last executing test programs: 10m27.22720301s ago: executing program 1 (id=456): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180)='127.0.0.1', 0x9) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='77', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='512', 0x3) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='255', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0) write(r5, &(0x7f00000004c0)='1', 0x1) close(r5) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff) fallocate(r7, 0x0, 0x0, 0x100000) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r8, &(0x7f00000005c0)='3', 0x1) 10m26.950074522s ago: executing program 1 (id=458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9", 0x31}], 0x2}], 0x1, 0x40800) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0xbe9, 0x0, 0x7, 0x1, 0x4]}, &(0x7f0000000340)=0x54) sendmsg$sock(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000780)="8197830511861024665512b79d9a334f276ded42362cb6d507c75749071217bfbd7ad769b61e9b8f7399b549155110cbde91313b2ecd30aef414659ddb309511", 0x40}, {&(0x7f00000007c0)}, {&(0x7f0000000880)="033394f5a431c6d6ff1bc78184fac8aa553836a9cd33f71caa41d343ef8db906e1ce4f97341dc61930db8b2224131236e020e9a3c5baaf2d3959add388c17bd77d3a814f146b3f05b09f7294afa430d5491c3a24375027d7100d7ef9d7749c09d8a6e82138c820f03c7e3bbbe958f392e7e106be25c3bda67f1ad2f3d6605b95c49ee7167cd3beaf", 0x88}, {&(0x7f0000000940)="c378941e2f295d54d6fb350fb122c1746c749c88698d38141b21dbd3ece2dc3c851ef28013b1a55fed7434d477a07c8ab7427b78445e722c28d7608e29b4643ae2a950077795657ac1d1e4abc1b73895c7e652385c98843ab3bb478a28a41d77ebe77c5235c59448b070a148bd75e43a89b8dbd64d4a4a4b76e6d04c4a08e580e9d7589c40e97f2a56ed8b45df4f9a7f1922e63e44040dbcf6eed84aca030a2420047a60118344f9749f681bfff2d4f5dca41a93da1f355146026f52b773b7af386568caef1683daa3e7b2e1e4cb5f9641bb124e2f3f1473cb74d9763576e969c401748a6efde63eb1", 0xe9}], 0x4}, 0xc1) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000", @ANYRES32=0x0, @ANYBLOB="0400"/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000857d92b7d54277093c2b692213bc53f9d14192f757add8c6b9a8a1b74fbbdc4c198f156693672535624cc075eb0046244131a1"], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x58, &(0x7f0000000600)}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x480, 0x0, 0x310, 0xfeffffff, 0x240, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x0, 0x100], 0x0, 0x40}}, @common=@inet=@multiport={{0x50}, {0x1, 0x1, [0x4e20, 0x4e22, 0x4e20, 0x4e20, 0x4e24, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e24, 0x4e22], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3]}}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) 10m25.999198193s ago: executing program 1 (id=465): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x9}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) socket(0x11, 0x5, 0x400101) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) 10m24.010473584s ago: executing program 1 (id=469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x570, 0x298, 0x298, 0xd0, 0x1c8, 0x388, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x820, 0x7}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x388}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x20}, @ipv6=@remote, 0x3a, 0x8, 0x6}}}, {{@ipv6={@local, @empty, [0x0, 0xff000000, 0xff000000], [0x0, 0x0, 0xffffff00], 'tunl0\x00', '\x00', {}, {0xf7d589580f149d60}, 0x0, 0x4a, 0x7}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x3, 0x1, 0x0, [0x9, 0xfff2, 0x4, 0x2, 0x5, 0xe, 0x2, 0xc7b, 0x5, 0x1ff, 0x3, 0x8, 0xf25, 0x7, 0x0, 0xff6b], 0x5}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@val={0x0, 0x18}, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x31, 0x20, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x3de7ea73aeb2140b, @void}}}}}}}}, 0x32) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00)=r0, 0x12) 10m23.02948708s ago: executing program 1 (id=475): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x414b, &(0x7f00000000c0)={0x0, 0x287d, 0x0, 0x3, 0x2ce}, &(0x7f0000002200)=0x0, 0x0, &(0x7f0000002280)=0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r6 = openat(r1, &(0x7f0000000480)='./sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0x0, 0x30) writev(r6, &(0x7f0000001ac0)=[{&(0x7f00000007c0)='O', 0x1}], 0x1) syz_io_uring_submit(r4, 0x0, r5, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r2, 0x0, 0x0, 0x0, 0x800}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)="6b766d2d636c6f636b0ac86464404d48d94b0ce5ea6a63cd71da894c40d747c3", 0x20) prlimit64(0x0, 0x7, &(0x7f00000001c0), 0x0) io_uring_enter(r3, 0x2003, 0xfffffffd, 0x9, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000100)={0x7, 0x1, @qam={0x0, 0x0, 0x5}}) write$binfmt_aout(r8, &(0x7f0000000140)=ANY=[], 0xff2e) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x683}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) 10m21.409261607s ago: executing program 1 (id=479): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) 10m6.318032267s ago: executing program 32 (id=479): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) 2m48.375162507s ago: executing program 5 (id=2460): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x7, 0x0, r2, 0x8, '\x00', r3, r4, 0x4, 0x4}, 0x50) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={0x0, 0xcd0}}, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1bbf00008000005200"/18, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xfff0}, {0x85, 0x0, 0x0, 0xb4}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000040)=r12, 0x4) sendmsg$inet(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r13, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x30, r14, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x6, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0xcb69ea83379946fc) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) 2m46.835822358s ago: executing program 5 (id=2464): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r9, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000540)={0x1, 0x0, [{0x639, 0x0, 0x9}]}) 2m46.064156831s ago: executing program 5 (id=2469): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x18150, 0x3, 0x3, 0x400, 0x4}, 0x30, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@gid}, {@mode={'mode', 0x3d, 0xd}}, {@uid={'uid', 0x3d, 0xee01}}]}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000000000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000000000/0x400000)=nil) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0xfc6, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$bpf(0x200000002000, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000000), 0x40, 0x0) ioctl$COMEDI_INSNLIST(r2, 0x8010640b, &(0x7f0000000040)={0x0, 0x0}) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) socket$inet(0x2, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000008040)={{{@in=@local, @in=@rand_addr=0x64010100, 0x4e21, 0x20, 0x4e21, 0x0, 0x2, 0x80, 0x80, 0xff}, {0x7, 0xfffffffffffffffb, 0x6, 0x800, 0x1ff, 0x100, 0x9, 0xff}, {0x6, 0x9, 0x6, 0x1000}, 0x1ff, 0x0, 0x1, 0xd64d5661df2588af, 0x1, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0xff}, 0xa, @in=@rand_addr=0x6, 0x3502, 0x4, 0x2, 0x6, 0x1, 0xffffffff, 0x1}}, 0xe4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2711, @local}, 0x10) (async) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2711, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {0xffff, 0xffe0}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x9, 0xfffffffa, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0x1, 0x0, 0x1000, 0xfffffff9, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x401, 0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0x40000, 0x0, 0x20000, 0x2, 0x60, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x5, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4ff, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7f, 0xa847, 0x2, 0x0, 0x4b7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3, 0x7, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0xb3c, 0x0, 0xfffffff6, 0x0, 0x573ecac7, 0x8, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x3, 0x0, 0xfffffffe, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x82, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x404, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x8000, 0x100, 0x0, 0x8, 0xfffffefd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x4, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x881) socket$inet6(0xa, 0x805, 0x0) (async) r8 = socket$inet6(0xa, 0x805, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) getsockopt$bt_hci(r8, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 2m45.93547693s ago: executing program 5 (id=2471): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x12, 0x11, 0xfe}}}}}]}}]}}, 0x0) r1 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r1, 0x0, 0x0, 0x400001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x26, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x64}}, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0xa18, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf, 0x90, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x3ff, 0x3, 0x1, {0x22, 0xebd}}, {{{0x9, 0x5, 0x81, 0x3, 0x220, 0x0, 0x0, 0xc}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xc, 0x9, 0x5}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x6d, 0xc6, 0x30, 0x20, 0x7}, 0x28, &(0x7f0000000140)={0x5, 0xf, 0x28, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x7, 0x0, 0xffff, [0x0, 0xff0030, 0xff00ff]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x1, 0x9, 0x7, 0xb}]}, 0x1, [{0x9c, &(0x7f0000000240)=@string={0x9c, 0x3, "66dd4edcac8c22cf5d985f5511e86b57fdbc994470474c633cff29e3d31ec6d2b4f83e950eaf82bbc83dec885a852363e7ac5e69d2f7ef9b3303f838d70dbde8cfa16530f458ce0182efd5b09acb5a5d0e2cd7e095932a5902a545434921369d3ee850f1678e2cf105c337dce0a91eed3063ff5b5c29e7c949b079710d9f5d9ca30ee0b31ba8d7b724ca9dfc7924f79470aa823e7aa9915bffe6"}}]}) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2cf6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x10, 0x84, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x6, 0x3, 0x1, {0x22, 0x6cf}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x7, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x6, 0xff, 0x4}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0xe2, 0x7, 0xa, 0xff, 0xff}, 0xf, &(0x7f0000000400)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0xa, 0x3, 0xfa5}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x446}}, {0xc0, &(0x7f0000000480)=@string={0xc0, 0x3, "757f22ac4b2a3ad2ef09254f96effc9ddbdcf9789fd7f5f073607f758979fb3a6801b2cbcc796ec9d572e2dfc4e6a3cbc11c58393ae6326a51005f9bb7196bfe3151d8f0d3fa20c76dd1fa3c7d3cfdebc55aa21035fc82b1c05487f631ea66fbeee78e59d47402467f54b350dd1aaefd90ffd7c8ebf4f979423d3b70cb06e495175ee192d2d1c00df3afa1a3688ae1dafd2a1e9db31cbaa81923d49eb66e8ae2d70a71a3d89d50ac7a7397c0b2acf82b979d96372618aa5e4e7e1e5f927e"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2401}}, {0x42, &(0x7f0000000580)=@string={0x42, 0x3, "6331843eb21edd0abcc1dd22a3898f3fa8fd552c974a7e386fe54ced0661c775b90652ce9f068ef3c0e260a16562dea2f35fe0554ae93a781b4b871899e0710a"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xda, &(0x7f0000000640)=@string={0xda, 0x3, "4b0f4a7d0a595612b2859c50a8999442e124fd2f16debf45e2dbeeac678f3d321648abd0b9fcdd6d24329cc9a90e971c3ccfbbb6d6def5121e6da83652dbe409faab76d08443a4a206e87b8b987c2204d430dd50b13b2e938a56271ea0a7461b6ff11c4da4ccb7853314ab521336f116d116169ec3787b4d49024c7e22751c76149a53df5b2b0abc9eb3385b05dd08a75dc451c150f096c8b0d4a9f6a0d408ce05b3cfcb4d45ba1fa695e83ba2fc32fac03894cc4daf579d548a50695fdcfb0780c27eff104c24819f150b2b3752e1e9b5eebfdd70bbb8cd"}}, {0xb9, &(0x7f0000000740)=@string={0xb9, 0x3, "8a09f8b761cb5c2a9be5482959bf117624b2a0ad34b52d24b59adcf2b11c2370995c0917d6e7838f30f6c7e2ec9277079c1641abdc8342dcff19123bf7fd6cdf89ef9a0c1121b310ac914f0265fe25b4623be9434d5847a2c64df2eacb7f80a33ecc22472719c75e1eabb129417925fa26207659881c57c1fabf1694ac2b37127a951afde0cda87d28a62ca2f30accb1989be1ae1c21bce8c713958df815f47038b602b3322a4f5085f5e3cd4da89e03988e734dc8ed8b"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00/(\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m44.813352804s ago: executing program 2 (id=2482): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001100)="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", 0x3e2}, {&(0x7f0000000400)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241070096c1498194a7197b45d74a8532b82037b02c9e6045c361ebf4752154fdfe39867a3236186eff2e437321de2e5f6479b384bd9ba37bcab948be0db1e4631eda95e59fdb9d1172c26347db86cdbbf687b5ae29029fbaf53d0576425e493a2fdf20aa2e298a41e395d7025cbce20e7df7357f5c11035638ee615514da29a9fa215ad9", 0x9f}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x204}, {{0x0, 0x0, 0x0}, 0x646a}], 0x2, 0x0, 0x0) 2m44.635805304s ago: executing program 2 (id=2485): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000100), 0x12) listen(r3, 0x1) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e000a43b820a8e8c9881db660164333526f680eac8c863a63"], 0x88) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100019e"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002ec0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x70}}, 0x800) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) close_range(r0, 0xffffffffffffffff, 0x0) 2m44.298363609s ago: executing program 2 (id=2491): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='5\x00', 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000240)='4', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='4096\x00', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:0\x00', 0x4) write(r4, &(0x7f0000000380)='1:1\x00', 0x4) write(r4, &(0x7f00000003c0)='1:2\x00', 0x4) write(r4, &(0x7f0000000400)='1:3\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-ram2/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000580)='2\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/dev-ram3/slot\x00', 0x1, 0x0) write(r7, &(0x7f0000000600)='3\x00', 0x2) r8 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r8, &(0x7f0000000680)='active\x00', 0x7) 2m43.925533792s ago: executing program 2 (id=2497): gettid() (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x8, &(0x7f0000000000)=ANY=[], 0x0, 0x8341, 0x1b, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x12, 0x308, 0x128, 0x206, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'caif0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f, 0x7f00}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'geneve0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000340)="a1500753c985a4862b2051d8ba00b845fd943e11fe382e963560b6fef20afefd411bfd2ddc2902fdd424", 0x2a}, {0x0}], 0x2) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$SMC_PNETID_DEL(r6, 0x0, 0x80) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') pread64(r7, &(0x7f0000000f80)=""/212, 0xd4, 0xffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) syz_usb_connect(0x3, 0x4a, 0x0, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x48}}, 0x440088c4) mq_open(&(0x7f0000000040)=',(]\x00', 0x1, 0x44, &(0x7f0000000080)={0x8, 0x6, 0x3, 0x5}) 2m43.720549517s ago: executing program 5 (id=2499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m43.638903104s ago: executing program 2 (id=2500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (fail_nth: 1) 2m43.637895463s ago: executing program 5 (id=2501): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000027000100fdff07000010000006"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m43.370595855s ago: executing program 2 (id=2502): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000540)={0x28, 0x2, 0x0, {0x1, 0x4, 0x3}}, 0x28) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040021}, 0x30) syz_io_uring_setup(0x34bc, &(0x7f0000000200)={0x0, 0x5410, 0x80, 0x1, 0x80}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r7}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r9, 0x8907, 0x0) close(0x3) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x10001}}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x78}, 0x1, 0xbb1414ac}, 0x8000004) syz_ublk_setup_io_uring(0xcf6, &(0x7f0000000180)={0x0, 0xe540, 0x200, 0x1, 0x129}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, 0x0, r11, &(0x7f0000000340)=@IORING_OP_MSG_RING={0x28, 0x60, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="9ccadc5e295b8d51c43d3ad915c825a83b97ed5ee429343bcfa5c2ca93f634a4227d69a9a8f8dbaa634cda5cb8bcaa6d7aed102eaeafdf90ebe075581de7b9836b15d5eb3081f868f708a1cd70c828888f8d755fba974ca0a0996c57a3743b1e6e872ad8ec621559dffc", 0x0, 0x8, 0x3, 0x0, {0x0, 0x0, r2, 0x3}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000027000100fdff07000010000006"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m28.504944235s ago: executing program 33 (id=2501): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000027000100fdff07000010000006"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m28.287583402s ago: executing program 34 (id=2502): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000540)={0x28, 0x2, 0x0, {0x1, 0x4, 0x3}}, 0x28) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040021}, 0x30) syz_io_uring_setup(0x34bc, &(0x7f0000000200)={0x0, 0x5410, 0x80, 0x1, 0x80}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r7}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r9, 0x8907, 0x0) close(0x3) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x10001}}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x78}, 0x1, 0xbb1414ac}, 0x8000004) syz_ublk_setup_io_uring(0xcf6, &(0x7f0000000180)={0x0, 0xe540, 0x200, 0x1, 0x129}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, 0x0, r11, &(0x7f0000000340)=@IORING_OP_MSG_RING={0x28, 0x60, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="9ccadc5e295b8d51c43d3ad915c825a83b97ed5ee429343bcfa5c2ca93f634a4227d69a9a8f8dbaa634cda5cb8bcaa6d7aed102eaeafdf90ebe075581de7b9836b15d5eb3081f868f708a1cd70c828888f8d755fba974ca0a0996c57a3743b1e6e872ad8ec621559dffc", 0x0, 0x8, 0x3, 0x0, {0x0, 0x0, r2, 0x3}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000027000100fdff07000010000006"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 13.19874219s ago: executing program 4 (id=3062): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x25dfdbfe, {0x2}, [@NHA_ID={0x8, 0x6, 0xf7ffffff}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x8, @val=@tcx={@void, @value=r1}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 10.10462446s ago: executing program 3 (id=3068): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x103381) socket(0x10, 0x803, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) setpriority(0x2, 0x0, 0x8) socket$pppoe(0x18, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240), 0x0}) 9.883401177s ago: executing program 7 (id=3069): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xe8100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file0', [{0x20, '#! .\x86\x01\x19\xde\x86-\x06\xef\xb6\xf6\xbf\xec\x81;\x9aL(!5\xc1\xc0\x1aG\xdc\x8a\xbag\x98&1\xa0\xef\xcc\x18\xb6u\nv5\xf3I\x86\xb7\xb3\xf3\x9b\"J\xd9>\xe7\xea\x00'/72}, {0x20, '\\:1\x00\xe5?V\x8bU\xbfq\xbe\xe9\x13\xd6\xf4\xa0\x82\x81:\x88\xd7\x8b\xa3\x12\x83\x9a\xed\xba\b\x06H\x0f\xb1\xe2Z\v!4\n\x02\xed\x873*\xae\x9b\r\xe3\x1d\xf4\x00\x00\x00\x00\x00\x00\x00\x00\xe0+\xfek\xd3\xf5!\x1b#\xd0\t+a_M\t8\xb5\xe4-wz\xe1\xd0v\x13\xcbj\x87\x02))\"\xebr\x8aY\x00'/108}, {0x20, '\xf2\x85\xe1\xb4J\x1dhy\xde\xebZ/\xa6\xc7\xac\xcf\xd4G\xec;\x14\x06\xbb&\x8d2>\\\xf5 y\xb4a\xc0\xdbm\x82\xe7\xfb\xfc\xd8\x91\xaaMD\xd4\xe2\xde\x02{\x06\x93a\xe4@1\a\x89\xf2\x1b\x85\xb3\x97\x88\x86\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, {0x20, 'net/kcm\x00'}, {0x20, '/dev/kvm\x00'}]}, 0x11f) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x8010, r2, 0x225dc000) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r3, 0xfff, 0x1) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtclass={0x38, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}]}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) r7 = fsopen(&(0x7f00000016c0)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='\\:1\x00', 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x10000, 0x1, '\x00', 0x1}) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r8, &(0x7f00000014c0)=[{&(0x7f0000000800)=""/203, 0xcb}], 0x1, 0x182, 0x20010000) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) 9.86527649s ago: executing program 4 (id=3070): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x25dfdbff, {0xa, 0x0, 0x3}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000600)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000880)={'syztnl1\x00', &(0x7f00000007c0)={'erspan0\x00', 0x0, 0x10, 0x1, 0xffffff2b, 0x80000000, {{0x1a, 0x4, 0x0, 0x3, 0x68, 0x68, 0x0, 0xcc, 0x29, 0x0, @loopback, @multicast1, {[@noop, @end, @ssrr={0x89, 0x17, 0xc8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @loopback, @broadcast, @broadcast]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x4d, [@remote, @dev={0xac, 0x14, 0x14, 0x28}, @broadcast, @empty, @private=0xa010500]}, @lsrr={0x83, 0xb, 0x40, [@multicast1, @private=0xa010101]}, @timestamp_prespec={0x44, 0x14, 0x7f, 0x3, 0x6, [{@broadcast, 0xfffffff9}, {@rand_addr=0x64010100, 0x7}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="d0fce5de91872e2e674e038f7f1e84f834ac324b0df14d70d3349e81249b38e456", @ANYRES16=0x0, @ANYBLOB="020028bd7000fbdbdf25020000001800018014000200766972745f77696669300000000000006000018014000200626f6e64300000000000000000000000080003000100000014000200776c616e31000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="140002007465616d30000000000000000000000008", @ANYBLOB, @ANYRES32, @ANYBLOB="140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4], 0x124}, 0x1, 0x0, 0x0, 0x804}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000180)=@req3={0x80000000, 0xffff, 0x9, 0x6, 0x0, 0x8c, 0x2}, 0x1c) getpeername(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') 8.452819967s ago: executing program 4 (id=3072): socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x28, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = syz_ublk_setup_io_uring(0x2b59, &(0x7f0000000040)={0x0, 0x30b9, 0x0, 0x8000002, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000002d00)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000003100)={0x0, 0x1, 0x0, 0x1, 0x254}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0xc0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x0, 0x0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000340)=0x13e) 8.069909072s ago: executing program 0 (id=3074): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_emit_ethernet(0x41, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc_tr={0x11, {@snap={0xab, 0x1, "ea", "2c90c5", 0x88b5, "62c656af9c8185384a94d5d56e5614ac5f5ee10689a891e0e7983762d531bf8f8e4d33107f75c992fbe820"}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000000c0)) 8.068460234s ago: executing program 6 (id=3075): r0 = socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi5\x00', 0x8000, 0x0) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x2d1528cfe5a31ee9, 0x3, 0x255}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000280)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000780)=0x1, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x65c2f}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x34}}, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r6, &(0x7f00000003c0)='1', 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000080)="a7", 0x1}], 0x1) close(0xffffffffffffffff) r8 = fanotify_init(0x1, 0x1000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x80c040, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r8}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r9, 0x0, 0x48f, &(0x7f0000000100)={0x75, @local, 0x4e20, 0xfffffffc, 'lblcr\x00', 0x5, 0x0, 0x5}, 0x2c) 7.727231519s ago: executing program 6 (id=3076): ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000000c0)=0x1) prlimit64(0x0, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid_for_children\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x44f6, &(0x7f0000004fc0)={0x0, 0xa4e0, 0x1000, 0x0, 0x155}, &(0x7f0000005040), &(0x7f0000005080), 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x4, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x95ff]}}], 0xffc8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000040), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 6.886220817s ago: executing program 7 (id=3077): ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000000c0)=0x1) prlimit64(0x0, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid_for_children\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) syz_io_uring_setup(0x44f6, &(0x7f0000004fc0)={0x0, 0xa4e0, 0x1000, 0x0, 0x155}, &(0x7f0000005040), &(0x7f0000005080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x4, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x95ff]}}], 0xffc8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000040), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 6.338793089s ago: executing program 6 (id=3078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r4, 0x1, 0x1a, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) rt_sigqueueinfo(0x0, 0x1f, &(0x7f0000000200)={0x3a, 0x7fffffff, 0x9}) 6.260942823s ago: executing program 4 (id=3079): ioctl$ECCGETSTATS(0xffffffffffffffff, 0x80104d12, 0x0) ioctl$MTDFILEMODE(0xffffffffffffffff, 0x4d13, 0x1) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r0, 0x2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x101, 0x1, r1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121000, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xaa, 0x0, 0x2019}}}, 0x7) 6.020233382s ago: executing program 0 (id=3080): r0 = socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x802, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x10, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES16], &(0x7f0000005d80)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x1}, 0x7ff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 4.871952911s ago: executing program 6 (id=3081): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) epoll_create1(0x80000) r1 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r2 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0xeec6, 0x800, 0x0, 0x116}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) vmsplice(r3, &(0x7f0000001240)=[{&(0x7f0000000100)='p', 0x1}], 0x1, 0x4) close_range(r2, r2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x7fffffffffffffff, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000140)=0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "baac6c0b0f05a1e2", "34a3d9f0e95f96b8f6892a34257396dc", "d30d4e9e", "170cd569e7d750e2"}, 0x28) 4.848604105s ago: executing program 3 (id=3082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='secret\x00', &(0x7f0000000300)='AQB1234=67890123456789012345678901234567=\x00', 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)={0x24, r1, 0x1, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x24}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214c, 0xc000, 0x0, 0x70}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x10000003, 0x8, 0x0, 'queue1\x00', 0x9}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 4.51405799s ago: executing program 7 (id=3083): socket$igmp(0x2, 0x3, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB], 0x20000600}}, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x138}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8457920ba0fad478e86823cc07b88f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=""/24, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x0) unshare(0x6a040000) 4.41778047s ago: executing program 3 (id=3084): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) fsopen(&(0x7f00000001c0)='bdev\x00', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000780)={0x8, 0x1, 0x9, 0x9, &(0x7f0000000040)=[{}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x2) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='16', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) close(r5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe000095069078640101", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2b4950e2c1a0b5b052ae7609ba5aecca6e20beb023dcb1c"], 0x0) 4.182539087s ago: executing program 0 (id=3085): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x41c, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) connect$x25(r1, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) r7 = syz_open_procfs(r4, &(0x7f00000000c0)='net/icmp6\x00') preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0x114a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7050000000000007910a800000000001d0a00000000000004000000000000007ae5329e0d514435c9ab6b0cfe2b81768f6e5dd51f89c179d2e162b67f552702366604ee531f23b978092b3329556f1ec16d6e271d55c650ed09989e890d07878fd4dd72a594505452a03628d13287f7540234f426989a13e3994746b0e478c1ad699f68f8d5d17a68b0da8e4693ee98abb7b215eed4566f3b4a49cf6d"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x210, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0xfffffffffffffc79}, 0x2a) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) shutdown(r3, 0x1) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.795589929s ago: executing program 7 (id=3086): r0 = socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi5\x00', 0x8000, 0x0) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x2d1528cfe5a31ee9, 0x3, 0x255}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000280)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000780)=0x1, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x65c2f}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x34}}, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r6, &(0x7f00000003c0)='1', 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000080)="a7", 0x1}], 0x1) close(0xffffffffffffffff) r8 = fanotify_init(0x1, 0x1000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x80c040, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r8}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r9, 0x0, 0x48f, &(0x7f0000000100)={0x75, @local, 0x4e20, 0xfffffffc, 'lblcr\x00', 0x5, 0x0, 0x5}, 0x2c) 3.763138668s ago: executing program 6 (id=3087): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@alg={0xf0, 0x10, 0x100, 0x70bd26, 0x25dfdbfc, {{'gcm(aes)\x00'}, '\x00', '\x00', 0x2000, 0x2200}, [{0x8, 0x1, 0x5}, {0x8, 0x1, 0x3eb554f0}]}, 0xf0}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) socket$nl_crypto(0x10, 0x3, 0x15) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000440)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xa72}}], 0x18}}], 0x2, 0x40010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x2ee}, 0x0, &(0x7f0000000200), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpriority(0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = socket(0x2b, 0x1, 0x1) listen(r3, 0x5) accept4$phonet_pipe(r3, 0x0, 0x0, 0x80000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40804) socket$nl_route(0x10, 0x3, 0x0) 3.175773051s ago: executing program 0 (id=3088): ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000000c0)=0x1) prlimit64(0x0, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid_for_children\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x44f6, &(0x7f0000004fc0)={0x0, 0xa4e0, 0x1000, 0x0, 0x155}, &(0x7f0000005040), &(0x7f0000005080), 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x4, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x95ff]}}], 0xffc8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000040), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2.15450386s ago: executing program 4 (id=3089): syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002bc0)={0xa0, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0x2002d) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x0, 0x0, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0x5, 0x0, 0x10000, 0x4004, 0x4, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x6, 0x0, 0x0, 0x6, 0xae4f, 0x0, 0x0, 0x2, 0x0, 0x5f23, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0xaed, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x95, 0x0, 0x0, 0x9, 0x0, 0xfa0, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x9, 0x4000000000000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x3, 0x8000000000000001, 0x4, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x71, 0x0, 0x0, 0x0, 0x5]}) openat$ptp0(0xffffff9c, 0x0, 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) 2.03933626s ago: executing program 3 (id=3090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='secret\x00', &(0x7f0000000300)='AQB1234=67890123456789012345678901234567=\x00', 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)={0x24, r1, 0x1, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x24}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214c, 0xc000, 0x0, 0x70}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0xc000) io_uring_enter(r5, 0x2219, 0x1adf, 0x16, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @random="dccf0b3ab7ce"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x2}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x10000003, 0x8, 0x0, 'queue1\x00', 0x9}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) 1.482740941s ago: executing program 7 (id=3091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r4, 0x1, 0x1a, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="4401000010000100feffffbf00010000ff020000000000000000000000000001ac1414aa000000000000000000000000000107944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) rt_sigqueueinfo(0x0, 0x1f, &(0x7f0000000200)={0x3a, 0x7fffffff, 0x9}) 1.354951542s ago: executing program 6 (id=3092): socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@remote, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x17, 0xf, 0x0, @multicast2}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrusage(0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0x1d) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000046000900000000000000000003000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_pressure(r8, &(0x7f0000001040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000001000)={'full', 0x20, 0x1, 0x20, 0xffffffffffffffff}, 0x2f) clock_adjtime(0x0, 0x0) 1.232816353s ago: executing program 0 (id=3093): r0 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x138}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8457920ba0fad478e86823cc07b88f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=""/24, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x0) unshare(0x6a040000) 43.768515ms ago: executing program 7 (id=3096): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 26.079328ms ago: executing program 3 (id=3097): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x30f68a6, &(0x7f0000000200)={[{@mode={'mode', 0x3d, 0x7}}]}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x1e) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x30f68a6, &(0x7f0000000200)={[{@mode={'mode', 0x3d, 0x7}}]}) (async) 0s ago: executing program 0 (id=3098): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind(r0, &(0x7f0000000000)=@in={0x2, 0x808, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='port\x00', &(0x7f0000000700)='2056\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x80000001) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000140)=""/148, &(0x7f0000000240)=0x94) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='vers\x00', &(0x7f0000000900)='4.2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r3 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000c00), 0x4) setsockopt$inet_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000d00)=@gcm_128={{0x303}, "1122334455667788", "11223344556677889900112233445566", "11223344", "0000000000000001"}, 0x28) sendto(r3, &(0x7f0000000e00)="15030300020200", 0x7, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.426913][T14604] RSP: 002b:00007f1e9264a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.426929][T14604] RAX: ffffffffffffffda RBX: 00007f1e91a25fa0 RCX: 00007f1e9179e0d9 [ 676.426940][T14604] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 676.426949][T14604] RBP: 00007f1e9264a090 R08: 0000000000000000 R09: 0000000000000000 [ 676.426959][T14604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.426968][T14604] R13: 00007f1e91a26038 R14: 00007f1e91a25fa0 R15: 00007ffffd2bbd08 [ 676.426992][T14604] [ 676.748226][T14483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.342463][T14483] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.382244][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.389340][ T6030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.450752][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.457909][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.624393][T14112] Bluetooth: hci3: command tx timeout [ 677.876629][T14466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.022992][T14112] Bluetooth: hci6: command tx timeout [ 678.271477][T14466] veth0_vlan: entered promiscuous mode [ 678.294508][T14483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.312674][T14466] veth1_vlan: entered promiscuous mode [ 678.387860][T14466] veth0_macvtap: entered promiscuous mode [ 678.399754][T14466] veth1_macvtap: entered promiscuous mode [ 678.446936][T14466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.484672][T14466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.633782][ T76] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.651788][ T30] audit: type=1800 audit(1785920841.660:1689): pid=14673 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2625" name="ipv4_port" dev="configfs" ino=43544 res=0 errno=0 [ 678.700419][ T30] audit: type=1800 audit(1785920841.660:1690): pid=14673 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2625" name="num" dev="configfs" ino=43545 res=0 errno=0 [ 678.732501][ T30] audit: type=1800 audit(1785920841.690:1691): pid=14673 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2625" name="blocks" dev="configfs" ino=43546 res=0 errno=0 [ 678.766807][ T6030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.783081][ T3320] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.828173][ T3320] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.847139][ T6030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.847787][T14676] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[9131] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[14676] [ 678.872876][ T30] audit: type=1800 audit(1785920841.690:1692): pid=14673 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2625" name="start_block" dev="configfs" ino=43547 res=0 errno=0 [ 678.896077][ T5843] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.924668][ T30] audit: type=1800 audit(1785920841.700:1693): pid=14673 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2625" name="dev" dev="configfs" ino=43548 res=0 errno=0 [ 678.985966][ T6030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.008534][ T6030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.009302][T14483] veth0_vlan: entered promiscuous mode [ 679.107168][ T30] audit: type=1400 audit(1785920842.120:1694): avc: denied { mounton } for pid=14466 comm="syz-executor" path="/root/syzkaller.UdSaeo/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 679.148294][ T30] audit: type=1400 audit(1785920842.160:1695): avc: denied { mounton } for pid=14466 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 679.155195][T14483] veth1_vlan: entered promiscuous mode [ 679.804660][T14483] veth0_macvtap: entered promiscuous mode [ 679.820441][T14483] veth1_macvtap: entered promiscuous mode [ 679.845744][T14483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.857034][T14483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.935244][ T30] audit: type=1800 audit(1785920842.950:1696): pid=14686 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2628" name="ipv4_address" dev="configfs" ino=44199 res=0 errno=0 [ 679.985392][ T30] audit: type=1800 audit(1785920842.970:1697): pid=14686 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2628" name="ipv4_port" dev="configfs" ino=44200 res=0 errno=0 [ 680.193070][ T30] audit: type=1800 audit(1785920842.970:1698): pid=14686 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2628" name="num" dev="configfs" ino=44201 res=0 errno=0 [ 680.224532][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.232436][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.241032][ T6030] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.824850][ T48] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.100051][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.133617][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.181628][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.195973][ T6030] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.206756][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.222534][ T6030] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.386701][T14713] FAULT_INJECTION: forcing a failure. [ 681.386701][T14713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.400750][T14713] CPU: 0 UID: 0 PID: 14713 Comm: syz.0.2636 Tainted: G L syzkaller #0 PREEMPT(full) [ 681.400780][T14713] Tainted: [L]=SOFTLOCKUP [ 681.400786][T14713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 681.400796][T14713] Call Trace: [ 681.400802][T14713] [ 681.400809][T14713] dump_stack_lvl+0x100/0x190 [ 681.400836][T14713] should_fail_ex.cold+0x5/0xa [ 681.400859][T14713] _copy_from_user+0x2e/0xd0 [ 681.400886][T14713] copy_msghdr_from_user+0x9f/0x4c0 [ 681.400906][T14713] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 681.400935][T14713] ___sys_sendmsg+0x106/0x1e0 [ 681.400954][T14713] ? __pfx____sys_sendmsg+0x10/0x10 [ 681.400970][T14713] ? __lock_acquire+0x49f/0x1a40 [ 681.400992][T14713] ? get_pid_task+0x106/0x250 [ 681.401034][T14713] __sys_sendmsg+0x160/0x210 [ 681.401058][T14713] ? __pfx___sys_sendmsg+0x10/0x10 [ 681.401094][T14713] do_syscall_64+0x115/0x870 [ 681.401116][T14713] ? clear_bhb_loop+0x40/0x90 [ 681.401138][T14713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.401156][T14713] RIP: 0033:0x7f1e9179e0d9 [ 681.401170][T14713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.401187][T14713] RSP: 002b:00007f1e9264a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.401205][T14713] RAX: ffffffffffffffda RBX: 00007f1e91a25fa0 RCX: 00007f1e9179e0d9 [ 681.401216][T14713] RDX: 0000000000044014 RSI: 0000200000000440 RDI: 0000000000000003 [ 681.401230][T14713] RBP: 00007f1e9264a090 R08: 0000000000000000 R09: 0000000000000000 [ 681.401240][T14713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.401249][T14713] R13: 00007f1e91a26038 R14: 00007f1e91a25fa0 R15: 00007ffffd2bbd08 [ 681.401273][T14713] [ 681.613357][T14716] FAULT_INJECTION: forcing a failure. [ 681.613357][T14716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.734647][T14716] CPU: 1 UID: 0 PID: 14716 Comm: syz.7.2586 Tainted: G L syzkaller #0 PREEMPT(full) [ 681.734677][T14716] Tainted: [L]=SOFTLOCKUP [ 681.734683][T14716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 681.734692][T14716] Call Trace: [ 681.734698][T14716] [ 681.734704][T14716] dump_stack_lvl+0x100/0x190 [ 681.734730][T14716] should_fail_ex.cold+0x5/0xa [ 681.734752][T14716] _copy_from_user+0x2e/0xd0 [ 681.734776][T14716] copy_msghdr_from_user+0x9f/0x4c0 [ 681.734796][T14716] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 681.734825][T14716] ___sys_sendmsg+0x106/0x1e0 [ 681.734844][T14716] ? __pfx____sys_sendmsg+0x10/0x10 [ 681.734860][T14716] ? __lock_acquire+0x49f/0x1a40 [ 681.734882][T14716] ? get_pid_task+0x106/0x250 [ 681.734921][T14716] __sys_sendmsg+0x160/0x210 [ 681.734944][T14716] ? __pfx___sys_sendmsg+0x10/0x10 [ 681.734992][T14716] do_syscall_64+0x115/0x870 [ 681.735014][T14716] ? clear_bhb_loop+0x40/0x90 [ 681.735034][T14716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.735052][T14716] RIP: 0033:0x7f8a17f9e0d9 [ 681.735068][T14716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.735084][T14716] RSP: 002b:00007f8a18e92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.735102][T14716] RAX: ffffffffffffffda RBX: 00007f8a18225fa0 RCX: 00007f8a17f9e0d9 [ 681.735114][T14716] RDX: 00000000200040a0 RSI: 0000200000000480 RDI: 0000000000000003 [ 681.735125][T14716] RBP: 00007f8a18e92090 R08: 0000000000000000 R09: 0000000000000000 [ 681.735135][T14716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.735145][T14716] R13: 00007f8a18226038 R14: 00007f8a18225fa0 R15: 00007fff1c71afd8 [ 681.735167][T14716] [ 682.703207][T14731] Cannot find add_set index 0 as target [ 683.128585][ T5614] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 683.141762][ T5614] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 683.150402][ T5614] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 683.164542][ T5614] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 683.173359][ T5614] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 684.787577][T14766] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2650'. [ 685.335178][T14779] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 685.384851][ T5614] Bluetooth: hci7: command tx timeout [ 686.314907][T14782] capability: warning: `syz.6.2651' uses deprecated v2 capabilities in a way that may be insecure [ 686.565954][T14764] syz.4.2650 (14764): drop_caches: 2 [ 686.656977][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 686.656992][ T30] audit: type=1800 audit(1785920849.670:1714): pid=14796 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2657" name="num" dev="configfs" ino=43955 res=0 errno=0 [ 686.690852][T14798] FAULT_INJECTION: forcing a failure. [ 686.690852][T14798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.722011][ T30] audit: type=1800 audit(1785920849.710:1715): pid=14796 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2657" name="blocks" dev="configfs" ino=43956 res=0 errno=0 [ 686.736671][T14798] CPU: 1 UID: 0 PID: 14798 Comm: syz.7.2656 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.736700][T14798] Tainted: [L]=SOFTLOCKUP [ 686.736705][T14798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 686.736714][T14798] Call Trace: [ 686.736719][T14798] [ 686.736725][T14798] dump_stack_lvl+0x100/0x190 [ 686.736750][T14798] should_fail_ex.cold+0x5/0xa [ 686.736771][T14798] _copy_from_user+0x2e/0xd0 [ 686.736794][T14798] copy_msghdr_from_user+0x9f/0x4c0 [ 686.736811][T14798] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 686.736837][T14798] ___sys_sendmsg+0x106/0x1e0 [ 686.736854][T14798] ? __pfx____sys_sendmsg+0x10/0x10 [ 686.736868][T14798] ? __lock_acquire+0x49f/0x1a40 [ 686.736887][T14798] ? get_pid_task+0x106/0x250 [ 686.736924][T14798] __sys_sendmsg+0x160/0x210 [ 686.736944][T14798] ? __pfx___sys_sendmsg+0x10/0x10 [ 686.736975][T14798] do_syscall_64+0x115/0x870 [ 686.736993][T14798] ? clear_bhb_loop+0x40/0x90 [ 686.737012][T14798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.737027][T14798] RIP: 0033:0x7f8a17f9e0d9 [ 686.737041][T14798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.737056][T14798] RSP: 002b:00007f8a18e92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 686.737071][T14798] RAX: ffffffffffffffda RBX: 00007f8a18225fa0 RCX: 00007f8a17f9e0d9 [ 686.737081][T14798] RDX: 0000000000044840 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 686.737090][T14798] RBP: 00007f8a18e92090 R08: 0000000000000000 R09: 0000000000000000 [ 686.737099][T14798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.737108][T14798] R13: 00007f8a18226038 R14: 00007f8a18225fa0 R15: 00007fff1c71afd8 [ 686.737129][T14798] [ 687.031351][ T30] audit: type=1800 audit(1785920849.710:1716): pid=14796 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2657" name="start_block" dev="configfs" ino=43957 res=0 errno=0 [ 687.130456][ T30] audit: type=1800 audit(1785920849.730:1717): pid=14796 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2657" name="dev" dev="configfs" ino=43959 res=0 errno=0 [ 687.149336][T14770] syz.4.2650 (14770): drop_caches: 2 [ 687.179772][T14804] syz.7.2658 uses obsolete (PF_INET,SOCK_PACKET) [ 687.231680][ T30] audit: type=1400 audit(1785920850.130:1718): avc: denied { append } for pid=14803 comm="syz.7.2658" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 687.265455][T14741] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.282762][T14741] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.294996][T14741] bridge_slave_0: entered allmulticast mode [ 687.318377][T14741] bridge_slave_0: entered promiscuous mode [ 687.348344][T14741] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.363078][T14741] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.383095][T14741] bridge_slave_1: entered allmulticast mode [ 687.390531][T14741] bridge_slave_1: entered promiscuous mode [ 687.455650][T14741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.463275][ T5614] Bluetooth: hci7: command tx timeout [ 687.476929][T14741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.581885][T14741] team0: Port device team_slave_0 added [ 687.594078][T14813] netlink: 63 bytes leftover after parsing attributes in process `syz.6.2660'. [ 687.608650][T14741] team0: Port device team_slave_1 added [ 687.660219][T14741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.674465][T14741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.733044][T14741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.754849][T14741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.773083][T14741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.822608][T14741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.887952][ T30] audit: type=1400 audit(1785920850.900:1719): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 687.942767][T14741] hsr_slave_0: entered promiscuous mode [ 687.963845][T14741] hsr_slave_1: entered promiscuous mode [ 687.973435][T14741] debugfs: 'hsr0' already exists in 'hsr' [ 687.993147][T14741] Cannot create hsr debugfs directory [ 688.079973][ T3320] bridge_slave_1: left allmulticast mode [ 688.085929][ T5795] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 688.094184][ T3320] bridge_slave_1: left promiscuous mode [ 688.100387][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.113601][ T3320] bridge_slave_0: left allmulticast mode [ 688.119309][ T3320] bridge_slave_0: left promiscuous mode [ 688.125587][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.136567][ T3320] pim6reg: left allmulticast mode [ 688.226805][ T3320] gretap0 (unregistering): left promiscuous mode [ 688.255656][ T5795] usb 7-1: unable to get BOS descriptor or descriptor too short [ 688.268439][ T5795] usb 7-1: not running at top speed; connect to a high speed hub [ 688.294567][ T5795] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 688.306142][ T5795] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 688.329688][ T5795] usb 7-1: string descriptor 0 read error: -22 [ 688.336597][ T5795] usb 7-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 688.363888][ T5795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.373725][ T3320] IPVS: stopping backup sync thread 6735 ... [ 688.594934][T14826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.619156][T14826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.793615][ T5795] usb 7-1: unable to issue vendor read request (ret = -71) [ 688.827802][ T3320] hsr_slave_0: left promiscuous mode [ 688.834973][ T5795] usb 7-1: unable to issue vendor read request (ret = -71) [ 688.845389][ T3320] hsr_slave_1: left promiscuous mode [ 688.852431][ T3320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.852761][ T5795] usb 7-1: unable to issue vendor read request (ret = -71) [ 688.870653][ T3320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.896663][ T30] audit: type=1800 audit(1785920851.910:1720): pid=14833 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2663" name="device_path" dev="configfs" ino=45134 res=0 errno=0 [ 688.922398][T14833] FAULT_INJECTION: forcing a failure. [ 688.922398][T14833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.937561][ T30] audit: type=1400 audit(1785920851.910:1721): avc: denied { write } for pid=14821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.984045][T14833] CPU: 0 UID: 0 PID: 14833 Comm: syz.3.2663 Tainted: G L syzkaller #0 PREEMPT(full) [ 688.984073][T14833] Tainted: [L]=SOFTLOCKUP [ 688.984080][T14833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 688.984090][T14833] Call Trace: [ 688.984096][T14833] [ 688.984103][T14833] dump_stack_lvl+0x100/0x190 [ 688.984132][T14833] should_fail_ex.cold+0x5/0xa [ 688.984154][T14833] _copy_from_iter+0x1f4/0x1690 [ 688.984182][T14833] ? __lock_acquire+0x49f/0x1a40 [ 688.984205][T14833] ? __pfx__copy_from_iter+0x10/0x10 [ 688.984241][T14833] configfs_write_iter+0xb3/0x4e0 [ 688.984265][T14833] vfs_write+0x6ac/0x1050 [ 688.984293][T14833] ? __pfx_configfs_write_iter+0x10/0x10 [ 688.984314][T14833] ? __pfx_vfs_write+0x10/0x10 [ 688.984357][T14833] ksys_write+0x12a/0x250 [ 688.984373][T14833] ? __pfx_ksys_write+0x10/0x10 [ 688.984395][T14833] do_syscall_64+0x115/0x870 [ 688.984425][T14833] ? clear_bhb_loop+0x40/0x90 [ 688.984445][T14833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.984463][T14833] RIP: 0033:0x7fc49af9e0d9 [ 688.984478][T14833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.984495][T14833] RSP: 002b:00007fc49becb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 688.984512][T14833] RAX: ffffffffffffffda RBX: 00007fc49b225fa0 RCX: 00007fc49af9e0d9 [ 688.984523][T14833] RDX: 0000000000000004 RSI: 0000200000000480 RDI: 0000000000000003 [ 688.984534][T14833] RBP: 00007fc49becb090 R08: 0000000000000000 R09: 0000000000000000 [ 688.984546][T14833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.984555][T14833] R13: 00007fc49b226038 R14: 00007fc49b225fa0 R15: 00007ffeb41933b8 [ 688.984579][T14833] [ 689.195672][ T5795] usb 7-1: USB disconnect, device number 2 [ 689.218841][ T30] audit: type=1400 audit(1785920852.060:1722): avc: denied { write } for pid=14836 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.468590][ T3320] team0 (unregistering): Port device team_slave_1 removed [ 689.543222][ T5614] Bluetooth: hci7: command tx timeout [ 689.564035][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 689.603968][T14842] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.613870][T14842] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.694382][T14842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.710060][T14842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.853172][ T194] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.862213][ T194] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.871732][ T194] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.893690][ T194] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.622983][ T5614] Bluetooth: hci7: command tx timeout [ 691.986445][T14873] FAULT_INJECTION: forcing a failure. [ 691.986445][T14873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.000079][T14741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 692.018726][T14873] CPU: 0 UID: 0 PID: 14873 Comm: syz.4.2670 Tainted: G L syzkaller #0 PREEMPT(full) [ 692.018754][T14873] Tainted: [L]=SOFTLOCKUP [ 692.018760][T14873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 692.018769][T14873] Call Trace: [ 692.018775][T14873] [ 692.018781][T14873] dump_stack_lvl+0x100/0x190 [ 692.018807][T14873] should_fail_ex.cold+0x5/0xa [ 692.018829][T14873] _copy_from_user+0x2e/0xd0 [ 692.018854][T14873] copy_msghdr_from_user+0x9f/0x4c0 [ 692.018874][T14873] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 692.018902][T14873] ___sys_sendmsg+0x106/0x1e0 [ 692.018920][T14873] ? __pfx____sys_sendmsg+0x10/0x10 [ 692.018936][T14873] ? __lock_acquire+0x49f/0x1a40 [ 692.018958][T14873] ? get_pid_task+0x106/0x250 [ 692.018998][T14873] __sys_sendmsg+0x160/0x210 [ 692.019021][T14873] ? __pfx___sys_sendmsg+0x10/0x10 [ 692.019056][T14873] do_syscall_64+0x115/0x870 [ 692.019077][T14873] ? clear_bhb_loop+0x40/0x90 [ 692.019098][T14873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.019115][T14873] RIP: 0033:0x7fc15b99e0d9 [ 692.019129][T14873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.019144][T14873] RSP: 002b:00007fc15c929028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 692.019162][T14873] RAX: ffffffffffffffda RBX: 00007fc15bc25fa0 RCX: 00007fc15b99e0d9 [ 692.019172][T14873] RDX: 0000000020004080 RSI: 0000200000000280 RDI: 0000000000000003 [ 692.019182][T14873] RBP: 00007fc15c929090 R08: 0000000000000000 R09: 0000000000000000 [ 692.019191][T14873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.019200][T14873] R13: 00007fc15bc26038 R14: 00007fc15bc25fa0 R15: 00007ffdd56bcbf8 [ 692.019223][T14873] [ 692.210653][ T30] audit: type=1400 audit(1785920855.220:1723): avc: denied { write } for pid=14849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.238341][T14741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 692.268624][T14741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 692.309286][T14741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 692.395362][T14741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 692.413944][T14741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 692.431758][ T30] audit: type=1400 audit(1785920855.440:1724): avc: denied { write } for pid=14882 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.433871][T14741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 692.477672][T14741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 692.648907][T14741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.680586][T14741] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.693997][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.701093][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.724075][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.731163][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.761947][T14741] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 692.777385][T14741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 693.542233][ T30] audit: type=1800 audit(1785920856.230:1725): pid=14902 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2674" name="file0" dev="overlay" ino=91 res=0 errno=0 [ 694.019953][T14741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.057819][T14915] NILFS (nullb0): couldn't find nilfs on the device [ 694.180586][T14741] veth0_vlan: entered promiscuous mode [ 694.709625][T14741] veth1_vlan: entered promiscuous mode [ 695.157180][T14741] veth0_macvtap: entered promiscuous mode [ 695.209317][T14741] veth1_macvtap: entered promiscuous mode [ 695.286895][T14741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.324257][T14741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.350237][T14933] jffs2: notice: (14933) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (1 unchecked, 5 orphan) and 41 of xref (0 dead, 36 orphan) found. [ 695.385353][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.407948][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.425046][T14934] FAULT_INJECTION: forcing a failure. [ 695.425046][T14934] name failslab, interval 1, probability 0, space 0, times 0 [ 695.453349][T14934] CPU: 1 UID: 0 PID: 14934 Comm: syz.6.2681 Tainted: G L syzkaller #0 PREEMPT(full) [ 695.453376][T14934] Tainted: [L]=SOFTLOCKUP [ 695.453381][T14934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 695.453389][T14934] Call Trace: [ 695.453393][T14934] [ 695.453399][T14934] dump_stack_lvl+0x100/0x190 [ 695.453422][T14934] should_fail_ex.cold+0x5/0xa [ 695.453442][T14934] should_failslab+0xc2/0x120 [ 695.453461][T14934] kmem_cache_alloc_noprof+0x91/0x6a0 [ 695.453478][T14934] ? do_getname+0x35/0x390 [ 695.453501][T14934] do_getname+0x35/0x390 [ 695.453521][T14934] __x64_sys_unlinkat+0xa0/0x130 [ 695.453539][T14934] do_syscall_64+0x115/0x870 [ 695.453556][T14934] ? clear_bhb_loop+0x40/0x90 [ 695.453573][T14934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.453588][T14934] RIP: 0033:0x7f157959e0d9 [ 695.453600][T14934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.453613][T14934] RSP: 002b:00007f157a411028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 695.453627][T14934] RAX: ffffffffffffffda RBX: 00007f1579826090 RCX: 00007f157959e0d9 [ 695.453635][T14934] RDX: 0000000000000000 RSI: 0000200000001300 RDI: ffffffffffffff9c [ 695.453644][T14934] RBP: 00007f157a411090 R08: 0000000000000000 R09: 0000000000000000 [ 695.453652][T14934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.453659][T14934] R13: 00007f1579826128 R14: 00007f1579826090 R15: 00007ffdae4e1508 [ 695.453678][T14934] [ 695.638976][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.663606][ T5843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.683115][ T5843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.696387][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.707923][ T5843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.786292][ T5843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.797625][T14931] fuse: Bad value for 'fd' [ 696.293397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 696.683096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 697.712191][T14954] zram0: detected capacity change from 0 to 8 [ 697.713070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 697.900108][T14965] (syz.0.2690,14965,1):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 697.936050][ T30] audit: type=1800 audit(1785920860.840:1726): pid=14965 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2690" name="blocks" dev="configfs" ino=46559 res=0 errno=0 [ 697.976500][T14965] (syz.0.2690,14965,1):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 698.143802][T14965] (syz.0.2690,14965,1):o2hb_region_dev_store:1850 ERROR: status = -5 [ 698.185500][ T30] audit: type=1800 audit(1785920860.850:1727): pid=14965 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2690" name="start_block" dev="configfs" ino=46561 res=0 errno=0 [ 698.520592][ T30] audit: type=1800 audit(1785920860.910:1728): pid=14965 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2690" name="dev" dev="configfs" ino=46562 res=0 errno=0 [ 698.577095][ T30] audit: type=1400 audit(1785920861.010:1729): avc: denied { name_connect } for pid=14966 comm="syz.4.2691" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 698.602295][T14970] (syz.6.2692,14970,1):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 698.635607][T14975] FAULT_INJECTION: forcing a failure. [ 698.635607][T14975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.655193][ T30] audit: type=1400 audit(1785920861.020:1730): avc: denied { accept } for pid=14966 comm="syz.4.2691" laddr=::ffff:172.20.20.20 lport=40507 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 698.693871][T14970] (syz.6.2692,14970,1):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 698.704598][T14970] (syz.6.2692,14970,1):o2hb_region_dev_store:1850 ERROR: status = -5 [ 698.713115][T14975] CPU: 1 UID: 0 PID: 14975 Comm: syz.4.2693 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.713141][T14975] Tainted: [L]=SOFTLOCKUP [ 698.713147][T14975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 698.713157][T14975] Call Trace: [ 698.713163][T14975] [ 698.713169][T14975] dump_stack_lvl+0x100/0x190 [ 698.713203][T14975] should_fail_ex.cold+0x5/0xa [ 698.713226][T14975] _copy_to_user+0x32/0xd0 [ 698.713252][T14975] simple_read_from_buffer+0xcb/0x170 [ 698.713274][T14975] proc_fail_nth_read+0x1af/0x230 [ 698.713302][T14975] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 698.713331][T14975] ? rw_verify_area+0xce/0x6d0 [ 698.713355][T14975] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 698.713381][T14975] vfs_read+0x1e4/0xb40 [ 698.713410][T14975] ? __pfx_vfs_read+0x10/0x10 [ 698.713436][T14975] ? __fget_files+0x215/0x3d0 [ 698.713461][T14975] ? __fget_files+0x21f/0x3d0 [ 698.713484][T14975] ksys_read+0x12a/0x250 [ 698.713511][T14975] ? __pfx_ksys_read+0x10/0x10 [ 698.713545][T14975] do_syscall_64+0x115/0x870 [ 698.713568][T14975] ? clear_bhb_loop+0x40/0x90 [ 698.713591][T14975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.713610][T14975] RIP: 0033:0x7fc15b95e90e [ 698.713625][T14975] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 698.713642][T14975] RSP: 002b:00007fc15c928fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 698.713658][T14975] RAX: ffffffffffffffda RBX: 00007fc15c9296c0 RCX: 00007fc15b95e90e [ 698.713670][T14975] RDX: 000000000000000f RSI: 00007fc15c9290a0 RDI: 0000000000000004 [ 698.713680][T14975] RBP: 00007fc15c929090 R08: 0000000000000000 R09: 0000000000000000 [ 698.713690][T14975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.713700][T14975] R13: 00007fc15bc26038 R14: 00007fc15bc25fa0 R15: 00007ffdd56bcbf8 [ 698.713725][T14975] [ 698.714536][ T30] audit: type=1400 audit(1785920861.020:1731): avc: denied { setopt } for pid=14966 comm="syz.4.2691" laddr=::ffff:172.20.20.20 lport=40507 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 698.937877][ T30] audit: type=1800 audit(1785920861.300:1732): pid=14970 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2692" name="ipv4_address" dev="configfs" ino=46568 res=0 errno=0 [ 698.960378][ T30] audit: type=1800 audit(1785920861.360:1733): pid=14970 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2692" name="ipv4_port" dev="configfs" ino=46569 res=0 errno=0 [ 698.982269][ T30] audit: type=1800 audit(1785920861.410:1734): pid=14970 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2692" name="num" dev="configfs" ino=46570 res=0 errno=0 [ 699.003654][ T30] audit: type=1800 audit(1785920861.600:1735): pid=14970 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2692" name="dev" dev="configfs" ino=45580 res=0 errno=0 [ 699.011431][T14983] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2694'. [ 699.146799][T14987] jffs2: notice: (14987) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (1 unchecked, 5 orphan) and 41 of xref (0 dead, 36 orphan) found. [ 699.995049][T15007] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2699'. [ 699.998079][T15011] NILFS (nullb0): couldn't find nilfs on the device [ 700.034681][T15007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2699'. [ 700.046100][T15012] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 700.124405][T15014] FAULT_INJECTION: forcing a failure. [ 700.124405][T15014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.156606][T15014] CPU: 1 UID: 0 PID: 15014 Comm: syz.3.2700 Tainted: G L syzkaller #0 PREEMPT(full) [ 700.156636][T15014] Tainted: [L]=SOFTLOCKUP [ 700.156642][T15014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 700.156652][T15014] Call Trace: [ 700.156658][T15014] [ 700.156665][T15014] dump_stack_lvl+0x100/0x190 [ 700.156691][T15014] should_fail_ex.cold+0x5/0xa [ 700.156713][T15014] _copy_to_user+0x32/0xd0 [ 700.156744][T15014] simple_read_from_buffer+0xcb/0x170 [ 700.156765][T15014] proc_fail_nth_read+0x1af/0x230 [ 700.156792][T15014] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 700.156819][T15014] ? rw_verify_area+0xce/0x6d0 [ 700.156842][T15014] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 700.156866][T15014] vfs_read+0x1e4/0xb40 [ 700.156894][T15014] ? __pfx_vfs_read+0x10/0x10 [ 700.156918][T15014] ? __fget_files+0x215/0x3d0 [ 700.156941][T15014] ? __fget_files+0x21f/0x3d0 [ 700.156965][T15014] ksys_read+0x12a/0x250 [ 700.156989][T15014] ? __pfx_ksys_read+0x10/0x10 [ 700.157020][T15014] do_syscall_64+0x115/0x870 [ 700.157041][T15014] ? clear_bhb_loop+0x40/0x90 [ 700.157061][T15014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.157079][T15014] RIP: 0033:0x7fc49af5e90e [ 700.157093][T15014] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 700.157107][T15014] RSP: 002b:00007fc49becafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 700.157124][T15014] RAX: ffffffffffffffda RBX: 00007fc49becb6c0 RCX: 00007fc49af5e90e [ 700.157135][T15014] RDX: 000000000000000f RSI: 00007fc49becb0a0 RDI: 0000000000000003 [ 700.157145][T15014] RBP: 00007fc49becb090 R08: 0000000000000000 R09: 0000000000000000 [ 700.157155][T15014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.157164][T15014] R13: 00007fc49b226038 R14: 00007fc49b225fa0 R15: 00007ffeb41933b8 [ 700.157189][T15014] [ 700.758122][T15016] netlink: 'syz.4.2701': attribute type 1 has an invalid length. [ 700.965723][T15016] 8021q: adding VLAN 0 to HW filter on device bond2 [ 701.332475][T15029] bond2: (slave geneve2): making interface the new active one [ 701.379378][T15029] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 701.414089][T15039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'. [ 701.505237][ T3320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.528070][ T3320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.989590][ T5843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.018617][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.657074][T15055] openvswitch: netlink: IP tunnel dst address not specified [ 703.079058][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 703.079075][ T30] audit: type=1400 audit(1785920865.660:1743): avc: denied { read write } for pid=15048 comm="syz.7.2710" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 703.174582][ T30] audit: type=1400 audit(1785920865.660:1744): avc: denied { open } for pid=15048 comm="syz.7.2710" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 703.660503][T15067] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2713'. [ 703.713857][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2713'. [ 703.735396][T15069] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 704.180231][ T30] audit: type=1800 audit(1785920867.190:1745): pid=15075 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2718" name="blocks" dev="configfs" ino=45696 res=0 errno=0 [ 704.315250][ T30] audit: type=1800 audit(1785920867.190:1746): pid=15075 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2718" name="start_block" dev="configfs" ino=45697 res=0 errno=0 [ 704.337759][ T30] audit: type=1800 audit(1785920867.250:1747): pid=15076 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2718" name="dev" dev="configfs" ino=45698 res=0 errno=0 [ 704.642131][T15080] FAULT_INJECTION: forcing a failure. [ 704.642131][T15080] name fail_futex, interval 1, probability 0, space 0, times 0 [ 704.760688][T15080] CPU: 0 UID: 0 PID: 15080 Comm: syz.0.2720 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.760720][T15080] Tainted: [L]=SOFTLOCKUP [ 704.760726][T15080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 704.760736][T15080] Call Trace: [ 704.760742][T15080] [ 704.760749][T15080] dump_stack_lvl+0x100/0x190 [ 704.760777][T15080] should_fail_ex.cold+0x5/0xa [ 704.760799][T15080] get_futex_key+0x1d2/0x14f0 [ 704.760830][T15080] ? __pfx_get_futex_key+0x10/0x10 [ 704.760862][T15080] futex_requeue+0x227/0x22e0 [ 704.760890][T15080] ? __pfx_futex_requeue+0x10/0x10 [ 704.760907][T15080] ? get_pid_task+0xfc/0x250 [ 704.760927][T15080] ? get_pid_task+0x106/0x250 [ 704.760943][T15080] ? proc_fail_nth_write+0x9f/0x220 [ 704.760977][T15080] ? rcu_read_lock_any_held+0x6a/0xa0 [ 704.760995][T15080] ? find_held_lock+0x2b/0x80 [ 704.761015][T15080] do_futex+0x3ae/0x440 [ 704.761042][T15080] ? __pfx_do_futex+0x10/0x10 [ 704.761068][T15080] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 704.761094][T15080] __x64_sys_futex+0x34f/0x4d0 [ 704.761121][T15080] ? fput+0x79/0x100 [ 704.761141][T15080] ? __pfx___x64_sys_futex+0x10/0x10 [ 704.761165][T15080] ? ksys_write+0x1ac/0x250 [ 704.761180][T15080] ? __pfx_ksys_write+0x10/0x10 [ 704.761203][T15080] do_syscall_64+0x115/0x870 [ 704.761224][T15080] ? clear_bhb_loop+0x40/0x90 [ 704.761245][T15080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.761263][T15080] RIP: 0033:0x7f33f679e0d9 [ 704.761278][T15080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.761294][T15080] RSP: 002b:00007f33f49f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 704.761311][T15080] RAX: ffffffffffffffda RBX: 00007f33f6a25fa0 RCX: 00007f33f679e0d9 [ 704.761327][T15080] RDX: 0000000000000801 RSI: 0000000000000003 RDI: 000020000000cffc [ 704.761337][T15080] RBP: 00007f33f49f6090 R08: 0000200000000040 R09: 00000000fffffffc [ 704.761348][T15080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.761357][T15080] R13: 00007f33f6a26038 R14: 00007f33f6a25fa0 R15: 00007ffce13a7ee8 [ 704.761381][T15080] [ 705.304307][ T30] audit: type=1400 audit(1785920868.220:1748): avc: denied { bind } for pid=15088 comm="syz.4.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 705.344632][T15092] ip6t_srh: unknown srh match flags FF3F [ 706.525588][T15100] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=15100 comm=syz.0.2724 [ 706.864341][T15101] FAULT_INJECTION: forcing a failure. [ 706.864341][T15101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.019793][T15101] CPU: 0 UID: 0 PID: 15101 Comm: syz.0.2724 Tainted: G L syzkaller #0 PREEMPT(full) [ 707.019825][T15101] Tainted: [L]=SOFTLOCKUP [ 707.019831][T15101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 707.019841][T15101] Call Trace: [ 707.019847][T15101] [ 707.019854][T15101] dump_stack_lvl+0x100/0x190 [ 707.019882][T15101] should_fail_ex.cold+0x5/0xa [ 707.019905][T15101] _copy_from_user+0x2e/0xd0 [ 707.019932][T15101] copy_msghdr_from_user+0x9f/0x4c0 [ 707.019953][T15101] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 707.019970][T15101] ? trace_hrtimer_start+0x77/0x220 [ 707.020008][T15101] ___sys_sendmsg+0x106/0x1e0 [ 707.020028][T15101] ? __pfx____sys_sendmsg+0x10/0x10 [ 707.020068][T15101] ? finish_task_switch.isra.0+0x3b6/0x10c0 [ 707.020104][T15101] ? find_held_lock+0x2b/0x80 [ 707.020137][T15101] __sys_sendmmsg+0x20c/0x440 [ 707.020164][T15101] ? __pfx___sys_sendmmsg+0x10/0x10 [ 707.020187][T15101] ? preempt_schedule_thunk+0x16/0x40 [ 707.020224][T15101] ? fput+0x79/0x100 [ 707.020245][T15101] ? ksys_write+0x1ac/0x250 [ 707.020262][T15101] ? __pfx_ksys_write+0x10/0x10 [ 707.020282][T15101] __x64_sys_sendmmsg+0x9c/0x100 [ 707.020306][T15101] ? lockdep_hardirqs_on+0x78/0x100 [ 707.020328][T15101] do_syscall_64+0x115/0x870 [ 707.020352][T15101] ? clear_bhb_loop+0x40/0x90 [ 707.020374][T15101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.020392][T15101] RIP: 0033:0x7f33f679e0d9 [ 707.020407][T15101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.020424][T15101] RSP: 002b:00007f33f49d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 707.020442][T15101] RAX: ffffffffffffffda RBX: 00007f33f6a26090 RCX: 00007f33f679e0d9 [ 707.020453][T15101] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 707.020464][T15101] RBP: 00007f33f49d5090 R08: 0000000000000000 R09: 0000000000000000 [ 707.020474][T15101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.020484][T15101] R13: 00007f33f6a26128 R14: 00007f33f6a26090 R15: 00007ffce13a7ee8 [ 707.020508][T15101] [ 707.929009][T15107] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 708.084648][ T30] audit: type=1800 audit(1785920871.040:1749): pid=15106 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2726" name="ipv4_address" dev="configfs" ino=45747 res=0 errno=0 [ 708.242928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 708.263085][ T30] audit: type=1800 audit(1785920871.090:1750): pid=15106 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2726" name="ipv4_port" dev="configfs" ino=45748 res=0 errno=0 [ 708.619754][ T30] audit: type=1800 audit(1785920871.140:1751): pid=15106 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2726" name="num" dev="configfs" ino=45749 res=0 errno=0 [ 708.681992][T15113] ip_tables: iptables: counters copy to user failed while replacing table [ 708.692760][ T30] audit: type=1800 audit(1785920871.220:1752): pid=15106 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2726" name="blocks" dev="configfs" ino=45750 res=0 errno=0 [ 708.767963][ T30] audit: type=1800 audit(1785920871.550:1753): pid=15108 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2726" name="dev" dev="configfs" ino=46825 res=0 errno=0 [ 708.854561][T15123] FAULT_INJECTION: forcing a failure. [ 708.854561][T15123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.891349][T15123] CPU: 1 UID: 0 PID: 15123 Comm: syz.3.2730 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.891381][T15123] Tainted: [L]=SOFTLOCKUP [ 708.891387][T15123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 708.891397][T15123] Call Trace: [ 708.891403][T15123] [ 708.891410][T15123] dump_stack_lvl+0x100/0x190 [ 708.891439][T15123] should_fail_ex.cold+0x5/0xa [ 708.891463][T15123] _copy_from_user+0x2e/0xd0 [ 708.891490][T15123] move_addr_to_kernel+0x65/0x170 [ 708.891511][T15123] __sys_sendto+0x1b8/0x4e0 [ 708.891533][T15123] ? __pfx___sys_sendto+0x10/0x10 [ 708.891560][T15123] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 708.891594][T15123] ? ksys_write+0x1ac/0x250 [ 708.891610][T15123] ? __pfx_ksys_write+0x10/0x10 [ 708.891628][T15123] __x64_sys_sendto+0xe0/0x1c0 [ 708.891648][T15123] ? do_syscall_64+0x90/0x870 [ 708.891670][T15123] ? lockdep_hardirqs_on+0x78/0x100 [ 708.891691][T15123] do_syscall_64+0x115/0x870 [ 708.891711][T15123] ? clear_bhb_loop+0x40/0x90 [ 708.891732][T15123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.891749][T15123] RIP: 0033:0x7fc49af9e0d9 [ 708.891765][T15123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.891784][T15123] RSP: 002b:00007fc49be89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 708.891802][T15123] RAX: ffffffffffffffda RBX: 00007fc49b226180 RCX: 00007fc49af9e0d9 [ 708.891812][T15123] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000005 [ 708.891822][T15123] RBP: 00007fc49be89090 R08: 0000200000000140 R09: 0000000000000014 [ 708.891832][T15123] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 708.891841][T15123] R13: 00007fc49b226218 R14: 00007fc49b226180 R15: 00007ffeb41933b8 [ 708.891863][T15123] [ 709.093227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 709.097062][T15125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2732'. [ 709.127401][T15125] fuse: Invalid rootmode [ 709.144089][ T30] audit: type=1400 audit(1785920872.140:1754): avc: denied { read write } for pid=15122 comm="syz.0.2732" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 709.168860][ T30] audit: type=1400 audit(1785920872.140:1755): avc: denied { open } for pid=15122 comm="syz.0.2732" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 709.225776][T15128] openvswitch: netlink: IP tunnel dst address not specified [ 711.045108][T15150] md: could not open device unknown-block(1,0). [ 711.076017][T15155] ipt_REJECT: TCP_RESET invalid for non-tcp [ 711.177307][T15153] md: could not open device unknown-block(1,1). [ 711.256084][T15150] md: could not open device unknown-block(1,2). [ 711.274581][T15161] ip_tables: iptables: counters copy to user failed while replacing table [ 711.477971][T15164] can: request_module (can-proto-3) failed. [ 711.562371][ T30] audit: type=1400 audit(1785920874.570:1756): avc: denied { create } for pid=15163 comm="syz.3.2742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 713.826225][T15198] openvswitch: netlink: IP tunnel dst address not specified [ 715.288147][T15208] md: could not open device unknown-block(1,0). [ 715.475332][T15211] md: could not open device unknown-block(1,3). [ 715.543492][T15205] md: could not open device unknown-block(1,1). [ 715.613397][T15210] md: could not open device unknown-block(1,2). [ 717.047098][T15228] No source specified [ 717.287335][ T30] audit: type=1800 audit(1785920880.300:1757): pid=15235 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2763" name="ipv4_address" dev="configfs" ino=47142 res=0 errno=0 [ 717.318587][T15239] Cannot find del_set index 4 as target [ 717.484002][ T30] audit: type=1800 audit(1785920880.300:1758): pid=15235 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2763" name="ipv4_port" dev="configfs" ino=47144 res=0 errno=0 [ 717.764432][T15243] openvswitch: netlink: IP tunnel dst address not specified [ 717.844808][ T30] audit: type=1800 audit(1785920880.300:1759): pid=15235 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2763" name="num" dev="configfs" ino=47145 res=0 errno=0 [ 717.892331][ T30] audit: type=1800 audit(1785920880.300:1760): pid=15235 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2763" name="blocks" dev="configfs" ino=47146 res=0 errno=0 [ 717.941709][ T30] audit: type=1800 audit(1785920880.540:1761): pid=15235 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2763" name="dev" dev="configfs" ino=45918 res=0 errno=0 [ 717.991642][ T30] audit: type=1800 audit(1785920880.900:1762): pid=15239 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2766" name="attr_allow_any_host" dev="configfs" ino=47158 res=0 errno=0 [ 718.193250][T15248] md: could not open device unknown-block(1,0). [ 718.283426][T15248] md: could not open device unknown-block(1,2). [ 718.373307][T15253] md: could not open device unknown-block(1,1). [ 718.584530][T15255] md: could not open device unknown-block(1,3). [ 719.560676][T15276] No source specified [ 719.825927][ T30] audit: type=1800 audit(1785920882.840:1763): pid=15281 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2778" name="ipv4_address" dev="configfs" ino=47230 res=0 errno=0 [ 719.943688][ T30] audit: type=1800 audit(1785920882.880:1764): pid=15281 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2778" name="ipv4_port" dev="configfs" ino=47232 res=0 errno=0 [ 720.021924][ T30] audit: type=1800 audit(1785920882.880:1765): pid=15281 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2778" name="num" dev="configfs" ino=47233 res=0 errno=0 [ 720.172236][ T30] audit: type=1800 audit(1785920882.880:1766): pid=15281 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2778" name="blocks" dev="configfs" ino=47234 res=0 errno=0 [ 721.184070][T15302] md: could not open device unknown-block(1,0). [ 721.245650][T15305] md: could not open device unknown-block(1,1). [ 721.316205][T15302] md: could not open device unknown-block(1,2). [ 721.369023][T15305] md: could not open device unknown-block(1,3). [ 721.390100][T15312] No source specified [ 721.565270][T15316] netlink: zone id is out of range [ 721.609772][T15316] netlink: get zone limit has 4 unknown bytes [ 721.674196][T15324] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2792'. [ 723.660277][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 723.660290][ T30] audit: type=1800 audit(1785920886.670:1774): pid=15352 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2803" name="ipv4_address" dev="configfs" ino=47406 res=0 errno=0 [ 723.758288][ T30] audit: type=1800 audit(1785920886.670:1775): pid=15352 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2803" name="ipv4_port" dev="configfs" ino=47407 res=0 errno=0 [ 723.839239][ T30] audit: type=1800 audit(1785920886.670:1776): pid=15352 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2803" name="num" dev="configfs" ino=47408 res=0 errno=0 [ 723.884451][ T30] audit: type=1800 audit(1785920886.700:1777): pid=15352 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2803" name="blocks" dev="configfs" ino=47409 res=0 errno=0 [ 723.953255][ T30] audit: type=1800 audit(1785920886.720:1778): pid=15352 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2803" name="dev" dev="configfs" ino=47413 res=0 errno=0 [ 724.734791][ T30] audit: type=1400 audit(1785920887.740:1779): avc: denied { append } for pid=15370 comm="syz.7.2811" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 725.592685][T15382] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2812'. [ 725.615463][ T5736] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 725.814966][ T5736] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 725.831558][ T5736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.877436][ T5736] usb 7-1: Product: syz [ 725.901674][ T5736] usb 7-1: Manufacturer: syz [ 725.930128][ T5736] usb 7-1: SerialNumber: syz [ 726.030614][T14670] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 726.172770][T15390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2815'. [ 726.230742][T15390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 726.390341][T15382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2812'. [ 726.420234][T15382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2812'. [ 726.475556][T14151] usb 7-1: USB disconnect, device number 3 [ 726.515681][T15382] netlink: 'syz.4.2812': attribute type 13 has an invalid length. [ 727.222264][T14670] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 727.268670][T14670] ath9k_htc: Failed to initialize the device [ 727.318197][T14151] usb 7-1: ath9k_htc: USB layer deinitialized [ 727.519755][T15405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.337995][ T30] audit: type=1400 audit(1785920892.340:1780): avc: denied { unmount } for pid=14466 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 729.944341][T15441] sctp: [Deprecated]: syz.3.2830 (pid 15441) Use of struct sctp_assoc_value in delayed_ack socket option. [ 729.944341][T15441] Use struct sctp_sack_info instead [ 730.219987][ T30] audit: type=1800 audit(1785920893.230:1781): pid=15447 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2832" name="ipv4_address" dev="configfs" ino=47622 res=0 errno=0 [ 730.324209][ T30] audit: type=1800 audit(1785920893.260:1782): pid=15447 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2832" name="ipv4_port" dev="configfs" ino=47623 res=0 errno=0 [ 730.470616][ T30] audit: type=1800 audit(1785920893.260:1783): pid=15447 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2832" name="num" dev="configfs" ino=47624 res=0 errno=0 [ 730.548685][ T30] audit: type=1800 audit(1785920893.270:1784): pid=15447 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2832" name="blocks" dev="configfs" ino=47625 res=0 errno=0 [ 730.577152][T15452] openvswitch: netlink: IP tunnel dst address not specified [ 730.901864][ T30] audit: type=1800 audit(1785920893.300:1785): pid=15447 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2832" name="dev" dev="configfs" ino=47626 res=0 errno=0 [ 732.502554][ T30] audit: type=1400 audit(1785920895.510:1786): avc: denied { kexec_image_load } for pid=15467 comm="syz.4.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 735.256684][T15497] pim6reg: entered allmulticast mode [ 735.442243][ T30] audit: type=1400 audit(1785920898.450:1787): avc: denied { write } for pid=15488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.601601][ T30] audit: type=1800 audit(1785920898.610:1788): pid=15510 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2844" name="ipv4_address" dev="configfs" ino=47972 res=0 errno=0 [ 735.711501][ T30] audit: type=1800 audit(1785920898.610:1789): pid=15510 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2844" name="ipv4_port" dev="configfs" ino=47973 res=0 errno=0 [ 735.807130][ T30] audit: type=1800 audit(1785920898.610:1790): pid=15510 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2844" name="num" dev="configfs" ino=47974 res=0 errno=0 [ 735.927433][ T30] audit: type=1800 audit(1785920898.610:1791): pid=15510 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2844" name="blocks" dev="configfs" ino=47975 res=0 errno=0 [ 736.218208][T15520] NILFS (nullb0): couldn't find nilfs on the device [ 736.545451][ T30] audit: type=1800 audit(1785920898.660:1792): pid=15510 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2844" name="dev" dev="configfs" ino=47976 res=0 errno=0 [ 736.636428][ T30] audit: type=1400 audit(1785920899.650:1793): avc: denied { write } for pid=15514 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.416943][ T4927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 737.431511][ T4927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 737.439681][ T4927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 737.449607][ T4927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 737.462134][ T4927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 737.622679][T15534] NILFS (nullb0): couldn't find nilfs on the device [ 738.098685][ T30] audit: type=1400 audit(1785920901.100:1794): avc: denied { mounton } for pid=15523 comm="syz.6.2850" path="/48/file0" dev="tmpfs" ino=289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 739.155809][ T30] audit: type=1400 audit(1785920902.160:1795): avc: denied { write } for pid=15524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.542058][T15571] 8021q: adding VLAN 0 to HW filter on device bond3 [ 739.547388][ T4927] Bluetooth: hci1: command tx timeout [ 739.689127][ T30] audit: type=1400 audit(1785920902.700:1796): avc: denied { write } for pid=15573 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.297924][T15571] bridge0: port 3(bond3) entered blocking state [ 740.306936][T15571] bridge0: port 3(bond3) entered disabled state [ 740.313635][T15571] bond3: entered allmulticast mode [ 740.320936][T15571] bond3: entered promiscuous mode [ 740.770787][ T30] audit: type=1400 audit(1785920903.770:1797): avc: denied { bind } for pid=15569 comm="syz.4.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 740.841075][T15588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2858'. [ 740.891236][ T30] audit: type=1400 audit(1785920903.770:1798): avc: denied { node_bind } for pid=15569 comm="syz.4.2855" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 741.027294][ T30] audit: type=1400 audit(1785920903.880:1799): avc: denied { ioctl } for pid=15583 comm="syz.6.2857" path="/dev/sg0" dev="devtmpfs" ino=793 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 741.282005][ T30] audit: type=1400 audit(1785920904.110:1800): avc: denied { map } for pid=15587 comm="syz.0.2858" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 741.421435][ T30] audit: type=1400 audit(1785920904.110:1801): avc: denied { execute } for pid=15587 comm="syz.0.2858" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 741.953412][ T4927] Bluetooth: hci1: command tx timeout [ 742.017881][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 742.026384][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 742.068152][ T5609] syz_tun (unregistering): left allmulticast mode [ 742.081949][ T30] audit: type=1800 audit(1785920904.340:1802): pid=15601 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2861" name="num" dev="configfs" ino=48504 res=0 errno=0 [ 742.127917][T15609] (syz.0.2861,15609,1):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 742.147970][ T30] audit: type=1800 audit(1785920904.460:1803): pid=15601 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2861" name="blocks" dev="configfs" ino=49189 res=0 errno=0 [ 742.279982][ T30] audit: type=1800 audit(1785920904.490:1804): pid=15601 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2861" name="start_block" dev="configfs" ino=49192 res=0 errno=0 [ 742.307334][T15609] (syz.0.2861,15609,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 742.387453][ T30] audit: type=1800 audit(1785920905.020:1805): pid=15609 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2861" name="dev" dev="configfs" ino=49194 res=0 errno=0 [ 742.435598][T15609] (syz.0.2861,15609,1):o2hb_region_dev_store:1850 ERROR: status = -5 [ 742.555655][T15526] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.602448][T15526] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.620487][ T30] audit: type=1400 audit(1785920905.630:1806): avc: denied { write } for pid=15581 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.762736][T15526] bridge_slave_0: entered allmulticast mode [ 743.239602][T15526] bridge_slave_0: entered promiscuous mode [ 743.247710][T15526] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.254831][T15526] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.262009][T15526] bridge_slave_1: entered allmulticast mode [ 743.269344][T15526] bridge_slave_1: entered promiscuous mode [ 744.023466][ T4927] Bluetooth: hci1: command tx timeout [ 744.085410][ T6030] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.351767][T15526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.475881][T15526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.699510][T15652] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 744.761885][T15654] FAULT_INJECTION: forcing a failure. [ 744.761885][T15654] name failslab, interval 1, probability 0, space 0, times 0 [ 744.826406][T15654] CPU: 1 UID: 0 PID: 15654 Comm: syz.0.2871 Tainted: G L syzkaller #0 PREEMPT(full) [ 744.826435][T15654] Tainted: [L]=SOFTLOCKUP [ 744.826441][T15654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 744.826450][T15654] Call Trace: [ 744.826456][T15654] [ 744.826462][T15654] dump_stack_lvl+0x100/0x190 [ 744.826493][T15654] should_fail_ex.cold+0x5/0xa [ 744.826514][T15654] should_failslab+0xc2/0x120 [ 744.826537][T15654] __kmalloc_noprof+0xfc/0x820 [ 744.826557][T15654] ? tomoyo_encode2+0xfb/0x3c0 [ 744.826578][T15654] tomoyo_encode2+0xfb/0x3c0 [ 744.826599][T15654] tomoyo_encode+0x29/0x50 [ 744.826614][T15654] tomoyo_realpath_from_path+0x18c/0x690 [ 744.826638][T15654] tomoyo_path_number_perm+0x23c/0x580 [ 744.826661][T15654] ? tomoyo_path_number_perm+0x22e/0x580 [ 744.826686][T15654] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 744.826733][T15654] ? find_held_lock+0x2b/0x80 [ 744.826749][T15654] ? __fget_files+0x215/0x3d0 [ 744.826765][T15654] ? hook_file_ioctl_common+0x140/0x440 [ 744.826784][T15654] ? __fget_files+0x215/0x3d0 [ 744.826808][T15654] ? __fget_files+0x21f/0x3d0 [ 744.826829][T15654] security_file_ioctl+0xd3/0x230 [ 744.826855][T15654] __x64_sys_ioctl+0xb7/0x210 [ 744.826882][T15654] do_syscall_64+0x115/0x870 [ 744.826902][T15654] ? clear_bhb_loop+0x40/0x90 [ 744.826923][T15654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.826940][T15654] RIP: 0033:0x7f33f679e0d9 [ 744.826955][T15654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.826970][T15654] RSP: 002b:00007f33f49f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.826987][T15654] RAX: ffffffffffffffda RBX: 00007f33f6a25fa0 RCX: 00007f33f679e0d9 [ 744.826998][T15654] RDX: 0000200000000240 RSI: 00000000c0445624 RDI: 0000000000000003 [ 744.827009][T15654] RBP: 00007f33f49f6090 R08: 0000000000000000 R09: 0000000000000000 [ 744.827019][T15654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.827028][T15654] R13: 00007f33f6a26038 R14: 00007f33f6a25fa0 R15: 00007ffce13a7ee8 [ 744.827051][T15654] [ 744.831388][T15654] ERROR: Out of memory at tomoyo_realpath_from_path. [ 745.219895][ T6030] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.405325][T15526] team0: Port device team_slave_0 added [ 745.423264][T15526] team0: Port device team_slave_1 added [ 746.083045][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 746.083060][ T30] audit: type=1400 audit(1785920909.090:1808): avc: denied { write } for pid=15640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.118213][ T4927] Bluetooth: hci1: command tx timeout [ 746.160163][T15678] netlink: 'syz.0.2872': attribute type 11 has an invalid length. [ 746.242743][T15680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 747.097836][ T30] audit: type=1400 audit(1785920910.110:1809): avc: denied { write } for pid=15684 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 747.778920][T15526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.824919][T15526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.856196][T15693] Cannot find add_set index 0 as target [ 747.861912][T15526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.064496][ T6030] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.102982][T15526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.135304][T15526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.257170][T15526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.507078][ T6030] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.727983][T15526] hsr_slave_0: entered promiscuous mode [ 748.758506][T15526] hsr_slave_1: entered promiscuous mode [ 748.854161][T15526] debugfs: 'hsr0' already exists in 'hsr' [ 748.887277][T15526] Cannot create hsr debugfs directory [ 749.660868][ T30] audit: type=1400 audit(1785920912.670:1810): avc: denied { read } for pid=15711 comm="syz.6.2882" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 749.746300][ T30] audit: type=1400 audit(1785920912.670:1811): avc: denied { open } for pid=15711 comm="syz.6.2882" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 749.882276][ T30] audit: type=1400 audit(1785920912.670:1812): avc: denied { ioctl } for pid=15711 comm="syz.6.2882" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 749.987330][T15724] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2884'. [ 750.272140][ T6030] bridge_slave_1: left allmulticast mode [ 750.301014][ T6030] bridge_slave_1: left promiscuous mode [ 750.329876][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.500715][ T6030] bridge_slave_0: left allmulticast mode [ 750.526989][ T6030] bridge_slave_0: left promiscuous mode [ 750.550556][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.801223][ T6030] pim6reg: left allmulticast mode [ 751.003784][T15733] netlink: 'syz.4.2885': attribute type 11 has an invalid length. [ 751.439913][ T6030] bond0 (unregistering): left promiscuous mode [ 751.475652][ T6030] bond_slave_0: left promiscuous mode [ 751.491659][ T6030] bond_slave_1: left promiscuous mode [ 751.499920][ T6030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.511150][ T6030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.522822][ T6030] bond0 (unregistering): Released all slaves [ 751.808437][T15751] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2889'. [ 751.862293][T15752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2889'. [ 752.323468][ T6030] IPVS: stopping backup sync thread 6934 ... [ 753.190561][ T30] audit: type=1400 audit(1785920916.200:1813): avc: denied { mounton } for pid=15763 comm="syz.0.2892" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 753.708202][ T30] audit: type=1400 audit(1785920916.710:1814): avc: denied { remount } for pid=15768 comm="syz.4.2893" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 754.889343][ T30] audit: type=1400 audit(1785920917.900:1815): avc: denied { write } for pid=15753 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.108817][ T6030] batadv0: left promiscuous mode [ 755.146151][ T30] audit: type=1400 audit(1785920918.160:1816): avc: denied { write } for pid=15788 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.252150][ T6030] hsr_slave_0: left promiscuous mode [ 755.277167][ T6030] hsr_slave_1: left promiscuous mode [ 755.309929][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.357168][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.393031][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.416573][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.463672][ T6030] veth1_macvtap: left promiscuous mode [ 755.479539][ T6030] veth0_macvtap: left promiscuous mode [ 755.490855][ T6030] veth1_vlan: left promiscuous mode [ 755.502035][ T6030] veth0_vlan: left promiscuous mode [ 756.298882][ T6030] team0 (unregistering): Port device team_slave_1 removed [ 756.316830][ T6030] team0 (unregistering): Port device team_slave_0 removed [ 757.915184][T15817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 757.963393][T15826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2904'. [ 758.080517][ T30] audit: type=1400 audit(1785920921.090:1817): avc: denied { write } for pid=15797 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.170224][T15835] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 758.186016][ T30] audit: type=1400 audit(1785920921.200:1818): avc: denied { block_suspend } for pid=15823 comm="syz.0.2905" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 758.213414][T15835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.270676][T15835] netlink: 'syz.4.2907': attribute type 178 has an invalid length. [ 758.329494][T15835] x_tables: unsorted entry at hook 3 [ 758.416560][ T30] audit: type=1400 audit(1785920921.430:1819): avc: denied { create } for pid=15834 comm="syz.4.2907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 758.535115][ T30] audit: type=1400 audit(1785920921.520:1820): avc: denied { write } for pid=15838 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.731762][T15526] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 758.761682][T15526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 758.805335][T15526] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 758.832628][T15526] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 758.861558][T15526] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 759.029076][T15526] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 759.037076][T15856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2911'. [ 759.045995][T15856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2911'. [ 759.054896][T15856] netlink: 'syz.4.2911': attribute type 7 has an invalid length. [ 759.092293][T15526] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 759.145824][T15526] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 759.188964][ T30] audit: type=1800 audit(1785920922.200:1821): pid=15860 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2913" name="num" dev="configfs" ino=49995 res=0 errno=0 [ 759.253538][ T30] audit: type=1800 audit(1785920922.230:1822): pid=15860 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2913" name="start_block" dev="configfs" ino=49996 res=0 errno=0 [ 759.284237][T15860] (syz.7.2913,15860,1):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 759.305068][T15860] (syz.7.2913,15860,1):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 759.312789][T15860] (syz.7.2913,15860,1):o2hb_region_dev_store:1850 ERROR: status = -5 [ 759.328141][ T30] audit: type=1800 audit(1785920922.270:1823): pid=15860 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2913" name="dev" dev="configfs" ino=49997 res=0 errno=0 [ 759.531986][T15869] netlink: zone id is out of range [ 759.616632][T15526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.636546][T15869] netlink: get zone limit has 4 unknown bytes [ 759.738202][T15526] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.833347][T15856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2911'. [ 759.877555][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.884691][ T6030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.150247][T14869] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.157421][T14869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.224440][T15875] Cannot find del_set index 4 as target [ 760.299202][T15526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 760.360822][ T30] audit: type=1800 audit(1785920923.370:1824): pid=15875 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2916" name="attr_allow_any_host" dev="configfs" ino=48983 res=0 errno=0 [ 760.654097][ T30] audit: type=1400 audit(1785920923.670:1825): avc: denied { read } for pid=15884 comm="syz.6.2920" name="/" dev="configfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 760.684709][ T30] audit: type=1800 audit(1785920923.670:1826): pid=15885 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2920" name="ipv4_address" dev="configfs" ino=48985 res=0 errno=0 [ 760.717611][T15887] jffs2: notice: (15887) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (1 unchecked, 5 orphan) and 41 of xref (0 dead, 37 orphan) found. [ 760.981586][ T30] audit: type=1400 audit(1785920923.990:1827): avc: denied { write } for pid=15886 comm="syz.7.2919" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 761.082501][ T30] audit: type=1400 audit(1785920924.030:1828): avc: denied { write } for pid=15886 comm="syz.7.2919" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 763.671472][T15526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.680899][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 763.680914][ T30] audit: type=1800 audit(1785920926.700:1834): pid=15926 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2928" name="ipv4_address" dev="configfs" ino=49045 res=0 errno=0 [ 763.767892][T15929] jffs2: notice: (15929) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (1 unchecked, 5 orphan) and 42 of xref (0 dead, 38 orphan) found. [ 763.814427][ T30] audit: type=1800 audit(1785920926.730:1835): pid=15926 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2928" name="ipv4_port" dev="configfs" ino=49046 res=0 errno=0 [ 763.846267][T15926] (syz.6.2928,15926,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 763.918650][T15926] (syz.6.2928,15926,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 763.928518][T15526] veth0_vlan: entered promiscuous mode [ 763.935598][ T30] audit: type=1800 audit(1785920926.730:1836): pid=15926 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2928" name="blocks" dev="configfs" ino=49047 res=0 errno=0 [ 763.996350][T15926] (syz.6.2928,15926,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 764.010754][T15526] veth1_vlan: entered promiscuous mode [ 764.070060][ T30] audit: type=1800 audit(1785920926.830:1837): pid=15926 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2928" name="dev" dev="configfs" ino=49063 res=0 errno=0 [ 764.209993][T15526] veth0_macvtap: entered promiscuous mode [ 764.262942][T15526] veth1_macvtap: entered promiscuous mode [ 764.352891][T15526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.484668][T15946] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 764.529773][T15526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.611694][ T30] audit: type=1400 audit(1785920927.620:1838): avc: denied { write } for pid=15927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.743083][ T92] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.762204][ T92] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.875416][ T92] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.890502][ T30] audit: type=1400 audit(1785920927.900:1839): avc: denied { write } for pid=15953 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.226008][T15972] ipt_REJECT: TCP_RESET invalid for non-tcp [ 767.237573][T15738] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.295349][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.327721][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.447030][T15738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.470698][T15738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.629068][ T30] audit: type=1400 audit(1785920930.640:1840): avc: denied { write } for pid=15965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.745015][T15986] webusb: landingPage URL 7 bytes too long for given URL scheme [ 767.752798][ T30] audit: type=1400 audit(1785920930.760:1841): avc: denied { ioctl } for pid=15982 comm="syz.6.2936" path="/69/config/usb_gadget/g1/webusb/landingPage" dev="configfs" ino=50312 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 768.120394][ T30] audit: type=1400 audit(1785920931.130:1842): avc: denied { write } for pid=15989 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.127634][T15992] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 768.183346][T15996] md: could not open device unknown-block(1,0). [ 768.220747][ T30] audit: type=1400 audit(1785920931.230:1843): avc: denied { create } for pid=15990 comm="syz.4.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 768.256863][T15998] md: could not open device unknown-block(1,1). [ 768.303234][T15996] md: could not open device unknown-block(1,2). [ 768.384056][T15998] md: could not open device unknown-block(1,3). [ 768.488341][T16004] jffs2: notice: (16004) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (1 unchecked, 5 orphan) and 42 of xref (0 dead, 38 orphan) found. [ 768.986013][T16030] NILFS (nullb0): couldn't find nilfs on the device [ 768.998587][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 768.998602][ T30] audit: type=1400 audit(1785920932.010:1847): avc: denied { write } for pid=16001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 769.042028][T16032] ipt_REJECT: TCP_RESET invalid for non-tcp [ 769.409956][ T30] audit: type=1400 audit(1785920932.420:1848): avc: denied { write } for pid=16041 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 769.434581][T14151] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 769.612978][T14151] usb 1-1: Using ep0 maxpacket: 8 [ 769.632241][T14151] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.658975][T14151] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 769.756161][T14151] usb 1-1: config 0 interface 0 has no altsetting 0 [ 769.763524][T14151] usb 1-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 769.773894][T14151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.790773][T14151] usb 1-1: config 0 descriptor?? [ 770.010570][T16054] openvswitch: netlink: IP tunnel dst address not specified [ 770.914288][ T30] audit: type=1400 audit(1785920933.920:1849): avc: denied { write } for pid=16045 comm="syz.3.2951" path="socket:[50418]" dev="sockfs" ino=50418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 771.032249][T14151] hid_parser_main: 29 callbacks suppressed [ 771.032273][T14151] logitech-hidpp-device 0003:046D:C088.0003: unknown main item tag 0x3 [ 771.149396][T14151] logitech-hidpp-device 0003:046D:C088.0003: unknown main item tag 0x0 [ 771.186529][T16040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.196739][T14151] logitech-hidpp-device 0003:046D:C088.0003: unknown main item tag 0x0 [ 771.207354][T14151] logitech-hidpp-device 0003:046D:C088.0003: unknown main item tag 0x0 [ 771.217815][T14151] logitech-hidpp-device 0003:046D:C088.0003: unknown main item tag 0x0 [ 771.227687][T14151] logitech-hidpp-device 0003:046D:C088.0003: unknown main item tag 0x0 [ 771.236223][T14151] logitech-hidpp-device 0003:046D:C088.0003: unknown main item tag 0x0 [ 771.404315][T16040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.286749][T14151] logitech-hidpp-device 0003:046D:C088.0003: unknown main item tag 0x2 [ 772.295299][T14151] logitech-hidpp-device 0003:046D:C088.0003: unknown main item tag 0x2 [ 772.303744][T14151] logitech-hidpp-device 0003:046D:C088.0003: unknown main item tag 0x0 [ 772.320216][T14151] logitech-hidpp-device 0003:046D:C088.0003: hidraw0: USB HID v0.02 Device [HID 046d:c088] on usb-dummy_hcd.0-1/input0 [ 772.343336][ T30] audit: type=1800 audit(1785920934.520:1850): pid=16077 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2955" name="file0" dev="overlay" ino=2116 res=0 errno=0 [ 772.724522][ T5736] usb 1-1: USB disconnect, device number 2 [ 772.764158][T16083] netlink: zone id is out of range [ 772.776510][ T30] audit: type=1400 audit(1785920934.820:1851): avc: denied { create } for pid=16068 comm="syz.6.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 772.870967][T16083] netlink: get zone limit has 4 unknown bytes [ 773.012044][ T30] audit: type=1400 audit(1785920935.810:1852): avc: denied { write } for pid=16046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 773.103355][T16095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2957'. [ 773.155696][T16096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2957'. [ 773.956776][T16090] fido_id[16090]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 773.985670][ T30] audit: type=1400 audit(1785920936.990:1853): avc: denied { write } for pid=16097 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 774.191272][ T30] audit: type=1400 audit(1785920937.190:1854): avc: denied { append } for pid=16105 comm="syz.0.2959" name="sg0" dev="devtmpfs" ino=793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 774.295953][ T30] audit: type=1400 audit(1785920937.200:1855): avc: denied { write } for pid=16105 comm="syz.0.2959" lport=33525 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 774.740184][T16114] openvswitch: netlink: IP tunnel dst address not specified [ 775.771312][T14151] IPVS: starting estimator thread 0... [ 776.442982][T16127] IPVS: using max 75 ests per chain, 180000 per kthread [ 776.860262][T16135] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 776.975311][T16135] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 777.046144][T16135] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 777.324607][T16141] FAULT_INJECTION: forcing a failure. [ 777.324607][T16141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.371709][T16141] CPU: 0 UID: 0 PID: 16141 Comm: syz.4.2970 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.371739][T16141] Tainted: [L]=SOFTLOCKUP [ 777.371746][T16141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 777.371756][T16141] Call Trace: [ 777.371762][T16141] [ 777.371769][T16141] dump_stack_lvl+0x100/0x190 [ 777.371798][T16141] should_fail_ex.cold+0x5/0xa [ 777.371819][T16141] strncpy_from_user+0x3b/0x2d0 [ 777.371852][T16141] do_getname+0x78/0x390 [ 777.371877][T16141] do_sys_openat2+0xc7/0x1e0 [ 777.371899][T16141] ? __pfx_do_sys_openat2+0x10/0x10 [ 777.371922][T16141] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 777.371946][T16141] ? __fget_files+0x21f/0x3d0 [ 777.371968][T16141] __x64_sys_openat+0x12d/0x210 [ 777.371990][T16141] ? __pfx___x64_sys_openat+0x10/0x10 [ 777.372010][T16141] ? ksys_write+0x1ac/0x250 [ 777.372033][T16141] do_syscall_64+0x115/0x870 [ 777.372054][T16141] ? clear_bhb_loop+0x40/0x90 [ 777.372074][T16141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.372091][T16141] RIP: 0033:0x7fc15b99e0d9 [ 777.372106][T16141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.372122][T16141] RSP: 002b:00007fc15c929028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 777.372140][T16141] RAX: ffffffffffffffda RBX: 00007fc15bc25fa0 RCX: 00007fc15b99e0d9 [ 777.372152][T16141] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 777.372163][T16141] RBP: 00007fc15c929090 R08: 0000000000000000 R09: 0000000000000000 [ 777.372173][T16141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.372182][T16141] R13: 00007fc15bc26038 R14: 00007fc15bc25fa0 R15: 00007ffdd56bcbf8 [ 777.372205][T16141] [ 779.419982][T16165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2978'. [ 779.472606][T16166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2978'. [ 779.772697][T16169] Cannot find add_set index 0 as target [ 779.889001][ T30] audit: type=1800 audit(1785920942.890:1856): pid=16169 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2980" name="attr_allow_any_host" dev="configfs" ino=50762 res=0 errno=0 [ 780.127330][T16176] netlink: 'syz.0.2982': attribute type 21 has an invalid length. [ 780.153101][T16176] netlink: 'syz.0.2982': attribute type 6 has an invalid length. [ 780.174991][T16178] FAULT_INJECTION: forcing a failure. [ 780.174991][T16178] name failslab, interval 1, probability 0, space 0, times 0 [ 780.177083][T16176] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2982'. [ 780.204621][T16178] CPU: 0 UID: 0 PID: 16178 Comm: syz.4.2983 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.204650][T16178] Tainted: [L]=SOFTLOCKUP [ 780.204661][T16178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 780.204672][T16178] Call Trace: [ 780.204678][T16178] [ 780.204685][T16178] dump_stack_lvl+0x100/0x190 [ 780.204712][T16178] should_fail_ex.cold+0x5/0xa [ 780.204735][T16178] should_failslab+0xc2/0x120 [ 780.204757][T16178] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 780.204779][T16178] ? __alloc_skb+0x5b7/0x710 [ 780.204800][T16178] ? __alloc_skb+0x140/0x710 [ 780.204824][T16178] __alloc_skb+0x140/0x710 [ 780.204843][T16178] ? __alloc_skb+0x5b7/0x710 [ 780.204863][T16178] ? __pfx___alloc_skb+0x10/0x10 [ 780.204891][T16178] netlink_alloc_large_skb+0x69/0x150 [ 780.204910][T16178] netlink_sendmsg+0x680/0xda0 [ 780.204931][T16178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 780.204951][T16178] ? selinux_socket_sendmsg+0x198/0x2f0 [ 780.204980][T16178] ____sys_sendmsg+0xa4d/0xbe0 [ 780.205004][T16178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 780.205024][T16178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 780.205060][T16178] ___sys_sendmsg+0x190/0x1e0 [ 780.205080][T16178] ? __pfx____sys_sendmsg+0x10/0x10 [ 780.205095][T16178] ? __lock_acquire+0x49f/0x1a40 [ 780.205116][T16178] ? get_pid_task+0x106/0x250 [ 780.205154][T16178] __sys_sendmsg+0x160/0x210 [ 780.205178][T16178] ? __pfx___sys_sendmsg+0x10/0x10 [ 780.205214][T16178] do_syscall_64+0x115/0x870 [ 780.205235][T16178] ? clear_bhb_loop+0x40/0x90 [ 780.205257][T16178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.205274][T16178] RIP: 0033:0x7fc15b99e0d9 [ 780.205288][T16178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.205304][T16178] RSP: 002b:00007fc15c929028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 780.205322][T16178] RAX: ffffffffffffffda RBX: 00007fc15bc25fa0 RCX: 00007fc15b99e0d9 [ 780.205333][T16178] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 780.205344][T16178] RBP: 00007fc15c929090 R08: 0000000000000000 R09: 0000000000000000 [ 780.205354][T16178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.205365][T16178] R13: 00007fc15bc26038 R14: 00007fc15bc25fa0 R15: 00007ffdd56bcbf8 [ 780.205387][T16178] [ 780.290861][ T30] audit: type=1400 audit(1785920943.290:1857): avc: denied { read write } for pid=16173 comm="syz.0.2982" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 780.772938][T16194] FAULT_INJECTION: forcing a failure. [ 780.772938][T16194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.821773][T16194] CPU: 1 UID: 0 PID: 16194 Comm: syz.3.2985 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.821805][T16194] Tainted: [L]=SOFTLOCKUP [ 780.821811][T16194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 780.821828][T16194] Call Trace: [ 780.821834][T16194] [ 780.821841][T16194] dump_stack_lvl+0x100/0x190 [ 780.821868][T16194] should_fail_ex.cold+0x5/0xa [ 780.821890][T16194] strncpy_from_user+0x3b/0x2d0 [ 780.821916][T16194] do_getname+0x78/0x390 [ 780.821943][T16194] do_sys_openat2+0xc7/0x1e0 [ 780.821965][T16194] ? __pfx_do_sys_openat2+0x10/0x10 [ 780.821986][T16194] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 780.822009][T16194] ? __fget_files+0x21f/0x3d0 [ 780.822031][T16194] __x64_sys_openat+0x12d/0x210 [ 780.822052][T16194] ? __pfx___x64_sys_openat+0x10/0x10 [ 780.822072][T16194] ? ksys_write+0x1ac/0x250 [ 780.822095][T16194] do_syscall_64+0x115/0x870 [ 780.822115][T16194] ? clear_bhb_loop+0x40/0x90 [ 780.822135][T16194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.822152][T16194] RIP: 0033:0x7fe37739e0d9 [ 780.822166][T16194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.822182][T16194] RSP: 002b:00007fe3782d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 780.822199][T16194] RAX: ffffffffffffffda RBX: 00007fe377625fa0 RCX: 00007fe37739e0d9 [ 780.822209][T16194] RDX: 0000000000000002 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 780.822219][T16194] RBP: 00007fe3782d0090 R08: 0000000000000000 R09: 0000000000000000 [ 780.822230][T16194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.822239][T16194] R13: 00007fe377626038 R14: 00007fe377625fa0 R15: 00007fff5904be68 [ 780.822260][T16194] [ 781.062978][ T30] audit: type=1400 audit(1785920943.440:1858): avc: denied { open } for pid=16173 comm="syz.0.2982" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 781.261692][ T30] audit: type=1400 audit(1785920943.750:1859): avc: denied { write } for pid=16171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.296994][T16196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 781.507795][ T30] audit: type=1400 audit(1785920943.820:1860): avc: denied { create } for pid=16195 comm="syz.0.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 781.654470][ T30] audit: type=1400 audit(1785920943.820:1861): avc: denied { setopt } for pid=16195 comm="syz.0.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 782.134975][ T30] audit: type=1400 audit(1785920944.480:1862): avc: denied { write } for pid=16201 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.300607][ T30] audit: type=1400 audit(1785920945.310:1863): avc: denied { getopt } for pid=16220 comm="syz.7.2992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 782.400012][ T30] audit: type=1400 audit(1785920945.310:1864): avc: denied { read } for pid=16220 comm="syz.7.2992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 782.576957][ T30] audit: type=1800 audit(1785920945.590:1865): pid=16233 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2994" name="buffered_io" dev="configfs" ino=50937 res=0 errno=0 [ 782.783724][T16243] jffs2: notice: (16243) jffs2_build_xattr_subsystem: complete building xattr subsystem, 7 of xdatum (1 unchecked, 6 orphan) and 43 of xref (0 dead, 39 orphan) found. [ 783.529557][T16260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 784.027946][T16270] FAULT_INJECTION: forcing a failure. [ 784.027946][T16270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.119565][T16274] openvswitch: netlink: IP tunnel dst address not specified [ 784.141137][T16272] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_virt_wifi, syncid = 4, id = 0 [ 784.151731][T16270] CPU: 1 UID: 0 PID: 16270 Comm: syz.0.3006 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.151760][T16270] Tainted: [L]=SOFTLOCKUP [ 784.151767][T16270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 784.151778][T16270] Call Trace: [ 784.151784][T16270] [ 784.151791][T16270] dump_stack_lvl+0x100/0x190 [ 784.151819][T16270] should_fail_ex.cold+0x5/0xa [ 784.151841][T16270] _copy_to_user+0x32/0xd0 [ 784.151868][T16270] simple_read_from_buffer+0xcb/0x170 [ 784.151889][T16270] proc_fail_nth_read+0x1af/0x230 [ 784.151918][T16270] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 784.151947][T16270] ? rw_verify_area+0xce/0x6d0 [ 784.151972][T16270] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 784.151999][T16270] vfs_read+0x1e4/0xb40 [ 784.152030][T16270] ? __pfx_vfs_read+0x10/0x10 [ 784.152056][T16270] ? __fget_files+0x215/0x3d0 [ 784.152080][T16270] ? __fget_files+0x21f/0x3d0 [ 784.152106][T16270] ksys_read+0x12a/0x250 [ 784.152133][T16270] ? __pfx_ksys_read+0x10/0x10 [ 784.152168][T16270] do_syscall_64+0x115/0x870 [ 784.152190][T16270] ? clear_bhb_loop+0x40/0x90 [ 784.152213][T16270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.152231][T16270] RIP: 0033:0x7f33f675e90e [ 784.152246][T16270] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 784.152263][T16270] RSP: 002b:00007f33f49f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 784.152281][T16270] RAX: ffffffffffffffda RBX: 00007f33f49f66c0 RCX: 00007f33f675e90e [ 784.152293][T16270] RDX: 000000000000000f RSI: 00007f33f49f60a0 RDI: 0000000000000006 [ 784.152303][T16270] RBP: 00007f33f49f6090 R08: 0000000000000000 R09: 0000000000000000 [ 784.152314][T16270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.152324][T16270] R13: 00007f33f6a26038 R14: 00007f33f6a25fa0 R15: 00007ffce13a7ee8 [ 784.152357][T16270] [ 785.144041][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 785.144057][ T30] audit: type=1800 audit(1785920948.160:1884): pid=16281 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3007" name="buffered_io" dev="configfs" ino=51051 res=0 errno=0 [ 785.338581][T16290] netlink: 'syz.0.3009': attribute type 5 has an invalid length. [ 785.898639][ T29] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 786.268044][ T29] usb 4-1: not running at top speed; connect to a high speed hub [ 786.315301][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 786.371253][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 786.538109][ T29] usb 4-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 786.630665][T16306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3014'. [ 786.682791][T16307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3014'. [ 786.910224][ T29] usb 4-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 786.934750][ T29] usb 4-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 786.959374][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.986583][ T29] usb 4-1: Product: င [ 787.003124][ T29] usb 4-1: Manufacturer: Ї [ 787.017722][ T29] usb 4-1: SerialNumber: 챍䶁敏ꔎཎ鸮퐴蘌뺔쓭鄁ਞ䥀ⳁ뷠髐ᓒ뛨㜫뾎坱鰣蘔⩶諹붢掙㓪㢦蛆瀼㴐䵤ૃ킭軩쏿⎗碮冖蕝솫좐㉦㶝銜୷紐࿧祹㍡뷚횏쩐裘睆鿚冃휳昢냐珒ᱺѐस倳甿鰯㲨颳⣞됒㿿ꑅා꧒Ⴊ㙻뿎皊稳ം鵟퇧월﫣큮幾袃筡ꞕ栵좏麁ｌ솶뺾셂巹稿Ⴉ㤋 [ 787.166915][T16312] tmpfs: Unknown parameter 'grpquo' [ 787.350415][T16283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.410421][T16283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.489631][ T30] audit: type=1400 audit(1785920950.500:1885): avc: denied { map } for pid=16313 comm="syz.0.3016" path="/dev/video4" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 787.624927][T16322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.640998][T16322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.700429][T16322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.736915][T16322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.150781][T16328] gretap0: entered promiscuous mode [ 789.101838][ T29] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 789.144544][T16335] FAULT_INJECTION: forcing a failure. [ 789.144544][T16335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.177169][T16335] CPU: 0 UID: 0 PID: 16335 Comm: syz.4.3020 Tainted: G L syzkaller #0 PREEMPT(full) [ 789.177195][T16335] Tainted: [L]=SOFTLOCKUP [ 789.177200][T16335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 789.177209][T16335] Call Trace: [ 789.177215][T16335] [ 789.177222][T16335] dump_stack_lvl+0x100/0x190 [ 789.177250][T16335] should_fail_ex.cold+0x5/0xa [ 789.177278][T16335] _copy_from_user+0x2e/0xd0 [ 789.177305][T16335] kstrtouint_from_user+0xd6/0x1d0 [ 789.177324][T16335] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 789.177343][T16335] ? __lock_acquire+0x49f/0x1a40 [ 789.177375][T16335] proc_fail_nth_write+0x83/0x220 [ 789.177403][T16335] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 789.177438][T16335] vfs_write+0x2aa/0x1050 [ 789.177466][T16335] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 789.177495][T16335] ? __pfx_vfs_write+0x10/0x10 [ 789.177516][T16335] ? __fget_files+0x215/0x3d0 [ 789.177534][T16335] ? __fget_files+0x21f/0x3d0 [ 789.177553][T16335] ksys_write+0x12a/0x250 [ 789.177565][T16335] ? __pfx_ksys_write+0x10/0x10 [ 789.177584][T16335] do_syscall_64+0x115/0x870 [ 789.177602][T16335] ? clear_bhb_loop+0x40/0x90 [ 789.177619][T16335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.177634][T16335] RIP: 0033:0x7fc15b95e90e [ 789.177646][T16335] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 789.177659][T16335] RSP: 002b:00007fc15c928fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 789.177674][T16335] RAX: ffffffffffffffda RBX: 00007fc15c9296c0 RCX: 00007fc15b95e90e [ 789.177683][T16335] RDX: 0000000000000001 RSI: 00007fc15c9290a0 RDI: 0000000000000003 [ 789.177690][T16335] RBP: 00007fc15c929090 R08: 0000000000000000 R09: 0000000000000000 [ 789.177699][T16335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.177706][T16335] R13: 00007fc15bc26038 R14: 00007fc15bc25fa0 R15: 00007ffdd56bcbf8 [ 789.177726][T16335] [ 789.519499][ T30] audit: type=1800 audit(1785920952.520:1886): pid=16337 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3021" name="buffered_io" dev="configfs" ino=51172 res=0 errno=0 [ 789.628536][T16343] netlink: zone id is out of range [ 789.656312][ T29] usb 4-1: USB disconnect, device number 10 [ 789.743853][T16347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3024'. [ 789.760210][T16343] netlink: get zone limit has 4 unknown bytes [ 789.769385][T16347] veth1_virt_wifi: Device is already in use. [ 789.786541][ T30] audit: type=1326 audit(1785920952.740:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16340 comm="syz.0.3024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f679e0d9 code=0x7ffc0000 [ 789.794069][T16348] ip_tables: iptables: counters copy to user failed while replacing table [ 790.256476][ T30] audit: type=1326 audit(1785920952.740:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16340 comm="syz.0.3024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f679e0d9 code=0x7ffc0000 [ 790.435269][T14700] udevd[14700]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 790.503505][ T30] audit: type=1326 audit(1785920952.740:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16340 comm="syz.0.3024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f679e0d9 code=0x7ffc0000 [ 790.739706][ T30] audit: type=1326 audit(1785920952.750:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16340 comm="syz.0.3024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f679e0d9 code=0x7ffc0000 [ 791.187377][ T30] audit: type=1326 audit(1785920952.750:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16340 comm="syz.0.3024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f33f679e0d9 code=0x7ffc0000 [ 791.214214][ T30] audit: type=1326 audit(1785920952.750:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16340 comm="syz.0.3024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f679e0d9 code=0x7ffc0000 [ 791.314413][T16362] scsi_nl_rcv_msg: Msgtype 1 failed - err -3 [ 791.329469][ T30] audit: type=1326 audit(1785920952.750:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16340 comm="syz.0.3024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f679e0d9 code=0x7ffc0000 [ 791.421040][T16365] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3026'. [ 791.470701][T16366] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3026'. [ 791.956819][ T30] audit: type=1326 audit(1785920952.750:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16340 comm="syz.0.3024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f679e0d9 code=0x7ffc0000 [ 792.306415][ T30] audit: type=1326 audit(1785920952.750:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16340 comm="syz.0.3024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f679e0d9 code=0x7ffc0000 [ 792.728999][ T30] audit: type=1326 audit(1785920952.750:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16340 comm="syz.0.3024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33f679e0d9 code=0x7ffc0000 [ 792.758000][ T30] audit: type=1326 audit(1785920952.750:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16340 comm="syz.0.3024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f679e0d9 code=0x7ffc0000 [ 792.805024][T16372] jffs2: notice: (16372) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (1 unchecked, 7 orphan) and 44 of xref (0 dead, 40 orphan) found. [ 793.140790][T16384] FAULT_INJECTION: forcing a failure. [ 793.140790][T16384] name failslab, interval 1, probability 0, space 0, times 0 [ 793.294236][T16384] CPU: 1 UID: 0 PID: 16384 Comm: syz.4.3032 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.294270][T16384] Tainted: [L]=SOFTLOCKUP [ 793.294277][T16384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 793.294287][T16384] Call Trace: [ 793.294292][T16384] [ 793.294299][T16384] dump_stack_lvl+0x100/0x190 [ 793.294327][T16384] should_fail_ex.cold+0x5/0xa [ 793.294351][T16384] should_failslab+0xc2/0x120 [ 793.294375][T16384] __kvmalloc_node_noprof+0x116/0x970 [ 793.294399][T16384] ? __do_sys_add_key+0x244/0x460 [ 793.294426][T16384] __do_sys_add_key+0x244/0x460 [ 793.294449][T16384] ? __pfx___do_sys_add_key+0x10/0x10 [ 793.294470][T16384] ? ksys_write+0x1ac/0x250 [ 793.294495][T16384] do_syscall_64+0x115/0x870 [ 793.294517][T16384] ? clear_bhb_loop+0x40/0x90 [ 793.294540][T16384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.294558][T16384] RIP: 0033:0x7fc15b99e0d9 [ 793.294573][T16384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.294590][T16384] RSP: 002b:00007fc15c908028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 793.294608][T16384] RAX: ffffffffffffffda RBX: 00007fc15bc26090 RCX: 00007fc15b99e0d9 [ 793.294619][T16384] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 793.294630][T16384] RBP: 00007fc15c908090 R08: 0000000000000000 R09: 0000000000000000 [ 793.294641][T16384] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000001 [ 793.294651][T16384] R13: 00007fc15bc26128 R14: 00007fc15bc26090 R15: 00007ffdd56bcbf8 [ 793.294675][T16384] [ 793.589588][T16388] lo: entered allmulticast mode [ 793.831840][T16395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3035'. [ 794.368622][T16395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.633743][T16403] sctp: [Deprecated]: syz.0.3037 (pid 16403) Use of int in max_burst socket option. [ 794.633743][T16403] Use struct sctp_assoc_value instead [ 794.903379][T16380] Bluetooth: hci6: command 0x0406 tx timeout [ 794.914127][T16380] Bluetooth: hci3: command 0x0406 tx timeout [ 795.242072][T16414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3040'. [ 795.294600][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3040'. [ 795.396981][T16416] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 796.762967][ T5795] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 797.197057][ T5795] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 797.842044][ T5795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.860529][ T5795] usb 1-1: Product: syz [ 797.870598][ T5795] usb 1-1: Manufacturer: syz [ 797.927927][ T5795] usb 1-1: SerialNumber: syz [ 798.178497][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 798.218829][T16437] Invalid source name [ 799.134004][ T5795] usb 1-1: USB disconnect, device number 3 [ 799.357299][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 800.139246][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 800.164879][ T10] ath9k_htc: Failed to initialize the device [ 800.173660][ T5795] usb 1-1: ath9k_htc: USB layer deinitialized [ 801.861393][T16471] ipt_REJECT: TCP_RESET invalid for non-tcp [ 802.549564][T16479] ipt_REJECT: TCP_RESET invalid for non-tcp [ 802.807077][T16488] Cannot find add_set index 0 as target [ 802.856493][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 802.856509][ T30] audit: type=1400 audit(1785920965.870:1960): avc: denied { create } for pid=16482 comm="syz.7.3057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 803.075487][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.082066][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 804.457719][ T30] audit: type=1400 audit(1785920967.470:1961): avc: denied { write } for pid=16490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.661459][ T30] audit: type=1400 audit(1785920967.670:1962): avc: denied { write } for pid=16531 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.900058][T16532] netlink: zone id is out of range [ 804.913483][T16532] netlink: get zone limit has 4 unknown bytes [ 804.978169][T16529] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.081311][T16532] ip_tables: iptables: counters copy to user failed while replacing table [ 805.195561][T16540] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3065'. [ 805.391810][T16529] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.581360][T16529] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.683006][ T5690] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 805.751874][T16529] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.879196][ T5690] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.910506][ T5690] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 805.979389][ T5690] usb 7-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 806.009159][ T5690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.031692][ T5690] usb 7-1: Product: syz [ 806.050969][ T5690] usb 7-1: Manufacturer: syz [ 806.064794][ T5690] usb 7-1: SerialNumber: syz [ 806.123623][ T92] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.192022][ T30] audit: type=1400 audit(1785920969.200:1963): avc: denied { write } for pid=16541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.223388][ T5690] usb-storage 7-1:1.0: USB Mass Storage device detected [ 806.726466][ T5690] usb-storage 7-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 806.737464][T16547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.755665][T16547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.811844][ T5690] usb 7-1: USB disconnect, device number 4 [ 806.874766][ T92] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.032943][ T92] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.120078][ T30] audit: type=1400 audit(1785920970.130:1964): avc: denied { write } for pid=16563 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 807.123004][ T5843] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.738912][T16569] CIFS: bad ip= option (\:1) [ 808.808643][T16594] jffs2: notice: (16594) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (1 unchecked, 7 orphan) and 44 of xref (0 dead, 40 orphan) found. [ 808.879086][ T30] audit: type=1400 audit(1785920971.890:1965): avc: denied { map } for pid=16591 comm="syz.4.3072" path="socket:[52922]" dev="sockfs" ino=52922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 809.063672][ T30] audit: type=1400 audit(1785920971.930:1966): avc: denied { write } for pid=16573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 809.115786][ T30] audit: type=1400 audit(1785920972.130:1967): avc: denied { write } for pid=16602 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 809.179124][T16605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 810.636210][ T5614] Bluetooth: hci7: command 0x0406 tx timeout [ 811.516897][ T30] audit: type=1400 audit(1785920974.530:1968): avc: denied { write } for pid=16610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 812.174541][ T30] audit: type=1400 audit(1785920975.180:1969): avc: denied { watch } for pid=16630 comm="syz.4.3079" path="/405/net_prio.prioidx" dev="tmpfs" ino=2297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 812.231432][ T4927] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 812.250157][ T30] audit: type=1400 audit(1785920975.180:1970): avc: denied { watch_sb watch_reads } for pid=16630 comm="syz.4.3079" path="/405/net_prio.prioidx" dev="tmpfs" ino=2297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 812.317098][T16644] batman_adv: batadv0: Adding interface: dummy0 [ 812.341273][T16644] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.366892][ T30] audit: type=1400 audit(1785920975.200:1971): avc: denied { write } for pid=16640 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 812.453662][T16644] batman_adv: batadv0: Interface activated: dummy0 [ 812.657502][T16638] batadv0: mtu less than device minimum [ 812.744129][T16638] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 812.755471][T16638] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 812.766318][T16638] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 812.777165][T16638] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 812.787966][T16638] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 812.798765][T16638] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 812.809575][T16638] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 812.820362][T16638] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 812.831150][T16638] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 813.021530][ T30] audit: type=1400 audit(1785920976.030:1972): avc: denied { create } for pid=16657 comm="syz.0.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 813.084920][ T30] audit: type=1400 audit(1785920976.060:1973): avc: denied { setopt } for pid=16657 comm="syz.0.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 813.173676][ T30] audit: type=1400 audit(1785920976.150:1974): avc: denied { write } for pid=16657 comm="syz.0.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 813.985710][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 813.985734][ T30] audit: type=1400 audit(1785920977.000:1976): avc: denied { listen } for pid=16670 comm="syz.6.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 814.726960][ T30] audit: type=1400 audit(1785920977.030:1977): avc: denied { accept } for pid=16670 comm="syz.6.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 815.806097][ T29] libceph: connect (1)[c::]:6789 error -101 [ 815.812673][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 815.912046][T16692] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3091'. [ 816.264009][ T29] libceph: connect (1)[c::]:6789 error -101 [ 816.264106][ T4927] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 816.270057][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 816.286297][ T4927] Bluetooth: hci2: Injecting HCI hardware error event [ 816.295037][ T5614] Bluetooth: hci2: hardware error 0x00 [ 816.463084][T16684] ceph: No mds server is up or the cluster is laggy [ 817.164814][ T31] INFO: task syz.2.2502:14209 blocked for more than 143 seconds. [ 817.280293][ T31] Tainted: G L syzkaller #0 [ 817.312390][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 817.853451][ T31] task:syz.2.2502 state:D stack:25112 pid:14209 tgid:14208 ppid:5610 task_flags:0x400140 flags:0x00080002 [ 817.882901][ T31] Call Trace: [ 817.897764][ T31] [ 817.925689][ T31] __schedule+0x125c/0x6730 [ 817.935966][ T31] ? __pfx___schedule+0x10/0x10 [ 817.960497][ T31] ? find_held_lock+0x2b/0x80 [ 818.011495][ T31] ? schedule+0x225/0x2c0 [ 818.056783][ T31] schedule+0xdd/0x2c0 [ 818.073044][ T31] schedule_preempt_disabled+0x13/0x30 [ 818.091728][ T31] __mutex_lock+0xccc/0x1bd0 [ 818.109594][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 818.133250][ T31] ? __sys_sendmsg+0x160/0x210 [ 818.156134][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.176033][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 818.188460][ T31] ? __asan_memset+0x23/0x50 [ 818.197566][ T31] ? __nla_validate_parse+0x1e7/0x28b0 [ 818.211781][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 818.225531][ T31] nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 818.242405][ T31] ? rcu_is_watching+0x12/0xc0 [ 818.247469][ T31] ? trace_kmalloc+0xeb/0x110 [ 818.256568][ T31] ? __kasan_kmalloc+0xaa/0xb0 [ 818.267032][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 818.280460][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 818.295833][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 818.322887][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 818.328533][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 818.345197][ T5614] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 818.356807][ T31] ? bpf_lsm_capable+0x9/0x10 [ 818.369362][ T31] ? security_capable+0x80/0x260 [ 818.381497][ T31] genl_rcv_msg+0x560/0x800 [ 818.386424][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 818.391475][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 818.398034][ T31] ? __lock_acquire+0x49f/0x1a40 [ 818.403165][ T31] netlink_rcv_skb+0x159/0x420 [ 818.408220][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 818.414143][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 818.419512][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 818.446920][ T31] genl_rcv+0x28/0x40 [ 818.459813][ T31] netlink_unicast+0x585/0x850 [ 818.474177][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 818.491557][ T31] netlink_sendmsg+0x8b0/0xda0 [ 818.506802][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.527925][ T31] ? selinux_socket_sendmsg+0x198/0x2f0 [ 818.551785][ T31] ____sys_sendmsg+0xa4d/0xbe0 [ 818.573930][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.592348][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 818.616059][ T31] ? plist_check_list+0x1b8/0x280 [ 818.641389][ T31] ? plist_del+0x308/0x510 [ 818.652721][ T31] ___sys_sendmsg+0x190/0x1e0 [ 818.667702][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 818.685499][ T31] ? __lock_acquire+0x49f/0x1a40 [ 818.701963][ T31] ? futex_wake+0x220/0x5e0 [ 818.716437][ T31] __sys_sendmsg+0x160/0x210 [ 818.730604][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 818.746019][ T31] do_syscall_64+0x115/0x870 [ 818.759059][ T31] ? clear_bhb_loop+0x40/0x90 [ 818.775380][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.794377][ T31] RIP: 0033:0x7fe67179e0d9 [ 818.806564][ T31] RSP: 002b:00007fe67266e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 818.835902][ T31] RAX: ffffffffffffffda RBX: 00007fe671a25fa0 RCX: 00007fe67179e0d9 [ 818.860610][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 000000000000000a [ 818.882905][ T30] audit: type=1400 audit(1785920981.870:1978): avc: denied { write } for pid=16718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.919195][ T31] RBP: 00007fe671835024 R08: 0000000000000000 R09: 0000000000000000 [ 818.955340][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.979164][ T31] R13: 00007fe671a26038 R14: 00007fe671a25fa0 R15: 00007fffe4179db8 [ 819.013596][ T31] [ 819.031722][ T31] [ 819.031722][ T31] Showing all locks held in the system: [ 819.132184][ T31] 4 locks held by kworker/0:1/10: [ 819.174003][ T31] #0: ffff88801bc72d40 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 819.234556][ T31] #1: ffffc900000f7d08 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 819.254669][ T30] audit: type=1400 audit(1785920982.260:1979): avc: denied { write } for pid=16731 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.307115][ T31] #2: ffffffff8ebe75a8 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x77/0x20f0 [ 819.335437][ T31] #3: ffffffff8ebf3ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 819.356686][ T31] 1 lock held by khungtaskd/31: [ 819.377018][ T31] #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 819.387926][ T31] 5 locks held by kworker/u8:3/48: [ 819.393712][ T31] #0: ffff88801ce90940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 819.404467][ T31] #1: ffffc90000b97d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 819.414707][ T31] #2: ffffffff90a876c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 819.424272][ T31] #3: ffffffff90aa02c0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 819.433807][ T31] #4: ffffffff8ebf3ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 819.444145][ T31] 2 locks held by getty/5367: [ 819.448871][ T31] #0: ffff88803778e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 819.459761][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 819.471415][ T31] 2 locks held by syz.5.2501/14202: [ 819.490376][ T31] #0: ffffffff90b4efe8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 819.507524][ T31] #1: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 819.528649][ T31] 2 locks held by syz.2.2502/14209: [ 819.539540][ T31] #0: ffffffff90b4efe8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 819.559109][ T31] #1: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 819.591200][ T31] 7 locks held by kworker/u8:7/15738: [ 819.605466][ T31] #0: ffff8880216a0940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 819.627541][ T31] #1: ffffc900064bfd08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 819.646508][ T31] #2: ffff888037b380d8 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 819.658538][ T31] #3: ffff888037b46c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 819.669202][ T31] #4: ffffffff9b94bc10 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x144/0x4b0 [ 819.680225][ T31] #5: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: mod_memcg_lruvec_state+0xdf/0x280 [ 819.690546][ T31] #6: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: mod_memcg_lruvec_state+0xdf/0x280 [ 819.701125][ T31] 2 locks held by syz.7.3096/16702: [ 819.707294][ T31] #0: ffff888056a2fb00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 819.718235][ T31] #1: ffffffff90aa02c0 (rtnl_mutex){+.+.}-{4:4}, at: ip_mc_drop_socket+0x96/0x290 [ 819.727848][ T31] [ 819.730265][ T31] ============================================= [ 819.730265][ T31] [ 819.769658][ T31] NMI backtrace for cpu 1 [ 819.769678][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 819.769702][ T31] Tainted: [L]=SOFTLOCKUP [ 819.769708][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 819.769717][ T31] Call Trace: [ 819.769723][ T31] [ 819.769730][ T31] dump_stack_lvl+0x100/0x190 [ 819.769757][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 819.769780][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 819.769803][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 819.769823][ T31] sys_info+0x141/0x190 [ 819.769848][ T31] watchdog+0xcb1/0x1030 [ 819.769873][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 819.769893][ T31] ? __pfx_watchdog+0x10/0x10 [ 819.769913][ T31] ? __kthread_parkme+0x18c/0x230 [ 819.769939][ T31] ? kthread+0x13a/0x450 [ 819.769953][ T31] ? __pfx_watchdog+0x10/0x10 [ 819.769971][ T31] kthread+0x370/0x450 [ 819.769986][ T31] ? __pfx_kthread+0x10/0x10 [ 819.770004][ T31] ret_from_fork+0x72b/0xd50 [ 819.770029][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 819.770053][ T31] ? __switch_to+0x800/0x10f0 [ 819.770071][ T31] ? __pfx_kthread+0x10/0x10 [ 819.770088][ T31] ret_from_fork_asm+0x1a/0x30 [ 819.770122][ T31] [ 819.770143][ T31] Sending NMI from CPU 1 to CPUs 0: [ 819.903478][ C0] NMI backtrace for cpu 0 [ 819.903493][ C0] CPU: 0 UID: 0 PID: 15738 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 819.903513][ C0] Tainted: [L]=SOFTLOCKUP [ 819.903518][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 819.903526][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 819.903549][ C0] RIP: 0010:chacha_permute+0x3d3/0x6e0 [ 819.903570][ C0] Code: 00 00 00 89 5c 24 28 8b 5c 24 30 89 44 24 18 4c 89 7c 24 38 44 8b 7c 24 34 e8 49 10 eb fc 8b 44 24 24 8b 7c 24 0c 8b 54 24 20 <8b> 74 24 04 01 c3 44 8b 5c 24 10 44 8b 44 24 08 01 d7 41 31 dd 8b [ 819.903583][ C0] RSP: 0018:ffffc900064bf7a8 EFLAGS: 00000093 [ 819.903594][ C0] RAX: 00000000b97f1562 RBX: 00000000e3bffb44 RCX: ffffffff851f565a [ 819.903603][ C0] RDX: 00000000c613c8a0 RSI: ffffffff851f5497 RDI: 0000000016d35aae [ 819.903612][ C0] RBP: 00000000eb32d2d8 R08: 0000000000000004 R09: 0000000000000014 [ 819.903620][ C0] R10: 0000000000000012 R11: 00000000ba9da8cf R12: 0000000080d47bce [ 819.903629][ C0] R13: 0000000076711617 R14: 00000000f86ac6fc R15: 00000000b791eeab [ 819.903638][ C0] FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 819.903653][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 819.903662][ C0] CR2: 00002000002e2000 CR3: 000000002a7d7000 CR4: 00000000003526f0 [ 819.903671][ C0] Call Trace: [ 819.903675][ C0] [ 819.903684][ C0] chacha_block_generic+0x132/0x360 [ 819.903704][ C0] ? __pfx_chacha_block_generic+0x10/0x10 [ 819.903726][ C0] ? __lock_acquire+0x49f/0x1a40 [ 819.903743][ C0] crng_fast_key_erasure+0x1a5/0x260 [ 819.903767][ C0] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 819.903793][ C0] ? crng_make_state+0x4a7/0x6c0 [ 819.903813][ C0] crng_make_state+0x1c2/0x6c0 [ 819.903833][ C0] _get_random_bytes+0x11c/0x220 [ 819.903852][ C0] ? __pfx__get_random_bytes+0x10/0x10 [ 819.903872][ C0] ? __asan_memset+0x23/0x50 [ 819.903888][ C0] ? do_csum+0x1e5/0x380 [ 819.903904][ C0] nsim_dev_trap_report_work+0x7aa/0xd20 [ 819.903925][ C0] process_one_work+0xa23/0x1940 [ 819.903944][ C0] ? __pfx_process_one_work+0x10/0x10 [ 819.903960][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 819.903978][ C0] worker_thread+0x5ef/0xe50 [ 819.903994][ C0] ? __pfx_worker_thread+0x10/0x10 [ 819.904008][ C0] ? kthread+0x13a/0x450 [ 819.904021][ C0] ? __pfx_worker_thread+0x10/0x10 [ 819.904034][ C0] kthread+0x370/0x450 [ 819.904046][ C0] ? __pfx_kthread+0x10/0x10 [ 819.904059][ C0] ret_from_fork+0x72b/0xd50 [ 819.904077][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 819.904095][ C0] ? __switch_to+0x800/0x10f0 [ 819.904109][ C0] ? __pfx_kthread+0x10/0x10 [ 819.904122][ C0] ret_from_fork_asm+0x1a/0x30 [ 819.904146][ C0] [ 820.177999][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 820.184854][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 820.195525][ T31] Tainted: [L]=SOFTLOCKUP [ 820.199837][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 820.209876][ T31] Call Trace: [ 820.213149][ T31] [ 820.216068][ T31] dump_stack_lvl+0x100/0x190 [ 820.220743][ T31] vpanic+0x552/0x970 [ 820.224714][ T31] ? __pfx_vpanic+0x10/0x10 [ 820.229208][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 820.235354][ T31] panic+0xd1/0xe0 [ 820.239063][ T31] ? __pfx_panic+0x10/0x10 [ 820.243471][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 820.249612][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 820.255755][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 820.261899][ T31] ? watchdog.cold+0x1ec/0x234 [ 820.266652][ T31] ? watchdog+0xcc1/0x1030 [ 820.271060][ T31] watchdog.cold+0x1fd/0x234 [ 820.275654][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 820.281475][ T31] ? __pfx_watchdog+0x10/0x10 [ 820.286150][ T31] ? __kthread_parkme+0x18c/0x230 [ 820.291196][ T31] ? kthread+0x13a/0x450 [ 820.295439][ T31] ? __pfx_watchdog+0x10/0x10 [ 820.300107][ T31] kthread+0x370/0x450 [ 820.304168][ T31] ? __pfx_kthread+0x10/0x10 [ 820.308749][ T31] ret_from_fork+0x72b/0xd50 [ 820.313337][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 820.318443][ T31] ? __switch_to+0x800/0x10f0 [ 820.323112][ T31] ? __pfx_kthread+0x10/0x10 [ 820.327692][ T31] ret_from_fork_asm+0x1a/0x30 [ 820.332464][ T31] [ 820.335669][ T31] Kernel Offset: disabled [ 820.339968][ T31] Rebooting in 86400 seconds..