last executing test programs: 19m55.916830099s ago: executing program 2 (id=614): readv(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040bd280909000000000001090224000100000001090400070203e0740009210800000322180009058103"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000019880), 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f00000198c0)={0x5, 0x400, 0x4}) r5 = epoll_create1(0x80000) epoll_pwait(r5, &(0x7f00000195c0)=[{}], 0x1, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019600)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000196c0)='./mnt\x00', 0x0) mount(&(0x7f0000019700)=@filename='./dev/sda1\x00', &(0x7f0000019740)='./mnt\x00', &(0x7f0000000000)='ocfs2_dlmfs\x00', 0x8410, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) setxattr$system_posix_acl(&(0x7f00000197c0)='./mnt\x00', &(0x7f0000019800)='system.posix_acl_access\x00', &(0x7f0000019840)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x2}], {0x10, 0x1}}, 0x2c, 0x1) 19m52.652313645s ago: executing program 2 (id=617): prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) getpid() r1 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) pipe2(&(0x7f0000000300), 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000dc0)='dctcp', 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) read$msr(r1, &(0x7f0000001600)=""/102392, 0x18ff8) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x7fff, 0xa, 0x2}) 19m46.727590199s ago: executing program 2 (id=627): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r4, &(0x7f00000077c0)=""/102392, 0x18ff8) futex(0x0, 0x10b, 0x2, &(0x7f00000207c0)={0x77359400}, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000020840)={0x0, 0x0, &(0x7f0000020880)={&(0x7f00000208c0)=ANY=[@ANYBLOB="3000000041000f01fefeffff00000000017c0000040042801400018006000600800a000008000900", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_xfrm(r5, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r7}, &(0x7f0000000b00), 0x0}, 0x20) write(r0, &(0x7f00000000c0)="8f2a0a6500000000000000070580a7b6070d63e286a5cefe", 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 19m45.425943174s ago: executing program 2 (id=631): prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) getpid() r1 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) pipe2(&(0x7f0000000300), 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000dc0)='dctcp', 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) read$msr(r1, &(0x7f0000001600)=""/102392, 0x18ff8) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x7fff, 0xa, 0x2}) 19m42.363776279s ago: executing program 2 (id=633): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000005c0)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000640), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000740)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000780), 0x0, 0x0) read$msr(r4, &(0x7f00000007c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) connect$bt_l2cap(r5, &(0x7f00000197c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000019800)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r1, &(0x7f000001a840)=[{&(0x7f000001a880)='c', 0x1}], 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000280)=0xffffffffffffffff) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x1}) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) 19m40.6883685s ago: executing program 2 (id=636): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000000a40)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019a40)=0x80000000000003) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e24, 0xf, @remote, 0x1}, 0x34) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 19m25.287381264s ago: executing program 32 (id=636): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000000a40)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019a40)=0x80000000000003) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e24, 0xf, @remote, 0x1}, 0x34) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 16m7.264403903s ago: executing program 1 (id=875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = socket$inet6(0xa, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) setuid(0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000680)={@initdev, 0x0}, &(0x7f00000006c0)=0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r7}, &(0x7f0000000980), &(0x7f00000009c0)=r8}, 0x20) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000a00)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={r8, r10, 0x25, 0x2, @void}, 0x10) sendmmsg$inet6(r4, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x5, @local, 0x10}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000003c0)="3aae888658314ae4bd4f355e19193e9fc8ba8d64a6cb6487398d97848f5c7bf8a0b1fea9a9104df048ecf16090d05f13b19a86c5d10651ddbb792f05e2b515fa99f33b164b7dca3ab0f5ab381dbd91d624b79ae9b66702b6b883993c104046112bf8b0b96f9591afede3803f6bc7189404917a3b833e21cffcc93b00a3b38e2f07b69e11c55d03509028bb5dee5730125ae295516ccedef6de5ba447cfb5f94e7477", 0xa2}, {&(0x7f0000000480)="33dec6b9cc4c1d44c19135607deaddfd28dadf7453fd0309ba86470583a979e8ad81930248be61c8982aa6ad4bdc1422772dcd8f920cf839321d3427791861f6c18b1aa862693402ed8e738a78c71aaaceb9b0acce2985996cb397ff1d9117e8722f31f4c39937472adfb12773429a7f422b67c83856a87e0aa75c13691240e80c8d5bf5f917182ffe0fd6f52f77c7", 0x8f}, {&(0x7f0000000540)="4aabc2e8d1a5bbb8098a5a3e1a7e7257e647db854a37dcf21b0876ebfcddd1800ca2", 0x22}, {&(0x7f0000000580)="fde9fe700e70389004dd1170339fd09284a4e6e0e2f5c81318c55ab4e0a70e2fb7f6466a2570b8706e0af2762d07feccfb7e936a24c71e89c64f0f62b0c0a43b", 0x40}, {&(0x7f00000005c0)="81e5951de987fdf1ad66039f27d6e15e0636830f241c2aedf274cb69f817c6972c393c1746e0", 0x26}], 0x5, &(0x7f0000000a80)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r5}}}, @hopopts={{0x150, 0x29, 0x36, {0x67, 0x26, '\x00', [@ra={0x5, 0x2, 0x5}, @generic={0x7d, 0xe6, "04d457a4d8367683cad4504705a7256846e4c991646665115c9e21ff63d2daab440db2d41d9f65195a105d0ac9f141b28361e762d9a7a16600184486c3281d28a3cc846226fa63b0d037aa1a91a4a47500ace9a35b34f44bc71e0a1740c77892a9585f2f3cf37e2dc991fc442d27b53e5bd76e79593c89c62a9bd4de5c69654bfecb2360eeff9d8792e19e712466b5a2a1d2089fff1709f704ab368a76bfe7adef5d0de18211792d5d5fdd6a06918abf585cf9c1f9ea474a397f7fd45189b4aa30ff40b0671df38affe73c7eb9aedadbd6f50ad4bf2f5b9cbeb4779a84022674d44b2e00aae7"}, @jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x401}, @ra={0x5, 0x2, 0x4}, @pad1, @hao={0xc9, 0x10, @empty}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0xa9, [0x0, 0x9]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r10}}}, @dstopts={{0x48, 0x29, 0x37, {0x2f, 0x6, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @enc_lim={0x4, 0x1, 0x7f}, @enc_lim={0x4, 0x1, 0xf4}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @enc_lim={0x4, 0x1, 0x3}]}}}], 0x1e8}}, {{&(0x7f0000000c80)={0xa, 0x4e24, 0x6a, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)="fe8fab9261ff501e935955cbd5e09ae5a241676f174f6e28390fab6bffb76b76e2892b16c8f10c9e2fe3961790e4de531a7311c5f44add79d6931f6b1428b8cbccc156b0f169587202f99b5fb5ca18c1ea73a925fe32f2adc32e6eb9eabd0b4aa7551b6bed6887ba62b933f2d89dbfc41d6a5b348a87d92862ac09b8ca4de8137b25e381ac5475bc3302312bebf8f570b89c485f4cc8b464f681e7298f9d2c39f51ec4a8e14b8e05b63879855668d4a43f163f1cb74dce46ee0d988117880a0bd1811b5a", 0xc4}], 0x1, &(0x7f0000000e00)=[@tclass={{0x14, 0x29, 0x43, 0x101}}, @hopopts={{0x30, 0x29, 0x36, {0x0, 0x2, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0x7, [0x8a65]}}]}}}], 0x48}}, {{&(0x7f0000000e80)={0xa, 0x4e21, 0xc, @loopback}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000ec0)="3fa3c7b757cc4eb48e48", 0xa}, {&(0x7f0000000f00)="b1c893fcb97dc254d169e1dcba9cfa4c1b3e224f0e5d18052f5e1d7da7f1d59adc4d7776e0", 0x25}, {&(0x7f0000000f40)="a2c4bef4abc8a82b", 0x8}, {&(0x7f0000000f80)="b6b936f03ce7601529a471d0d02d335883e1d255104972676b9ee74072bea6bbe890b7904fbb8adc6665", 0x2a}, {&(0x7f0000000fc0)="e87b6c0ee4e6130b208e6d46fd5ba82dc44f8e988526b0e2f243cd5803943d0fe79bb1257f3d9e2ec52da9b5b09eff14e728e47412a02665ae68558cb70791c84131ea20440653e4ad2a729c", 0x4c}, {&(0x7f0000001040)="589c8e099b31bf2f9f8a223386a12e4a17c66cf625d91bc980f1d6e5d48e9933d77f7fbb6b21a351fc59", 0x2a}], 0x6}}, {{&(0x7f0000001100)={0xa, 0x4e22, 0x6, @local}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001140)="e96b0afefa37cc885369848648596638453a6a1b1d7410ff20aa1aaa8f8ea03ac3b5a2a1c97ab300beb908649270983518a995ecca90ed967c97b51e3862f87c627737a5647b1f67642cb2e7b1e99b2d09fff75c0150291bc8845a35cf5fd8c6ba8331f1e96a9f3e3c4c38cde3b42516d337fee0ca5f66f6dc1ed1b4c0d613913400f08542efb6a5fd2bdcafc2a1d51482e263a0877511afe180bc6009d03e4ca28fd8b0a127618c5f80c860ea87914de3a7044ee9931c22404ac252381e5d9dd888cbc1b59de01c4a395e9048c2f7c394220ae7914b94dafdd48a41c63daaeea2794ed8fc822301d1cc8409ec74c8df", 0xf0}, {&(0x7f0000001240)="07487d401a9a9fe3e6f98b61ec4d649b4d2017ec4d785d36b19b31b5b0a8363951ed07d04e9fdc749058ca75c15a1c9da5a82b64703be87a9913f95eae1fc8d168eafd3778695b077752f24d0870ee4df5902f90a42ecda7b03b738e1ebc9a1a56d52ddff7911cd03e0667f3dbd0d0b74e294f05b86418f180e797f3d47f374585c3524b7cf9d94685e921d67424304f040f297ce39dcdf36b900e4e8972e3daf92707aeab51c6d307f3fdcb8cceb9d29f87e78a3b5353518c8e3c29c22d74e4e9f9138ecc2b47c13a1f914379de9a37530974708388", 0xd6}, {&(0x7f0000001340)="3ab38b6c81bf9cd7e1440a271aa6e1", 0xf}, {&(0x7f0000001380)="509049bbd3ecdad519eddd9211992961eed06ee0187d9d2a2cd9b16fcc98f014583cf1a85a3bb5b1d3ccd1a131ac282b76823053b87ffb4a8989ec44888e4d2a3a50e26866d8dc0f3a56f0cd268c57c4c09b9a76e51e967e1139fed41c521993b5cad0c219cdc1db07392f175f7415965e6615b8572d69585184063b29c126ce647789c799158da2b6336116a319976ca038153aecd4c2", 0x97}, {&(0x7f0000001440)="627ec3810f88d2b68a21d90f0076530935013dd9f68157ee1eba1d1a94fdc0f97b53eb2cce", 0x25}, {&(0x7f0000001480)="01aa893e74466f12d704ae85f08f2bd48cc516d3f0b10353c0ae8820ec6602e3455f66cd539952cb196414a4ee44a716b0dc7a02b2706a4ca15932e9e64e45c06c7144dec698ea0852f755a42d2aacd372ac5b5a62ec84fb6d9af21a6a67ae905f4690b9a4feb78b5979d0b71f81623be3f5f644cfd2d3131794f469cb85c84e0bfc146d1ddb67d4c24ad4d15145edce73ec4ff72470ea372a7a0fecc901b36315e94ee2a0b980e20682dd08c6e172bdfe", 0xb1}, {&(0x7f0000001540)="4a02f6a1d913fd59007783abcab106784556a5cae23cedc5f2db7f0caec318861d5ef1550fd5a7fbe30d2efa54b3df950027aa890edc18d67a6e37f17e5b8ac40c37efbd653c7890cb438ac7dc6bb0ad4924a2eec6220326a05ca7474c1c005e6c54", 0x62}, {&(0x7f00000015c0)="a742b4ece46bfba543133f23f669676bb22e70b8df3b821b8be529209e164ba45fe9fec6c4b9cc4700e1892c2f5307", 0x2f}], 0x8, &(0x7f0000001680)=[@hopopts={{0x20, 0x29, 0x36, {0x2e, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x2c, 0xe, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3b}, @mcast1, @mcast1, @remote, @mcast1]}}}], 0xc0}}], 0x4, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64=r11], 0x18}}, 0x2080) 16m2.700478275s ago: executing program 1 (id=881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setns(0xc9, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 15m59.241291388s ago: executing program 1 (id=887): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0xff, @remote, 0x7f}, @in6={0xa, 0x4e22, 0x2, @local, 0xa}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x800}], 0x64) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev\x00') bpf$MAP_CREATE(0x2000000000000018, 0x0, 0x48) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x141102) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000580)="94", 0xf000}, {0x0}], 0x2) openat$userio(0xffffffffffffff9c, &(0x7f00000005c0), 0x6242, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) socket$nl_route(0x10, 0x3, 0x0) 15m56.831790027s ago: executing program 1 (id=891): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = socket$inet6(0xa, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) setuid(0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000680)={@initdev, 0x0}, &(0x7f00000006c0)=0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r7}, &(0x7f0000000980), &(0x7f00000009c0)=r8}, 0x20) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000a00)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={r8, r10, 0x25, 0x2, @void}, 0x10) sendmmsg$inet6(r4, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x5, @local, 0x10}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000003c0)="3aae888658314ae4bd4f355e19193e9fc8ba8d64a6cb6487398d97848f5c7bf8a0b1fea9a9104df048ecf16090d05f13b19a86c5d10651ddbb792f05e2b515fa99f33b164b7dca3ab0f5ab381dbd91d624b79ae9b66702b6b883993c104046112bf8b0b96f9591afede3803f6bc7189404917a3b833e21cffcc93b00a3b38e2f07b69e11c55d03509028bb5dee5730125ae295516ccedef6de5ba447cfb5f94e7477", 0xa2}, {&(0x7f0000000480)="33dec6b9cc4c1d44c19135607deaddfd28dadf7453fd0309ba86470583a979e8ad81930248be61c8982aa6ad4bdc1422772dcd8f920cf839321d3427791861f6c18b1aa862693402ed8e738a78c71aaaceb9b0acce2985996cb397ff1d9117e8722f31f4c39937472adfb12773429a7f422b67c83856a87e0aa75c13691240e80c8d5bf5f917182ffe0fd6f52f77c7", 0x8f}, {&(0x7f0000000540)="4aabc2e8d1a5bbb8098a5a3e1a7e7257e647db854a37dcf21b0876ebfcddd1800ca2", 0x22}, {&(0x7f0000000580)="fde9fe700e70389004dd1170339fd09284a4e6e0e2f5c81318c55ab4e0a70e2fb7f6466a2570b8706e0af2762d07feccfb7e936a24c71e89c64f0f62b0c0a43b", 0x40}, {&(0x7f00000005c0)="81e5951de987fdf1ad66039f27d6e15e0636830f241c2aedf274cb69f817c6972c393c1746e0", 0x26}], 0x5, &(0x7f0000000a80)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r5}}}, @hopopts={{0x150, 0x29, 0x36, {0x67, 0x26, '\x00', [@ra={0x5, 0x2, 0x5}, @generic={0x7d, 0xe6, "04d457a4d8367683cad4504705a7256846e4c991646665115c9e21ff63d2daab440db2d41d9f65195a105d0ac9f141b28361e762d9a7a16600184486c3281d28a3cc846226fa63b0d037aa1a91a4a47500ace9a35b34f44bc71e0a1740c77892a9585f2f3cf37e2dc991fc442d27b53e5bd76e79593c89c62a9bd4de5c69654bfecb2360eeff9d8792e19e712466b5a2a1d2089fff1709f704ab368a76bfe7adef5d0de18211792d5d5fdd6a06918abf585cf9c1f9ea474a397f7fd45189b4aa30ff40b0671df38affe73c7eb9aedadbd6f50ad4bf2f5b9cbeb4779a84022674d44b2e00aae7"}, @jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x401}, @ra={0x5, 0x2, 0x4}, @pad1, @hao={0xc9, 0x10, @empty}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0xa9, [0x0, 0x9]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r10}}}, @dstopts={{0x48, 0x29, 0x37, {0x2f, 0x6, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @enc_lim={0x4, 0x1, 0x7f}, @enc_lim={0x4, 0x1, 0xf4}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @enc_lim={0x4, 0x1, 0x3}]}}}], 0x1e8}}, {{&(0x7f0000000c80)={0xa, 0x4e24, 0x6a, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)="fe8fab9261ff501e935955cbd5e09ae5a241676f174f6e28390fab6bffb76b76e2892b16c8f10c9e2fe3961790e4de531a7311c5f44add79d6931f6b1428b8cbccc156b0f169587202f99b5fb5ca18c1ea73a925fe32f2adc32e6eb9eabd0b4aa7551b6bed6887ba62b933f2d89dbfc41d6a5b348a87d92862ac09b8ca4de8137b25e381ac5475bc3302312bebf8f570b89c485f4cc8b464f681e7298f9d2c39f51ec4a8e14b8e05b63879855668d4a43f163f1cb74dce46ee0d988117880a0bd1811b5a", 0xc4}], 0x1, &(0x7f0000000e00)=[@tclass={{0x14, 0x29, 0x43, 0x101}}, @hopopts={{0x30, 0x29, 0x36, {0x0, 0x2, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0x7, [0x8a65]}}]}}}], 0x48}}, {{&(0x7f0000000e80)={0xa, 0x4e21, 0xc, @loopback}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000ec0)="3fa3c7b757cc4eb48e48", 0xa}, {&(0x7f0000000f00)="b1c893fcb97dc254d169e1dcba9cfa4c1b3e224f0e5d18052f5e1d7da7f1d59adc4d7776e0", 0x25}, {&(0x7f0000000f40)="a2c4bef4abc8a82b", 0x8}, {&(0x7f0000000f80)="b6b936f03ce7601529a471d0d02d335883e1d255104972676b9ee74072bea6bbe890b7904fbb8adc6665", 0x2a}, {&(0x7f0000000fc0)="e87b6c0ee4e6130b208e6d46fd5ba82dc44f8e988526b0e2f243cd5803943d0fe79bb1257f3d9e2ec52da9b5b09eff14e728e47412a02665ae68558cb70791c84131ea20440653e4ad2a729c", 0x4c}, {&(0x7f0000001040)="589c8e099b31bf2f9f8a223386a12e4a17c66cf625d91bc980f1d6e5d48e9933d77f7fbb6b21a351fc59", 0x2a}], 0x6}}, {{&(0x7f0000001100)={0xa, 0x4e22, 0x6, @local}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001140)="e96b0afefa37cc885369848648596638453a6a1b1d7410ff20aa1aaa8f8ea03ac3b5a2a1c97ab300beb908649270983518a995ecca90ed967c97b51e3862f87c627737a5647b1f67642cb2e7b1e99b2d09fff75c0150291bc8845a35cf5fd8c6ba8331f1e96a9f3e3c4c38cde3b42516d337fee0ca5f66f6dc1ed1b4c0d613913400f08542efb6a5fd2bdcafc2a1d51482e263a0877511afe180bc6009d03e4ca28fd8b0a127618c5f80c860ea87914de3a7044ee9931c22404ac252381e5d9dd888cbc1b59de01c4a395e9048c2f7c394220ae7914b94dafdd48a41c63daaeea2794ed8fc822301d1cc8409ec74c8df", 0xf0}, {&(0x7f0000001240)="07487d401a9a9fe3e6f98b61ec4d649b4d2017ec4d785d36b19b31b5b0a8363951ed07d04e9fdc749058ca75c15a1c9da5a82b64703be87a9913f95eae1fc8d168eafd3778695b077752f24d0870ee4df5902f90a42ecda7b03b738e1ebc9a1a56d52ddff7911cd03e0667f3dbd0d0b74e294f05b86418f180e797f3d47f374585c3524b7cf9d94685e921d67424304f040f297ce39dcdf36b900e4e8972e3daf92707aeab51c6d307f3fdcb8cceb9d29f87e78a3b5353518c8e3c29c22d74e4e9f9138ecc2b47c13a1f914379de9a37530974708388", 0xd6}, {&(0x7f0000001340)="3ab38b6c81bf9cd7e1440a271aa6e1", 0xf}, {&(0x7f0000001380)="509049bbd3ecdad519eddd9211992961eed06ee0187d9d2a2cd9b16fcc98f014583cf1a85a3bb5b1d3ccd1a131ac282b76823053b87ffb4a8989ec44888e4d2a3a50e26866d8dc0f3a56f0cd268c57c4c09b9a76e51e967e1139fed41c521993b5cad0c219cdc1db07392f175f7415965e6615b8572d69585184063b29c126ce647789c799158da2b6336116a319976ca038153aecd4c2", 0x97}, {&(0x7f0000001440)="627ec3810f88d2b68a21d90f0076530935013dd9f68157ee1eba1d1a94fdc0f97b53eb2cce", 0x25}, {&(0x7f0000001480)="01aa893e74466f12d704ae85f08f2bd48cc516d3f0b10353c0ae8820ec6602e3455f66cd539952cb196414a4ee44a716b0dc7a02b2706a4ca15932e9e64e45c06c7144dec698ea0852f755a42d2aacd372ac5b5a62ec84fb6d9af21a6a67ae905f4690b9a4feb78b5979d0b71f81623be3f5f644cfd2d3131794f469cb85c84e0bfc146d1ddb67d4c24ad4d15145edce73ec4ff72470ea372a7a0fecc901b36315e94ee2a0b980e20682dd08c6e172bdfe", 0xb1}, {&(0x7f0000001540)="4a02f6a1d913fd59007783abcab106784556a5cae23cedc5f2db7f0caec318861d5ef1550fd5a7fbe30d2efa54b3df950027aa890edc18d67a6e37f17e5b8ac40c37efbd653c7890cb438ac7dc6bb0ad4924a2eec6220326a05ca7474c1c005e6c54", 0x62}, {&(0x7f00000015c0)="a742b4ece46bfba543133f23f669676bb22e70b8df3b821b8be529209e164ba45fe9fec6c4b9cc4700e1892c2f5307", 0x2f}], 0x8, &(0x7f0000001680)=[@hopopts={{0x20, 0x29, 0x36, {0x2e, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x2c, 0xe, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3b}, @mcast1, @mcast1, @remote, @mcast1]}}}], 0xc0}}], 0x4, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64=r11], 0x18}}, 0x2080) 15m55.823602535s ago: executing program 1 (id=892): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0x4000000d20, 0x3, 0x0, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x100, 0x3, 0x4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x1, 0x2aa, 0x7, 0xc39, 0x8, 0x8, 0x0, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffdfa, 0x81, 0x100, 0x5, 0x933, 0x200000101, 0x3, 0x8001, 0x8000020000000400, 0x7, 0x1, 0x8, 0xa, 0x6, 0x100, 0x40, 0x83, 0x1e13, 0x9, 0xda, 0x2, 0x0, 0x4, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x2, 0xfffffffffffffffd, 0x2c, 0x5bc, 0x4, 0x7fffffff, 0x4, 0x8000, 0x4, 0x7, 0x6, 0xc, 0x82c, 0x7ff, 0x1, 0x1fcc, 0x6, 0x0, 0xae4, 0x22, 0x1, 0x7, 0x1, 0x1, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x3ff, 0xfffffffd, 0x0, 0x4, 0x7, 0x7, 0x7, 0x9, 0xffe, 0x8000000000000001, 0x6, 0x68d, 0xfffffffffff743b0, 0x8, 0x50000000000000, 0xe, 0x8000000000, 0x0, 0x9, 0x4, 0x7, 0x6, 0x3, 0x8, 0x2000000000000005, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xc, 0x3]}) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) prlimit64(0x0, 0xe, &(0x7f0000000ec0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f00)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000f40)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000f80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000fc0), 0x0, 0x0) read$msr(r5, &(0x7f0000001000)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f000001a040)='./tracing\x00', &(0x7f000001a080)='tracefs\x00', 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={0x0, 0x90}, &(0x7f0000001180)=ANY=[], &(0x7f0000000980)="929835a77d8fae0300000000000000a804bfc80349e1f140d6d7fe01e9c88fbc79dc97601bddeea9d91438988e1cee39ee49b5542d47923d8d802603a4e73dde649aacebb145381a46f82747f0db81470d91a84ea4cb1d1c8d6558aaab1171ba3dd7749ccdaa11a46f5c9d716c282058b525774e1af61664d062b5ad5d0f4c61431265373c44d5f91aeb92dfc0f7052f", 0x0) 15m54.490514364s ago: executing program 1 (id=893): inotify_init1(0x800) pipe(&(0x7f00000001c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x76, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0xdc) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x10000000}) 15m39.126931397s ago: executing program 33 (id=893): inotify_init1(0x800) pipe(&(0x7f00000001c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x76, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0xdc) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x10000000}) 11m1.451290194s ago: executing program 3 (id=1224): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r3, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./trace\x00', 0x1ff) socket$inet(0x2, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x180) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000780)='7', 0x1) mq_open(&(0x7f00000007c0)='.F[.\x00', 0x40, 0xe8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0x7f, 0x0, 0xf1, 0x24, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7800, 0x1000, 0x5}}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x2a800, 0x0) preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000001000)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000300), 0x0, &(0x7f0000000480)}, 0x10000000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000200000019500000000000000f59458ba02933603fdf80b03065ebe730aeca5fb4db193bfcd52f9c3ccda1992beb30498599aed264596d17840978b6b29a5f4d3a444e51b1353c23eb098f4b9473c20a9a092b2c8a7f17b1d7c6bba83d124142ae81f1e1a14e8e76c25185a424ce835ef909af1934781dbd7c4ec2531330ee97bb17767ad6d64d7d4109ccad4"], &(0x7f0000000ec0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r7, 0x0, 0xe, 0x0, &(0x7f0000000fc0)="e0b9545dd30a2131677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m59.935355832s ago: executing program 3 (id=1227): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x2, @local, 0xa}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x800}], 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev\x00') bpf$MAP_CREATE(0x2000000000000018, 0x0, 0x48) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x141102) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000580)="94", 0xf000}, {0x0}], 0x2) openat$userio(0xffffffffffffff9c, &(0x7f00000005c0), 0x6242, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10m55.467658466s ago: executing program 3 (id=1233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410017ff5d81"], 0x0) r3 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000040)='./file0\x00', 0xc000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x26000, 0x102280}) syz_usb_connect$midi(0x5, 0x106, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xbf, 0xe41, 0x4246, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf4, 0x1, 0x1, 0x8, 0x80, 0xa, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x0, 0x55, [@ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xb, 0x8}, @midi_in_jack={0x6, 0x24, 0x2, 0x1}, @midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x10, 0x7, [{0xdf, 0x3b}, {0x7f, 0x8}, {0x80, 0x3}, {0x4, 0x9}, {0x9, 0x40}, {0x3a, 0x4}, {0x0, 0x9}]}, @ms_header={0x7, 0x24, 0x1, 0xc, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x1}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x1, 0x18}], [{{0x9, 0x5, 0xc, 0x11, 0x400, 0x3, 0xd, 0x0, {0x9, 0x25, 0x1, 0x5, "db8d1d4855"}}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x8, 0xc0, 0x7, {0x8, 0x25, 0x1, 0x4, "8d0b8e8f"}}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x8, 0xa, 0x1, {0x13, 0x25, 0x1, 0xf, "8dc048ab05666260876f8fe98e237b"}}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0xff, 0x1, 0x7, {0x8, 0x25, 0x1, 0x4, "a4d35ac8"}}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x0, 0xc, 0x9, {0x13, 0x25, 0x1, 0xf, "ebfdcf85ef6bd1708005ae41370711"}}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x4, 0xa, 0x4, {0x4}}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0xa, 0x9, 0x5, {0xd, 0x25, 0x1, 0x9, "a4e04b44bbae990ce0"}}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x8, 0xa, 0x8, {0xf, 0x25, 0x1, 0xb, "931671422a7bf2c922a19f"}}}]}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x7f, 0x3, 0x2, 0x20, 0x4}, 0xb8, &(0x7f0000000500)={0x5, 0xf, 0xb8, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0xfe, 0x4, 0x4, 0x0, 0x0, [0xf, 0xc0cf, 0xf, 0x0]}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x0, 0xff00, 0x1ff, [0xc030, 0xff00c0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x7, 0x8, 0x100}, @generic={0x5a, 0x10, 0x4, "d809dd2022f240decd2efc19d37914d284da2c53b339598a68d981cc4f21ded818558270f7ece85d65f71072b588a1c5c99b5ff6e5aeb7e0fb7a7c2b66c654a7885af96067f84519bd4d008f204c089ba759b788561566"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x2, 0x6, 0x662, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "e619818c96dba786ce6cdad33baa2660"}]}, 0x3, [{0xae, &(0x7f0000000600)=@string={0xae, 0x3, "e4efe1b3fcc1b423866334aa558b481afe259be4d2798873be8281e00bb688d4c8b052b79c39422f914fe1dc9881a28f39c6c5df1c57d005dcdaa59a62fc89f1df4fe13f0b25503560cff254e7518d220d729f133fb55024bcd2b4e038fafc98947afa8e88aed93009bfd1bf398ab09453de1b016a27686eedb3281e128ba62d4d2c2cdc9cb3ec85a4e995d8321c645bc5fba1712e6d87e697c135a61b6b2bdc3073b88bd715861bbb02053a"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x421}}, {0xe2, &(0x7f0000000700)=@string={0xe2, 0x3, "ad1f87668af31c9cc78db8e418bc629c978396f7b24b3a03cd12c3ff62bc44c9b101a90f55815667d17b29e6b956147702f452d18059909aad1d65e1cef0275946e0c52fd8e3a32d36911b69ac6ace91a239d7240a3a3fd31cb042d1a1910f159769aca01c977cb3417311ae025672dd3612e4389376c8403cbfa7cdadd8c919221379e6ddb7824c9b405e4bb023c9216e7ea817862628292f12c3ea71a1830a7b1ab978d5b6b4e12b5b64398a0cb30e60560acf0ab4f47e6d2b954a896fa1b23f92315ad53dae5a5fbe356db289c4fedbb1278eb5181adcd193393f4ea04010"}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r5) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000019c0), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001a00)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000001a40)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000001a80)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x4e22, 0x17c1, 0x20, 0x0, @wg=@data={0x4, 0x7, 0x5, "62f64abac99f1a17"}}}}}}}, 0x4a) recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/4100, 0x1004}, {&(0x7f00000018c0)=""/5, 0x5}, {&(0x7f0000001900)=""/72, 0x48}, {&(0x7f0000001980)=""/35, 0x23}], 0x4}, 0x400000}], 0x1, 0x22000, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m51.440377723s ago: executing program 3 (id=1241): r0 = socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000980)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000199c0)='.\x00', 0x8000, 0x1b6) fanotify_mark(0xffffffffffffffff, 0x2, 0x800003a, r5, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x8000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) 10m50.200081889s ago: executing program 3 (id=1243): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000000940)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019940)=0x7) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000019a00)={0x0, 0x0, &(0x7f0000019a40)={&(0x7f0000019a80)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c"], 0xbc}}, 0x0) 10m44.898799038s ago: executing program 3 (id=1248): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000400), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000440)={0x0, 0x280, 0x1e0, 0x34325241, 0x3, [0x2], [0x80ffff, 0x7f], [0x0, 0x0, 0x9], [0x400000000000000]}) 10m29.379914494s ago: executing program 34 (id=1248): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000400), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000440)={0x0, 0x280, 0x1e0, 0x34325241, 0x3, [0x2], [0x80ffff, 0x7f], [0x0, 0x0, 0x9], [0x400000000000000]}) 8.118861962s ago: executing program 4 (id=2523): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffe) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa0000000000000000001f4900000000000000f9550a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x50, 0x21, 0x1, 0x4, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x67}}}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r8, &(0x7f0000000780)='\\x01000000 2', 0xc) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r9 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)={0x44bb03b7d955cb4f, 0x0, @d}, 0x18, r2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000140)={@id={0x2, 0x0, @b}, 0x40, r9, '\x00', @b}) socket$inet6_tcp(0xa, 0x1, 0x0) 8.09686682s ago: executing program 4 (id=2529): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x20, 0x30}, 0xc) (async) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000140)="1a", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000340)="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", 0x34000, 0xbcff, 0x0, 0x0) shutdown(r2, 0x1) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x80000000}, 0xc) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000780)='^', 0xfdef}], 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000001c0)={0x0, 'veth1_to_team\x00', {0x4}, 0xcd59}) (async) recvfrom(r3, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) (async) setns(0xc9, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x10f) (async) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', 0x1}) (async) bind$x25(0xffffffffffffffff, 0x0, 0x0) (async) write$tun(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="00000805000001"], 0x88) (async) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r7, 0xa) 7.915074768s ago: executing program 6 (id=2531): socket$inet6(0xa, 0xf, 0xffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000100)="890704b3771c16d355840f4e1489c2ce0596e0835d610400385cecb517a1a0c2b8c2c064bd3253e3ee7f28b562a24355f088e42ef567cadddbb9123f922de6a72cf8df0950b4f8a98f332bdbf8cea9628763708efd4f4da8758b8f226d184dff8b1544d4e7ba807ad5ef2754bc0c7e2e864965f60c981e52284e9be62e0e967ad68e732254637f82eeb8ca469a6b2678fa8dd73c4829472a6c514c86fdc7fcf010", 0xa1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f01d, 0x5}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94eff", 0xfffffffffffffd33, 0x0, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @multicast2, 0x0, "b18c89f8ec85752dace37a71e337f670bfac54f9a317850eaa73a3eb92f19456", 0x8, 0x5, 0x8, 0x1ff}, 0x3c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000014000300697036746e6c300000000000000000697036746e4d8ba1e25cb00d5d000900040000000800080000000400020000000000000000612d3a144193c42e122174"], 0x58}}, 0x0) 6.296255737s ago: executing program 6 (id=2534): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x181000, 0x0) read$snddsp(r1, &(0x7f0000000140)=""/203, 0xcb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x12, &(0x7f0000000a40)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000085100000060000001800000061d5d4168f0427701bf9c57ded8878587c6e5a0fe7dfab2fb5ad8fdc303a62f994b79cb24e42810b7b3afb44083c9e5c216c12b4859690ce0bb991d8ed8e3428f646ff02f8e0c9b8be2c983801b83fb01b0d218f5a9e1a4aaad1cb418f13047b98e04eca4044bd0de24626ebdfe73cd265226f490912e8d221876795a839c24aa0ac32eb8ed4d3ed27a47f506bbdb02d9077ca37abe5646269be37003cde7137a81138c18d1e64dc44b7a4ca74916196be88dacf37108ecb3362b8bae2b7856eae13f03fb871ce2c20862a777358c5adb6552a98", @ANYRES32, @ANYBLOB="00000000000000208510000003000000180000000000000000000000000000019500000000000000180100f11f20782500000000002020207b1af8ff00000000680000000000000007010000f8ffffffb702000008000000b50afdffffffeffe85000000060000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000440)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x2, 0x0, 0x0, '\x00', 0x0}}) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040040010300000009210100000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000840)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000880)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xcda87000) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000008c0)='.\x00', 0xa50003d1) readv(r4, &(0x7f0000000900)=[{&(0x7f0000000940)=""/181, 0xb5}], 0x1) open(&(0x7f0000000a00)='./bus\x00', 0x143142, 0x40) syz_usb_control_io$hid(r3, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) syz_open_dev$I2C(&(0x7f0000000580), 0x1, 0x2703) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = openat$kvm(0x0, &(0x7f00000005c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000600)={0x79, 0x0, 0x1}) r7 = openat$procfs(0xffffff9c, &(0x7f0000000680)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f00000006c0)=[{r7}], 0xd8, &(0x7f0000000700)={0x0, 0x989680}, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, 0x0) eventfd2(0x5683, 0x800) 6.147446269s ago: executing program 0 (id=2535): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000400)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f000001a640)='/sys/power/resume', 0xa82, 0x110) write$cgroup_int(r1, &(0x7f000001a680)=0x920, 0x12) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f000001a6c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f000001a700)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f000001a740)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f000001a780), 0x2, 0x143102) writev(r2, &(0x7f000001a7c0)=[{&(0x7f000001a800)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f000001a840)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f000001a880)='./file0\x00', &(0x7f000001a8c0), 0x0, &(0x7f000001a900)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f000001a940)='./file0\x00') setresuid(0x0, 0x0, 0x0) symlink(&(0x7f000001a980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f000001aa80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f000001ab80)='./file1\x00', 0x103042, 0x0) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r3, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f000001abc0)) connect$inet(r4, &(0x7f000001ac80)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, 0x0, 0x0) 6.090776029s ago: executing program 4 (id=2536): bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) unshare(0x60000600) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x38, &(0x7f0000000040)=0xffffffff, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800dd8d00000000000000000200000400000006"], 0x24}, 0x1, 0x0, 0x0, 0x4004081}, 0x4040000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@get={0x1, &(0x7f0000000080)=""/4, 0x71d1}) 5.506107435s ago: executing program 5 (id=2538): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000880)={'syztnl1\x00', &(0x7f00000007c0)={'erspan0\x00', r2, 0x40, 0x8000, 0x3, 0xc, {{0x6, 0x4, 0x1, 0x35, 0x18, 0x65, 0x0, 0x8, 0x29, 0x0, @private=0xa010100, @private=0xa010101, {[@ssrr={0x89, 0x3, 0xbb}]}}}}}) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000400)}, 0x10080) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_NETNS_COOKIE(r0, 0x1, 0x47, 0x0, 0x0) close(0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000200)=[{0x48, 0xfd, 0x0, 0x40}, {0x28, 0x1, 0x4f, 0xfffff038}, {0x6, 0xe, 0x1, 0x4}]}, 0x10) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000280)="89120d53013d65b79244ab3acde53fdc3a8d9bd74d597edcdc28034b769d7b390db8fcf7c470d1cf1f32aebcdb762a1669e5ff8a104329393298a7feb9b7c2e3eb35", 0x42}], 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@delneigh={0x1b, 0x1d, 0x1, 0xc00, 0x0, {0x7, 0x0, 0x0, 0x0, 0x40, 0x96, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) 4.82591579s ago: executing program 0 (id=2539): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x2290, 0x58ff, 0x0, &(0x7f0000000300)={[0x70c]}, 0x8) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0xf00) 4.452048194s ago: executing program 0 (id=2540): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) r0 = getpid() (rerun: 32) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0xff54) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x10000}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 4.448581436s ago: executing program 7 (id=2541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = socket$inet6(0xa, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) setuid(0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000680)={@initdev, 0x0}, &(0x7f00000006c0)=0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r7}, &(0x7f0000000980), &(0x7f00000009c0)=r8}, 0x20) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000a00)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={r8, r10, 0x25, 0x2, @void}, 0x10) sendmmsg$inet6(r4, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x5, @local, 0x10}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000003c0)="3aae888658314ae4bd4f355e19193e9fc8ba8d64a6cb6487398d97848f5c7bf8a0b1fea9a9104df048ecf16090d05f13b19a86c5d10651ddbb792f05e2b515fa99f33b164b7dca3ab0f5ab381dbd91d624b79ae9b66702b6b883993c104046112bf8b0b96f9591afede3803f6bc7189404917a3b833e21cffcc93b00a3b38e2f07b69e11c55d03509028bb5dee5730125ae295516ccedef6de5ba447cfb5f94e7477", 0xa2}, {&(0x7f0000000480)="33dec6b9cc4c1d44c19135607deaddfd28dadf7453fd0309ba86470583a979e8ad81930248be61c8982aa6ad4bdc1422772dcd8f920cf839321d3427791861f6c18b1aa862693402ed8e738a78c71aaaceb9b0acce2985996cb397ff1d9117e8722f31f4c39937472adfb12773429a7f422b67c83856a87e0aa75c13691240e80c8d5bf5f917182ffe0fd6f52f77c7", 0x8f}, {&(0x7f0000000540)="4aabc2e8d1a5bbb8098a5a3e1a7e7257e647db854a37dcf21b0876ebfcddd1800ca2", 0x22}, {&(0x7f0000000580)="fde9fe700e70389004dd1170339fd09284a4e6e0e2f5c81318c55ab4e0a70e2fb7f6466a2570b8706e0af2762d07feccfb7e936a24c71e89c64f0f62b0c0a43b", 0x40}, {&(0x7f00000005c0)="81e5951de987fdf1ad66039f27d6e15e0636830f241c2aedf274cb69f817c6972c393c1746e0", 0x26}], 0x5, &(0x7f0000000a80)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r5}}}, @hopopts={{0x150, 0x29, 0x36, {0x67, 0x26, '\x00', [@ra={0x5, 0x2, 0x5}, @generic={0x7d, 0xe6, "04d457a4d8367683cad4504705a7256846e4c991646665115c9e21ff63d2daab440db2d41d9f65195a105d0ac9f141b28361e762d9a7a16600184486c3281d28a3cc846226fa63b0d037aa1a91a4a47500ace9a35b34f44bc71e0a1740c77892a9585f2f3cf37e2dc991fc442d27b53e5bd76e79593c89c62a9bd4de5c69654bfecb2360eeff9d8792e19e712466b5a2a1d2089fff1709f704ab368a76bfe7adef5d0de18211792d5d5fdd6a06918abf585cf9c1f9ea474a397f7fd45189b4aa30ff40b0671df38affe73c7eb9aedadbd6f50ad4bf2f5b9cbeb4779a84022674d44b2e00aae7"}, @jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x401}, @ra={0x5, 0x2, 0x4}, @pad1, @hao={0xc9, 0x10, @empty}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0xa9, [0x0, 0x9]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r10}}}, @dstopts={{0x48, 0x29, 0x37, {0x2f, 0x6, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @enc_lim={0x4, 0x1, 0x7f}, @enc_lim={0x4, 0x1, 0xf4}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @enc_lim={0x4, 0x1, 0x3}]}}}], 0x1e8}}, {{&(0x7f0000000c80)={0xa, 0x4e24, 0x6a, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)="fe8fab9261ff501e935955cbd5e09ae5a241676f174f6e28390fab6bffb76b76e2892b16c8f10c9e2fe3961790e4de531a7311c5f44add79d6931f6b1428b8cbccc156b0f169587202f99b5fb5ca18c1ea73a925fe32f2adc32e6eb9eabd0b4aa7551b6bed6887ba62b933f2d89dbfc41d6a5b348a87d92862ac09b8ca4de8137b25e381ac5475bc3302312bebf8f570b89c485f4cc8b464f681e7298f9d2c39f51ec4a8e14b8e05b63879855668d4a43f163f1cb74dce46ee0d988117880a0bd1811b5a", 0xc4}], 0x1, &(0x7f0000000e00)=[@tclass={{0x14, 0x29, 0x43, 0x101}}, @hopopts={{0x30, 0x29, 0x36, {0x0, 0x2, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0x7, [0x8a65]}}]}}}], 0x48}}, {{&(0x7f0000000e80)={0xa, 0x4e21, 0xc, @loopback}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000ec0)="3fa3c7b757cc4eb48e48", 0xa}, {&(0x7f0000000f00)="b1c893fcb97dc254d169e1dcba9cfa4c1b3e224f0e5d18052f5e1d7da7f1d59adc4d7776e0", 0x25}, {&(0x7f0000000f40)="a2c4bef4abc8a82b", 0x8}, {&(0x7f0000000f80)="b6b936f03ce7601529a471d0d02d335883e1d255104972676b9ee74072bea6bbe890b7904fbb8adc6665", 0x2a}, {&(0x7f0000000fc0)="e87b6c0ee4e6130b208e6d46fd5ba82dc44f8e988526b0e2f243cd5803943d0fe79bb1257f3d9e2ec52da9b5b09eff14e728e47412a02665ae68558cb70791c84131ea20440653e4ad2a729c", 0x4c}, {&(0x7f0000001040)="589c8e099b31bf2f9f8a223386a12e4a17c66cf625d91bc980f1d6e5d48e9933d77f7fbb6b21a351fc59", 0x2a}], 0x6}}, {{&(0x7f0000001100)={0xa, 0x4e22, 0x6, @local}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001140)="e96b0afefa37cc885369848648596638453a6a1b1d7410ff20aa1aaa8f8ea03ac3b5a2a1c97ab300beb908649270983518a995ecca90ed967c97b51e3862f87c627737a5647b1f67642cb2e7b1e99b2d09fff75c0150291bc8845a35cf5fd8c6ba8331f1e96a9f3e3c4c38cde3b42516d337fee0ca5f66f6dc1ed1b4c0d613913400f08542efb6a5fd2bdcafc2a1d51482e263a0877511afe180bc6009d03e4ca28fd8b0a127618c5f80c860ea87914de3a7044ee9931c22404ac252381e5d9dd888cbc1b59de01c4a395e9048c2f7c394220ae7914b94dafdd48a41c63daaeea2794ed8fc822301d1cc8409ec74c8df", 0xf0}, {&(0x7f0000001240)="07487d401a9a9fe3e6f98b61ec4d649b4d2017ec4d785d36b19b31b5b0a8363951ed07d04e9fdc749058ca75c15a1c9da5a82b64703be87a9913f95eae1fc8d168eafd3778695b077752f24d0870ee4df5902f90a42ecda7b03b738e1ebc9a1a56d52ddff7911cd03e0667f3dbd0d0b74e294f05b86418f180e797f3d47f374585c3524b7cf9d94685e921d67424304f040f297ce39dcdf36b900e4e8972e3daf92707aeab51c6d307f3fdcb8cceb9d29f87e78a3b5353518c8e3c29c22d74e4e9f9138ecc2b47c13a1f914379de9a37530974708388", 0xd6}, {&(0x7f0000001340)="3ab38b6c81bf9cd7e1440a271aa6e1", 0xf}, {&(0x7f0000001380)="509049bbd3ecdad519eddd9211992961eed06ee0187d9d2a2cd9b16fcc98f014583cf1a85a3bb5b1d3ccd1a131ac282b76823053b87ffb4a8989ec44888e4d2a3a50e26866d8dc0f3a56f0cd268c57c4c09b9a76e51e967e1139fed41c521993b5cad0c219cdc1db07392f175f7415965e6615b8572d69585184063b29c126ce647789c799158da2b6336116a319976ca038153aecd4c2", 0x97}, {&(0x7f0000001440)="627ec3810f88d2b68a21d90f0076530935013dd9f68157ee1eba1d1a94fdc0f97b53eb2cce", 0x25}, {&(0x7f0000001480)="01aa893e74466f12d704ae85f08f2bd48cc516d3f0b10353c0ae8820ec6602e3455f66cd539952cb196414a4ee44a716b0dc7a02b2706a4ca15932e9e64e45c06c7144dec698ea0852f755a42d2aacd372ac5b5a62ec84fb6d9af21a6a67ae905f4690b9a4feb78b5979d0b71f81623be3f5f644cfd2d3131794f469cb85c84e0bfc146d1ddb67d4c24ad4d15145edce73ec4ff72470ea372a7a0fecc901b36315e94ee2a0b980e20682dd08c6e172bdfe", 0xb1}, {&(0x7f0000001540)="4a02f6a1d913fd59007783abcab106784556a5cae23cedc5f2db7f0caec318861d5ef1550fd5a7fbe30d2efa54b3df950027aa890edc18d67a6e37f17e5b8ac40c37efbd653c7890cb438ac7dc6bb0ad4924a2eec6220326a05ca7474c1c005e6c54", 0x62}, {0x0}], 0x8, &(0x7f0000001680)=[@hopopts={{0x20, 0x29, 0x36, {0x2e, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x2c, 0xe, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3b}, @mcast1, @mcast1, @remote, @mcast1]}}}], 0xc0}}], 0x4, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64=r11], 0x18}}, 0x2080) 4.090933894s ago: executing program 4 (id=2542): io_setup(0x66, &(0x7f0000000100)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xe, r1, &(0x7f00000002c0)='-5', 0x12, 0x0, 0x0, 0x4}]) (fail_nth: 4) 4.068223164s ago: executing program 7 (id=2543): syz_usb_connect$uac3(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000008410e4d5340000102030109029200030109200c080b0001010130f70904"], 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000620030000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 4.050010031s ago: executing program 5 (id=2544): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1a2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x3) fdatasync(r1) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x100082}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r2}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 3.828021473s ago: executing program 5 (id=2545): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x90, &(0x7f0000000c00)={0x2, 0x13c4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x202, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000340)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0xf, 0x2000000}]) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, 0x0, 0x0) creat(0x0, 0x24) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f0000000080)) msgget$private(0x0, 0x4) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffffffffffffb]}, 0x0, 0x8) read$dsp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) inotify_init1(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x8) fallocate(r3, 0x0, 0x200000000000003, 0x6) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESDEC=0x0], 0x38}, 0x1, 0x0, 0x0, 0x20044001}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040000) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) modify_ldt$write2(0x11, &(0x7f0000000280)={0x77b, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000c40)=""/4098, 0xfffffffffffffe8e) 3.827321201s ago: executing program 4 (id=2546): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0x4000000d20, 0x3, 0x0, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x100, 0x3, 0x4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x1, 0x2aa, 0x7, 0xc39, 0x8, 0x8, 0x0, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffdfa, 0x81, 0x100, 0x5, 0x933, 0x200000101, 0x3, 0x8001, 0x8000020000000400, 0x7, 0x1, 0x8, 0xa, 0x6, 0x100, 0x40, 0x83, 0x1e13, 0x9, 0xda, 0x2, 0x0, 0x4, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x2, 0xfffffffffffffffd, 0x2c, 0x5bc, 0x4, 0x7fffffff, 0x4, 0x8000, 0x4, 0x7, 0x6, 0xc, 0x82c, 0x7ff, 0x1, 0x1fcc, 0x6, 0x0, 0xae4, 0x22, 0x1, 0x7, 0x1, 0x1, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x3ff, 0xfffffffd, 0x0, 0x4, 0x7, 0x7, 0x7, 0x9, 0xffe, 0x8000000000000001, 0x6, 0x68d, 0xfffffffffff743b0, 0x8, 0x50000000000000, 0xe, 0x8000000000, 0x0, 0x9, 0x4, 0x7, 0x6, 0x3, 0x8, 0x2000000000000005, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xc, 0x3]}) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) socket(0x1e, 0x4, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) prlimit64(0x0, 0xe, &(0x7f0000000ec0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f00)=0x8) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000f40)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000f80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000fc0), 0x0, 0x0) read$msr(r6, &(0x7f0000001000)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f000001a040)='./tracing\x00', 0x0, 0x0, 0x0) r7 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905", 0x558, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={r7, 0x90}, &(0x7f0000001180)=ANY=[], &(0x7f0000000980)="929835a77d8fae0300000000000000a804bfc80349e1f140d6d7fe01e9c88fbc79dc97601bddeea9d91438988e1cee39ee49b5542d47923d8d802603a4e73dde649aacebb145381a46f82747f0db81470d91a84ea4cb1d1c8d6558aaab1171ba3dd7749ccdaa11a46f5c9d716c282058b525774e1af61664d062b5ad5d0f4c61431265373c44d5f91aeb92dfc0f7052f", 0x0) 3.666217153s ago: executing program 6 (id=2547): add_key(&(0x7f00000002c0)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getown(0xffffffffffffffff, 0x9) timer_settime(0x0, 0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) r4 = fsopen(&(0x7f0000000180)='nilfs2\x00', 0x1) (fail_nth: 1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, r5, 0x1, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.541110235s ago: executing program 4 (id=2548): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40082, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600), 0x80200, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a00), 0x200000, 0x0) (fail_nth: 1) r2 = syz_open_dev$sndmidi(&(0x7f0000000640), 0x2, 0x141102) writev(r2, &(0x7f0000000680)=[{&(0x7f00000006c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_setup(0x2e08, &(0x7f0000000700)={0x0, 0xda80, 0x40, 0x1, 0x0, 0x0, r1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000940)={0x1, &(0x7f0000000980)=[{0x6, 0x0, 0x6, 0x7fff7ffc}]}) clock_settime(0x0, &(0x7f00000009c0)={0x77359400}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000780)={0xaa, 0x1a5}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f00000007c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7b, 0x983a}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r5, 0x0, 0x0) write(r5, &(0x7f0000000900)='1', 0x1) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000000)='\x00', 0x1, 0x4000854, &(0x7f0000000300)={0xa, 0x4e1e, 0xbe7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800000c0}, 0x1c) 2.446754184s ago: executing program 0 (id=2549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x60, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x3, 0x4, 0x0, {0x4080000000, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x1, 0x60000, 0x30}}, @chandef_params, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x100, {0x3, 0x7ff, 0xffff, 0x5}}}]}, 0x60}}, 0xc00) (fail_nth: 4) 2.397445677s ago: executing program 5 (id=2550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.267693612s ago: executing program 0 (id=2551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001980)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000019c0)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000001a00)={0x0, 'syzkaller1\x00', {0xffffffff}, 0x4}) write$tun(r0, &(0x7f0000001a40)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0xe1, 0x0, 0x3}]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8885) r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0xa2b}) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000001a80)={0x0, 0x0, 0x80, 0x0, 0x26d}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit$UBLK(r8, r9, r10, &(0x7f00000002c0)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r6, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x70, &(0x7f0000000340)={0x70, 0x1, {0x7, 0x9, 0xc, 0xd, 0x9, 0x8}, {}, {}, {0x0, 0x0, 0xf4b}}}}) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r8, r9) r13 = syz_open_dev$ublk_chdev(&(0x7f00000003c0), 0x0, 0x2) syz_ublk_setup_queues(r13, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x2}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80000}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4567, 0x8000, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x8000337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4555}}], 0x1, &(0x7f0000000700)={0x2e, 0x4c, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x4d0, 0x0, &(0x7f0000000780)=@buf_4k="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"}}, &(0x7f0000001780)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000400)={'veth1_to_bridge\x00', @multicast}) nanosleep(0x0, &(0x7f0000001800)) getpid() syz_io_uring_submit$UBLK(r8, r9, r14, &(0x7f0000001840)=@ublk_start_user_recovery_sqe={0x2e, 0x4c, 0x0, r11, 0xc0207510, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, r15, '\x00', {r12}}) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) nanosleep(&(0x7f00000018c0)={0x5}, &(0x7f0000001900)) syz_open_dev$ublk_bdev(&(0x7f0000001940), 0x0, 0x0) 2.20030907s ago: executing program 7 (id=2552): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$printer(r0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) write$dsp(r1, &(0x7f0000000100)="a5", 0x1) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(r2, r2) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x23) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x3, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x1}}, 0x10) bind$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0xdb9776a128fc7f6, {0x40, 0x5, 0x5}}, 0x10) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) write$char_usb(r3, &(0x7f0000000200)="79a46857b9e51e887c3d68008eec1fab91a163d9c7d386f9da6c5049dc724f6b2f3f84944ff94f9246ae8ba2c0ef17875005e4a886083acfc64f4c5b6f810c5b498c0049", 0x44) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.193927051s ago: executing program 6 (id=2553): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd70ff0fcdc44c2a00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r0, 0x395b85208bd84be9, r5, &(0x7f0000000140)) 1.978474344s ago: executing program 6 (id=2554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = socket$inet6(0xa, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) setuid(0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000680)={@initdev, 0x0}, &(0x7f00000006c0)=0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r7}, &(0x7f0000000980), &(0x7f00000009c0)=r8}, 0x20) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000a00)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={r8, r10, 0x25, 0x2, @void}, 0x10) sendmmsg$inet6(r4, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x5, @local, 0x10}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000003c0)="3aae888658314ae4bd4f355e19193e9fc8ba8d64a6cb6487398d97848f5c7bf8a0b1fea9a9104df048ecf16090d05f13b19a86c5d10651ddbb792f05e2b515fa99f33b164b7dca3ab0f5ab381dbd91d624b79ae9b66702b6b883993c104046112bf8b0b96f9591afede3803f6bc7189404917a3b833e21cffcc93b00a3b38e2f07b69e11c55d03509028bb5dee5730125ae295516ccedef6de5ba447cfb5f94e7477", 0xa2}, {&(0x7f0000000480)="33dec6b9cc4c1d44c19135607deaddfd28dadf7453fd0309ba86470583a979e8ad81930248be61c8982aa6ad4bdc1422772dcd8f920cf839321d3427791861f6c18b1aa862693402ed8e738a78c71aaaceb9b0acce2985996cb397ff1d9117e8722f31f4c39937472adfb12773429a7f422b67c83856a87e0aa75c13691240e80c8d5bf5f917182ffe0fd6f52f77c7", 0x8f}, {&(0x7f0000000540)="4aabc2e8d1a5bbb8098a5a3e1a7e7257e647db854a37dcf21b0876ebfcddd1800ca2", 0x22}, {&(0x7f0000000580)="fde9fe700e70389004dd1170339fd09284a4e6e0e2f5c81318c55ab4e0a70e2fb7f6466a2570b8706e0af2762d07feccfb7e936a24c71e89c64f0f62b0c0a43b", 0x40}, {&(0x7f00000005c0)="81e5951de987fdf1ad66039f27d6e15e0636830f241c2aedf274cb69f817c6972c393c1746e0", 0x26}], 0x5, &(0x7f0000000a80)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r5}}}, @hopopts={{0x150, 0x29, 0x36, {0x67, 0x26, '\x00', [@ra={0x5, 0x2, 0x5}, @generic={0x7d, 0xe6, "04d457a4d8367683cad4504705a7256846e4c991646665115c9e21ff63d2daab440db2d41d9f65195a105d0ac9f141b28361e762d9a7a16600184486c3281d28a3cc846226fa63b0d037aa1a91a4a47500ace9a35b34f44bc71e0a1740c77892a9585f2f3cf37e2dc991fc442d27b53e5bd76e79593c89c62a9bd4de5c69654bfecb2360eeff9d8792e19e712466b5a2a1d2089fff1709f704ab368a76bfe7adef5d0de18211792d5d5fdd6a06918abf585cf9c1f9ea474a397f7fd45189b4aa30ff40b0671df38affe73c7eb9aedadbd6f50ad4bf2f5b9cbeb4779a84022674d44b2e00aae7"}, @jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x401}, @ra={0x5, 0x2, 0x4}, @pad1, @hao={0xc9, 0x10, @empty}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0xa9, [0x0, 0x9]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r10}}}, @dstopts={{0x48, 0x29, 0x37, {0x2f, 0x6, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @enc_lim={0x4, 0x1, 0x7f}, @enc_lim={0x4, 0x1, 0xf4}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @enc_lim={0x4, 0x1, 0x3}]}}}], 0x1e8}}, {{&(0x7f0000000c80)={0xa, 0x4e24, 0x6a, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)="fe8fab9261ff501e935955cbd5e09ae5a241676f174f6e28390fab6bffb76b76e2892b16c8f10c9e2fe3961790e4de531a7311c5f44add79d6931f6b1428b8cbccc156b0f169587202f99b5fb5ca18c1ea73a925fe32f2adc32e6eb9eabd0b4aa7551b6bed6887ba62b933f2d89dbfc41d6a5b348a87d92862ac09b8ca4de8137b25e381ac5475bc3302312bebf8f570b89c485f4cc8b464f681e7298f9d2c39f51ec4a8e14b8e05b63879855668d4a43f163f1cb74dce46ee0d988117880a0bd1811b5a", 0xc4}], 0x1, &(0x7f0000000e00)=[@tclass={{0x14, 0x29, 0x43, 0x101}}, @hopopts={{0x30, 0x29, 0x36, {0x0, 0x2, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0x7, [0x8a65]}}]}}}], 0x48}}, {{&(0x7f0000000e80)={0xa, 0x4e21, 0xc, @loopback}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000ec0)="3fa3c7b757cc4eb48e48", 0xa}, {&(0x7f0000000f00)="b1c893fcb97dc254d169e1dcba9cfa4c1b3e224f0e5d18052f5e1d7da7f1d59adc4d7776e0", 0x25}, {&(0x7f0000000f40)="a2c4bef4abc8a82b", 0x8}, {&(0x7f0000000f80)="b6b936f03ce7601529a471d0d02d335883e1d255104972676b9ee74072bea6bbe890b7904fbb8adc6665", 0x2a}, {&(0x7f0000000fc0)="e87b6c0ee4e6130b208e6d46fd5ba82dc44f8e988526b0e2f243cd5803943d0fe79bb1257f3d9e2ec52da9b5b09eff14e728e47412a02665ae68558cb70791c84131ea20440653e4ad2a729c", 0x4c}, {&(0x7f0000001040)="589c8e099b31bf2f9f8a223386a12e4a17c66cf625d91bc980f1d6e5d48e9933d77f7fbb6b21a351fc59", 0x2a}], 0x6}}, {{&(0x7f0000001100)={0xa, 0x4e22, 0x6, @local}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001140)="e96b0afefa37cc885369848648596638453a6a1b1d7410ff20aa1aaa8f8ea03ac3b5a2a1c97ab300beb908649270983518a995ecca90ed967c97b51e3862f87c627737a5647b1f67642cb2e7b1e99b2d09fff75c0150291bc8845a35cf5fd8c6ba8331f1e96a9f3e3c4c38cde3b42516d337fee0ca5f66f6dc1ed1b4c0d613913400f08542efb6a5fd2bdcafc2a1d51482e263a0877511afe180bc6009d03e4ca28fd8b0a127618c5f80c860ea87914de3a7044ee9931c22404ac252381e5d9dd888cbc1b59de01c4a395e9048c2f7c394220ae7914b94dafdd48a41c63daaeea2794ed8fc822301d1cc8409ec74c8df", 0xf0}, {&(0x7f0000001240)="07487d401a9a9fe3e6f98b61ec4d649b4d2017ec4d785d36b19b31b5b0a8363951ed07d04e9fdc749058ca75c15a1c9da5a82b64703be87a9913f95eae1fc8d168eafd3778695b077752f24d0870ee4df5902f90a42ecda7b03b738e1ebc9a1a56d52ddff7911cd03e0667f3dbd0d0b74e294f05b86418f180e797f3d47f374585c3524b7cf9d94685e921d67424304f040f297ce39dcdf36b900e4e8972e3daf92707aeab51c6d307f3fdcb8cceb9d29f87e78a3b5353518c8e3c29c22d74e4e9f9138ecc2b47c13a1f914379de9a37530974708388", 0xd6}, {&(0x7f0000001340)="3ab38b6c81bf9cd7e1440a271aa6e1", 0xf}, {&(0x7f0000001380)="509049bbd3ecdad519eddd9211992961eed06ee0187d9d2a2cd9b16fcc98f014583cf1a85a3bb5b1d3ccd1a131ac282b76823053b87ffb4a8989ec44888e4d2a3a50e26866d8dc0f3a56f0cd268c57c4c09b9a76e51e967e1139fed41c521993b5cad0c219cdc1db07392f175f7415965e6615b8572d69585184063b29c126ce647789c799158da2b6336116a319976ca038153aecd4c2", 0x97}, {&(0x7f0000001440)="627ec3810f88d2b68a21d90f0076530935013dd9f68157ee1eba1d1a94fdc0f97b53eb2cce", 0x25}, {&(0x7f0000001480)="01aa893e74466f12d704ae85f08f2bd48cc516d3f0b10353c0ae8820ec6602e3455f66cd539952cb196414a4ee44a716b0dc7a02b2706a4ca15932e9e64e45c06c7144dec698ea0852f755a42d2aacd372ac5b5a62ec84fb6d9af21a6a67ae905f4690b9a4feb78b5979d0b71f81623be3f5f644cfd2d3131794f469cb85c84e0bfc146d1ddb67d4c24ad4d15145edce73ec4ff72470ea372a7a0fecc901b36315e94ee2a0b980e20682dd08c6e172bdfe", 0xb1}, {&(0x7f0000001540)="4a02f6a1d913fd59007783abcab106784556a5cae23cedc5f2db7f0caec318861d5ef1550fd5a7fbe30d2efa54b3df950027aa890edc18d67a6e37f17e5b8ac40c37efbd653c7890cb438ac7dc6bb0ad4924a2eec6220326a05ca7474c1c005e6c54", 0x62}, {0x0}], 0x8, &(0x7f0000001680)=[@hopopts={{0x20, 0x29, 0x36, {0x2e, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x2c, 0xe, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3b}, @mcast1, @mcast1, @remote, @mcast1]}}}], 0xc0}}], 0x4, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64=r11], 0x18}}, 0x2080) 1.632842357s ago: executing program 5 (id=2555): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r3, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./trace\x00', 0x1ff) socket$inet(0x2, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x180) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000780)='7', 0x1) mq_open(&(0x7f00000007c0)='.F[.\x00', 0x40, 0xe8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0x7f, 0x0, 0xf1, 0x24, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7800, 0x1000, 0x5}}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x2a800, 0x0) preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000001000)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000300), 0x0, &(0x7f0000000480)}, 0x10000000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000200000019500000000000000f59458ba02933603fdf80b03065ebe730aeca5fb4db193bfcd52f9c3ccda1992beb30498599aed264596d17840978b6b29a5f4d3a444e51b1353c23eb098f4b9473c20a9a092b2c8a7f17b1d7c6bba83d124142ae81f1e1a14e8e76c25185a424ce835ef909af1934781dbd7c4ec2531330ee97bb17767ad6d64d7d4109ccad4"], &(0x7f0000000ec0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r7, 0x0, 0x7, 0x0, &(0x7f0000000fc0)="e0b9545dd30a21", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.038881441s ago: executing program 7 (id=2556): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./myconfig/usb_gadget/g1/max_speed\x00', &(0x7f0000000200)='configfs\x00', 0x822000, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x42202) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/64, 0x40}], 0x1, 0x8001, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x119, 0x84, 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='task\x00') fchdir(r2) mmap(&(0x7f00000b1000/0x1000)=nil, 0x1000, 0x300000b, 0x204031, r2, 0x6f422000) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x4000050) (fail_nth: 4) 630.017706ms ago: executing program 7 (id=2557): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x0, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) read(r2, 0x0, 0x60) 477.499663ms ago: executing program 6 (id=2558): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket(0x1, 0x1, 0x4a9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0xffffffffffffffff) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x0, 0x1000001c, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000a, 0x30, 0xffffffffffffffff, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) fcntl$getflags(r4, 0x3) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x2020, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000240), 0x1, 0x2603) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f00000002c0)={0x1, 0x81, 0x1, &(0x7f0000000300)={0x22, "42319c9b7f8071ef3c3c0b340c3975ef02d749cb174540ffccf818447846d9fe22"}}) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) unshare(0x8000000) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000100)=0xffffffff) write$dsp(r6, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 433.425837ms ago: executing program 7 (id=2559): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000ffffff85dd60cedd0000183aff00000000000000000000000000000000ff02000000000000000000000000000187009078fe80000000000000000000000000002e04000100"], 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000816000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) vmsplice(r3, &(0x7f0000000640)=[{&(0x7f0000000680), 0x3528a9c0}], 0x1, 0x0) 346.712455ms ago: executing program 5 (id=2560): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x1a2) r1 = syz_io_uring_setup(0x625e, &(0x7f0000000680)={0x0, 0x8562, 0x4000, 0x0, 0x5}, &(0x7f00000004c0), &(0x7f0000000480), &(0x7f0000000640)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000580)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x3100) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001ac0)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000001ec0)='0', 0xfffd, 0x4000854, &(0x7f0000001f00)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f00000017c0)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000001800), 0x8) write(r0, &(0x7f0000000240)='270', 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x1}, 0x240440c0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0)=0x654a, 0x4) bind$inet(r5, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000000380), 0x800001d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) mkdirat(r0, &(0x7f0000000380)='./bus\x00', 0xa3) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 0s ago: executing program 0 (id=2561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x150}) fcntl$addseals(r2, 0x409, 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r3, &(0x7f0000000080)='3', 0x4e) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000240)=@urb_type_bulk={0x3, {0xb, 0x1}, 0x0, 0xa1, &(0x7f00000000c0)="7487767c160eb18ca8cb55107425489e72c9a2939aa9afb46d098be39341d984334d247cb1791afadcf11aeb9437c22c1f13c2702b4b5266cd52f74c15a4257f9ca0d324819d7c7e59e327d7db257f68f2c0be826562abcf357ff8e745083a5e54563e4971a6df9901206236344731a937dde88a972dbdf3ea7fb554042fe741eceb0ae3a3b49fbd5007afd461335ee1b974296e84d1c2ccd1d106157706f936912fc953aef0fe2c34e4d494a34f76885487ab717c73b9a11ea14d524f759ccd6c12c46e0d7e91df7e227275ff8bc911423b42ad56668297ca2f06a0da9ecf28ff", 0xe1, 0x7, 0x1, 0x12cb, 0x1, 0x0, &(0x7f00000001c0)="1099840fe09c028453de9f02887aae071cc5cc71e459be81de6be998601a62e7aa45183646af2fdf8974a12bf0a3631ef60f1a4643ec12b2c7e872f23549b3ca468a68dde98d033308476795ce59873ce71157b9a61d0283a1ee22982ea2de5ba4ea9684220175c62d50a57d"}) kernel console output (not intermixed with test programs): id=15620 comm="syz.5.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1648.277161][ T31] audit: type=1400 audit(1791724098.966:770): avc: denied { ioctl } for pid=15620 comm="syz.5.2271" path="socket:[40336]" dev="sockfs" ino=40336 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1648.369345][ T31] audit: type=1400 audit(1791724099.056:771): avc: denied { execmem } for pid=15624 comm="syz.6.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1648.581263][T15635] 9p: Bad value for 'rfdno' [ 1649.042206][T15643] xt_esp: unknown flags DD [ 1649.139928][T14626] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1649.159963][ T9854] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1649.301630][T14626] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1649.301674][T14626] usb 7-1: New USB device found, idVendor=ff35, idProduct=0007, bcdDevice= 0.00 [ 1649.302535][T14626] usb 7-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1649.302576][T14626] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 49, changing to 9 [ 1649.302604][T14626] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1649.302640][T14626] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.319713][ T9854] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1649.320935][ T9854] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 1649.320959][ T9854] usb 1-1: config 0 has no interface number 0 [ 1649.320993][ T9854] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1649.321019][ T9854] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1649.322422][ T9854] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1649.322445][ T9854] usb 1-1: Manufacturer: syz [ 1649.322460][ T9854] usb 1-1: SerialNumber: syz [ 1649.328008][ T9854] usb 1-1: config 0 descriptor?? [ 1649.528816][T14626] usb 7-1: string descriptor 0 read error: -71 [ 1649.540553][T14626] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1649.540612][T14626] usb 7-1: MIDIStreaming interface descriptor not found [ 1649.653032][T14626] usb 7-1: USB disconnect, device number 16 [ 1649.943144][ T9854] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.214/input/input38 [ 1650.146078][ T9854] usb 1-1: USB disconnect, device number 23 [ 1651.465736][T15660] fuse: fd is not a fuse device [ 1651.491641][T15656] SELinux: policydb version 0 does not match my version range 15-35 [ 1651.491693][T15656] SELinux: failed to load policy [ 1652.631936][ T31] kauditd_printk_skb: 69 callbacks suppressed [ 1652.631988][ T31] audit: type=1400 audit(1791724103.296:841): avc: denied { unmount } for pid=9605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1652.828025][ T31] audit: type=1400 audit(1791724103.516:842): avc: denied { read } for pid=15690 comm="syz.7.2292" path="socket:[40490]" dev="sockfs" ino=40490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1653.405702][ T31] audit: type=1400 audit(1791724104.096:843): avc: denied { mmap_zero } for pid=15690 comm="syz.7.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1653.432484][T15693] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2292'. [ 1653.449012][ T31] audit: type=1400 audit(1791724104.136:844): avc: denied { mount } for pid=15690 comm="syz.7.2292" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1653.650242][T14626] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1653.800507][T14626] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1653.801394][T14626] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1653.801426][T14626] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1653.801452][T14626] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1653.803182][T14626] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.803208][T14626] usb 7-1: Product: syz [ 1653.803240][T14626] usb 7-1: Manufacturer: syz [ 1653.803255][T14626] usb 7-1: SerialNumber: syz [ 1653.805691][T14626] usb 7-1: config 0 descriptor?? [ 1653.806412][T15696] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1653.806532][T15696] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1653.808133][T14626] usb 7-1: ucan: probing device on interface #0 [ 1654.420761][T14626] ucan 7-1:0.0 can0: registered device [ 1654.615517][T14626] ucan 7-1:0.0 can0: firmware string: unknown [ 1654.628054][T14626] usb 7-1: USB disconnect, device number 17 [ 1654.712725][ T31] audit: type=1400 audit(1791724105.406:845): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1654.958325][ T31] audit: type=1400 audit(1791724105.646:846): avc: denied { ioctl } for pid=15703 comm="syz.5.2296" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=40509 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1654.969902][T15704] syzkaller0: entered promiscuous mode [ 1654.969922][T15704] syzkaller0: entered allmulticast mode [ 1654.973638][T15704] tipc: Enabled bearer , priority 0 [ 1654.977164][ T31] audit: type=1400 audit(1791724105.656:847): avc: denied { create } for pid=15702 comm="syz.0.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1654.978644][ T31] audit: type=1400 audit(1791724105.656:848): avc: denied { ioctl } for pid=15702 comm="syz.0.2295" path="socket:[40517]" dev="sockfs" ino=40517 ioctlcmd=0x61f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1655.083136][ T31] audit: type=1400 audit(1791724105.756:849): avc: denied { read write } for pid=15706 comm="syz.4.2298" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1655.083193][ T31] audit: type=1400 audit(1791724105.756:850): avc: denied { open } for pid=15706 comm="syz.4.2298" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1655.083394][T15703] tipc: Resetting bearer [ 1655.158648][T15703] tipc: Disabling bearer [ 1656.101023][T15733] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2305'. [ 1659.026762][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 1659.026781][ T31] audit: type=1400 audit(1791724109.716:867): avc: denied { write } for pid=15753 comm="syz.0.2309" name="control" dev="configfs" ino=40632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1659.099746][ T31] audit: type=1400 audit(1791724109.716:868): avc: denied { open } for pid=15753 comm="syz.0.2309" path="/458/config/target/core/rd_mcp_0/ramdisk0/control" dev="configfs" ino=40632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1659.100191][ T31] audit: type=1400 audit(1791724109.786:869): avc: denied { create } for pid=15757 comm="syz.4.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1659.331457][ T31] audit: type=1400 audit(1791724110.006:870): avc: denied { ioctl } for pid=15757 comm="syz.4.2313" path="socket:[40635]" dev="sockfs" ino=40635 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1659.331611][ T31] audit: type=1400 audit(1791724110.006:871): avc: denied { map } for pid=15757 comm="syz.4.2313" path="pipe:[40626]" dev="pipefs" ino=40626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1660.012856][ T31] audit: type=1400 audit(1791724110.706:872): avc: denied { write } for pid=15769 comm="syz.0.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1660.057828][ T31] audit: type=1400 audit(1791724110.746:873): avc: denied { execute } for pid=15774 comm="syz.4.2317" name="file0" dev="tmpfs" ino=2693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1660.058413][ T31] audit: type=1400 audit(1791724110.746:874): avc: denied { execute_no_trans } for pid=15774 comm="syz.4.2317" path="/460/file0" dev="tmpfs" ino=2693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1660.380808][ T31] audit: type=1400 audit(1791724111.066:875): avc: denied { write } for pid=15774 comm="syz.4.2317" name="route" dev="proc" ino=4026532978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1660.381265][ T5605] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1660.550866][ T5605] usb 7-1: Using ep0 maxpacket: 8 [ 1660.552472][ T5605] usb 7-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 1660.556218][ T5605] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1660.556251][ T5605] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1660.621092][ T5605] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.621125][ T5605] usb 7-1: Product: syz [ 1660.621167][ T5605] usb 7-1: Manufacturer: syz [ 1660.621244][ T5605] usb 7-1: SerialNumber: syz [ 1662.154803][ T31] audit: type=1400 audit(1791724112.846:876): avc: denied { write } for pid=15764 comm="syz.6.2310" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1662.221447][T15800] FAULT_INJECTION: forcing a failure. [ 1662.221447][T15800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1662.221480][T15800] CPU: 1 UID: 0 PID: 15800 Comm: syz.4.2322 Tainted: G L syzkaller #0 PREEMPT(full) [ 1662.221508][T15800] Tainted: [L]=SOFTLOCKUP [ 1662.221515][T15800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1662.221527][T15800] Call Trace: [ 1662.221534][T15800] [ 1662.221542][T15800] dump_stack_lvl+0x100/0x190 [ 1662.221573][T15800] should_fail_ex.cold+0x5/0xa [ 1662.221601][T15800] _copy_from_iter+0x1f4/0x1690 [ 1662.221631][T15800] ? __asan_memset+0x23/0x50 [ 1662.221655][T15800] ? __pfx__copy_from_iter+0x10/0x10 [ 1662.221680][T15800] ? __pfx___alloc_skb+0x10/0x10 [ 1662.221712][T15800] netlink_sendmsg+0x808/0xda0 [ 1662.221754][T15800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1662.221787][T15800] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1662.221819][T15800] ____sys_sendmsg+0xa4d/0xbe0 [ 1662.221842][T15800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1662.221874][T15800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1662.221906][T15800] ? lock_acquire+0x1d1/0x380 [ 1662.221932][T15800] ? get_pid_task+0x2a/0x250 [ 1662.221962][T15800] ___sys_sendmsg+0x190/0x1e0 [ 1662.221989][T15800] ? __pfx____sys_sendmsg+0x10/0x10 [ 1662.222016][T15800] ? get_pid_task+0x106/0x250 [ 1662.222053][T15800] ? find_held_lock+0x2b/0x80 [ 1662.222101][T15800] __sys_sendmsg+0x160/0x210 [ 1662.222123][T15800] ? __pfx___sys_sendmsg+0x10/0x10 [ 1662.222159][T15800] do_syscall_64+0x123/0x790 [ 1662.222190][T15800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1662.222211][T15800] RIP: 0033:0x7fe626b9e1d9 [ 1662.222228][T15800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1662.222246][T15800] RSP: 002b:00007fe627a62028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1662.222266][T15800] RAX: ffffffffffffffda RBX: 00007fe626e25fa0 RCX: 00007fe626b9e1d9 [ 1662.222280][T15800] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 1662.222293][T15800] RBP: 00007fe627a62090 R08: 0000000000000000 R09: 0000000000000000 [ 1662.222305][T15800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1662.222317][T15800] R13: 00007fe626e26038 R14: 00007fe626e25fa0 R15: 00007ffefe638338 [ 1662.222346][T15800] [ 1663.760663][T15824] Invalid ELF header type: 3 != 1 [ 1664.038597][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 1664.038615][ T31] audit: type=1400 audit(1791724114.726:887): avc: denied { create } for pid=15821 comm="syz.7.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1664.045380][ T31] audit: type=1400 audit(1791724114.736:888): avc: denied { setopt } for pid=15821 comm="syz.7.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1664.464695][ T31] audit: type=1400 audit(1791724115.156:889): avc: denied { create } for pid=15827 comm="syz.5.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1664.497539][ T31] audit: type=1400 audit(1791724115.186:890): avc: denied { map } for pid=15827 comm="syz.5.2329" path="socket:[40728]" dev="sockfs" ino=40728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1664.497590][ T31] audit: type=1400 audit(1791724115.186:891): avc: denied { read } for pid=15827 comm="syz.5.2329" path="socket:[40728]" dev="sockfs" ino=40728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1664.507377][ T31] audit: type=1400 audit(1791724115.196:892): avc: denied { ioctl } for pid=15833 comm="syz.0.2330" path="socket:[41130]" dev="sockfs" ino=41130 ioctlcmd=0x9440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1664.509021][ T31] audit: type=1400 audit(1791724115.196:893): avc: denied { create } for pid=15833 comm="syz.0.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1664.521556][ T31] audit: type=1400 audit(1791724115.196:894): avc: denied { ioctl } for pid=15827 comm="syz.5.2329" path="socket:[40728]" dev="sockfs" ino=40728 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1665.587183][T15846] fuse: fd is not a fuse device [ 1665.840011][ T5605] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1665.869556][ T5605] usb 7-1: USB disconnect, device number 18 [ 1666.598276][ T31] audit: type=1400 audit(1791724116.606:895): avc: denied { bind } for pid=15856 comm="syz.0.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1666.598332][ T31] audit: type=1400 audit(1791724116.606:896): avc: denied { setopt } for pid=15856 comm="syz.0.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1666.774852][T15776] udevd[15776]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1668.522328][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.522363][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.406381][T15921] FAULT_INJECTION: forcing a failure. [ 1669.406381][T15921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1669.406461][T15921] CPU: 0 UID: 0 PID: 15921 Comm: syz.0.2345 Tainted: G L syzkaller #0 PREEMPT(full) [ 1669.406490][T15921] Tainted: [L]=SOFTLOCKUP [ 1669.406497][T15921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1669.406510][T15921] Call Trace: [ 1669.406517][T15921] [ 1669.406526][T15921] dump_stack_lvl+0x100/0x190 [ 1669.406559][T15921] should_fail_ex.cold+0x5/0xa [ 1669.406592][T15921] _copy_from_iter+0x1f4/0x1690 [ 1669.406624][T15921] ? __asan_memset+0x23/0x50 [ 1669.406649][T15921] ? __pfx__copy_from_iter+0x10/0x10 [ 1669.406676][T15921] ? __pfx___alloc_skb+0x10/0x10 [ 1669.406694][T15921] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1669.406722][T15921] ? sock_has_perm+0x25a/0x2f0 [ 1669.406753][T15921] ? __pfx_sock_has_perm+0x10/0x10 [ 1669.406783][T15921] netlink_sendmsg+0x808/0xda0 [ 1669.406818][T15921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1669.406851][T15921] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1669.406883][T15921] ____sys_sendmsg+0xa4d/0xbe0 [ 1669.406907][T15921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1669.406939][T15921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1669.406967][T15921] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1669.406994][T15921] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 1669.407025][T15921] ___sys_sendmsg+0x190/0x1e0 [ 1669.407053][T15921] ? __pfx____sys_sendmsg+0x10/0x10 [ 1669.407080][T15921] ? get_pid_task+0x106/0x250 [ 1669.407119][T15921] ? find_held_lock+0x2b/0x80 [ 1669.407167][T15921] __sys_sendmsg+0x160/0x210 [ 1669.407189][T15921] ? __pfx___sys_sendmsg+0x10/0x10 [ 1669.407237][T15921] do_syscall_64+0x123/0x790 [ 1669.407268][T15921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.407289][T15921] RIP: 0033:0x7f8f0af9e1d9 [ 1669.407307][T15921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1669.407325][T15921] RSP: 002b:00007f8f0beff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1669.407345][T15921] RAX: ffffffffffffffda RBX: 00007f8f0b226090 RCX: 00007f8f0af9e1d9 [ 1669.407359][T15921] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 1669.407371][T15921] RBP: 00007f8f0beff090 R08: 0000000000000000 R09: 0000000000000000 [ 1669.407384][T15921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1669.407396][T15921] R13: 00007f8f0b226128 R14: 00007f8f0b226090 R15: 00007ffef9c65b88 [ 1669.407425][T15921] [ 1669.571921][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 1669.571937][ T31] audit: type=1400 audit(1791724120.266:906): avc: denied { setopt } for pid=15912 comm="syz.4.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1669.629134][T15923] Invalid ELF header type: 3 != 1 [ 1670.287134][T15932] tipc: Enabled bearer , priority 0 [ 1670.340513][ T31] audit: type=1400 audit(1791724121.036:907): avc: denied { read } for pid=15933 comm="syz.0.2351" name="event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1670.353476][ T31] audit: type=1400 audit(1791724121.036:908): avc: denied { open } for pid=15933 comm="syz.0.2351" path="/dev/input/event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1670.416880][T15937] FAULT_INJECTION: forcing a failure. [ 1670.416880][T15937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1670.416914][T15937] CPU: 1 UID: 0 PID: 15937 Comm: syz.4.2354 Tainted: G L syzkaller #0 PREEMPT(full) [ 1670.416942][T15937] Tainted: [L]=SOFTLOCKUP [ 1670.416950][T15937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1670.416962][T15937] Call Trace: [ 1670.416969][T15937] [ 1670.416978][T15937] dump_stack_lvl+0x100/0x190 [ 1670.417012][T15937] should_fail_ex.cold+0x5/0xa [ 1670.417041][T15937] _copy_from_user+0x2e/0xd0 [ 1670.417071][T15937] kstrtouint_from_user+0xd6/0x1d0 [ 1670.417093][T15937] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1670.417122][T15937] ? lock_acquire+0x1d1/0x380 [ 1670.417153][T15937] proc_fail_nth_write+0x83/0x220 [ 1670.417183][T15937] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1670.417220][T15937] vfs_write+0x2aa/0x1050 [ 1670.417246][T15937] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1670.417274][T15937] ? lock_acquire+0x1d1/0x380 [ 1670.417296][T15937] ? __fget_files+0x34/0x3d0 [ 1670.417323][T15937] ? __pfx_vfs_write+0x10/0x10 [ 1670.417345][T15937] ? find_held_lock+0x2b/0x80 [ 1670.417374][T15937] ? __fget_files+0x215/0x3d0 [ 1670.417406][T15937] ? __fget_files+0x21f/0x3d0 [ 1670.417442][T15937] ksys_write+0x12a/0x250 [ 1670.417465][T15937] ? __pfx_ksys_write+0x10/0x10 [ 1670.417498][T15937] do_syscall_64+0x123/0x790 [ 1670.417530][T15937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.417552][T15937] RIP: 0033:0x7fe626b5ea0e [ 1670.417568][T15937] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1670.417586][T15937] RSP: 002b:00007fe627a61fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1670.417606][T15937] RAX: ffffffffffffffda RBX: 00007fe627a626c0 RCX: 00007fe626b5ea0e [ 1670.417620][T15937] RDX: 0000000000000001 RSI: 00007fe627a620a0 RDI: 0000000000000003 [ 1670.417632][T15937] RBP: 00007fe627a62090 R08: 0000000000000000 R09: 0000000000000000 [ 1670.417644][T15937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1670.417656][T15937] R13: 00007fe626e26038 R14: 00007fe626e25fa0 R15: 00007ffefe638338 [ 1670.417688][T15937] [ 1670.654174][ T31] audit: type=1400 audit(1791724121.346:909): avc: denied { mount } for pid=15933 comm="syz.0.2351" name="/" dev="autofs" ino=40863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1670.847179][T15944] FAULT_INJECTION: forcing a failure. [ 1670.847179][T15944] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1670.847214][T15944] CPU: 0 UID: 0 PID: 15944 Comm: syz.4.2355 Tainted: G L syzkaller #0 PREEMPT(full) [ 1670.847243][T15944] Tainted: [L]=SOFTLOCKUP [ 1670.847250][T15944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1670.847262][T15944] Call Trace: [ 1670.847269][T15944] [ 1670.847277][T15944] dump_stack_lvl+0x100/0x190 [ 1670.847311][T15944] should_fail_ex.cold+0x5/0xa [ 1670.847339][T15944] ? prepare_alloc_pages+0x16d/0x5b0 [ 1670.847370][T15944] should_fail_alloc_page+0xeb/0x140 [ 1670.847401][T15944] prepare_alloc_pages+0x1f0/0x5b0 [ 1670.847429][T15944] ? is_bpf_text_address+0x94/0x1a0 [ 1670.847462][T15944] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1670.847500][T15944] ? stack_trace_save+0x8e/0xc0 [ 1670.847522][T15944] ? __pfx_stack_trace_save+0x10/0x10 [ 1670.847543][T15944] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1670.847565][T15944] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1670.847588][T15944] ? is_bpf_text_address+0x94/0x1a0 [ 1670.847621][T15944] ? kasan_save_stack+0x3f/0x50 [ 1670.847646][T15944] ? kasan_save_stack+0x30/0x50 [ 1670.847670][T15944] ? kasan_save_track+0x14/0x30 [ 1670.847694][T15944] ? __kasan_slab_alloc+0x89/0x90 [ 1670.847719][T15944] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 1670.847744][T15944] ? alloc_vmap_area+0x640/0x2bb0 [ 1670.847768][T15944] ? __get_vm_area_node+0x1ed/0x350 [ 1670.847793][T15944] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 1670.847827][T15944] ? __vmalloc_node_noprof+0xad/0xf0 [ 1670.847853][T15944] ? __vmalloc_noprof+0xa3/0x120 [ 1670.847880][T15944] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1670.847905][T15944] ? bpf_prog_alloc+0x3b/0x200 [ 1670.847929][T15944] ? bpf_prog_load+0x49e/0x2ab0 [ 1670.847955][T15944] ? __sys_bpf+0x1f46/0x4a30 [ 1670.847975][T15944] ? __x64_sys_bpf+0xce/0x140 [ 1670.847996][T15944] ? do_syscall_64+0x123/0x790 [ 1670.848023][T15944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.848056][T15944] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1670.848084][T15944] ? policy_nodemask+0xed/0x4f0 [ 1670.848116][T15944] alloc_pages_mpol+0x201/0x550 [ 1670.848146][T15944] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1670.848183][T15944] alloc_pages_noprof+0x1a/0x160 [ 1670.848205][T15944] get_free_pages_noprof+0x10/0xb0 [ 1670.848231][T15944] __kasan_populate_vmalloc+0xa0/0x210 [ 1670.848262][T15944] alloc_vmap_area+0x95d/0x2bb0 [ 1670.848298][T15944] ? kasan_save_track+0x14/0x30 [ 1670.848322][T15944] ? __kasan_kmalloc+0xaa/0xb0 [ 1670.848348][T15944] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1670.848376][T15944] ? __get_vm_area_node+0x124/0x350 [ 1670.848407][T15944] __get_vm_area_node+0x1ed/0x350 [ 1670.848441][T15944] __vmalloc_node_range_noprof+0x268/0x1420 [ 1670.848471][T15944] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1670.848501][T15944] ? up_write+0x2dc/0x5b0 [ 1670.848531][T15944] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1670.848558][T15944] ? lock_acquire+0x1d1/0x380 [ 1670.848583][T15944] ? find_held_lock+0x2b/0x80 [ 1670.848610][T15944] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1670.848639][T15944] ? avc_has_perm_noaudit+0x11e/0x470 [ 1670.848667][T15944] ? avc_has_perm_noaudit+0x145/0x470 [ 1670.848691][T15944] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1670.848717][T15944] __vmalloc_node_noprof+0xad/0xf0 [ 1670.848745][T15944] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1670.848775][T15944] __vmalloc_noprof+0xa3/0x120 [ 1670.848809][T15944] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1670.848840][T15944] ? rcu_is_watching+0x13/0xc0 [ 1670.848868][T15944] ? cap_capable+0x107/0x430 [ 1670.848894][T15944] bpf_prog_alloc_no_stats+0x59/0x690 [ 1670.848920][T15944] ? security_capable+0x80/0x260 [ 1670.848946][T15944] bpf_prog_alloc+0x3b/0x200 [ 1670.848970][T15944] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1670.848997][T15944] bpf_prog_load+0x49e/0x2ab0 [ 1670.849031][T15944] ? __pfx_bpf_prog_load+0x10/0x10 [ 1670.849084][T15944] __sys_bpf+0x1f46/0x4a30 [ 1670.849114][T15944] ? __pfx___sys_bpf+0x10/0x10 [ 1670.849136][T15944] ? find_held_lock+0x2b/0x80 [ 1670.849164][T15944] ? get_pid_task+0xfc/0x250 [ 1670.849189][T15944] ? get_pid_task+0xfc/0x250 [ 1670.849225][T15944] ? find_held_lock+0x2b/0x80 [ 1670.849259][T15944] ? rcu_read_lock_any_held+0x6a/0x90 [ 1670.849279][T15944] ? find_held_lock+0x2b/0x80 [ 1670.849306][T15944] ? ksys_write+0x190/0x250 [ 1670.849328][T15944] ? ksys_write+0x190/0x250 [ 1670.849352][T15944] ? lock_acquire+0x1d1/0x380 [ 1670.849395][T15944] ? fput+0x7c/0x100 [ 1670.849422][T15944] ? ksys_write+0x1ac/0x250 [ 1670.849450][T15944] ? __x64_sys_bpf+0xce/0x140 [ 1670.849471][T15944] __x64_sys_bpf+0xce/0x140 [ 1670.849494][T15944] ? do_syscall_64+0xae/0x790 [ 1670.849522][T15944] do_syscall_64+0x123/0x790 [ 1670.849552][T15944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.849573][T15944] RIP: 0033:0x7fe626b9e1d9 [ 1670.849590][T15944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1670.849608][T15944] RSP: 002b:00007fe627a62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1670.849627][T15944] RAX: ffffffffffffffda RBX: 00007fe626e25fa0 RCX: 00007fe626b9e1d9 [ 1670.849641][T15944] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 1670.849654][T15944] RBP: 00007fe627a62090 R08: 0000000000000000 R09: 0000000000000000 [ 1670.849666][T15944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1670.849678][T15944] R13: 00007fe626e26038 R14: 00007fe626e25fa0 R15: 00007ffefe638338 [ 1670.849707][T15944] [ 1670.927809][T15945] FAULT_INJECTION: forcing a failure. [ 1670.927809][T15945] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.927866][T15945] CPU: 0 UID: 0 PID: 15945 Comm: syz.6.2353 Tainted: G L syzkaller #0 PREEMPT(full) [ 1670.927897][T15945] Tainted: [L]=SOFTLOCKUP [ 1670.927905][T15945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1670.927918][T15945] Call Trace: [ 1670.927926][T15945] [ 1670.927935][T15945] dump_stack_lvl+0x100/0x190 [ 1670.927972][T15945] should_fail_ex.cold+0x5/0xa [ 1670.928003][T15945] should_failslab+0xc2/0x120 [ 1670.928034][T15945] __kmalloc_noprof+0xfc/0x840 [ 1670.928061][T15945] ? rcu_is_watching+0x13/0xc0 [ 1670.928090][T15945] ? tomoyo_encode2+0xfb/0x3c0 [ 1670.928127][T15945] tomoyo_encode2+0xfb/0x3c0 [ 1670.928163][T15945] tomoyo_encode+0x29/0x50 [ 1670.928192][T15945] tomoyo_realpath_from_path+0x18c/0x690 [ 1670.928232][T15945] tomoyo_check_open_permission+0x2af/0x3c0 [ 1670.928260][T15945] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1670.928288][T15945] ? trace_sched_exit_tp+0x120/0x160 [ 1670.928318][T15945] ? __schedule+0x126b/0x6920 [ 1670.928351][T15945] ? hook_file_open+0x248/0x8e0 [ 1670.928406][T15945] tomoyo_file_open+0x6b/0x90 [ 1670.928430][T15945] security_file_open+0xb5/0x1e0 [ 1670.928464][T15945] do_dentry_open+0x588/0x14d0 [ 1670.928503][T15945] vfs_open+0x82/0x3f0 [ 1670.928538][T15945] dentry_open+0x71/0xd0 [ 1670.928569][T15945] do_mq_open+0x5a8/0x9c0 [ 1670.928599][T15945] ? __pfx_do_mq_open+0x10/0x10 [ 1670.928630][T15945] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1670.928671][T15945] __x64_sys_mq_open+0x152/0x1e0 [ 1670.928698][T15945] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 1670.928741][T15945] do_syscall_64+0x123/0x790 [ 1670.928776][T15945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.928799][T15945] RIP: 0033:0x7f18cd59e1d9 [ 1670.928818][T15945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1670.928838][T15945] RSP: 002b:00007f18ce38a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1670.928859][T15945] RAX: ffffffffffffffda RBX: 00007f18cd826180 RCX: 00007f18cd59e1d9 [ 1670.928874][T15945] RDX: 00000000000000e8 RSI: 0000000000000040 RDI: 00002000000007c0 [ 1670.928887][T15945] RBP: 00007f18cd635888 R08: 0000000000000000 R09: 0000000000000000 [ 1670.928901][T15945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1670.928915][T15945] R13: 00007f18cd826218 R14: 00007f18cd826180 R15: 00007fff9c5545a8 [ 1670.928948][T15945] [ 1670.929091][T15945] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1671.594607][ T5605] tipc: Node number set to 4278255617 [ 1671.639532][T15944] syz.4.2355: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1671.639599][T15944] CPU: 1 UID: 0 PID: 15944 Comm: syz.4.2355 Tainted: G L syzkaller #0 PREEMPT(full) [ 1671.639626][T15944] Tainted: [L]=SOFTLOCKUP [ 1671.639634][T15944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1671.639645][T15944] Call Trace: [ 1671.639652][T15944] [ 1671.639660][T15944] dump_stack_lvl+0x100/0x190 [ 1671.639693][T15944] warn_alloc.cold+0x9e/0xb2 [ 1671.639716][T15944] ? __pfx_warn_alloc+0x10/0x10 [ 1671.639737][T15944] ? lockdep_hardirqs_on+0x7d/0x110 [ 1671.639769][T15944] ? __get_vm_area_node+0x2f0/0x350 [ 1671.639801][T15944] ? __get_vm_area_node+0x22b/0x350 [ 1671.639833][T15944] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 1671.639865][T15944] ? up_write+0x2dc/0x5b0 [ 1671.639894][T15944] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1671.639921][T15944] ? lock_acquire+0x1d1/0x380 [ 1671.639945][T15944] ? find_held_lock+0x2b/0x80 [ 1671.639971][T15944] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1671.639999][T15944] ? avc_has_perm_noaudit+0x11e/0x470 [ 1671.640026][T15944] ? avc_has_perm_noaudit+0x145/0x470 [ 1671.640048][T15944] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1671.640078][T15944] __vmalloc_node_noprof+0xad/0xf0 [ 1671.640106][T15944] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1671.640134][T15944] __vmalloc_noprof+0xa3/0x120 [ 1671.640161][T15944] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1671.640191][T15944] ? rcu_is_watching+0x13/0xc0 [ 1671.640218][T15944] ? cap_capable+0x107/0x430 [ 1671.640243][T15944] bpf_prog_alloc_no_stats+0x59/0x690 [ 1671.640267][T15944] ? security_capable+0x80/0x260 [ 1671.640292][T15944] bpf_prog_alloc+0x3b/0x200 [ 1671.640315][T15944] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1671.640342][T15944] bpf_prog_load+0x49e/0x2ab0 [ 1671.640374][T15944] ? __pfx_bpf_prog_load+0x10/0x10 [ 1671.640425][T15944] __sys_bpf+0x1f46/0x4a30 [ 1671.640453][T15944] ? __pfx___sys_bpf+0x10/0x10 [ 1671.640474][T15944] ? find_held_lock+0x2b/0x80 [ 1671.640500][T15944] ? get_pid_task+0xfc/0x250 [ 1671.640525][T15944] ? get_pid_task+0xfc/0x250 [ 1671.640559][T15944] ? find_held_lock+0x2b/0x80 [ 1671.640593][T15944] ? rcu_read_lock_any_held+0x6a/0x90 [ 1671.640611][T15944] ? find_held_lock+0x2b/0x80 [ 1671.640637][T15944] ? ksys_write+0x190/0x250 [ 1671.640659][T15944] ? ksys_write+0x190/0x250 [ 1671.640681][T15944] ? lock_acquire+0x1d1/0x380 [ 1671.640722][T15944] ? fput+0x7c/0x100 [ 1671.640748][T15944] ? ksys_write+0x1ac/0x250 [ 1671.640774][T15944] ? __x64_sys_bpf+0xce/0x140 [ 1671.640793][T15944] __x64_sys_bpf+0xce/0x140 [ 1671.640816][T15944] ? do_syscall_64+0xae/0x790 [ 1671.640843][T15944] do_syscall_64+0x123/0x790 [ 1671.640871][T15944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.640891][T15944] RIP: 0033:0x7fe626b9e1d9 [ 1671.640907][T15944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1671.640925][T15944] RSP: 002b:00007fe627a62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1671.640943][T15944] RAX: ffffffffffffffda RBX: 00007fe626e25fa0 RCX: 00007fe626b9e1d9 [ 1671.640956][T15944] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 1671.640968][T15944] RBP: 00007fe627a62090 R08: 0000000000000000 R09: 0000000000000000 [ 1671.640980][T15944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1671.640992][T15944] R13: 00007fe626e26038 R14: 00007fe626e25fa0 R15: 00007ffefe638338 [ 1671.641019][T15944] [ 1671.645281][T15944] Mem-Info: [ 1671.645293][T15944] active_anon:10365 inactive_anon:0 isolated_anon:0 [ 1671.645293][T15944] active_file:72 inactive_file:68916 isolated_file:0 [ 1671.645293][T15944] unevictable:0 dirty:405 writeback:0 [ 1671.645293][T15944] slab_reclaimable:13033 slab_unreclaimable:103371 [ 1671.645293][T15944] mapped:31427 shmem:3468 pagetables:1736 [ 1671.645293][T15944] sec_pagetables:0 bounce:0 [ 1671.645293][T15944] kernel_misc_reclaimable:0 [ 1671.645293][T15944] free:1245054 free_pcp:13500 free_cma:0 [ 1671.645339][T15944] Node 0 active_anon:41460kB inactive_anon:0kB active_file:288kB inactive_file:275456kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125708kB dirty:1616kB writeback:0kB shmem:13872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13740kB pagetables:6816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1671.645389][T15944] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1671.645435][T15944] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 1671.645487][T15944] lowmem_reserve[]: 0 2452 2452 2452 2452 [ 1671.645520][T15944] Node 0 DMA32 free:1014644kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:41460kB inactive_anon:0kB active_file:288kB inactive_file:275456kB unevictable:0kB writepending:1616kB zspages:20kB present:3129332kB managed:2510924kB mlocked:0kB bounce:0kB free_pcp:53968kB local_pcp:27864kB free_cma:0kB [ 1671.645573][T15944] lowmem_reserve[]: 0 0 0 0 0 [ 1671.645602][T15944] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:60kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1671.645652][T15944] lowmem_reserve[]: 0 0 0 0 0 [ 1671.645682][T15944] Node 1 Normal free:3950244kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1671.645733][T15944] lowmem_reserve[]: 0 0 0 0 0 [ 1671.645763][T15944] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1671.645974][T15944] Node 0 DMA32: 23*4kB (UM) 1178*8kB (UM) 2084*16kB (UME) 1986*32kB (UME) 1392*64kB (UME) 858*128kB (UM) 505*256kB (UM) 201*512kB (UM) 80*1024kB (UM) 17*2048kB (UM) 88*4096kB (UM) = 1014700kB [ 1671.646122][T15944] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1671.646211][T15944] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 7*16kB (UM) 6*32kB (UM) 5*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 963*4096kB (M) = 3950244kB [ 1671.646351][T15944] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1671.646367][T15944] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1671.646381][T15944] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1671.646395][T15944] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1671.646409][T15944] 72447 total pagecache pages [ 1671.646416][T15944] 2 pages in swap cache [ 1671.646423][T15944] Free swap = 124912kB [ 1671.646430][T15944] Total swap = 124996kB [ 1671.646437][T15944] 2097051 pages RAM [ 1671.646443][T15944] 0 pages HighMem/MovableOnly [ 1671.646450][T15944] 437689 pages reserved [ 1671.646457][T15944] 0 pages cma reserved [ 1671.939341][ T31] audit: type=1400 audit(1791724122.626:910): avc: denied { mount } for pid=15953 comm="syz.4.2359" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1671.943054][ T31] audit: type=1400 audit(1791724122.636:911): avc: denied { search } for pid=15953 comm="syz.4.2359" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1671.943273][ T31] audit: type=1400 audit(1791724122.636:912): avc: denied { search } for pid=15953 comm="syz.4.2359" name="per_cpu" dev="tracefs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1671.943480][ T31] audit: type=1400 audit(1791724122.636:913): avc: denied { search } for pid=15953 comm="syz.4.2359" name="cpu0" dev="tracefs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1671.943773][ T31] audit: type=1400 audit(1791724122.636:914): avc: denied { read } for pid=15953 comm="syz.4.2359" name="trace_pipe_raw" dev="tracefs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1671.944126][ T31] audit: type=1400 audit(1791724122.636:915): avc: denied { open } for pid=15953 comm="syz.4.2359" path="/472/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1675.353335][T16003] FAULT_INJECTION: forcing a failure. [ 1675.353335][T16003] name failslab, interval 1, probability 0, space 0, times 0 [ 1675.353406][T16003] CPU: 0 UID: 0 PID: 16003 Comm: syz.4.2367 Tainted: G L syzkaller #0 PREEMPT(full) [ 1675.353437][T16003] Tainted: [L]=SOFTLOCKUP [ 1675.353445][T16003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1675.353458][T16003] Call Trace: [ 1675.353466][T16003] [ 1675.353475][T16003] dump_stack_lvl+0x100/0x190 [ 1675.353514][T16003] should_fail_ex.cold+0x5/0xa [ 1675.353546][T16003] should_failslab+0xc2/0x120 [ 1675.353576][T16003] __kmalloc_noprof+0xfc/0x840 [ 1675.353602][T16003] ? rcu_is_watching+0x13/0xc0 [ 1675.353631][T16003] ? tomoyo_encode2+0xfb/0x3c0 [ 1675.353668][T16003] tomoyo_encode2+0xfb/0x3c0 [ 1675.353704][T16003] tomoyo_encode+0x29/0x50 [ 1675.353733][T16003] tomoyo_realpath_from_path+0x18c/0x690 [ 1675.353773][T16003] tomoyo_check_open_permission+0x2af/0x3c0 [ 1675.353803][T16003] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1675.353840][T16003] ? __schedule+0x126b/0x6920 [ 1675.353876][T16003] ? hook_file_open+0x248/0x8e0 [ 1675.353924][T16003] ? path_get+0x61/0x80 [ 1675.353948][T16003] tomoyo_file_open+0x6b/0x90 [ 1675.353974][T16003] security_file_open+0xb5/0x1e0 [ 1675.354006][T16003] do_dentry_open+0x588/0x14d0 [ 1675.354043][T16003] vfs_open+0x82/0x3f0 [ 1675.354078][T16003] dentry_open+0x71/0xd0 [ 1675.354109][T16003] do_mq_open+0x5a8/0x9c0 [ 1675.354138][T16003] ? __pfx_do_mq_open+0x10/0x10 [ 1675.354162][T16003] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1675.354200][T16003] __x64_sys_mq_open+0x152/0x1e0 [ 1675.354226][T16003] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 1675.354268][T16003] do_syscall_64+0x123/0x790 [ 1675.354300][T16003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.354322][T16003] RIP: 0033:0x7fe626b9e1d9 [ 1675.354341][T16003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1675.354360][T16003] RSP: 002b:00007fe627a20028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1675.354381][T16003] RAX: ffffffffffffffda RBX: 00007fe626e26180 RCX: 00007fe626b9e1d9 [ 1675.354395][T16003] RDX: 00000000000000e8 RSI: 0000000000000040 RDI: 00002000000007c0 [ 1675.354408][T16003] RBP: 00007fe626c35888 R08: 0000000000000000 R09: 0000000000000000 [ 1675.354421][T16003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1675.354434][T16003] R13: 00007fe626e26218 R14: 00007fe626e26180 R15: 00007ffefe638338 [ 1675.354466][T16003] [ 1675.354601][T16003] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1677.498152][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 1677.498172][ T31] audit: type=1400 audit(1791724128.186:925): avc: denied { create } for pid=16019 comm="syz.6.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1677.572086][ T31] audit: type=1400 audit(1791724128.266:926): avc: denied { mount } for pid=16022 comm="syz.5.2362" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1677.736353][ T31] audit: type=1400 audit(1791724128.426:927): avc: denied { unmount } for pid=8344 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1677.786159][T16031] bond0: (slave bond_slave_0): Releasing backup interface [ 1677.808029][T16031] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1677.890908][ T5605] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1678.041714][ T5605] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1678.042932][ T5605] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1678.042962][ T5605] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1678.044480][ T5605] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1678.044525][ T5605] usb 1-1: Product: syz [ 1678.044541][ T5605] usb 1-1: Manufacturer: syz [ 1678.135943][ T5605] hub 1-1:4.0: USB hub found [ 1678.439969][ T31] audit: type=1400 audit(1791724128.906:928): avc: denied { cmd } for pid=16034 comm="syz.5.2376" path="socket:[41998]" dev="sockfs" ino=41998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1678.533279][ T5605] hub 1-1:4.0: 2 ports detected [ 1678.783736][ T31] audit: type=1400 audit(1791724129.476:929): avc: denied { read } for pid=16019 comm="syz.6.2372" name="sg0" dev="devtmpfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1678.785110][ T31] audit: type=1400 audit(1791724129.476:930): avc: denied { open } for pid=16019 comm="syz.6.2372" path="/dev/sg0" dev="devtmpfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1679.299483][ T5605] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 1679.362226][ T5605] usb 1-1: USB disconnect, device number 24 [ 1679.415531][T16053] Invalid ELF header type: 3 != 1 [ 1679.667815][T16059] bond4: (slave bond_slave_0): Device is not bonding slave [ 1679.667829][T16059] bond4: option active_slave: invalid value (bond_slave_0) [ 1679.671240][T16059] bond4 (unregistering): Released all slaves [ 1679.819517][ T31] audit: type=1400 audit(1791724130.506:931): avc: denied { write } for pid=16058 comm="syz.7.2380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1680.372440][ T31] audit: type=1400 audit(1791724131.066:932): avc: denied { name_bind } for pid=16062 comm="syz.0.2381" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1680.413031][T16063] netlink: NAT attribute has 8 unknown bytes [ 1680.413054][T16063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1680.653754][T16063] geneve2: entered promiscuous mode [ 1680.653779][T16063] geneve2: entered allmulticast mode [ 1680.840705][ T31] audit: type=1400 audit(1791724131.536:933): avc: denied { bind } for pid=16075 comm="syz.7.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1680.841836][ T31] audit: type=1400 audit(1791724131.536:934): avc: denied { connect } for pid=16075 comm="syz.7.2385" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1680.899156][T16076] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2385'. [ 1681.561706][T16071] bond0: (slave bond_slave_1): Releasing backup interface [ 1681.793008][T16094] FAULT_INJECTION: forcing a failure. [ 1681.793008][T16094] name failslab, interval 1, probability 0, space 0, times 0 [ 1681.793048][T16094] CPU: 0 UID: 0 PID: 16094 Comm: syz.4.2390 Tainted: G L syzkaller #0 PREEMPT(full) [ 1681.793080][T16094] Tainted: [L]=SOFTLOCKUP [ 1681.793089][T16094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1681.793102][T16094] Call Trace: [ 1681.793110][T16094] [ 1681.793119][T16094] dump_stack_lvl+0x100/0x190 [ 1681.793156][T16094] should_fail_ex.cold+0x5/0xa [ 1681.793188][T16094] should_failslab+0xc2/0x120 [ 1681.793220][T16094] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1681.793248][T16094] ? anon_vma_clone+0x2b3/0xca0 [ 1681.793274][T16094] anon_vma_clone+0x2b3/0xca0 [ 1681.793296][T16094] __split_vma+0x750/0x1de0 [ 1681.793312][T16094] ? __pfx___split_vma+0x10/0x10 [ 1681.793324][T16094] ? mas_next_slot+0xc05/0x13a0 [ 1681.793352][T16094] vms_gather_munmap_vmas+0x3a5/0x1720 [ 1681.793371][T16094] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1681.793384][T16094] ? mtree_range_walk+0x72b/0xb70 [ 1681.793409][T16094] ? mas_walk+0x260/0x310 [ 1681.793428][T16094] __mmap_region+0x4cc/0x32e0 [ 1681.793442][T16094] ? is_bpf_text_address+0x94/0x1a0 [ 1681.793460][T16094] ? kernel_text_address+0x8d/0x100 [ 1681.793472][T16094] ? __pfx___mmap_region+0x10/0x10 [ 1681.793487][T16094] ? arch_stack_walk+0xa6/0xf0 [ 1681.793534][T16094] ? __lock_acquire+0x5c0/0x1f40 [ 1681.793562][T16094] ? __lock_acquire+0x5c0/0x1f40 [ 1681.793596][T16094] ? __lock_acquire+0x5c0/0x1f40 [ 1681.793622][T16094] ? do_raw_spin_unlock+0x145/0x1e0 [ 1681.793639][T16094] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1681.793662][T16094] ? rcu_is_watching+0x13/0xc0 [ 1681.793692][T16094] ? trace_hrtimer_start+0x77/0x220 [ 1681.793724][T16094] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 1681.793802][T16094] mmap_region+0x5a8/0x6d0 [ 1681.793818][T16094] ? __pfx_mmap_region+0x10/0x10 [ 1681.793832][T16094] ? shmem_mapping+0xd/0x50 [ 1681.793846][T16094] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 1681.793865][T16094] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1681.793883][T16094] ? security_mmap_addr+0x71/0x1e0 [ 1681.793902][T16094] ? __get_unmapped_area+0x255/0x3e0 [ 1681.793921][T16094] do_mmap+0x12c7/0x1c30 [ 1681.793940][T16094] ? lock_acquire+0x1d1/0x380 [ 1681.793955][T16094] ? __pfx_do_mmap+0x10/0x10 [ 1681.793972][T16094] ? __pfx___might_resched+0x10/0x10 [ 1681.793984][T16094] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 1681.793997][T16094] ? security_current_getlsmprop_subj+0x6e/0x130 [ 1681.794015][T16094] ? __pfx_down_write_killable+0x10/0x10 [ 1681.794037][T16094] vm_mmap_pgoff+0x28d/0x470 [ 1681.794055][T16094] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1681.794069][T16094] ? __fget_files+0x215/0x3d0 [ 1681.794088][T16094] ? __fget_files+0x21f/0x3d0 [ 1681.794107][T16094] ksys_mmap_pgoff+0x3cb/0x610 [ 1681.794124][T16094] ? __x64_sys_futex+0x358/0x4d0 [ 1681.794142][T16094] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1681.794157][T16094] ? xfd_validate_state+0x129/0x190 [ 1681.794174][T16094] __x64_sys_mmap+0x125/0x190 [ 1681.794190][T16094] do_syscall_64+0x123/0x790 [ 1681.794208][T16094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.794221][T16094] RIP: 0033:0x7fe626b9e1d9 [ 1681.794233][T16094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1681.794245][T16094] RSP: 002b:00007fe627a62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1681.794257][T16094] RAX: ffffffffffffffda RBX: 00007fe626e25fa0 RCX: 00007fe626b9e1d9 [ 1681.794265][T16094] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 1681.794272][T16094] RBP: 00007fe626c35888 R08: 0000000000000004 R09: 0000000000000000 [ 1681.794280][T16094] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 1681.794287][T16094] R13: 00007fe626e26038 R14: 00007fe626e25fa0 R15: 00007ffefe638338 [ 1681.794305][T16094] [ 1682.454477][T16103] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2392'. [ 1682.591405][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 1682.591418][ T31] audit: type=1400 audit(1791724133.286:941): avc: denied { ioctl } for pid=16105 comm="syz.0.2393" path="socket:[41843]" dev="sockfs" ino=41843 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1682.643113][ T31] audit: type=1400 audit(1791724133.336:942): avc: denied { read } for pid=16105 comm="syz.0.2393" name="stats" dev="binder" ino=1048602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1682.646067][ T31] audit: type=1400 audit(1791724133.336:943): avc: denied { open } for pid=16105 comm="syz.0.2393" path="/dev/binderfs/binder_logs/stats" dev="binder" ino=1048602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1682.732403][ T31] audit: type=1400 audit(1791724133.426:944): avc: denied { ioctl } for pid=16105 comm="syz.0.2393" path="/dev/binderfs/binder_logs/stats" dev="binder" ino=1048602 ioctlcmd=0xaece scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1683.010241][ T31] audit: type=1400 audit(1791724133.706:945): avc: denied { create } for pid=16111 comm="syz.5.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1683.043041][ T31] audit: type=1400 audit(1791724133.736:946): avc: denied { read } for pid=16111 comm="syz.5.2395" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1683.116330][ T31] audit: type=1400 audit(1791724133.806:947): avc: denied { open } for pid=16111 comm="syz.5.2395" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1683.221896][ T31] audit: type=1400 audit(1791724133.916:948): avc: denied { create } for pid=16111 comm="syz.5.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1683.258350][ T31] audit: type=1400 audit(1791724133.946:949): avc: denied { write } for pid=16111 comm="syz.5.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1683.373046][ T31] audit: type=1400 audit(1791724134.056:950): avc: denied { mount } for pid=16111 comm="syz.5.2395" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1686.582318][T16144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2403'. [ 1687.683513][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 1687.683531][ T31] audit: type=1400 audit(1791724138.376:952): avc: denied { write } for pid=16156 comm="syz.6.2408" name="sg0" dev="devtmpfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1687.757351][ T31] audit: type=1400 audit(1791724138.436:953): avc: denied { mounton } for pid=16156 comm="syz.6.2408" path="/290/file0" dev="tmpfs" ino=1676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1687.917502][ T31] audit: type=1400 audit(1791724138.606:954): avc: denied { create } for pid=16158 comm="syz.5.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1688.959925][T16184] FAULT_INJECTION: forcing a failure. [ 1688.959925][T16184] name failslab, interval 1, probability 0, space 0, times 0 [ 1688.959979][T16184] CPU: 1 UID: 0 PID: 16184 Comm: syz.0.2414 Tainted: G L syzkaller #0 PREEMPT(full) [ 1688.960012][T16184] Tainted: [L]=SOFTLOCKUP [ 1688.960020][T16184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1688.960034][T16184] Call Trace: [ 1688.960042][T16184] [ 1688.960051][T16184] dump_stack_lvl+0x100/0x190 [ 1688.960087][T16184] should_fail_ex.cold+0x5/0xa [ 1688.960119][T16184] should_failslab+0xc2/0x120 [ 1688.960152][T16184] __kmalloc_noprof+0xfc/0x840 [ 1688.960179][T16184] ? rcu_is_watching+0x13/0xc0 [ 1688.960209][T16184] ? tomoyo_encode2+0xfb/0x3c0 [ 1688.960247][T16184] tomoyo_encode2+0xfb/0x3c0 [ 1688.960283][T16184] tomoyo_encode+0x29/0x50 [ 1688.960313][T16184] tomoyo_realpath_from_path+0x18c/0x690 [ 1688.960352][T16184] tomoyo_check_open_permission+0x2af/0x3c0 [ 1688.960383][T16184] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1688.960411][T16184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.960451][T16184] ? hook_file_open+0x248/0x8e0 [ 1688.960498][T16184] ? path_get+0x61/0x80 [ 1688.960523][T16184] tomoyo_file_open+0x6b/0x90 [ 1688.960548][T16184] security_file_open+0xb5/0x1e0 [ 1688.960581][T16184] do_dentry_open+0x588/0x14d0 [ 1688.960617][T16184] vfs_open+0x82/0x3f0 [ 1688.960652][T16184] dentry_open+0x71/0xd0 [ 1688.960683][T16184] do_mq_open+0x5a8/0x9c0 [ 1688.960713][T16184] ? __pfx_do_mq_open+0x10/0x10 [ 1688.960738][T16184] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1688.960777][T16184] __x64_sys_mq_open+0x152/0x1e0 [ 1688.960803][T16184] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 1688.960845][T16184] do_syscall_64+0x123/0x790 [ 1688.960880][T16184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.960904][T16184] RIP: 0033:0x7f8f0af9e1d9 [ 1688.960923][T16184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1688.960945][T16184] RSP: 002b:00007f8f0bede028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1688.960967][T16184] RAX: ffffffffffffffda RBX: 00007f8f0b226180 RCX: 00007f8f0af9e1d9 [ 1688.960983][T16184] RDX: 00000000000000e8 RSI: 0000000000000040 RDI: 00002000000007c0 [ 1688.960997][T16184] RBP: 00007f8f0b035888 R08: 0000000000000000 R09: 0000000000000000 [ 1688.961012][T16184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1688.961025][T16184] R13: 00007f8f0b226218 R14: 00007f8f0b226180 R15: 00007ffef9c65b88 [ 1688.961059][T16184] [ 1688.961202][T16184] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1690.233225][ T31] audit: type=1400 audit(1791724140.926:955): avc: denied { mount } for pid=16190 comm="syz.5.2415" name="/" dev="ramfs" ino=43067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1690.891874][ T31] audit: type=1400 audit(1791724141.586:956): avc: denied { read write } for pid=16195 comm="syz.6.2418" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1690.892178][ T31] audit: type=1400 audit(1791724141.586:957): avc: denied { open } for pid=16195 comm="syz.6.2418" path="/dev/rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1690.893560][ T31] audit: type=1400 audit(1791724141.586:958): avc: denied { ioctl } for pid=16195 comm="syz.6.2418" path="/dev/rtc0" dev="devtmpfs" ino=915 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1691.013466][ T31] audit: type=1400 audit(1791724141.706:959): avc: denied { read } for pid=16202 comm="syz.7.2417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1691.112874][T16207] overlayfs: failed to clone upperpath [ 1691.137461][T16207] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2417'. [ 1691.137901][ T31] audit: type=1400 audit(1791724141.826:960): avc: denied { shutdown } for pid=16202 comm="syz.7.2417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1691.138914][T16207] overlayfs: failed to clone upperpath [ 1691.313831][T16201] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.507216][ T31] audit: type=1400 audit(1791724142.196:961): avc: denied { setopt } for pid=16210 comm="syz.4.2420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1691.707706][T16201] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.771320][T16228] ima: policy update failed [ 1691.775064][T16224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2425'. [ 1691.972158][T16201] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.411426][T16201] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.944805][ T973] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.944848][ T973] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.944880][ T973] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.992466][ T973] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.025866][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 1694.025883][ T31] audit: type=1400 audit(1791724144.716:968): avc: denied { link } for pid=16258 comm="syz.0.2433" name="file0" dev="fuse" ino=4503599627370496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1694.144533][ T31] audit: type=1400 audit(1791724144.836:969): avc: denied { ioctl } for pid=16258 comm="syz.0.2433" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1694.175234][ T5605] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1694.340844][ T5605] usb 7-1: Using ep0 maxpacket: 16 [ 1694.341329][ T5605] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1694.342206][ T5605] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1694.342249][ T5605] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.344034][ T5605] usb 7-1: config 0 descriptor?? [ 1694.345216][T16261] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1694.756170][ T5605] aquacomputer_d5next 0003:0C70:F00D.0007: unknown main item tag 0x0 [ 1694.756204][ T5605] aquacomputer_d5next 0003:0C70:F00D.0007: unknown main item tag 0x0 [ 1694.756228][ T5605] aquacomputer_d5next 0003:0C70:F00D.0007: unknown main item tag 0x0 [ 1694.756250][ T5605] aquacomputer_d5next 0003:0C70:F00D.0007: unknown main item tag 0x0 [ 1694.756273][ T5605] aquacomputer_d5next 0003:0C70:F00D.0007: unknown main item tag 0x0 [ 1694.756305][ T5605] aquacomputer_d5next 0003:0C70:F00D.0007: unknown main item tag 0x0 [ 1694.756330][ T5605] aquacomputer_d5next 0003:0C70:F00D.0007: unknown main item tag 0x0 [ 1694.756354][ T5605] aquacomputer_d5next 0003:0C70:F00D.0007: unknown main item tag 0x0 [ 1694.756379][ T5605] aquacomputer_d5next 0003:0C70:F00D.0007: unknown main item tag 0x0 [ 1694.756401][ T5605] aquacomputer_d5next 0003:0C70:F00D.0007: unknown main item tag 0x0 [ 1694.757398][ T5605] aquacomputer_d5next 0003:0C70:F00D.0007: unexpected long global item [ 1694.758053][ T5605] aquacomputer_d5next 0003:0C70:F00D.0007: probe with driver aquacomputer_d5next failed with error -22 [ 1694.964057][T15024] usb 7-1: USB disconnect, device number 19 [ 1695.078027][T16271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2435'. [ 1695.082629][T16271] ipvlan2: entered allmulticast mode [ 1695.082648][T16271] syz_tun: entered allmulticast mode [ 1695.114017][T16272] FAULT_INJECTION: forcing a failure. [ 1695.114017][T16272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1695.114039][T16272] CPU: 0 UID: 0 PID: 16272 Comm: syz.5.2436 Tainted: G L syzkaller #0 PREEMPT(full) [ 1695.114055][T16272] Tainted: [L]=SOFTLOCKUP [ 1695.114060][T16272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1695.114067][T16272] Call Trace: [ 1695.114071][T16272] [ 1695.114076][T16272] dump_stack_lvl+0x100/0x190 [ 1695.114098][T16272] should_fail_ex.cold+0x5/0xa [ 1695.114115][T16272] _copy_from_user+0x2e/0xd0 [ 1695.114133][T16272] copy_mount_options+0x76/0x190 [ 1695.114149][T16272] __x64_sys_mount+0x1ab/0x310 [ 1695.114162][T16272] ? __pfx___x64_sys_mount+0x10/0x10 [ 1695.114179][T16272] do_syscall_64+0x123/0x790 [ 1695.114198][T16272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.114210][T16272] RIP: 0033:0x7f1079b9e1d9 [ 1695.114220][T16272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1695.114231][T16272] RSP: 002b:00007f107a9b2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1695.114243][T16272] RAX: ffffffffffffffda RBX: 00007f1079e25fa0 RCX: 00007f1079b9e1d9 [ 1695.114251][T16272] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 0000000000000000 [ 1695.114258][T16272] RBP: 00007f107a9b2090 R08: 00002000000002c0 R09: 0000000000000000 [ 1695.114266][T16272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1695.114273][T16272] R13: 00007f1079e26038 R14: 00007f1079e25fa0 R15: 00007ffe75081308 [ 1695.114289][T16272] [ 1695.120321][T16272] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1695.120511][T16272] overlayfs: overlapping lowerdir path [ 1695.134736][T16275] fuse: fd is not a fuse device [ 1695.341525][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1695.349038][ T31] audit: type=1400 audit(1791724146.036:970): avc: denied { read write } for pid=16280 comm="syz.0.2442" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1695.349070][ T31] audit: type=1400 audit(1791724146.036:971): avc: denied { open } for pid=16280 comm="syz.0.2442" path="/482/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1695.364622][ T31] audit: type=1400 audit(1791724146.046:972): avc: denied { ioctl } for pid=16280 comm="syz.0.2442" path="/482/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1695.619901][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1695.627377][ T10] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1695.628941][ T10] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1695.849886][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.849926][ T10] usb 5-1: Product: syz [ 1695.849942][ T10] usb 5-1: Manufacturer: syz [ 1695.849957][ T10] usb 5-1: SerialNumber: syz [ 1696.491453][ T10] usb 5-1: config 0 descriptor?? [ 1696.512039][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1696.512093][ T10] usb 5-1: setting power ON [ 1696.512440][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1696.518255][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1696.519374][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1696.519421][ T10] usb 5-1: media controller created [ 1696.534378][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1696.588039][ T10] usb 5-1: selecting invalid altsetting 6 [ 1696.588066][ T10] usb 5-1: digital interface selection failed (-22) [ 1696.588080][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1696.708191][T16273] dvb-usb: bulk message failed: -22 (3/0) [ 1696.708211][T16273] cxusb: i2c wr: len=79 is too big! [ 1696.708211][T16273] [ 1696.731108][ T31] audit: type=1400 audit(1791724147.396:973): avc: denied { append } for pid=16270 comm="syz.4.2438" name="i2c-1" dev="devtmpfs" ino=3135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1696.733385][ T10] usb 5-1: setting power OFF [ 1696.733429][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1696.733438][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1696.733457][ T10] (NULL device *): no alternate interface [ 1696.849873][T16301] FAULT_INJECTION: forcing a failure. [ 1696.849873][T16301] name failslab, interval 1, probability 0, space 0, times 0 [ 1696.849930][T16301] CPU: 1 UID: 0 PID: 16301 Comm: syz.0.2445 Tainted: G L syzkaller #0 PREEMPT(full) [ 1696.849961][T16301] Tainted: [L]=SOFTLOCKUP [ 1696.849974][T16301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1696.849987][T16301] Call Trace: [ 1696.849995][T16301] [ 1696.850004][T16301] dump_stack_lvl+0x100/0x190 [ 1696.850044][T16301] should_fail_ex.cold+0x5/0xa [ 1696.850075][T16301] should_failslab+0xc2/0x120 [ 1696.850106][T16301] __kmalloc_noprof+0xfc/0x840 [ 1696.850132][T16301] ? rcu_is_watching+0x13/0xc0 [ 1696.850162][T16301] ? tomoyo_encode2+0xfb/0x3c0 [ 1696.850199][T16301] tomoyo_encode2+0xfb/0x3c0 [ 1696.850235][T16301] tomoyo_encode+0x29/0x50 [ 1696.850264][T16301] tomoyo_realpath_from_path+0x18c/0x690 [ 1696.850310][T16301] tomoyo_check_open_permission+0x2af/0x3c0 [ 1696.850342][T16301] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1696.850371][T16301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.850406][T16301] ? hook_file_open+0x248/0x8e0 [ 1696.850456][T16301] ? path_get+0x61/0x80 [ 1696.850481][T16301] tomoyo_file_open+0x6b/0x90 [ 1696.850504][T16301] security_file_open+0xb5/0x1e0 [ 1696.850536][T16301] do_dentry_open+0x588/0x14d0 [ 1696.850573][T16301] vfs_open+0x82/0x3f0 [ 1696.850608][T16301] dentry_open+0x71/0xd0 [ 1696.850639][T16301] do_mq_open+0x5a8/0x9c0 [ 1696.850669][T16301] ? __pfx_do_mq_open+0x10/0x10 [ 1696.850693][T16301] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1696.850733][T16301] __x64_sys_mq_open+0x152/0x1e0 [ 1696.850758][T16301] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 1696.850800][T16301] do_syscall_64+0x123/0x790 [ 1696.850834][T16301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.850856][T16301] RIP: 0033:0x7f8f0af9e1d9 [ 1696.850875][T16301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1696.850896][T16301] RSP: 002b:00007f8f0bede028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1696.850917][T16301] RAX: ffffffffffffffda RBX: 00007f8f0b226180 RCX: 00007f8f0af9e1d9 [ 1696.850931][T16301] RDX: 00000000000000e8 RSI: 0000000000000040 RDI: 00002000000007c0 [ 1696.850945][T16301] RBP: 00007f8f0b035888 R08: 0000000000000000 R09: 0000000000000000 [ 1696.850959][T16301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1696.850972][T16301] R13: 00007f8f0b226218 R14: 00007f8f0b226180 R15: 00007ffef9c65b88 [ 1696.851006][T16301] [ 1696.851128][T16301] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1697.138504][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1697.149991][ T10] usb 5-1: USB disconnect, device number 25 [ 1697.321966][T16306] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2447'. [ 1697.321993][T16306] i: renamed from virt_wifi0 [ 1697.328209][T16306] i: left promiscuous mode [ 1697.328223][T16306] A link change request failed with some changes committed already. Interface i may have been left with an inconsistent configuration, please check. [ 1697.366020][ T31] audit: type=1326 audit(1791724148.066:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16305 comm="syz.7.2447" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d6a59e1d9 code=0x0 [ 1697.366428][T16308] netlink: 'syz.5.2448': attribute type 64 has an invalid length. [ 1697.366444][T16308] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2448'. [ 1697.366845][T16309] netlink: 'syz.5.2448': attribute type 64 has an invalid length. [ 1697.366859][T16309] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2448'. [ 1697.369275][T16308] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2448'. [ 1697.380005][ T31] audit: type=1400 audit(1791724148.066:975): avc: denied { write } for pid=16307 comm="syz.5.2448" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1697.488344][ T31] audit: type=1400 audit(1791724148.176:976): avc: denied { write } for pid=16307 comm="syz.5.2448" path="socket:[42471]" dev="sockfs" ino=42471 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1698.564147][T16317] FAULT_INJECTION: forcing a failure. [ 1698.564147][T16317] name failslab, interval 1, probability 0, space 0, times 0 [ 1698.564182][T16317] CPU: 1 UID: 0 PID: 16317 Comm: syz.5.2452 Tainted: G L syzkaller #0 PREEMPT(full) [ 1698.564214][T16317] Tainted: [L]=SOFTLOCKUP [ 1698.564222][T16317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1698.564235][T16317] Call Trace: [ 1698.564243][T16317] [ 1698.564252][T16317] dump_stack_lvl+0x100/0x190 [ 1698.564290][T16317] should_fail_ex.cold+0x5/0xa [ 1698.564321][T16317] should_failslab+0xc2/0x120 [ 1698.564352][T16317] __kmalloc_noprof+0xfc/0x840 [ 1698.564376][T16317] ? rcu_is_watching+0x13/0xc0 [ 1698.564407][T16317] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1698.564444][T16317] tomoyo_realpath_from_path+0xb6/0x690 [ 1698.564480][T16317] tomoyo_check_open_permission+0x2af/0x3c0 [ 1698.564509][T16317] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1698.564548][T16317] ? hook_file_open+0x248/0x8e0 [ 1698.564593][T16317] ? path_get+0x61/0x80 [ 1698.564617][T16317] tomoyo_file_open+0x6b/0x90 [ 1698.564642][T16317] security_file_open+0xb5/0x1e0 [ 1698.564673][T16317] do_dentry_open+0x588/0x14d0 [ 1698.564717][T16317] vfs_open+0x82/0x3f0 [ 1698.564755][T16317] path_openat+0x19fa/0x2440 [ 1698.564791][T16317] ? __pfx_path_openat+0x10/0x10 [ 1698.564830][T16317] do_file_open+0x20e/0x430 [ 1698.564862][T16317] ? __pfx_do_file_open+0x10/0x10 [ 1698.564914][T16317] ? _raw_spin_unlock+0x28/0x50 [ 1698.564941][T16317] ? alloc_fd+0x471/0x7a0 [ 1698.564980][T16317] do_sys_openat2+0x10f/0x1e0 [ 1698.565002][T16317] ? __pfx_do_sys_openat2+0x10/0x10 [ 1698.565021][T16317] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1698.565062][T16317] __x64_sys_openat+0x12d/0x210 [ 1698.565084][T16317] ? __pfx___x64_sys_openat+0x10/0x10 [ 1698.565118][T16317] do_syscall_64+0x123/0x790 [ 1698.565150][T16317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.565187][T16317] RIP: 0033:0x7f1079b5ea0e [ 1698.565206][T16317] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1698.565226][T16317] RSP: 002b:00007f107a9b1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1698.565247][T16317] RAX: ffffffffffffffda RBX: 00007f107a9b26c0 RCX: 00007f1079b5ea0e [ 1698.565262][T16317] RDX: 0000000000000000 RSI: 00007f107a9b1c00 RDI: ffffffffffffff9c [ 1698.565277][T16317] RBP: 00007f107a9b1c00 R08: 0000000000000000 R09: 0000000000000000 [ 1698.565291][T16317] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1698.565305][T16317] R13: 00007f1079e26038 R14: 00007f1079e25fa0 R15: 00007ffe75081308 [ 1698.565337][T16317] [ 1698.565371][T16317] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1698.604033][T16319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2453'. [ 1698.609275][T16319] ipvlan2: entered allmulticast mode [ 1699.234897][ T31] audit: type=1400 audit(1791724149.916:977): avc: denied { setopt } for pid=16327 comm="syz.4.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1699.289676][T16334] netlink: 'syz.4.2455': attribute type 3 has an invalid length. [ 1699.289698][T16334] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2455'. [ 1699.538428][ T31] audit: type=1400 audit(1791724150.226:978): avc: denied { ioctl } for pid=16339 comm="syz.4.2458" path="socket:[43509]" dev="sockfs" ino=43509 ioctlcmd=0x8929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1699.689888][T14626] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1700.048396][ T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1700.060252][T14626] usb 6-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.00 [ 1700.064306][T14626] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1700.068852][T14626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.068877][T14626] usb 6-1: Product: syz [ 1700.068893][T14626] usb 6-1: Manufacturer: syz [ 1700.068908][T14626] usb 6-1: SerialNumber: syz [ 1700.124360][T16338] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1700.172679][T16342] netlink: 34 bytes leftover after parsing attributes in process `syz.4.2458'. [ 1700.219885][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1700.221516][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00 [ 1700.222329][ T10] usb 7-1: config 18 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1700.222347][ T10] usb 7-1: config 18 interface 0 has no altsetting 0 [ 1700.222366][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.276917][ T10] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:18.0/input/input39 [ 1700.349658][ T5605] usb 6-1: USB disconnect, device number 14 [ 1700.892427][ T31] audit: type=1400 audit(1791724151.516:979): avc: denied { create } for pid=16313 comm="syz.6.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1701.373687][T16354] fuse: fd is not a fuse device [ 1701.705837][ T31] audit: type=1400 audit(1791724152.396:980): avc: denied { write } for pid=16313 comm="syz.6.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1701.705875][T16316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1701.800322][T16360] FAULT_INJECTION: forcing a failure. [ 1701.800322][T16360] name failslab, interval 1, probability 0, space 0, times 0 [ 1701.800392][T16360] CPU: 0 UID: 0 PID: 16360 Comm: syz.0.2461 Tainted: G L syzkaller #0 PREEMPT(full) [ 1701.800423][T16360] Tainted: [L]=SOFTLOCKUP [ 1701.800432][T16360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1701.800455][T16360] Call Trace: [ 1701.800462][T16360] [ 1701.800472][T16360] dump_stack_lvl+0x100/0x190 [ 1701.800511][T16360] should_fail_ex.cold+0x5/0xa [ 1701.800544][T16360] should_failslab+0xc2/0x120 [ 1701.800576][T16360] __kmalloc_noprof+0xfc/0x840 [ 1701.800604][T16360] ? tomoyo_encode2+0xfb/0x3c0 [ 1701.800641][T16360] tomoyo_encode2+0xfb/0x3c0 [ 1701.800671][T16360] ? tomoyo_realpath_from_path+0x172/0x690 [ 1701.800708][T16360] tomoyo_encode+0x29/0x50 [ 1701.800738][T16360] tomoyo_realpath_from_path+0x18c/0x690 [ 1701.800777][T16360] tomoyo_check_open_permission+0x2af/0x3c0 [ 1701.800808][T16360] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1701.800836][T16360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.800869][T16360] ? hook_file_open+0x248/0x8e0 [ 1701.800924][T16360] tomoyo_file_open+0x6b/0x90 [ 1701.800949][T16360] security_file_open+0xb5/0x1e0 [ 1701.800982][T16360] do_dentry_open+0x588/0x14d0 [ 1701.801018][T16360] vfs_open+0x82/0x3f0 [ 1701.801054][T16360] dentry_open+0x71/0xd0 [ 1701.801085][T16360] do_mq_open+0x5a8/0x9c0 [ 1701.801115][T16360] ? __pfx_do_mq_open+0x10/0x10 [ 1701.801140][T16360] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1701.801179][T16360] __x64_sys_mq_open+0x152/0x1e0 [ 1701.801205][T16360] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 1701.801248][T16360] do_syscall_64+0x123/0x790 [ 1701.801283][T16360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.801307][T16360] RIP: 0033:0x7f8f0af9e1d9 [ 1701.801325][T16360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1701.801346][T16360] RSP: 002b:00007f8f0bede028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1701.801368][T16360] RAX: ffffffffffffffda RBX: 00007f8f0b226180 RCX: 00007f8f0af9e1d9 [ 1701.801383][T16360] RDX: 00000000000000e8 RSI: 0000000000000040 RDI: 00002000000007c0 [ 1701.801397][T16360] RBP: 00007f8f0b035888 R08: 0000000000000000 R09: 0000000000000000 [ 1701.801411][T16360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1701.801425][T16360] R13: 00007f8f0b226218 R14: 00007f8f0b226180 R15: 00007ffef9c65b88 [ 1701.801466][T16360] [ 1701.801625][T16360] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1702.132906][ T4953] bcm5974 7-1:18.0: could not read from device [ 1702.185089][ T31] audit: type=1400 audit(1791724152.856:981): avc: denied { append } for pid=16358 comm="syz.5.2462" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1702.193247][ T4953] bcm5974 7-1:18.0: could not read from device [ 1702.293479][ T10] usb 7-1: USB disconnect, device number 20 [ 1702.313492][T15996] bcm5974 7-1:18.0: could not read from device [ 1702.671788][ T31] audit: type=1400 audit(1791724153.366:982): avc: denied { mounton } for pid=16366 comm="syz.4.2464" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1702.761065][T16369] tmpfs: Bad value for 'mpol' [ 1702.775200][ T31] audit: type=1400 audit(1791724153.466:983): avc: denied { unmount } for pid=9605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1702.807292][ T31] audit: type=1400 audit(1791724153.496:984): avc: denied { bind } for pid=16366 comm="syz.4.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1702.834745][T16372] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2466'. [ 1702.838111][T16372] ipvlan2: entered allmulticast mode [ 1703.217642][ T31] audit: type=1400 audit(1791724153.906:985): avc: denied { ioctl } for pid=16385 comm="syz.6.2469" path="/dev/sg0" dev="devtmpfs" ino=1022 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1703.245689][ T31] audit: type=1400 audit(1791724153.916:986): avc: denied { create } for pid=16385 comm="syz.6.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1703.270276][T16386] netlink: 'syz.5.2470': attribute type 10 has an invalid length. [ 1704.348634][ T31] audit: type=1400 audit(1791724155.036:987): avc: denied { getopt } for pid=16405 comm="syz.7.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1704.432932][T16412] FAULT_INJECTION: forcing a failure. [ 1704.432932][T16412] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1704.432967][T16412] CPU: 0 UID: 0 PID: 16412 Comm: syz.0.2476 Tainted: G L syzkaller #0 PREEMPT(full) [ 1704.432995][T16412] Tainted: [L]=SOFTLOCKUP [ 1704.433002][T16412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1704.433013][T16412] Call Trace: [ 1704.433021][T16412] [ 1704.433029][T16412] dump_stack_lvl+0x100/0x190 [ 1704.433062][T16412] should_fail_ex.cold+0x5/0xa [ 1704.433086][T16412] ? prepare_alloc_pages+0x16d/0x5b0 [ 1704.433117][T16412] should_fail_alloc_page+0xeb/0x140 [ 1704.433147][T16412] prepare_alloc_pages+0x1f0/0x5b0 [ 1704.433180][T16412] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1704.433206][T16412] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1704.433230][T16412] ? prepare_alloc_pages+0x1f0/0x5b0 [ 1704.433262][T16412] ? rcu_is_watching+0x13/0xc0 [ 1704.433290][T16412] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 1704.433329][T16412] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1704.433355][T16412] ? find_held_lock+0x2b/0x80 [ 1704.433384][T16412] ? is_bpf_text_address+0x8a/0x1a0 [ 1704.433412][T16412] ? is_bpf_text_address+0x8a/0x1a0 [ 1704.433439][T16412] ? bpf_ksym_find+0x128/0x1c0 [ 1704.433459][T16412] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1704.433483][T16412] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1704.433504][T16412] ? is_bpf_text_address+0x94/0x1a0 [ 1704.433533][T16412] ? __kernel_text_address+0xd/0x30 [ 1704.433573][T16412] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 1704.433597][T16412] ? find_held_lock+0x2b/0x80 [ 1704.433630][T16412] ? policy_nodemask+0xed/0x4f0 [ 1704.433662][T16412] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1704.433702][T16412] __kasan_populate_vmalloc+0xf0/0x210 [ 1704.433734][T16412] alloc_vmap_area+0x95d/0x2bb0 [ 1704.433770][T16412] ? kasan_save_track+0x14/0x30 [ 1704.433795][T16412] ? __kasan_kmalloc+0xaa/0xb0 [ 1704.433819][T16412] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1704.433848][T16412] ? __get_vm_area_node+0x124/0x350 [ 1704.433879][T16412] __get_vm_area_node+0x1ed/0x350 [ 1704.433912][T16412] __vmalloc_node_range_noprof+0x268/0x1420 [ 1704.433943][T16412] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1704.433973][T16412] ? up_write+0x2dc/0x5b0 [ 1704.434003][T16412] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1704.434030][T16412] ? lock_acquire+0x1d1/0x380 [ 1704.434053][T16412] ? find_held_lock+0x2b/0x80 [ 1704.434081][T16412] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1704.434108][T16412] ? avc_has_perm_noaudit+0x11e/0x470 [ 1704.434137][T16412] ? avc_has_perm_noaudit+0x145/0x470 [ 1704.434161][T16412] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1704.434185][T16412] __vmalloc_node_noprof+0xad/0xf0 [ 1704.434214][T16412] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1704.434244][T16412] __vmalloc_noprof+0xa3/0x120 [ 1704.434273][T16412] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1704.434310][T16412] ? rcu_is_watching+0x13/0xc0 [ 1704.434337][T16412] ? cap_capable+0x107/0x430 [ 1704.434363][T16412] bpf_prog_alloc_no_stats+0x59/0x690 [ 1704.434388][T16412] ? security_capable+0x80/0x260 [ 1704.434414][T16412] bpf_prog_alloc+0x3b/0x200 [ 1704.434438][T16412] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1704.434465][T16412] bpf_prog_load+0x49e/0x2ab0 [ 1704.434500][T16412] ? __pfx_bpf_prog_load+0x10/0x10 [ 1704.434555][T16412] __sys_bpf+0x1f46/0x4a30 [ 1704.434585][T16412] ? __pfx___sys_bpf+0x10/0x10 [ 1704.434607][T16412] ? find_held_lock+0x2b/0x80 [ 1704.434634][T16412] ? get_pid_task+0xfc/0x250 [ 1704.434659][T16412] ? get_pid_task+0xfc/0x250 [ 1704.434694][T16412] ? find_held_lock+0x2b/0x80 [ 1704.434728][T16412] ? rcu_read_lock_any_held+0x6a/0x90 [ 1704.434747][T16412] ? find_held_lock+0x2b/0x80 [ 1704.434774][T16412] ? ksys_write+0x190/0x250 [ 1704.434797][T16412] ? ksys_write+0x190/0x250 [ 1704.434819][T16412] ? lock_acquire+0x1d1/0x380 [ 1704.434863][T16412] ? fput+0x7c/0x100 [ 1704.434891][T16412] ? ksys_write+0x1ac/0x250 [ 1704.434919][T16412] ? __x64_sys_bpf+0xce/0x140 [ 1704.434940][T16412] __x64_sys_bpf+0xce/0x140 [ 1704.434964][T16412] ? do_syscall_64+0xae/0x790 [ 1704.434992][T16412] do_syscall_64+0x123/0x790 [ 1704.435020][T16412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.435041][T16412] RIP: 0033:0x7f8f0af9e1d9 [ 1704.435059][T16412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1704.435077][T16412] RSP: 002b:00007f8f0bf20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1704.435098][T16412] RAX: ffffffffffffffda RBX: 00007f8f0b225fa0 RCX: 00007f8f0af9e1d9 [ 1704.435112][T16412] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 1704.435124][T16412] RBP: 00007f8f0bf20090 R08: 0000000000000000 R09: 0000000000000000 [ 1704.435136][T16412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1704.435148][T16412] R13: 00007f8f0b226038 R14: 00007f8f0b225fa0 R15: 00007ffef9c65b88 [ 1704.435178][T16412] [ 1704.436251][T16412] syz.0.2476: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1704.436319][T16412] CPU: 0 UID: 0 PID: 16412 Comm: syz.0.2476 Tainted: G L syzkaller #0 PREEMPT(full) [ 1704.436346][T16412] Tainted: [L]=SOFTLOCKUP [ 1704.436353][T16412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1704.436365][T16412] Call Trace: [ 1704.436372][T16412] [ 1704.436379][T16412] dump_stack_lvl+0x100/0x190 [ 1704.436409][T16412] warn_alloc.cold+0x9e/0xb2 [ 1704.436431][T16412] ? __pfx_warn_alloc+0x10/0x10 [ 1704.436455][T16412] ? lockdep_hardirqs_on+0x7d/0x110 [ 1704.436483][T16412] ? __get_vm_area_node+0x2f0/0x350 [ 1704.436517][T16412] ? __get_vm_area_node+0x22b/0x350 [ 1704.436549][T16412] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 1704.436581][T16412] ? up_write+0x2dc/0x5b0 [ 1704.436611][T16412] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1704.436639][T16412] ? lock_acquire+0x1d1/0x380 [ 1704.436664][T16412] ? find_held_lock+0x2b/0x80 [ 1704.436692][T16412] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1704.436720][T16412] ? avc_has_perm_noaudit+0x11e/0x470 [ 1704.436747][T16412] ? avc_has_perm_noaudit+0x145/0x470 [ 1704.436771][T16412] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1704.436796][T16412] __vmalloc_node_noprof+0xad/0xf0 [ 1704.436825][T16412] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1704.436854][T16412] __vmalloc_noprof+0xa3/0x120 [ 1704.436884][T16412] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1704.436915][T16412] ? rcu_is_watching+0x13/0xc0 [ 1704.436942][T16412] ? cap_capable+0x107/0x430 [ 1704.436969][T16412] bpf_prog_alloc_no_stats+0x59/0x690 [ 1704.436994][T16412] ? security_capable+0x80/0x260 [ 1704.437021][T16412] bpf_prog_alloc+0x3b/0x200 [ 1704.437044][T16412] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1704.437072][T16412] bpf_prog_load+0x49e/0x2ab0 [ 1704.437108][T16412] ? __pfx_bpf_prog_load+0x10/0x10 [ 1704.437162][T16412] __sys_bpf+0x1f46/0x4a30 [ 1704.437193][T16412] ? __pfx___sys_bpf+0x10/0x10 [ 1704.437215][T16412] ? find_held_lock+0x2b/0x80 [ 1704.437242][T16412] ? get_pid_task+0xfc/0x250 [ 1704.437268][T16412] ? get_pid_task+0xfc/0x250 [ 1704.437310][T16412] ? find_held_lock+0x2b/0x80 [ 1704.437345][T16412] ? rcu_read_lock_any_held+0x6a/0x90 [ 1704.437365][T16412] ? find_held_lock+0x2b/0x80 [ 1704.437392][T16412] ? ksys_write+0x190/0x250 [ 1704.437414][T16412] ? ksys_write+0x190/0x250 [ 1704.437437][T16412] ? lock_acquire+0x1d1/0x380 [ 1704.437481][T16412] ? fput+0x7c/0x100 [ 1704.437508][T16412] ? ksys_write+0x1ac/0x250 [ 1704.437536][T16412] ? __x64_sys_bpf+0xce/0x140 [ 1704.437557][T16412] __x64_sys_bpf+0xce/0x140 [ 1704.437580][T16412] ? do_syscall_64+0xae/0x790 [ 1704.437609][T16412] do_syscall_64+0x123/0x790 [ 1704.437639][T16412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.437660][T16412] RIP: 0033:0x7f8f0af9e1d9 [ 1704.437678][T16412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1704.437696][T16412] RSP: 002b:00007f8f0bf20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1704.437715][T16412] RAX: ffffffffffffffda RBX: 00007f8f0b225fa0 RCX: 00007f8f0af9e1d9 [ 1704.437729][T16412] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 1704.437741][T16412] RBP: 00007f8f0bf20090 R08: 0000000000000000 R09: 0000000000000000 [ 1704.437753][T16412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1704.437766][T16412] R13: 00007f8f0b226038 R14: 00007f8f0b225fa0 R15: 00007ffef9c65b88 [ 1704.437796][T16412] [ 1704.437836][T16412] Mem-Info: [ 1704.437845][T16412] active_anon:10302 inactive_anon:21 isolated_anon:0 [ 1704.437845][T16412] active_file:72 inactive_file:68245 isolated_file:0 [ 1704.437845][T16412] unevictable:525 dirty:925 writeback:0 [ 1704.437845][T16412] slab_reclaimable:13198 slab_unreclaimable:103131 [ 1704.437845][T16412] mapped:34360 shmem:2799 pagetables:1757 [ 1704.437845][T16412] sec_pagetables:0 bounce:0 [ 1704.437845][T16412] kernel_misc_reclaimable:0 [ 1704.437845][T16412] free:1241816 free_pcp:17209 free_cma:0 [ 1704.437892][T16412] Node 0 active_anon:41208kB inactive_anon:84kB active_file:288kB inactive_file:272772kB unevictable:2100kB isolated(anon):0kB isolated(file):0kB mapped:137440kB dirty:3700kB writeback:0kB shmem:11196kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14088kB pagetables:6900kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1704.437944][T16412] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1704.437991][T16412] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 1704.438044][T16412] lowmem_reserve[]: 0 2452 2452 2452 2452 [ 1704.438078][T16412] Node 0 DMA32 free:1001692kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:41208kB inactive_anon:84kB active_file:288kB inactive_file:272772kB unevictable:2100kB writepending:3700kB zspages:20kB present:3129332kB managed:2510924kB mlocked:0kB bounce:0kB free_pcp:68776kB local_pcp:45428kB free_cma:0kB [ 1704.438134][T16412] lowmem_reserve[]: 0 0 0 0 0 [ 1704.438166][T16412] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:60kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1704.438218][T16412] lowmem_reserve[]: 0 0 0 0 0 [ 1704.438250][T16412] Node 1 Normal free:3950244kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1704.438306][T16412] lowmem_reserve[]: 0 0 0 0 0 [ 1704.438336][T16412] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1704.438462][T16412] Node 0 DMA32: 2613*4kB (UM) 462*8kB (UM) 1229*16kB (UME) 2234*32kB (UM) 1296*64kB (UME) 753*128kB (UM) 463*256kB (UM) 207*512kB (UM) 79*1024kB (UM) 21*2048kB (UM) 90*4096kB (UM) = 1001684kB [ 1704.438627][T16412] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1704.438719][T16412] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 7*16kB (UM) 6*32kB (UM) 5*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 963*4096kB (M) = 3950244kB [ 1704.438867][T16412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1704.438882][T16412] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1704.438898][T16412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1704.438913][T16412] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1704.438927][T16412] 71680 total pagecache pages [ 1704.438934][T16412] 2 pages in swap cache [ 1704.438941][T16412] Free swap = 124912kB [ 1704.438948][T16412] Total swap = 124996kB [ 1704.438955][T16412] 2097051 pages RAM [ 1704.438962][T16412] 0 pages HighMem/MovableOnly [ 1704.438968][T16412] 437689 pages reserved [ 1704.438975][T16412] 0 pages cma reserved [ 1705.315338][T16422] Device name cannot be null; rc = [-22] [ 1705.357591][ T31] audit: type=1400 audit(1791724156.056:988): avc: denied { connect } for pid=16400 comm="syz.4.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1705.660056][ T31] audit: type=1400 audit(1791724156.346:989): avc: denied { name_connect } for pid=16384 comm="syz.5.2470" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1705.762327][ T31] audit: type=1400 audit(1791724156.446:990): avc: denied { append } for pid=16384 comm="syz.5.2470" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1706.590593][T16431] syzkaller1: entered promiscuous mode [ 1706.590614][T16431] syzkaller1: entered allmulticast mode [ 1706.599499][T16431] batadv0: mtu less than device minimum [ 1706.800007][T14626] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1706.963582][T14626] usb 6-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 1706.993077][T14626] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.036213][T14626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.036758][T14626] usb 6-1: Product: syz [ 1707.036919][T14626] usb 6-1: Manufacturer: syz [ 1707.037155][T14626] usb 6-1: SerialNumber: syz [ 1707.080718][T14626] kalmia 6-1:1.0: probe with driver kalmia failed with error -22 [ 1707.126500][T16441] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2483'. [ 1707.158598][T16441] ipvlan2: entered allmulticast mode [ 1707.359611][T16434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1707.381211][T16434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1707.440504][ T31] audit: type=1400 audit(1791724158.136:991): avc: denied { mount } for pid=16433 comm="syz.5.2482" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1707.475945][T14626] usb 6-1: USB disconnect, device number 15 [ 1707.494446][ T31] audit: type=1400 audit(1791724158.186:992): avc: denied { create } for pid=16455 comm="syz.7.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1708.677195][T16474] binfmt_misc: register: failed to install interpreter ./file0 [ 1708.793673][ T31] audit: type=1400 audit(1791724159.486:993): avc: denied { unmount } for pid=8344 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1708.884651][ T31] audit: type=1400 audit(1791724159.576:994): avc: denied { shutdown } for pid=16475 comm="syz.6.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1710.826362][T16493] fuse: fd is not a fuse device [ 1710.899348][T16495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2499'. [ 1710.932704][T16495] input: syz1 as /devices/virtual/input/input40 [ 1710.951568][ T31] audit: type=1400 audit(1791724161.616:995): avc: denied { ioctl } for pid=16494 comm="syz.4.2499" path="/dev/uinput" dev="devtmpfs" ino=914 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1710.952338][ T31] audit: type=1400 audit(1791724161.646:996): avc: denied { ioctl } for pid=4953 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3153 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1711.133090][T16502] Invalid ELF header type: 3 != 1 [ 1711.407730][T16505] FAULT_INJECTION: forcing a failure. [ 1711.407730][T16505] name failslab, interval 1, probability 0, space 0, times 0 [ 1711.407766][T16505] CPU: 0 UID: 0 PID: 16505 Comm: syz.5.2497 Tainted: G L syzkaller #0 PREEMPT(full) [ 1711.407802][T16505] Tainted: [L]=SOFTLOCKUP [ 1711.407811][T16505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1711.407824][T16505] Call Trace: [ 1711.407832][T16505] [ 1711.407841][T16505] dump_stack_lvl+0x100/0x190 [ 1711.407880][T16505] should_fail_ex.cold+0x5/0xa [ 1711.407914][T16505] should_failslab+0xc2/0x120 [ 1711.407944][T16505] __kmalloc_noprof+0xfc/0x840 [ 1711.407969][T16505] ? rcu_is_watching+0x13/0xc0 [ 1711.408000][T16505] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1711.408039][T16505] tomoyo_realpath_from_path+0xb6/0x690 [ 1711.408078][T16505] tomoyo_check_open_permission+0x2af/0x3c0 [ 1711.408109][T16505] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1711.408136][T16505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.408169][T16505] ? hook_file_open+0x248/0x8e0 [ 1711.408217][T16505] ? path_get+0x61/0x80 [ 1711.408242][T16505] tomoyo_file_open+0x6b/0x90 [ 1711.408267][T16505] security_file_open+0xb5/0x1e0 [ 1711.408299][T16505] do_dentry_open+0x588/0x14d0 [ 1711.408336][T16505] vfs_open+0x82/0x3f0 [ 1711.408372][T16505] dentry_open+0x71/0xd0 [ 1711.408402][T16505] do_mq_open+0x5a8/0x9c0 [ 1711.408432][T16505] ? __pfx_do_mq_open+0x10/0x10 [ 1711.408456][T16505] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1711.408497][T16505] __x64_sys_mq_open+0x152/0x1e0 [ 1711.408523][T16505] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 1711.408567][T16505] do_syscall_64+0x123/0x790 [ 1711.408601][T16505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.408624][T16505] RIP: 0033:0x7f1079b9e1d9 [ 1711.408643][T16505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1711.408662][T16505] RSP: 002b:00007f10779d3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1711.408683][T16505] RAX: ffffffffffffffda RBX: 00007f1079e26270 RCX: 00007f1079b9e1d9 [ 1711.408698][T16505] RDX: 00000000000000e8 RSI: 0000000000000040 RDI: 00002000000007c0 [ 1711.408712][T16505] RBP: 00007f1079c35888 R08: 0000000000000000 R09: 0000000000000000 [ 1711.408726][T16505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1711.408739][T16505] R13: 00007f1079e26308 R14: 00007f1079e26270 R15: 00007ffe75081308 [ 1711.408773][T16505] [ 1711.408807][T16505] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1711.481574][T14626] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1711.630607][T14626] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1711.633050][T14626] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1711.633090][T14626] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.633123][T14626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.638595][T14626] usb 5-1: config 0 descriptor?? [ 1712.047571][T14626] hid_parser_main: 110 callbacks suppressed [ 1712.047588][T14626] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 1712.047606][T14626] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 1712.047621][T14626] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 1712.047636][T14626] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 1712.047651][T14626] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 1712.100885][T14626] cm6533_jd 0003:0D8C:0022.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 1712.247841][ T5605] usb 5-1: USB disconnect, device number 26 [ 1714.387109][T16516] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1714.387126][T16516] CIFS mount error: No usable UNC path provided in device string! [ 1714.387126][T16516] [ 1714.387292][T16516] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1715.665546][ T31] audit: type=1400 audit(1791724166.356:997): avc: denied { ioctl } for pid=16532 comm="syz.7.2507" path="socket:[44036]" dev="sockfs" ino=44036 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1715.697238][T16541] netlink: 26 bytes leftover after parsing attributes in process `syz.5.2506'. [ 1715.733520][ T31] audit: type=1400 audit(1791724166.426:998): avc: denied { ioctl } for pid=16509 comm="syz.6.2501" path="socket:[43967]" dev="sockfs" ino=43967 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1715.733569][ T31] audit: type=1400 audit(1791724166.426:999): avc: denied { ioctl } for pid=16509 comm="syz.6.2501" path="socket:[43967]" dev="sockfs" ino=43967 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1715.995413][ T31] audit: type=1400 audit(1791724166.686:1000): avc: denied { create } for pid=16544 comm="syz.7.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1715.996176][ T31] audit: type=1400 audit(1791724166.686:1001): avc: denied { ioctl } for pid=16544 comm="syz.7.2508" path="socket:[43969]" dev="sockfs" ino=43969 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1715.996655][T16545] netlink: 'syz.7.2508': attribute type 10 has an invalid length. [ 1716.054004][T16545] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1716.054205][ T31] audit: type=1400 audit(1791724166.756:1002): avc: denied { connect } for pid=16544 comm="syz.7.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1716.357475][ T31] audit: type=1400 audit(1791724167.046:1003): avc: denied { write } for pid=16544 comm="syz.7.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1716.491211][T16557] FAULT_INJECTION: forcing a failure. [ 1716.491211][T16557] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.491246][T16557] CPU: 1 UID: 0 PID: 16557 Comm: syz.5.2512 Tainted: G L syzkaller #0 PREEMPT(full) [ 1716.491277][T16557] Tainted: [L]=SOFTLOCKUP [ 1716.491285][T16557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1716.491298][T16557] Call Trace: [ 1716.491305][T16557] [ 1716.491315][T16557] dump_stack_lvl+0x100/0x190 [ 1716.491354][T16557] should_fail_ex.cold+0x5/0xa [ 1716.491387][T16557] should_failslab+0xc2/0x120 [ 1716.491419][T16557] __kmalloc_noprof+0xfc/0x840 [ 1716.491444][T16557] ? rcu_is_watching+0x13/0xc0 [ 1716.491472][T16557] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1716.491511][T16557] tomoyo_realpath_from_path+0xb6/0x690 [ 1716.491550][T16557] tomoyo_check_open_permission+0x2af/0x3c0 [ 1716.491580][T16557] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1716.491608][T16557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.491640][T16557] ? hook_file_open+0x248/0x8e0 [ 1716.491688][T16557] ? path_get+0x61/0x80 [ 1716.491712][T16557] tomoyo_file_open+0x6b/0x90 [ 1716.491737][T16557] security_file_open+0xb5/0x1e0 [ 1716.491769][T16557] do_dentry_open+0x588/0x14d0 [ 1716.491805][T16557] vfs_open+0x82/0x3f0 [ 1716.491841][T16557] dentry_open+0x71/0xd0 [ 1716.491872][T16557] do_mq_open+0x5a8/0x9c0 [ 1716.491901][T16557] ? __pfx_do_mq_open+0x10/0x10 [ 1716.491925][T16557] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1716.491973][T16557] __x64_sys_mq_open+0x152/0x1e0 [ 1716.492000][T16557] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 1716.492044][T16557] do_syscall_64+0x123/0x790 [ 1716.492078][T16557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.492102][T16557] RIP: 0033:0x7f1079b9e1d9 [ 1716.492120][T16557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1716.492140][T16557] RSP: 002b:00007f1077df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1716.492160][T16557] RAX: ffffffffffffffda RBX: 00007f1079e26180 RCX: 00007f1079b9e1d9 [ 1716.492175][T16557] RDX: 00000000000000e8 RSI: 0000000000000040 RDI: 00002000000007c0 [ 1716.492189][T16557] RBP: 00007f1079c35888 R08: 0000000000000000 R09: 0000000000000000 [ 1716.492203][T16557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1716.492217][T16557] R13: 00007f1079e26218 R14: 00007f1079e26180 R15: 00007ffe75081308 [ 1716.492251][T16557] [ 1716.492261][T16557] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1716.740323][T16558] Invalid ELF header type: 3 != 1 [ 1717.220047][T16562] FAULT_INJECTION: forcing a failure. [ 1717.220047][T16562] name failslab, interval 1, probability 0, space 0, times 0 [ 1717.220082][T16562] CPU: 0 UID: 0 PID: 16562 Comm: syz.5.2513 Tainted: G L syzkaller #0 PREEMPT(full) [ 1717.220110][T16562] Tainted: [L]=SOFTLOCKUP [ 1717.220117][T16562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1717.220130][T16562] Call Trace: [ 1717.220137][T16562] [ 1717.220146][T16562] dump_stack_lvl+0x100/0x190 [ 1717.220181][T16562] should_fail_ex.cold+0x5/0xa [ 1717.220205][T16562] ? __netlink_lookup+0x652/0x900 [ 1717.220237][T16562] should_failslab+0xc2/0x120 [ 1717.220267][T16562] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1717.220294][T16562] ? skb_clone+0x190/0x400 [ 1717.220320][T16562] skb_clone+0x190/0x400 [ 1717.220343][T16562] netlink_deliver_tap+0xaed/0xcc0 [ 1717.220378][T16562] netlink_unicast+0x62b/0x850 [ 1717.220414][T16562] ? __pfx_netlink_unicast+0x10/0x10 [ 1717.220452][T16562] netlink_sendmsg+0x8b0/0xda0 [ 1717.220487][T16562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1717.220520][T16562] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1717.220554][T16562] ____sys_sendmsg+0xa4d/0xbe0 [ 1717.220578][T16562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1717.220610][T16562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1717.220642][T16562] ? lock_acquire+0x1d1/0x380 [ 1717.220665][T16562] ? get_pid_task+0x2a/0x250 [ 1717.220695][T16562] ___sys_sendmsg+0x190/0x1e0 [ 1717.220724][T16562] ? __pfx____sys_sendmsg+0x10/0x10 [ 1717.220750][T16562] ? get_pid_task+0x106/0x250 [ 1717.220789][T16562] ? find_held_lock+0x2b/0x80 [ 1717.220837][T16562] __sys_sendmsg+0x160/0x210 [ 1717.220860][T16562] ? __pfx___sys_sendmsg+0x10/0x10 [ 1717.220903][T16562] do_syscall_64+0x123/0x790 [ 1717.220935][T16562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1717.220956][T16562] RIP: 0033:0x7f1079b9e1d9 [ 1717.220974][T16562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1717.220992][T16562] RSP: 002b:00007f107a9b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1717.221012][T16562] RAX: ffffffffffffffda RBX: 00007f1079e25fa0 RCX: 00007f1079b9e1d9 [ 1717.221026][T16562] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 1717.221038][T16562] RBP: 00007f107a9b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1717.221051][T16562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1717.221063][T16562] R13: 00007f1079e26038 R14: 00007f1079e25fa0 R15: 00007ffe75081308 [ 1717.221093][T16562] [ 1717.548482][ T31] audit: type=1400 audit(1791724168.236:1004): avc: denied { mounton } for pid=16548 comm="syz.4.2510" path="/501/sys_mnt" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1717.763211][T16574] gtp0: entered promiscuous mode [ 1717.763233][T16574] gtp0: entered allmulticast mode [ 1717.887001][ T31] audit: type=1400 audit(1791724168.576:1005): avc: denied { setopt } for pid=16577 comm="syz.5.2515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1718.011682][ T31] audit: type=1400 audit(1791724168.706:1006): avc: denied { setopt } for pid=16582 comm="syz.4.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1718.105667][T16587] syzkaller1: entered promiscuous mode [ 1718.105691][T16587] syzkaller1: entered allmulticast mode [ 1718.145670][ T31] audit: type=1400 audit(1791724168.836:1007): avc: denied { remount } for pid=16582 comm="syz.4.2517" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1718.167994][ T31] audit: type=1400 audit(1791724168.856:1008): avc: denied { block_suspend } for pid=16582 comm="syz.4.2517" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1718.390801][ T31] audit: type=1400 audit(1791724169.086:1009): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1719.091794][T16609] tmpfs: Using encoding : utf8-12.1.0 [ 1721.126788][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1721.126802][ T31] audit: type=1400 audit(1791724171.816:1012): avc: denied { write } for pid=16612 comm="syz.0.2525" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1721.235918][T16624] syzkaller0: entered promiscuous mode [ 1721.235940][T16624] syzkaller0: entered allmulticast mode [ 1723.025953][ T31] audit: type=1400 audit(1791724173.716:1013): avc: denied { bind } for pid=16645 comm="syz.5.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1723.026133][ T31] audit: type=1400 audit(1791724173.716:1014): avc: denied { node_bind } for pid=16645 comm="syz.5.2533" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1723.169622][ T31] audit: type=1400 audit(1791724173.856:1015): avc: denied { watch watch_reads } for pid=16645 comm="syz.5.2533" path="/368" dev="tmpfs" ino=2144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1723.220327][T16663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2536'. [ 1723.311577][T15024] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1723.630506][ T31] audit: type=1400 audit(1791724174.296:1016): avc: denied { create } for pid=16658 comm="syz.0.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1723.671627][T15024] usb 7-1: Using ep0 maxpacket: 16 [ 1723.738862][T16671] Invalid ELF header type: 3 != 1 [ 1723.763630][ T31] audit: type=1400 audit(1791724174.456:1017): avc: denied { connect } for pid=16658 comm="syz.0.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1723.765434][ T31] audit: type=1400 audit(1791724174.456:1018): avc: denied { bind } for pid=16658 comm="syz.0.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1723.860598][T15024] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1723.884646][T15024] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1723.884683][T15024] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1723.884707][T15024] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1723.884736][T15024] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.895697][T16660] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1723.909628][T16660] block device autoloading is deprecated and will be removed. [ 1724.260645][T15024] usb 7-1: config 0 descriptor?? [ 1724.803021][T15024] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 1724.804229][T15024] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 1724.804260][T15024] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 1724.804284][T15024] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 1724.804307][T15024] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 1724.808731][T15024] mcp2221 0003:04D8:00DD.0009: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1725.014556][T15024] usb 7-1: USB disconnect, device number 21 [ 1725.241639][T16695] FAULT_INJECTION: forcing a failure. [ 1725.241639][T16695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1725.241673][T16695] CPU: 0 UID: 0 PID: 16695 Comm: syz.4.2542 Tainted: G L syzkaller #0 PREEMPT(full) [ 1725.241701][T16695] Tainted: [L]=SOFTLOCKUP [ 1725.241709][T16695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1725.241721][T16695] Call Trace: [ 1725.241729][T16695] [ 1725.241737][T16695] dump_stack_lvl+0x100/0x190 [ 1725.241771][T16695] should_fail_ex.cold+0x5/0xa [ 1725.241801][T16695] _copy_from_iter+0x1f4/0x1690 [ 1725.241834][T16695] ? rcu_is_watching+0x13/0xc0 [ 1725.241862][T16695] ? __pfx__copy_from_iter+0x10/0x10 [ 1725.241888][T16695] ? __kasan_kmalloc+0xaa/0xb0 [ 1725.241915][T16695] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 1725.241944][T16695] ? proc_sys_call_handler+0x2c7/0x5a0 [ 1725.241973][T16695] proc_sys_call_handler+0x3ed/0x5a0 [ 1725.241999][T16695] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1725.242021][T16695] ? find_held_lock+0x2b/0x80 [ 1725.242048][T16695] ? aio_write+0x701/0x920 [ 1725.242066][T16695] ? aio_write+0x701/0x920 [ 1725.242088][T16695] aio_write+0x3ba/0x920 [ 1725.242111][T16695] ? __pfx_aio_write+0x10/0x10 [ 1725.242151][T16695] ? __might_fault+0xc5/0x140 [ 1725.242178][T16695] ? io_submit_one+0x1142/0x1fb0 [ 1725.242198][T16695] io_submit_one+0x1142/0x1fb0 [ 1725.242216][T16695] ? __lock_acquire+0x5c0/0x1f40 [ 1725.242233][T16695] ? __pfx_io_submit_one+0x10/0x10 [ 1725.242248][T16695] ? lock_acquire+0x1d1/0x380 [ 1725.242264][T16695] ? __might_fault+0xc5/0x140 [ 1725.242280][T16695] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 1725.242293][T16695] __x64_sys_io_submit+0x1b1/0x3a0 [ 1725.242308][T16695] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1725.242330][T16695] do_syscall_64+0x123/0x790 [ 1725.242348][T16695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.242360][T16695] RIP: 0033:0x7fe626b9e1d9 [ 1725.242371][T16695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1725.242382][T16695] RSP: 002b:00007fe627a62028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1725.242394][T16695] RAX: ffffffffffffffda RBX: 00007fe626e25fa0 RCX: 00007fe626b9e1d9 [ 1725.242402][T16695] RDX: 0000200000000200 RSI: 0000000000000001 RDI: 00007fe627a40000 [ 1725.242410][T16695] RBP: 00007fe627a62090 R08: 0000000000000000 R09: 0000000000000000 [ 1725.242422][T16695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1725.242429][T16695] R13: 00007fe626e26038 R14: 00007fe626e25fa0 R15: 00007ffefe638338 [ 1725.242446][T16695] [ 1725.244622][T16696] overlayfs: failed to resolve './bus': -2 [ 1726.869540][T16712] FAULT_INJECTION: forcing a failure. [ 1726.869540][T16712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1726.869574][T16712] CPU: 1 UID: 0 PID: 16712 Comm: syz.0.2549 Tainted: G L syzkaller #0 PREEMPT(full) [ 1726.869600][T16712] Tainted: [L]=SOFTLOCKUP [ 1726.869608][T16712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1726.869619][T16712] Call Trace: [ 1726.869626][T16712] [ 1726.869634][T16712] dump_stack_lvl+0x100/0x190 [ 1726.869669][T16712] should_fail_ex.cold+0x5/0xa [ 1726.869698][T16712] _copy_from_iter+0x1f4/0x1690 [ 1726.869729][T16712] ? __asan_memset+0x23/0x50 [ 1726.869756][T16712] ? __pfx__copy_from_iter+0x10/0x10 [ 1726.869780][T16712] ? __pfx___alloc_skb+0x10/0x10 [ 1726.869819][T16712] netlink_sendmsg+0x808/0xda0 [ 1726.869854][T16712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1726.869886][T16712] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1726.869919][T16712] ____sys_sendmsg+0xa4d/0xbe0 [ 1726.869942][T16712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1726.869974][T16712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1726.870006][T16712] ? lock_acquire+0x1d1/0x380 [ 1726.870028][T16712] ? get_pid_task+0x2a/0x250 [ 1726.870059][T16712] ___sys_sendmsg+0x190/0x1e0 [ 1726.870086][T16712] ? __pfx____sys_sendmsg+0x10/0x10 [ 1726.870112][T16712] ? get_pid_task+0x106/0x250 [ 1726.870151][T16712] ? find_held_lock+0x2b/0x80 [ 1726.870198][T16712] __sys_sendmsg+0x160/0x210 [ 1726.870220][T16712] ? __pfx___sys_sendmsg+0x10/0x10 [ 1726.870258][T16712] do_syscall_64+0x123/0x790 [ 1726.870289][T16712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.870309][T16712] RIP: 0033:0x7f8f0af9e1d9 [ 1726.870327][T16712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1726.870344][T16712] RSP: 002b:00007f8f0bf20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1726.870364][T16712] RAX: ffffffffffffffda RBX: 00007f8f0b225fa0 RCX: 00007f8f0af9e1d9 [ 1726.870378][T16712] RDX: 0000000000000c00 RSI: 0000200000000140 RDI: 0000000000000003 [ 1726.870391][T16712] RBP: 00007f8f0bf20090 R08: 0000000000000000 R09: 0000000000000000 [ 1726.870404][T16712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1726.870416][T16712] R13: 00007f8f0b226038 R14: 00007f8f0b225fa0 R15: 00007ffef9c65b88 [ 1726.870446][T16712] [ 1727.263733][ T31] audit: type=1400 audit(1791724177.956:1019): avc: denied { cmd } for pid=16715 comm="syz.0.2551" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 1728.258434][T16732] FAULT_INJECTION: forcing a failure. [ 1728.258434][T16732] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.258512][T16732] CPU: 0 UID: 0 PID: 16732 Comm: syz.5.2555 Tainted: G L syzkaller #0 PREEMPT(full) [ 1728.258544][T16732] Tainted: [L]=SOFTLOCKUP [ 1728.258552][T16732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1728.258566][T16732] Call Trace: [ 1728.258574][T16732] [ 1728.258583][T16732] dump_stack_lvl+0x100/0x190 [ 1728.258619][T16732] should_fail_ex.cold+0x5/0xa [ 1728.258651][T16732] should_failslab+0xc2/0x120 [ 1728.258682][T16732] __kmalloc_noprof+0xfc/0x840 [ 1728.258708][T16732] ? rcu_is_watching+0x13/0xc0 [ 1728.258737][T16732] ? tomoyo_encode2+0xfb/0x3c0 [ 1728.258775][T16732] tomoyo_encode2+0xfb/0x3c0 [ 1728.258811][T16732] tomoyo_encode+0x29/0x50 [ 1728.258841][T16732] tomoyo_realpath_from_path+0x18c/0x690 [ 1728.258881][T16732] tomoyo_check_open_permission+0x2af/0x3c0 [ 1728.258911][T16732] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1728.258941][T16732] ? __schedule+0x126b/0x6920 [ 1728.258975][T16732] ? hook_file_open+0x248/0x8e0 [ 1728.259031][T16732] ? path_get+0x61/0x80 [ 1728.259057][T16732] tomoyo_file_open+0x6b/0x90 [ 1728.259083][T16732] security_file_open+0xb5/0x1e0 [ 1728.259123][T16732] do_dentry_open+0x588/0x14d0 [ 1728.259162][T16732] vfs_open+0x82/0x3f0 [ 1728.259198][T16732] dentry_open+0x71/0xd0 [ 1728.259229][T16732] do_mq_open+0x5a8/0x9c0 [ 1728.259260][T16732] ? __pfx_do_mq_open+0x10/0x10 [ 1728.259284][T16732] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1728.259322][T16732] __x64_sys_mq_open+0x152/0x1e0 [ 1728.259347][T16732] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 1728.259389][T16732] do_syscall_64+0x123/0x790 [ 1728.259421][T16732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.259443][T16732] RIP: 0033:0x7f1079b9e1d9 [ 1728.259462][T16732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1728.259484][T16732] RSP: 002b:00007f1077df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1728.259505][T16732] RAX: ffffffffffffffda RBX: 00007f1079e26180 RCX: 00007f1079b9e1d9 [ 1728.259520][T16732] RDX: 00000000000000e8 RSI: 0000000000000040 RDI: 00002000000007c0 [ 1728.259533][T16732] RBP: 00007f1079c35888 R08: 0000000000000000 R09: 0000000000000000 [ 1728.259547][T16732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1728.259562][T16732] R13: 00007f1079e26218 R14: 00007f1079e26180 R15: 00007ffe75081308 [ 1728.259595][T16732] [ 1728.259715][T16732] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1728.951912][ T31] audit: type=1400 audit(1791724179.646:1020): avc: denied { read write } for pid=16741 comm="syz.4.2548" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1728.952174][ T31] audit: type=1400 audit(1791724179.646:1021): avc: denied { open } for pid=16741 comm="syz.4.2548" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1728.954886][ T31] audit: type=1400 audit(1791724179.646:1022): avc: denied { read } for pid=16741 comm="syz.4.2548" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1728.958234][ T31] audit: type=1400 audit(1791724179.646:1023): avc: denied { open } for pid=16741 comm="syz.4.2548" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1728.969392][T16742] FAULT_INJECTION: forcing a failure. [ 1728.969392][T16742] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.969423][T16742] CPU: 1 UID: 0 PID: 16742 Comm: syz.4.2548 Tainted: G L syzkaller #0 PREEMPT(full) [ 1728.969449][T16742] Tainted: [L]=SOFTLOCKUP [ 1728.969457][T16742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1728.969468][T16742] Call Trace: [ 1728.969475][T16742] [ 1728.969483][T16742] dump_stack_lvl+0x100/0x190 [ 1728.969515][T16742] should_fail_ex.cold+0x5/0xa [ 1728.969550][T16742] should_failslab+0xc2/0x120 [ 1728.969579][T16742] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1728.969606][T16742] ? do_getname+0x35/0x390 [ 1728.969631][T16742] do_getname+0x35/0x390 [ 1728.969654][T16742] do_sys_openat2+0xc7/0x1e0 [ 1728.969674][T16742] ? __pfx_do_sys_openat2+0x10/0x10 [ 1728.969694][T16742] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1728.969722][T16742] ? __fget_files+0x21f/0x3d0 [ 1728.969757][T16742] __x64_sys_openat+0x12d/0x210 [ 1728.969775][T16742] ? fput+0x7c/0x100 [ 1728.969801][T16742] ? __pfx___x64_sys_openat+0x10/0x10 [ 1728.969819][T16742] ? ksys_write+0x1ac/0x250 [ 1728.969851][T16742] do_syscall_64+0x123/0x790 [ 1728.969880][T16742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.969900][T16742] RIP: 0033:0x7fe626b9e1d9 [ 1728.969916][T16742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1728.969933][T16742] RSP: 002b:00007fe627a62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1728.969952][T16742] RAX: ffffffffffffffda RBX: 00007fe626e25fa0 RCX: 00007fe626b9e1d9 [ 1728.969965][T16742] RDX: 0000000000200000 RSI: 0000200000000a00 RDI: ffffffffffffff9c [ 1728.969978][T16742] RBP: 00007fe627a62090 R08: 0000000000000000 R09: 0000000000000000 [ 1728.969989][T16742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1728.970001][T16742] R13: 00007fe626e26038 R14: 00007fe626e25fa0 R15: 00007ffefe638338 [ 1728.970029][T16742] [ 1729.095719][T16743] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2559'. [ 1729.096032][T16743] syz_tun: Device is already in use. [ 1834.459720][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1834.466700][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16745/1:b..l P16744/1:b..l [ 1834.475914][ C1] rcu: (detected by 1, t=10502 jiffies, g=119757, q=157 ncpus=2) [ 1834.483703][ C1] task:syz.7.2559 state:R running task stack:26856 pid:16744 tgid:16740 ppid:11273 task_flags:0x40044c flags:0x00080000 [ 1834.497201][ C1] Call Trace: [ 1834.500467][ C1] [ 1834.503389][ C1] __schedule+0x1259/0x6920 [ 1834.507914][ C1] ? __pfx___schedule+0x10/0x10 [ 1834.512764][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 1834.518134][ C1] preempt_schedule_common+0x3c/0xb0 [ 1834.523417][ C1] preempt_schedule_thunk+0x16/0x40 [ 1834.528617][ C1] _raw_spin_unlock+0x3e/0x50 [ 1834.533293][ C1] __zap_vma_range+0x16b0/0x48e0 [ 1834.538260][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 1834.543550][ C1] ? mas_next_slot+0xc05/0x13a0 [ 1834.548419][ C1] unmap_vmas+0x299/0x5f0 [ 1834.552750][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1834.557605][ C1] ? mas_next_slot+0xc05/0x13a0 [ 1834.562469][ C1] exit_mmap+0x1ef/0xa00 [ 1834.566713][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1834.571473][ C1] ? rcu_is_watching+0x13/0xc0 [ 1834.576242][ C1] ? find_held_lock+0x2b/0x80 [ 1834.580922][ C1] ? uprobe_clear_state+0x5f/0x250 [ 1834.586039][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1834.591694][ C1] __mmput+0x12a/0x410 [ 1834.595760][ C1] mmput+0x67/0x80 [ 1834.599471][ C1] do_exit+0x83b/0x2a50 [ 1834.603628][ C1] ? __pfx_do_exit+0x10/0x10 [ 1834.608212][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1834.613232][ C1] ? find_held_lock+0x2b/0x80 [ 1834.617911][ C1] ? get_signal+0x7e0/0x21e0 [ 1834.622499][ C1] do_group_exit+0xd5/0x2a0 [ 1834.627000][ C1] get_signal+0x1ec7/0x21e0 [ 1834.631512][ C1] ? __pfx_get_signal+0x10/0x10 [ 1834.636357][ C1] ? do_futex+0x190/0x440 [ 1834.640686][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 1834.646232][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1834.652408][ C1] exit_to_user_mode_loop+0x139/0x700 [ 1834.657774][ C1] ? rcu_is_watching+0x13/0xc0 [ 1834.662539][ C1] do_syscall_64+0x661/0x790 [ 1834.667131][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.673015][ C1] RIP: 0033:0x7f7d6a59e1d9 [ 1834.677418][ C1] RSP: 002b:00007f7d6b3b60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1834.685818][ C1] RAX: fffffffffffffe00 RBX: 00007f7d6a826098 RCX: 00007f7d6a59e1d9 [ 1834.693777][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7d6a826098 [ 1834.701734][ C1] RBP: 00007f7d6a826090 R08: 0000000000000000 R09: 0000000000000000 [ 1834.709689][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1834.717646][ C1] R13: 00007f7d6a826128 R14: 00007ffc767817b0 R15: 00007ffc76781898 [ 1834.725628][ C1] [ 1834.728643][ C1] task:syz.6.2558 state:R running task stack:27032 pid:16745 tgid:16738 ppid:9605 task_flags:0x400040 flags:0x00080000 [ 1834.742136][ C1] Call Trace: [ 1834.745401][ C1] [ 1834.748323][ C1] __schedule+0x1259/0x6920 [ 1834.752847][ C1] ? __pfx___schedule+0x10/0x10 [ 1834.757700][ C1] ? find_held_lock+0x2b/0x80 [ 1834.762379][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 1834.767749][ C1] preempt_schedule_common+0x3c/0xb0 [ 1834.773037][ C1] preempt_schedule_thunk+0x16/0x40 [ 1834.778240][ C1] _raw_spin_unlock+0x3e/0x50 [ 1834.782915][ C1] copy_page_range+0x1c66/0x57c0 [ 1834.787886][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1834.793159][ C1] ? mas_wr_store_entry+0xa4/0x1d50 [ 1834.798360][ C1] ? lock_acquire+0x1d1/0x380 [ 1834.803028][ C1] ? dup_mmap+0xd0a/0x2370 [ 1834.807450][ C1] ? find_held_lock+0x2b/0x80 [ 1834.812126][ C1] ? dup_mmap+0xe66/0x2370 [ 1834.816540][ C1] ? dup_mmap+0xe66/0x2370 [ 1834.820957][ C1] ? down_write+0x146/0x1f0 [ 1834.825464][ C1] ? up_write+0x2dc/0x5b0 [ 1834.829792][ C1] dup_mmap+0x1230/0x2370 [ 1834.834135][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1834.838825][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1834.844631][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1834.850438][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1834.855383][ C1] ? lock_acquire+0x1d1/0x380 [ 1834.860049][ C1] ? copy_process+0x4816/0x8380 [ 1834.864905][ C1] copy_process+0x4821/0x8380 [ 1834.869592][ C1] ? __pfx_copy_process+0x10/0x10 [ 1834.874610][ C1] ? futex_wake+0x4ea/0x5e0 [ 1834.879121][ C1] kernel_clone+0x176/0x9d0 [ 1834.883619][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1834.888656][ C1] __do_sys_clone+0xd9/0x120 [ 1834.893241][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 1834.898433][ C1] ? find_held_lock+0x2b/0x80 [ 1834.903138][ C1] do_syscall_64+0x123/0x790 [ 1834.907728][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.913613][ C1] RIP: 0033:0x7f18cd59e1d9 [ 1834.918020][ C1] RSP: 002b:00007f18ce3aafd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1834.926433][ C1] RAX: ffffffffffffffda RBX: 00007f18cd826090 RCX: 00007f18cd59e1d9 [ 1834.934398][ C1] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000020000 [ 1834.942362][ C1] RBP: 00007f18cd635888 R08: 0000000000000000 R09: 0000000000000000 [ 1834.950329][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1834.958289][ C1] R13: 00007f18cd826128 R14: 00007f18cd826090 R15: 00007fff9c5545a8 [ 1834.966272][ C1] [ 1834.969280][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g119757 f0x0 RCU_GP_WAIT_FQS(5) ->state=I [ 1834.981324][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=83044 [ 1834.989195][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g119757 f0x0 RCU_GP_WAIT_FQS(5) ->state=I ->cpu=0 [ 1835.000285][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1835.010235][ C1] rcu: RCU grace-period kthread stack dump: [ 1835.016102][ C1] task:rcu_preempt state:I stack:28984 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1835.028027][ C1] Call Trace: [ 1835.031294][ C1] [ 1835.034216][ C1] __schedule+0x1259/0x6920 [ 1835.038727][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1835.043690][ C1] ? __pfx___schedule+0x10/0x10 [ 1835.048538][ C1] ? find_held_lock+0x2b/0x80 [ 1835.053215][ C1] ? schedule+0x225/0x2c0 [ 1835.057550][ C1] schedule+0xdd/0x2c0 [ 1835.061620][ C1] schedule_timeout+0x127/0x280 [ 1835.066467][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1835.071835][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1835.077119][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1835.082926][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1835.088384][ C1] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 1835.093142][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1835.098442][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1835.103379][ C1] ? rcu_is_watching+0x13/0xc0 [ 1835.108142][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1835.113949][ C1] rcu_gp_kthread+0x17a/0x220 [ 1835.118623][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1835.123814][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1835.129622][ C1] ? __kthread_parkme+0x18f/0x230 [ 1835.134647][ C1] ? kthread+0x13a/0x450 [ 1835.138883][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1835.144072][ C1] kthread+0x373/0x450 [ 1835.148153][ C1] ? __pfx_kthread+0x10/0x10 [ 1835.152743][ C1] ret_from_fork+0x730/0xd60 [ 1835.157328][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1835.162431][ C1] ? __switch_to+0x800/0x10f0 [ 1835.167104][ C1] ? __pfx_kthread+0x10/0x10 [ 1835.171693][ C1] ret_from_fork_asm+0x1a/0x30 [ 1835.176464][ C1] [ 1835.179472][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1835.185795][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1835.190995][ C0] NMI backtrace for cpu 0 [ 1835.191015][ C0] CPU: 0 UID: 0 PID: 5599 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1835.191040][ C0] Tainted: [L]=SOFTLOCKUP [ 1835.191046][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1835.191057][ C0] RIP: 0010:do_raw_spin_unlock+0x130/0x1e0 [ 1835.191084][ C0] Code: 00 00 48 89 ea 48 c7 43 10 ff ff ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 14 02 48 89 e8 83 e0 07 83 c0 03 38 d0 <7c> 04 84 d2 75 60 c7 43 08 ff ff ff ff 48 89 df e8 cb 96 ef 09 5b [ 1835.191099][ C0] RSP: 0018:ffffc90000007d28 EFLAGS: 00000006 [ 1835.191118][ C0] RAX: 0000000000000003 RBX: ffffffff9cb978b0 RCX: ffffffff81e7cda3 [ 1835.191130][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff9cb978b0 [ 1835.191141][ C0] RBP: ffffffff9cb978b8 R08: 0000000000000000 R09: fffffbfff3972f16 [ 1835.191152][ C0] R10: ffffffff9cb978b3 R11: 0000000000000000 R12: ffffffff9cb978c0 [ 1835.191164][ C0] R13: ffff88802e4e1300 R14: dffffc0000000000 R15: 1ffff92000000fb0 [ 1835.191176][ C0] FS: 00005555643ee500(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 1835.191193][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1835.191205][ C0] CR2: 0000000000000000 CR3: 000000005f5e8000 CR4: 00000000003526f0 [ 1835.191216][ C0] Call Trace: [ 1835.191223][ C0] [ 1835.191231][ C0] _raw_spin_unlock_irqrestore+0x22/0x80 [ 1835.191274][ C0] debug_object_activate+0x343/0x4b0 [ 1835.191301][ C0] ? find_held_lock+0x2b/0x80 [ 1835.191326][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 1835.191355][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1835.191380][ C0] enqueue_hrtimer+0x75/0x2f0 [ 1835.191407][ C0] __hrtimer_run_queues+0x6ed/0x9c0 [ 1835.191436][ C0] hrtimer_interrupt+0x441/0xaa0 [ 1835.191460][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1835.191484][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1835.191508][ C0] [ 1835.191514][ C0] [ 1835.191521][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1835.191540][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x46/0x70 [ 1835.191563][ C0] Code: 00 01 00 ff 74 1e f6 c4 01 74 44 a9 00 00 00 0f 75 3d f7 c1 00 00 00 f0 75 35 8b 82 44 17 00 00 85 c0 74 2b 8b 82 18 17 00 00 <83> f8 02 75 20 48 8b 8a 20 17 00 00 8b 92 1c 17 00 00 48 8b 01 48 [ 1835.191578][ C0] RSP: 0018:ffffc9000346f4f0 EFLAGS: 00000246 [ 1835.191592][ C0] RAX: 0000000000000000 RBX: 0000000000000020 RCX: 0000000000000002 [ 1835.191603][ C0] RDX: ffff88802f1c0000 RSI: ffffffff82652a86 RDI: ffff88802f1c0000 [ 1835.191614][ C0] RBP: 0000000000000008 R08: 0000000000000005 R09: 000000000000001f [ 1835.191625][ C0] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000001 [ 1835.191635][ C0] R13: 0000000000000000 R14: ffff88805e2a3080 R15: 00007f8f0a9fd000 [ 1835.191651][ C0] ? copy_page_range+0x1006/0x57c0 [ 1835.191670][ C0] copy_page_range+0x1006/0x57c0 [ 1835.191703][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 1835.191719][ C0] ? mas_wr_store_entry+0xa4/0x1d50 [ 1835.191740][ C0] ? lock_acquire+0x1d1/0x380 [ 1835.191758][ C0] ? dup_mmap+0xd0a/0x2370 [ 1835.191784][ C0] ? find_held_lock+0x2b/0x80 [ 1835.191808][ C0] ? dup_mmap+0xe66/0x2370 [ 1835.191830][ C0] ? dup_mmap+0xe66/0x2370 [ 1835.191852][ C0] ? down_write+0x146/0x1f0 [ 1835.191878][ C0] ? up_write+0x2dc/0x5b0 [ 1835.191900][ C0] dup_mmap+0x1230/0x2370 [ 1835.191929][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1835.191952][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1835.191974][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1835.191998][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1835.192022][ C0] ? lock_acquire+0x1d1/0x380 [ 1835.192041][ C0] ? copy_process+0x4816/0x8380 [ 1835.192066][ C0] copy_process+0x4821/0x8380 [ 1835.192093][ C0] ? __pfx_copy_process+0x10/0x10 [ 1835.192118][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1835.192144][ C0] kernel_clone+0x176/0x9d0 [ 1835.192165][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1835.192187][ C0] ? __might_fault+0xc5/0x140 [ 1835.192204][ C0] ? find_held_lock+0x2b/0x80 [ 1835.192228][ C0] ? __might_fault+0xc5/0x140 [ 1835.192246][ C0] __do_sys_clone+0xd9/0x120 [ 1835.192266][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 1835.192298][ C0] do_syscall_64+0x123/0x790 [ 1835.192322][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1835.192339][ C0] RIP: 0033:0x7f8f0afc6c52 [ 1835.192354][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1835.192368][ C0] RSP: 002b:00007ffef9c65da0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1835.192384][ C0] RAX: ffffffffffffffda RBX: 00007ffef9c65da0 RCX: 00007f8f0afc6c52 [ 1835.192396][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1835.192406][ C0] RBP: 00007ffef9c65f2c R08: 0000000000000000 R09: 0000000000000001 [ 1835.192417][ C0] R10: 00005555643ee7d0 R11: 0000000000000246 R12: 0000000000000001 [ 1835.192428][ C0] R13: 00000000000927c0 R14: 00000000001a5dea R15: 00007ffef9c65f80 [ 1835.192447][ C0]