ff 48 89 fd 48 b8 00 00 00 00 00 fc ff df 4d 89 d1 48 c1 ed 03 49 c1 e9 03 <48> 01 c5 49 01 c1 48 89 e8 49 8d 59 01 48 89 da 48 29 ea 48 83 fa [ 693.376045][ C1] RSP: 0018:ffffc9000c066fd0 EFLAGS: 00000a03 [ 693.382087][ C1] RAX: dffffc0000000000 RBX: ffff88823fff88f8 RCX: ffffffff821acf1b [ 693.390049][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88823fff88f8 [ 693.397999][ C1] RBP: 1ffff11047fff11f R08: 0000000000000000 R09: 1ffff11047fff11f [ 693.405943][ C1] R10: ffff88823fff88ff R11: ffff88802ce6aff0 R12: 0000000000000002 [ 693.413883][ C1] R13: ffff88813fffbac0 R14: dffffc0000000000 R15: ffff88813fffb420 [ 693.421828][ C1] ? get_page_from_freelist+0x2fb/0x31a0 [ 693.427438][ C1] get_page_from_freelist+0x2fb/0x31a0 [ 693.432872][ C1] __alloc_frozen_pages_noprof+0x6d7/0x2430 [ 693.438734][ C1] ? __kernel_text_address+0xd/0x40 [ 693.443906][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 693.450200][ C1] ? __lock_acquire+0x436/0x2890 [ 693.455109][ C1] ? irqentry_exit+0x1dd/0x8c0 [ 693.459843][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 693.465012][ C1] ? lock_acquire+0x179/0x330 [ 693.469657][ C1] ? find_held_lock+0x2b/0x80 [ 693.474304][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 693.480184][ C1] ? policy_nodemask+0xea/0x4e0 [ 693.485006][ C1] alloc_pages_mpol+0x1fb/0x550 [ 693.489827][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 693.495170][ C1] ? __pfx____ratelimit+0x10/0x10 [ 693.500166][ C1] new_slab+0x2c3/0x430 [ 693.504295][ C1] ___slab_alloc+0xe18/0x1c90 [ 693.508947][ C1] ? skb_clone+0x190/0x3f0 [ 693.513333][ C1] ? skb_clone+0x190/0x3f0 [ 693.517718][ C1] ? __slab_alloc.constprop.0+0x63/0x110 [ 693.523323][ C1] __slab_alloc.constprop.0+0x63/0x110 [ 693.528755][ C1] kmem_cache_alloc_noprof+0x44d/0x770 [ 693.534181][ C1] ? skb_clone+0x190/0x3f0 [ 693.538568][ C1] ? skb_clone+0x190/0x3f0 [ 693.542953][ C1] skb_clone+0x190/0x3f0 [ 693.547163][ C1] bpf_clone_redirect+0x166/0x500 [ 693.552159][ C1] bpf_prog_00acfd19bb8886f4+0x5f/0x68 [ 693.557585][ C1] ? __irq_alloc_descs+0x1b0/0x610 [ 693.562662][ C1] ? __schedule+0x114c/0x6150 [ 693.567308][ C1] ? __lock_acquire+0x436/0x2890 [ 693.572226][ C1] ? irqentry_exit+0x1dd/0x8c0 [ 693.576980][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 693.582165][ C1] ? irqentry_exit+0x1dd/0x8c0 [ 693.586907][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 693.592082][ C1] ? bpf_test_timer_continue+0x13e/0x610 [ 693.597700][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 693.602885][ C1] bpf_test_run+0x3d2/0xb50 [ 693.607364][ C1] ? __pfx_bpf_test_run+0x10/0x10 [ 693.612367][ C1] ? eth_type_trans+0x2e3/0x740 [ 693.617192][ C1] bpf_prog_test_run_skb+0x1035/0x31a0 [ 693.622629][ C1] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 693.628404][ C1] ? fput+0x70/0xf0 [ 693.632182][ C1] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 693.637958][ C1] __sys_bpf+0x1035/0x4980 [ 693.642345][ C1] ? futex_private_hash_put+0x160/0x1b0 [ 693.647863][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 693.652598][ C1] ? __pfx_futex_wait+0x10/0x10 [ 693.657422][ C1] ? do_futex+0x122/0x350 [ 693.661730][ C1] ? xfd_validate_state+0x61/0x180 [ 693.666828][ C1] __x64_sys_bpf+0x78/0xc0 [ 693.671215][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 693.676382][ C1] do_syscall_64+0xcd/0xf80 [ 693.680859][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.686718][ C1] RIP: 0033:0x7f2bc498f749 [ 693.691101][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.710675][ C1] RSP: 002b:00007f2bc57dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 693.719055][ C1] RAX: ffffffffffffffda RBX: 00007f2bc4be6180 RCX: 00007f2bc498f749 [ 693.726993][ C1] RDX: 000000000000004c RSI: 0000200000001300 RDI: 000000000000000a [ 693.734934][ C1] RBP: 00007f2bc4a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 693.742872][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.750809][ C1] R13: 00007f2bc4be6218 R14: 00007f2bc4be6180 R15: 00007ffcd1fdc668 [ 693.758754][ C1] [ 693.761743][ C1] rcu: rcu_preempt kthread starved for 10443 jiffies! g67289 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 693.772899][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 693.782833][ C1] rcu: RCU grace-period kthread stack dump: [ 693.788687][ C1] task:rcu_preempt state:R running task stack:27560 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 693.802123][ C1] Call Trace: [ 693.805372][ C1] [ 693.808273][ C1] ? __schedule+0x10b9/0x6150 [ 693.812921][ C1] __schedule+0x1139/0x6150 [ 693.817401][ C1] ? __pfx___schedule+0x10/0x10 [ 693.822221][ C1] ? find_held_lock+0x2b/0x80 [ 693.826870][ C1] ? schedule+0x2d7/0x3a0 [ 693.831169][ C1] schedule+0xe7/0x3a0 [ 693.835207][ C1] schedule_timeout+0x123/0x290 [ 693.840026][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 693.845367][ C1] ? __pfx_process_timeout+0x10/0x10 [ 693.850623][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 693.856397][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 693.861828][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 693.866565][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 693.871821][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 693.876989][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 693.881894][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 693.886718][ C1] rcu_gp_kthread+0x26d/0x380 [ 693.891362][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 693.896529][ C1] ? rcu_is_watching+0x12/0xc0 [ 693.901265][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 693.906433][ C1] ? __kthread_parkme+0x19e/0x250 [ 693.911424][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 693.916591][ C1] kthread+0x3c5/0x780 [ 693.920629][ C1] ? __pfx_kthread+0x10/0x10 [ 693.925188][ C1] ? rcu_is_watching+0x12/0xc0 [ 693.929920][ C1] ? __pfx_kthread+0x10/0x10 [ 693.934478][ C1] ret_from_fork+0x983/0xb10 [ 693.939040][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 693.944120][ C1] ? __switch_to+0x7af/0x10d0 [ 693.948766][ C1] ? __pfx_kthread+0x10/0x10 [ 693.953324][ C1] ret_from_fork_asm+0x1a/0x30 [ 693.958067][ C1] [ 693.961054][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 693.967342][ C1] Sending NMI from CPU 1 to CPUs 0: [ 693.972521][ C0] NMI backtrace for cpu 0 [ 693.972534][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 693.972552][ C0] Tainted: [L]=SOFTLOCKUP [ 693.972557][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 693.972564][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 693.972582][ C0] Code: 46 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 b9 11 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 693.972594][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 693.972604][ C0] RAX: 0000000001e269a5 RBX: 0000000000000000 RCX: ffffffff8b78a6d9 [ 693.972613][ C0] RDX: 0000000000000000 RSI: ffffffff8dacf6aa RDI: ffffffff8bf2b580 [ 693.972621][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 693.972629][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 693.972637][ C0] R13: ffffffff8e097b40 R14: ffffffff9088cdd0 R15: 0000000000000000 [ 693.972645][ C0] FS: 0000000000000000(0000) GS:ffff8881248f2000(0000) knlGS:0000000000000000 [ 693.972658][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 693.972667][ C0] CR2: 00007f7d9d1b0f98 CR3: 00000000898b6000 CR4: 00000000003526f0 [ 693.972675][ C0] Call Trace: [ 693.972680][ C0] [ 693.972684][ C0] default_idle+0x13/0x20 [ 693.972695][ C0] default_idle_call+0x6c/0xb0 [ 693.972706][ C0] do_idle+0x38d/0x510 [ 693.972725][ C0] ? __pfx_do_idle+0x10/0x10 [ 693.972745][ C0] cpu_startup_entry+0x4f/0x60 [ 693.972762][ C0] rest_init+0x16b/0x2b0 [ 693.972774][ C0] ? acpi_subsystem_init+0x133/0x180 [ 693.972796][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 693.972811][ C0] start_kernel+0x3ef/0x4d0 [ 693.972826][ C0] x86_64_start_reservations+0x18/0x30 [ 693.972839][ C0] x86_64_start_kernel+0x130/0x190 [ 693.972853][ C0] common_startup_64+0x13e/0x148 [ 693.972873][ C0] [ 694.163215][T12999] slab_out_of_memory: 1388508 callbacks suppressed [ 694.163225][T12999] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 694.179517][T12999] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 694.190008][T12999] node 0: slabs: 75328, objs: 903936, free: 0 [ 694.196230][T12999] node 1: slabs: 271747, objs: 3260964, free: 48 [ 694.202843][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 694.213425][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 694.223919][ C1] node 0: slabs: 75328, objs: 903936, free: 0 [ 694.230127][ C1] node 1: slabs: 271747, objs: 3260964, free: 48 [ 694.237348][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 694.248107][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 694.257891][ C1] node 0: slabs: 516, objs: 16512, free: 0 [ 694.263863][ C1] node 1: slabs: 246, objs: 7872, free: 0 [ 694.269755][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 694.280494][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 694.290285][ C1] node 0: slabs: 516, objs: 16512, free: 0 [ 694.296243][ C1] node 1: slabs: 246, objs: 7872, free: 0 [ 694.302134][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 694.312871][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 694.322650][ C1] node 0: slabs: 516, objs: 16512, free: 0 [ 694.328596][ C1] node 1: slabs: 246, objs: 7872, free: 0 [ 694.334484][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 694.345231][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 694.355008][ C1] node 0: slabs: 516, objs: 16512, free: 0 [ 694.360953][ C1] node 1: slabs: 246, objs: 7872, free: 0 [ 694.366841][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 694.377581][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 694.387361][ C1] node 0: slabs: 516, objs: 16512, free: 0 [ 694.393316][ C1] node 1: slabs: 246, objs: 7872, free: 0 [ 694.399724][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 694.410475][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 694.420260][ C1] node 0: slabs: 516, objs: 16512, free: 0 [ 694.426220][ C1] node 1: slabs: 246, objs: 7872, free: 0 [ 694.432119][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 694.442855][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 694.452637][ C1] node 0: slabs: 516, objs: 16512, free: 0 [ 694.458587][ C1] node 1: slabs: 246, objs: 7872, free: 0 [ 694.464476][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 694.475211][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 694.484989][ C1] node 0: slabs: 516, objs: 16512, free: 0 [ 694.490933][ C1] node 1: slabs: 246, objs: 7872, free: 0 [ 697.861572][T12999] warn_alloc: 2494929 callbacks suppressed [ 697.861592][T12999] syz.1.1816: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 697.880527][T12999] CPU: 1 UID: 0 PID: 12999 Comm: syz.1.1816 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.880549][T12999] Tainted: [L]=SOFTLOCKUP [ 697.880553][T12999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 697.880559][T12999] Call Trace: [ 697.880564][T12999] [ 697.880568][T12999] dump_stack_lvl+0x16c/0x1f0 [ 697.880587][T12999] warn_alloc+0x248/0x3a0 [ 697.880600][T12999] ? __pfx_warn_alloc+0x10/0x10 [ 697.880618][T12999] __alloc_frozen_pages_noprof+0xe9b/0x2430 [ 697.880636][T12999] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 697.880648][T12999] ? __lock_acquire+0x436/0x2890 [ 697.880661][T12999] ? irqentry_exit+0x1dd/0x8c0 [ 697.880675][T12999] ? lockdep_hardirqs_on+0x7c/0x110 [ 697.880692][T12999] ? lock_acquire+0x179/0x330 [ 697.880704][T12999] ? find_held_lock+0x2b/0x80 [ 697.880718][T12999] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 697.880732][T12999] ? policy_nodemask+0xea/0x4e0 [ 697.880747][T12999] alloc_pages_mpol+0x1fb/0x550 [ 697.880761][T12999] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 697.880775][T12999] ? __pfx____ratelimit+0x10/0x10 [ 697.880790][T12999] new_slab+0x2e1/0x430 [ 697.880807][T12999] ___slab_alloc+0xe18/0x1c90 [ 697.880822][T12999] ? skb_release_data+0x79a/0x9e0 [ 697.880835][T12999] ? skb_clone+0x190/0x3f0 [ 697.880849][T12999] ? skb_clone+0x190/0x3f0 [ 697.880860][T12999] ? __slab_alloc.constprop.0+0x63/0x110 [ 697.880875][T12999] __slab_alloc.constprop.0+0x63/0x110 [ 697.880893][T12999] kmem_cache_alloc_noprof+0x44d/0x770 [ 697.880904][T12999] ? skb_clone+0x190/0x3f0 [ 697.880917][T12999] ? skb_clone+0x190/0x3f0 [ 697.880927][T12999] skb_clone+0x190/0x3f0 [ 697.880939][T12999] bpf_clone_redirect+0x166/0x500 [ 697.880956][T12999] bpf_prog_00acfd19bb8886f4+0x5f/0x68 [ 697.880966][T12999] ? __irq_alloc_descs+0x1b0/0x610 [ 697.880977][T12999] ? __schedule+0x114c/0x6150 [ 697.880989][T12999] ? __lock_acquire+0x436/0x2890 [ 697.881005][T12999] ? irqentry_exit+0x1dd/0x8c0 [ 697.881020][T12999] ? irqentry_exit+0x1dd/0x8c0 [ 697.881033][T12999] ? lockdep_hardirqs_on+0x7c/0x110 [ 697.881047][T12999] ? irqentry_exit+0x1dd/0x8c0 [ 697.881064][T12999] ? bpf_test_run+0x2d9/0xb50 [ 697.881077][T12999] ? __pfx___cant_migrate+0x10/0x10 [ 697.881088][T12999] ? bpf_test_timer_continue+0x13e/0x610 [ 697.881099][T12999] ? lockdep_hardirqs_on+0x7c/0x110 [ 697.881114][T12999] bpf_test_run+0x3d2/0xb50 [ 697.881129][T12999] ? __pfx_bpf_test_run+0x10/0x10 [ 697.881150][T12999] ? eth_type_trans+0x2e3/0x740 [ 697.881166][T12999] bpf_prog_test_run_skb+0x1035/0x31a0 [ 697.881187][T12999] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 697.881202][T12999] ? fput+0x70/0xf0 [ 697.881212][T12999] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 697.881225][T12999] __sys_bpf+0x1035/0x4980 [ 697.881240][T12999] ? futex_private_hash_put+0x160/0x1b0 [ 697.881255][T12999] ? __pfx___sys_bpf+0x10/0x10 [ 697.881269][T12999] ? __pfx_futex_wait+0x10/0x10 [ 697.881286][T12999] ? do_futex+0x122/0x350 [ 697.881308][T12999] ? xfd_validate_state+0x61/0x180 [ 697.881322][T12999] __x64_sys_bpf+0x78/0xc0 [ 697.881337][T12999] ? lockdep_hardirqs_on+0x7c/0x110 [ 697.881350][T12999] do_syscall_64+0xcd/0xf80 [ 697.881365][T12999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.881376][T12999] RIP: 0033:0x7f2bc498f749 [ 697.881386][T12999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.881396][T12999] RSP: 002b:00007f2bc57dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 697.881406][T12999] RAX: ffffffffffffffda RBX: 00007f2bc4be6180 RCX: 00007f2bc498f749 [ 697.881413][T12999] RDX: 000000000000004c RSI: 0000200000001300 RDI: 000000000000000a [ 697.881419][T12999] RBP: 00007f2bc4a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 697.881425][T12999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.881431][T12999] R13: 00007f2bc4be6218 R14: 00007f2bc4be6180 R15: 00007ffcd1fdc668 [ 697.881444][T12999] [ 697.881448][T12999] Mem-Info: [ 698.267481][T12999] active_anon:44402 inactive_anon:0 isolated_anon:0 [ 698.267481][T12999] active_file:19602 inactive_file:49180 isolated_file:0 [ 698.267481][T12999] unevictable:791 dirty:596 writeback:235 [ 698.267481][T12999] slab_reclaimable:13457 slab_unreclaimable:1327315 [ 698.267481][T12999] mapped:43082 shmem:34973 pagetables:1375 [ 698.267481][T12999] sec_pagetables:0 bounce:0 [ 698.267481][T12999] kernel_misc_reclaimable:0 [ 698.267481][T12999] free:8401 free_pcp:21044 free_cma:0 [ 698.312988][T12999] Node 0 active_anon:177608kB inactive_anon:0kB active_file:78408kB inactive_file:196520kB unevictable:1628kB isolated(anon):0kB isolated(file):0kB mapped:172328kB dirty:2380kB writeback:940kB shmem:138356kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14108kB pagetables:5364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 698.345197][T12999] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 698.374960][T12999] Node 0 DMA free:9900kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 698.405077][T12999] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 698.410784][T12999] Node 0 DMA32 free:4032kB boost:76696kB min:110788kB low:119308kB high:127828kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:177608kB inactive_anon:0kB active_file:78408kB inactive_file:196520kB unevictable:1628kB writepending:3320kB zspages:0kB present:3129332kB managed:2540808kB mlocked:92kB bounce:0kB free_pcp:62260kB local_pcp:15300kB free_cma:0kB [ 698.444891][T12999] lowmem_reserve[]: 0 0 1 1 1 [ 698.449552][T12999] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 698.479056][T12999] lowmem_reserve[]: 0 0 0 0 0 [ 698.483731][T12999] Node 1 Normal free:19672kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:4096KB free_highatomic:2608KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21792kB local_pcp:10348kB free_cma:0kB [ 698.516275][T12999] lowmem_reserve[]: 0 0 0 0 0 [ 698.520936][T12999] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 9892kB [ 698.534883][T12999] Node 0 DMA32: 0*4kB 0*8kB 0*16kB 1*32kB (M) 0*64kB 0*128kB 0*256kB 8*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 4128kB [ 698.547161][T12999] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 698.558563][T12999] Node 1 Normal: 2*4kB (ME) 5*8kB (UME) 8*16kB (MEH) 6*32kB (MEH) 2*64kB (ME) 3*128kB (UME) 5*256kB (MEH) 2*512kB (M) 4*1024kB (MEH) 2*2048kB (UE) 2*4096kB (M) = 19568kB [ 698.575480][T12999] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 698.585007][T12999] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 698.594267][T12999] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 698.603786][T12999] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 698.613045][T12999] 103752 total pagecache pages [ 698.617773][T12999] 0 pages in swap cache [ 698.621906][T12999] Free swap = 124996kB [ 698.626026][T12999] Total swap = 124996kB [ 698.630144][T12999] 2097051 pages RAM [ 698.633929][T12999] 0 pages HighMem/MovableOnly [ 698.638570][T12999] 429823 pages reserved [ 698.642700][T12999] 0 pages cma reserved [ 699.171572][T12999] slab_out_of_memory: 1278327 callbacks suppressed [ 699.171591][T12999] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 699.187894][T12999] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 699.198370][T12999] node 0: slabs: 75377, objs: 904524, free: 0 [ 699.204589][T12999] node 1: slabs: 271747, objs: 3260964, free: 48 [ 699.211112][T12999] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 699.220899][T12999] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 699.231387][T12999] node 0: slabs: 75377, objs: 904524, free: 0 [ 699.237605][T12999] node 1: slabs: 271747, objs: 3260964, free: 48 [ 699.244132][T12999] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 699.253916][T12999] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 699.264392][T12999] node 0: slabs: 75377, objs: 904524, free: 0 [ 699.270604][T12999] node 1: slabs: 271747, objs: 3260964, free: 48 [ 699.277431][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 699.288180][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 699.297962][ C1] node 0: slabs: 516, objs: 16512, free: 0 [ 699.303918][ C1] node 1: slabs: 246, objs: 7872, free: 0 [ 699.309802][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 699.320553][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 699.330335][ C1] node 0: slabs: 516, objs: 16512, free: 0 [ 699.336294][ C1] node 1: slabs: 246, objs: 7872, free: 0 [ 699.342232][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 699.352999][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 699.362794][ C1] node 0: slabs: 516, objs: 16512, free: 0 [ 699.368740][ C1] node 1: slabs: 246, objs: 7872, free: 0 [ 699.374642][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 699.385381][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 699.395161][ C1] node 0: slabs: 516, objs: 16512, free: 0 [ 699.401106][ C1] node 1: slabs: 246, objs: 7872, free: 0 [ 699.407000][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 699.417749][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 699.427529][ C1] node 0: slabs: 516, objs: 16512, free: 0 [ 699.433486][ C1] node 1: slabs: 246, objs: 7872, free: 0 [ 699.439371][T12999] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 699.449158][T12999] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 699.459634][T12999] node 0: slabs: 75378, objs: 904536, free: 0 [ 699.465856][T12999] node 1: slabs: 271747, objs: 3260964, free: 48 [ 699.472748][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 699.483240][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 699.493736][ C1] node 0: slabs: 75379, objs: 904548, free: 0 [ 699.499944][ C1] node 1: slabs: 271747, objs: 3260964, free: 48