last executing test programs: 5m2.763650826s ago: executing program 2 (id=4548): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x2}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) ioctl$int_in(r0, 0x5421, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(r2, &(0x7f0000000a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x4008000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m1.601109504s ago: executing program 2 (id=4553): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000fe00000000000000feffffff850000002a00000085000000a000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a'], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r1, &(0x7f0000000340)="66bb0b760dc0f4", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='ext4_discard_blocks\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) migrate_pages(0x0, 0x9, &(0x7f0000000340)=0x3, &(0x7f0000000380)=0x102) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x22) 5m0.290544513s ago: executing program 2 (id=4557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x4000000, 0x0, {0x1}}}, 0xb8}}, 0x40) 5m0.093910397s ago: executing program 2 (id=4559): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, 0x0) unshare(0x2c060000) unshare(0x2c020400) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x80080, 0x1b0) r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001600)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300000000000000004000", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 4m58.706069637s ago: executing program 2 (id=4561): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49e, &(0x7f00000000c0)={0x0, 0x79ab, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x48, 0x0, @fd=r0, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x20000b) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x24008004) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB='4V+\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x4}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x9, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000680)={{0x4, 0x2, 0x6, 0xc3b, 'syz1\x00', 0x8}, 0x4, 0x100, 0x7f, 0x0, 0x3, 0x3, 'syz1\x00', &(0x7f0000000300)=['\x00', 'system.posix_acl_access\x00', 'system.posix_acl_access\x00'], 0x31}) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) r7 = socket$inet(0x2, 0x2, 0x1) socket$kcm(0x10, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x60}}, 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0x18}, 0x94) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000279000/0x1000)=nil, 0x1000, 0x5) futex(&(0x7f00000040c0), 0x87, 0x3, 0x0, 0x0, 0x2) 4m57.936724198s ago: executing program 2 (id=4565): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x10, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x6, 0x701, 0x0, 0x0, {0xa}}, 0xfffffffffffffe98}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendfile(r7, r6, 0x0, 0x4) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r6, 0x4068aea3, &(0x7f0000000380)) 4m42.480005257s ago: executing program 32 (id=4565): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x10, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x6, 0x701, 0x0, 0x0, {0xa}}, 0xfffffffffffffe98}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendfile(r7, r6, 0x0, 0x4) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r6, 0x4068aea3, &(0x7f0000000380)) 4m2.267129261s ago: executing program 3 (id=4644): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000440)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[r5], 0x1, r3, r4, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d000034130000ffffffdd000caa000000090000000000000004b427180010"}}) 4m1.629534098s ago: executing program 3 (id=4646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0xfffff000, 0x0, {0x1}}}, 0xb8}}, 0x40) 4m0.257708011s ago: executing program 3 (id=4647): socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x10, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000001001000001"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000170a0102000000ddff00000000000008090001"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x90) 3m58.942025611s ago: executing program 3 (id=4651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x9, 0xffffffff, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7800, 0xf000, 0x80, 0xffffffff}}) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)=@deltfilter={0x494, 0x2d, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0x1, 0x5}, {0xfff2, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x45c, 0x2, [@TCA_FLOW_POLICE={0x458, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2a}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x8, 0x16, 0x2, 0x0, {0x2, 0x0, 0x3, 0xff72, 0x3, 0x140afbe}, {0x1, 0x0, 0xc46, 0xb, 0x70f0, 0x2}, 0x1, 0x4201}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x7, 0x9b, 0x9, 0x3, 0xffff, 0x0, 0x8, 0x1ff, 0x8, 0x0, 0x200, 0xd, 0x8, 0x9, 0x0, 0x7fff, 0x8bc, 0x2, 0x9, 0x4, 0x5, 0x6, 0x8, 0x3, 0x8, 0x8001, 0x0, 0x8000, 0x6, 0x7, 0x4, 0xd, 0x2, 0x7f, 0x7, 0xe6e, 0x0, 0x9, 0x696, 0x70, 0x3, 0x2, 0x2, 0x5, 0x5, 0xfffffffe, 0x0, 0x7ff, 0x1, 0x8, 0x3ff, 0x9, 0x16, 0x0, 0x1, 0x0, 0x0, 0x2, 0x7, 0xc, 0x1, 0x3, 0x7, 0x9e, 0x5, 0x3ff, 0x8, 0x0, 0x0, 0x7, 0x4, 0x3, 0x9, 0x80, 0x7, 0x4, 0xec8, 0x8, 0x5, 0x5, 0x96, 0x321, 0x800, 0x2, 0x8, 0xfffffffe, 0x9, 0x9e40, 0x2, 0x3, 0x3f73, 0x7fff, 0x7f, 0x1, 0xa7, 0x9, 0xc, 0x8, 0x9, 0x7f, 0x7, 0xffffff80, 0x2, 0x2, 0x8000, 0x1, 0x6, 0x91, 0xac, 0x8, 0xce, 0x9, 0x969, 0x9, 0x4, 0x1, 0x2, 0x2, 0x80000000, 0x6, 0x5d, 0x5, 0xfff, 0x5, 0xfffffff9, 0x2, 0x8, 0xffffffff, 0x5, 0x101, 0x0, 0x7, 0x8ed, 0x2, 0x2, 0x8, 0x4, 0x60e9, 0x8, 0x54f6, 0x401, 0x9, 0x2, 0xdfe, 0x401, 0x5, 0x6, 0x8, 0xe38, 0x180000, 0x1000, 0x20000, 0xffff9af3, 0x6, 0x101, 0x1, 0xfffffff8, 0xc, 0x2, 0xa, 0x80003, 0x5, 0xe, 0x73b, 0xd9f0, 0x4, 0x6, 0x7, 0x1, 0x5, 0x8, 0x8, 0x101, 0x235, 0x2, 0x10000, 0xa, 0x5d01, 0x3, 0xa1f, 0x4, 0x7fff, 0x7, 0x6, 0x1, 0x1000000, 0x2dbc, 0x7, 0x1b87, 0x7f, 0xd43, 0x8, 0x2, 0x5, 0x6, 0x1, 0x9, 0x5, 0x3, 0x3, 0x6, 0x3, 0x8, 0x8, 0x80, 0x8, 0x6, 0xc0, 0x2, 0xc7, 0x2, 0x1, 0x7, 0x3, 0x2, 0x2, 0x400003, 0x0, 0x6, 0x9, 0x1, 0xffffffff, 0x0, 0x80000000, 0x5, 0x1525, 0xffff7fff, 0x80, 0xffff0000, 0x6, 0x1, 0xfffffffa, 0x2, 0x5, 0x9, 0x3, 0xd, 0x0, 0xfffffff6, 0x8f, 0x3, 0x9, 0x78a2, 0x0, 0x2, 0xdd93, 0x5, 0x7fff, 0x6a, 0x7, 0x7, 0x10, 0x8f, 0x7, 0x6]}]}]}}, @TCA_RATE={0x6, 0x5, {0x3c, 0x81}}]}, 0x494}, 0x1, 0x0, 0x0, 0x400c0d0}, 0x884) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket(0x10, 0x3, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000540), &(0x7f0000000580)='system_u:object_r:var_auth_t:s0\x00', 0x20, 0x1) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0xf, &(0x7f00000027c0)=@ringbuf={{}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{0x5, 0x1, 0xb, 0xa}, {}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000a80)='GPL\x00'}, 0x94) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = dup3(r10, r9, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000080)={0x14, r1, 0xedceecb76ebd4fd, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x5884) 3m57.139846513s ago: executing program 3 (id=4652): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x39, 0x4, 0x11000, r0, 0x6, '\x00', 0x0, r0, 0x0, 0x4, 0x1, 0x7, @void, @value, @value=r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r6}, 0x38) close_range(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000006200)=""/141, &(0x7f0000000100)=0x8d) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000004c0)={r10, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000000c0)={r10, 0x3, 0x6, @random="cea0300a1672"}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x8080, 0x7, 0x2, 0x0, {{0xd, 0x4, 0x3, 0x0, 0x34, 0x68, 0x0, 0x91, 0x6, 0x0, @broadcast, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x9a, 0x1, 0x8, [{@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x101}]}, @rr={0x7, 0xb, 0xb6, [@dev={0xac, 0x14, 0x14, 0x25}, @multicast1]}]}}}}}) 3m54.454871183s ago: executing program 3 (id=4654): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x80}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000500000000000000020000001811000088aa2e7adda2dd7b4694b5ec978c2021cb00e75673c00031980b133072f05ecf48c1bc99eec1a893706ee1ab5f68fb459667bbeeda43531389686a0b147a0cf3df8d6a0fda9aca9dc526f6c211b00567b3e3513f59e97b039a0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="0000000000000000850000007b000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000008140)={0x2020}, 0x2020) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000280)={0x11, 0x6, 0x1, 0x9, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}]}, 0x38) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r5, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x30}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x80000b}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x54) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="070600000000000000002d0000000a0001007770616e3000000008002f0005000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x78, r8, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x20}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3m39.054484666s ago: executing program 33 (id=4654): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x80}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000500000000000000020000001811000088aa2e7adda2dd7b4694b5ec978c2021cb00e75673c00031980b133072f05ecf48c1bc99eec1a893706ee1ab5f68fb459667bbeeda43531389686a0b147a0cf3df8d6a0fda9aca9dc526f6c211b00567b3e3513f59e97b039a0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="0000000000000000850000007b000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000008140)={0x2020}, 0x2020) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000280)={0x11, 0x6, 0x1, 0x9, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}]}, 0x38) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r5, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x30}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x80000b}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x54) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="070600000000000000002d0000000a0001007770616e3000000008002f0005000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x78, r8, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x20}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3m25.802799135s ago: executing program 1 (id=4687): r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0xf, &(0x7f00000027c0)=@ringbuf={{}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{0x5, 0x1, 0xb, 0xa}, {}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000a80)='GPL\x00'}, 0x94) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000080)={0x14, r0, 0xedceecb76ebd4fd, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x5884) 3m24.405662721s ago: executing program 1 (id=4692): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x0, 0x1, 0x8001, 0x1}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000400)=[@nested_vmlaunch={0x12f, 0x18}, @enable_nested={0x12c, 0x18}, @set_irq_handler={0xc8, 0x20, {0x89, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control_nat=0x6000, 0x0, 0x8, 0x3f5d}}, @wrmsr={0x65, 0x20, {0xae9, 0x8}}, @wr_crn={0x67, 0x20, {0x5, 0xfff}}, @wr_crn={0x67, 0x20, {0x0, 0x2}}, @code={0xa, 0x57, {"450fc76c2616427a460fc736440f20c0350f000000440f22c0f0085c8be7440f234040f448b824500000000000000f23c00f21f835030008000f23f866baa000b000ee400f07"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control32=0x4012, 0x4, 0x2, 0x40}}, @cpuid={0x64, 0x18, {0xffff, 0x80000000}}, @out_dx={0x6a, 0x28, {0x1697, 0x6, 0xfc}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @code={0xa, 0x6f, {"c481695f2266ba410066b8004866efb9ba090000b8445c0000ba000000000f30d8f8360f019f48384f133626470f01c948b8ebbcb63d000000000f23c80f21f835040060000f23f8c4834942f02c0f20e035004000000f22e0c401696a01"}}, @wr_crn={0x67, 0x20, {0x8, 0x3}}, @set_irq_handler={0xc8, 0x20, {0x44, 0x2}}, @wr_crn={0x67, 0x20, {0x8, 0xf}}, @out_dx={0x6a, 0x28, {0xe358, 0x2, 0x4}}, @rdmsr={0x66, 0x18, {0x30ef8c80c7f3d009}}], 0x2de}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000740)={[0x7fffffff, 0xfffffffffffffff8, 0x7, 0x3, 0xffffffff, 0x0, 0x8, 0x4, 0xf2, 0x8000000000000000, 0x6, 0x8, 0x4, 0xebfe, 0xc59, 0x4], 0xffff1000, 0x880}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000040)) r5 = socket(0x10, 0x802, 0x0) write(r5, &(0x7f0000000000)="fc0000004800071fab092504090007000aab60000a0000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r6 = eventfd(0x8c66) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r6, 0x2}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x35, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffff001, 0x0, 0x2, r6, 0x4}) 3m18.623940743s ago: executing program 1 (id=4698): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) io_setup(0x20, 0x0) io_submit(0x0, 0x0, 0x0) syz_open_dev$media(0x0, 0x33ac98ac, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x7, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x56, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x44800) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3m14.255254492s ago: executing program 1 (id=4704): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x8000, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) socket(0x18, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') ioctl(r1, 0xffffffff, &(0x7f0000002080)="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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit], {0x95, 0x0, 0x0, 0x8510}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3m11.573631521s ago: executing program 1 (id=4708): r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x9, 0xffffffff, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7800, 0xf000, 0x80, 0xffffffff}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0xf, &(0x7f00000027c0)=@ringbuf={{}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{0x5, 0x1, 0xb, 0xa}, {}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000a80)='GPL\x00'}, 0x94) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000080)={0x14, r0, 0xedceecb76ebd4fd, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x5884) 3m9.592528526s ago: executing program 1 (id=4710): syz_open_dev$tty1(0xc, 0x4, 0x4) pipe2(&(0x7f0000000000), 0x1242ee819b3f8c13) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3, 0x0, 0xff}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="00000005ffffffffffffaaaaaaaaaa0208004500002440002000032f9002e0000001a0004e21001090780206000000000000"], 0x36) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYRES32=r6], 0x58}}, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_open_dev$usbfs(&(0x7f0000000180), 0x80, 0x321402) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) socket(0x10, 0x803, 0x100) 2m52.956365506s ago: executing program 34 (id=4710): syz_open_dev$tty1(0xc, 0x4, 0x4) pipe2(&(0x7f0000000000), 0x1242ee819b3f8c13) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3, 0x0, 0xff}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="00000005ffffffffffffaaaaaaaaaa0208004500002440002000032f9002e0000001a0004e21001090780206000000000000"], 0x36) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYRES32=r6], 0x58}}, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_open_dev$usbfs(&(0x7f0000000180), 0x80, 0x321402) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) socket(0x10, 0x803, 0x100) 29.174913743s ago: executing program 4 (id=5140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) io_setup(0x20, 0x0) io_submit(0x0, 0x0, 0x0) syz_open_dev$media(0x0, 0x33ac98ac, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x7, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) connect$inet(r4, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x56, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x44800) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 28.113104976s ago: executing program 4 (id=5143): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f00000000c0)=[{0x1, 0x8000, 0x0, 0x0}, {0x1, 0xda01, 0x0, 0x0}], 0x2}) socket$key(0xf, 0x3, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x180) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x40000, 0x50) symlinkat(&(0x7f0000000080)='./file1\x00', r6, &(0x7f0000000180)='./file1\x00') r7 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000008, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2f, 0x215, 0x0, &(0x7f0000000500)="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", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x6a542, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) fcntl$F_SET_RW_HINT(r9, 0x40c, &(0x7f0000000000)) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_ADD(r9, 0x4c80, r11) 24.166496346s ago: executing program 4 (id=5157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa4df080f965c2175) statx(r2, &(0x7f00000007c0)='./file1/file0\x00', 0x800, 0x8, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file1/file0\x00', &(0x7f0000000940)={0x8c0, 0x108, 0xd}, 0x18) r8 = socket$pppoe(0x18, 0x1, 0x0) r9 = getuid() fstat(r2, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getuid() ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000a00)={0x7, r2, 'id1\x00'}) r14 = syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) r15 = syz_open_dev$ttys(0xc, 0x2, 0x0) r16 = syz_open_dev$ttys(0xc, 0x2, 0x0) r17 = syz_open_dev$dri(&(0x7f0000002980), 0x6, 0x408002) r18 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_S2RAM(r18, 0x330b) fcntl$getownex(r7, 0x10, &(0x7f00000029c0)={0x0, 0x0}) sendmmsg$unix(r2, &(0x7f00000043c0)=[{{&(0x7f0000008340)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000004140)=[{&(0x7f00000083c0)="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", 0x1000}], 0x1, &(0x7f0000009440)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r18, r18]}}, @rights={{0x14, 0x1, 0x1, [r15]}}], 0x58, 0x4008000}}, {{&(0x7f00000094c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000009740)=[{&(0x7f0000009540)="e25a3d8b39386d98dfb2c534ffcf6ac8dfceef94ca0fc92a1e4eb4a37d3eeb9588ee94ad62ce66d9b60233ce7eb8041ea102558b191794a131fbf9a082d07f05e5f4d18f782ad565baf7602e4e015a1648d96b0dc01445a65627cd2c1c93883a38246a745e98602427e5270ecf5362ed62a62901e683095b89cf9fbd540478e1b4cbb1ba57a0268f2d2c57d20206c9d1118758f13717a0dbc83d9d5f1f5558a68e9eabcb08ba4c161672d0dbad68c688712626b90cbcab47a48071f2df", 0xbd}, {&(0x7f0000009600)="208fea50de74997349534f203ee78d1919600234495bf7226286575f58cf3ebd7b2a96aabc23ff8556e9b2d1d5400e890afed0117ca2db0bceec03bb228bfb6a0b9c4a95f3f243c15f8424683feae0c406b7550271eeab4f6b00835464a37a26cd7eee3806172b224f30468b3232e87c0d8730839aceb8244bada47eb744079a7927a2a74793bf5651f2c14a8d8e86db7776bc4edcc66552d0eb29dcf2ddfb632591698bc4cc44ccd7927591784475a6bf86b98a255e56ccaeac", 0xba}, {&(0x7f00000096c0)="9a801b70343bd92cd40814825f0e1f1a4a5d482f08941939e96c9f16301beb0d8d2ea53f57a1ba6b330ccd1d9176c3ef9c82e94014e33003e2118421154bc43f36616bab72b0e85521cbb4333244fd58de399dd5bcdb61475ac1", 0x5a}], 0x3, &(0x7f0000009880)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r13, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r8, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r8, @ANYBLOB="000000001c00000000f800010000000000000000", @ANYRES32=r0, @ANYRES8, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x4000000}}, {{&(0x7f0000002d00)=@file={0x1, './file1/file0\x00'}, 0x6e, &(0x7f00000040c0)=[{&(0x7f0000002d80)="1ca88c34a0836e59f79b978b8dee58536466d463632ebeb83be29602d80324f18047d84c03913c61fb213fde8bda107cdce52fc0a0e2d9bbd78e5e7f3195ee76a5ebc3e7908e3712ac3b95972f77d0c4b8cb8742ae3cfa951c9de0280e4ddaa11ab70be2a367fe4a742e266fa73db43f01c6033118dbd17cf8ffb69ea64fd2fea085c82bcf58bd8d2d71d4", 0x8b}, {&(0x7f0000002e40)="196713c83811166b3f33c12ed264221089754e654eba5477899de088d7eb3bb4d557039e1aa06e57bd1f96ba4bbe36226690c9b0da6e053c2effb0e7657bd5b82795a0f262180c55794a71328ea662867c79e73c9f0c2335ad29cf90f062c33123bdb0c852727a9726f3d60560f34febf4baf47b322905486ff7afc1422830dd5e6e971f9f8d1a05ec2e0d75902f872e105eec4b8788cf6036ae3bb57b5de97d70d96700dd74282ea8003c4465da68f5c644c9915478f5953baa508136b66d1ea5d0d9fd615881703171c9ce34a4e9c274a15e8ca2525dd6612a8e5a", 0xdc}, {&(0x7f0000002f40)="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", 0x1000}, {&(0x7f0000003f40)="f48f29407d6d4e7c6dda0eaf8d374e1a5a03bc3a891cf2892ee7074987", 0x1d}, {&(0x7f0000003f80)="b4c5ae5d32da5670d90826afc2d938e7f55872e3b09f109beaf903defb5a2f97fcd5227604965809fe44fcc1cc2b3094ad95e20609222c76472158330ed33775c7c04d016d39109160b2c7ce75b20e8a10dc3fac8fde25e7de17da00847b26d2156447eb6db96de5bf4a10950a07a9b6b2df9ae32ce3adeef533cfddccaf6e4329b0c3d0b17f2bb7f666165a7c33ced8eda9bd7baff301c8e430233b80116012625ed4c9f28d451b846dab8b3bc6cd0d077808e59d03ef72383d3c4c9c4533bac59aa196f1e3c6a1f9bf08", 0xcb}, {&(0x7f0000004080)="5cf96f2f3ef458312e7048f5461d8737e3d584dab76b7cb1fa7454344e07b2f47c16", 0x22}, {&(0x7f00000081c0)="7934aa01b295b1cff2fdcf5d53b23b58ff236f8dfa02347144ea295d91fd3241bee47ed72c3bac4a769c37f7c1f84574b8ff372441810eba63220d9c6df0ac14c41d29ef848b7293b66a0eff0ad12d1e3cff96aefdf637fd8f6f282c26d0a23d9d2807c798c597568245180243b3b403d57759c1ce43ed184e9ea2d8caa3531c248bf774dd44dfac0a4518ef6d8da6ef47a5446bd747cdb26df30a2329bdc17901a36212b737843c65c0a586a4a482fc5c46895af79cb2623180ac10177bf3cf7a144c158a27e3d93bd141c6d245f261a6b29d93262c865ff1d9bbadff4c7799", 0xe0}], 0x7, &(0x7f00000082c0)=[@cred={{0x1c, 0x1, 0x2, {r19}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r19, r3, r6}}}], 0x60, 0x1000c898}}, {{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e1f}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000003c0)="4e61361c2f366ea7cc94325619e4c659b6bb170b616127540d146b53c4e5ec13ffdd71f5e79f7b01abd497077644edabe0a2bb1cf7219345ce191bb94222fa449633eea5b6e829cf31703bb6f7311c8326364c085fe4561c09f17c48a8fffe0aa996c3b3fe27a3aa2140b81a10958843609d81e1aac63f5199bb8ad225d336f2da7556fcaf94953a9040a19a8e14e643c63f48e3ccd98746885b749da49491b8c932603ee93172db918a4c155cd854b68a027ec98e89262aa048101c5e47bcb06024930aaded12d8808820263399d603498b339f7c131db391e058d9", 0xdc}, {&(0x7f0000000580)="2a7e957958843d87f4ce41454e6f0d023fb91f816415e32586e2c23d398a5297050bd20dc3743ecf29dc42dff17a10ba1c16a8f2ab759264d7beb392723d4f5ccc816d59c5ae167aa0c4cb34dbb2c16fadf8427a9c92dbdbabadeaf6436a6507883efe987a249ce7f5e2f2bb5dcb3f09b723f22f811b22d0cb09966371743b570c92530e11bd1686f209993d6c6ee2a750f17206eb3940ae99a9c054b948739cb9dd8ea7524c07aee7e79f825ba6aeedd6d2e947505042981b85afb87585c7fc862842c99e095b1836332a26fa167820280e87fdcac506b3740ccaf9efa6ac9059107b7804ffad7018fe26c5ad", 0xed}, {&(0x7f0000000700)='R+', 0x2}], 0x3, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r19, r9, r11}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r13, r7, r14, 0xffffffffffffffff, r15, r2, r18]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68, 0x84}}, {{&(0x7f00000004c0)=@file={0x0, './file1/file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000b00)="79124da12d9164791f9c002e808e78774e5fab25f49684e696dea83d788b29d1da0c2268b580f3ea10ebef27430322c54424023fbdca37135d81071dd14e7d47194a7f3a7a5c31c2e5bf1ebe80c0faf4406a26cb60ccbf5b2cbeb22ca17081322234fc85fa18d1af822397190d652513ad211018db948621508d3b0f3699536027164e498fc20cc8061155827503dcab31d39a75d5e5aa948faf97b60c90c76a4a8621b33f", 0xa5}, {&(0x7f0000000680)="2698759b035652a649cc922dc075948601effe8febc0274a5239f4a66875147b4934990d4abb1a", 0x27}, {&(0x7f00000006c0)="f3166041f25b7ae656040a784db71fc15968", 0x12}, {&(0x7f0000000bc0)="acb3a4de15e9cf5559b4541043b36aa64bc685ed2d1afeec9959843733067f1d982cc9159c0ff5a54024b0d0e194b35efb44e4fdbc6740e57d187e41df1cda23bb90c91790f271a0bcf16a5b6c4c2f42bdf173ef57910b932b6eb729bfbf2e00f0a33610cbd3668cdb1a67bcc714af42", 0x70}, {&(0x7f0000000c40)="a059351eb8451a866577899fe27ce11fb1dad7b8797876b74148ccde1831fd0106907c9be84b09076686283050df54f2769abbd53fc8b08dee5e6c8b8a6e3525f9122fa26ddbf784e36e22cff3abce112aa3ec9bfab42091a44463e5d40f0c88abbd586ae47168346f6179b03ef5bfa19582b86bb7b96e42907b9ee11868cb4b680ad7dee8ef4dacc614a089f70c39801f", 0x91}, {&(0x7f0000000d00)="3fa0386bf28dfefe296c66", 0xb}, {&(0x7f0000000d40)="daa812df9f50ed9bfb34ab9686f5e8a1a50f73db44a97d0d7b94c057d18c7aba1110be450d03cf6865bb28a7bc64d31896a4265cdee362038295f5a6fa43e1a3b4fbd66bf55465bbd4f135593212192b4823e06773ef21441f423d0c05ee6809ea5879286212bd244912604f803a3cc64dcca39edbf82ea3ef15c9b457ee411a9057ab648962a6688bd001de752103464e46d3fba88b0f835777ad98f89f72b015170601ad6facacdf2c867fae9f4cc572fc62c907b6370f10935025ce030db09e046caa364428be51c90be7bc2e98c498ecf006c2f6707f9712039e1dd6", 0xde}, {&(0x7f0000000e40)="7a7780bf7f9813f1a1bdc49a9fe6dddfbc88", 0x12}, {&(0x7f0000000ec0)="437d2030506156c0a2d28d3a1f66c7d0e18d915551cfb532b3569e503d99e08f4f7d87bb5bf5e8bfea8e0a1b24ef2579428b5836afde54e47f901a53021abff35ad472dd09dfc67ebd3b31d71bd31082c178ed52ea4f5b4e5425571ea122317b4293d5d2ddceb3b6494d32c84078943c05bd5415e87e31b5be4a9d9eb7756d46107a8b8af7de68fe7b1ce228ef5f2ea410bf9561b686a5c14aae66c09a6955fc51fefa97642c4d2d4bc2057c47c39fde9bda57be0388b3605c39c5c45a7cbea3383094b65e61104ff981e42a417c4f6d2dc1aff30f324580dee568177de3", 0xde}, {&(0x7f0000000fc0)="de049e7c0ff2e994b116804d987f01626b664c13dc1f7381648e6e88ee40f86c15447365645d5860f00cc082c2a5ce50f0c82dc5b11b977d41a2fac1d49332b6f5e06c709f7a2abdee566f024250c68608fa5d6aea4360e6ccaf477178533e0210c07616be5170832d2fcd6afe41731f173ec7806863c49c57ef5da5a48522124a8052", 0x83}], 0xa, &(0x7f00000013c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r19, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r19, @ANYRES32=r12, @ANYRES32=r4, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r16, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRESHEX=r11, @ANYRES32=r4, @ANYBLOB="000000001c000000faffffff0000000002000000", @ANYRES32=r19, @ANYRES32=r12, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r17, @ANYRES32, @ANYRES32=r18, @ANYRES32=r13], 0x128, 0x20004050}}, {{&(0x7f0000000880)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000001240)="92bbe0408e95eeb6df55482288dae4d91b1112673e6edb612b1651c39c639825fb10c797140e27dff29dd668f5f899ac3c0fc906bbd40be13cc9f3d90a6a7ae995347febc46a17dc6f1ec0641206fd61c6b9137aa550366c3f7dd8e82f07b966e727dc", 0x63}, {&(0x7f00000012c0)="5146e74bf13ef9ce25dfe5539456a1f8ada8a2fbf5ca3ad89fc74c424488a963acab3095d2c28d3d3c1281ecadcf68c598b72d4d4d774341d0940ec2845e698329e1fb037f18d576e48f6d9de0001afec4b0dc4b83d8f6dae29e", 0x5a}, {&(0x7f0000001340)="937a058821e454072fbc3ad3484542692b3cedd89a46c57ab274f04775f00368ed95a46cd52bb1bd9ff638807dee0d5aa549fa4e708d9fa8f7d6d8e60440375b5bad8156a42af6d28c8ba77b685fc0d9032f7ffa7294a9e678eac5fa63213d85c02b25255e45e1b7f1", 0x69}], 0x3, &(0x7f0000001500)=[@cred={{0x1c, 0x1, 0x2, {r0, r3, r11}}}, @cred={{0x1c, 0x1, 0x2, {r19, r5, r4}}}, @rights={{0x14, 0x1, 0x1, [r16]}}, @rights={{0x20, 0x1, 0x1, [r7, r2, r7, r7]}}, @rights={{0x18, 0x1, 0x1, [r8, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r19, r5, r6}}}], 0xb0, 0x40}}, {{&(0x7f00000015c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="1400000700a1a3e1c1656d52f90000000100", @ANYBLOB="000000001c00000000000000010000000100", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r13, @ANYRES32=r1, @ANYRES32=r18, @ANYRES32=r2, @ANYRES32=r17, @ANYRES32=r17, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x4044880}}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000004200)="2477102b15d6b0598b2af3c416eadfd8e6b3939ba39a733ef480d968311a35aa233929832ea7948134df3cc209b7155b78f1dc3337ec208eb2253bb985497edf6072eaba68096b92f5ca1a8adac3b7ed588db8921d7b3851e754ca8a1b4d13f57623954ff7c1ba433f21122bd3c52822fc5bb0fb2065c8dc072465e3bb730cf4417c4d45962ed65fb95800ccd4166dada8699fbeba04c90526a9fa80afa82ef6445db7ec50ac358a7d8d3fd346815a4aba9a907b9f2a8f9a1dd6fcb4659fe70dab0085b206", 0xc5}], 0x1, 0x0, 0x70, 0x4000004}}], 0x8, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r20 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r20}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 20.035660667s ago: executing program 0 (id=5171): unshare(0x62040200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r0, 0x9c23000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='sys_exit\x00', r3}, 0x18) r4 = gettid() (async) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) rt_sigqueueinfo(r4, 0xb, &(0x7f0000002d00)={0x0, 0x0, 0xfffffffd}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r2, 0x4) 11.275574771s ago: executing program 0 (id=5193): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x11e) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="0000600601050700ffff8000"], 0x134) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) close(r6) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGETNODEID(r6, 0x89e1, &(0x7f0000000000)={0x3}) r7 = socket(0x10, 0x3, 0x0) recvmmsg(r7, &(0x7f0000008400)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x2102, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 8.995889352s ago: executing program 7 (id=5199): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff00000085"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='sys_exit\x00', r0}, 0x18) fsync(r0) 8.869732297s ago: executing program 7 (id=5200): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60122d9200103afffe8000000000000000002300000000bbff0200000000000013000000ffffff7f880090780101ff000000000000000000"], 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r5, 0x5, &(0x7f0000000000)={0x3, 0xf}, &(0x7f0000000280)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000140)='contention_end\x00', 0x0, r1) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) 7.97435369s ago: executing program 7 (id=5202): sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0x6, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000580)=ANY=[], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x2, 0x40000, 0xfffffffc, 0x8000, 0x7f}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x14, r3, 0x719, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x800, 0x47, 0x2}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x0, 0x18}, 0x28) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000100)='./file0\x00') 6.283582823s ago: executing program 0 (id=5204): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/timers\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x810, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB], 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00v\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff0000000065090000000000007baaf0ff00000000ad9900000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000a844011ed4d0a613d9a643883a3b144218646272bbb610d51b1948e656ef31c0a758f1778fc56d8f3525522e50a71b30e8cd70de8c007820a5025cf52d2a87cb9caa8aa47066ac4b2abc831b4c542b5a9d2c296f49ca971f75b7aae18ab5a3856ea2b80d4b5cb4ecba251fd019bc68b8f3da1c73751ec0e487635297ecf87e3210ca82354c1752b1883cc3400ae4f8946204"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.521282738s ago: executing program 7 (id=5206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c70409533a7acaf3d"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x701c, 0x700, 0x1, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r2, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc00000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 5.353863616s ago: executing program 6 (id=5207): mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000580)={0x50, 0x0, r1, {0x7, 0x1f, 0x911, 0x24808521, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, 0x80, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000500}]) dup3(r2, r0, 0x0) 5.193550059s ago: executing program 0 (id=5208): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000009c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b14, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) connect$unix(r6, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r7) r8 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f00000002c0)) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0xf0, 0xffffffffffffffff, 0x0, 0x0) 5.077890553s ago: executing program 7 (id=5209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x2c}}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mkdir(0x0, 0x1c8) socket$kcm(0x2a, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x40, 0xa, 0x7, {0x7, 0x21, "d666348f27"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000640)={0x24, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x2c}}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) mkdir(0x0, 0x1c8) (async) socket$kcm(0x2a, 0x2, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x40, 0xa, 0x7, {0x7, 0x21, "d666348f27"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000640)={0x24, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}, 0x0, 0x0}, 0x0) (async) 4.789685273s ago: executing program 6 (id=5210): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ppoll(&(0x7f00000003c0)=[{r3, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3, 0x4000}}, 0x0}}], 0x0, 0x0, 0x0}) 3.672662352s ago: executing program 6 (id=5212): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10b, 0x8000000000002}) (async) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x1, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r2 = getpgid(0x0) sched_getscheduler(r2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) mmap(&(0x7f00005ec000/0x4000)=nil, 0x4000, 0x1000004, 0x110, 0xffffffffffffffff, 0xcc6c4000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) r3 = syz_clone3(&(0x7f0000000340)={0x201180, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) get_robust_list(r3, 0x0, &(0x7f0000000140)) socket$nl_rdma(0x10, 0x3, 0x14) (async) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) (async) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) syz_open_dev$sndctrl(&(0x7f0000000240), 0x7, 0x2acb80) sendmsg$nl_generic(r5, 0x0, 0x1) (async) add_key(&(0x7f0000000300)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0x1, 0xfffffffffffffff9) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f00009fc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000004040)=""/4061, 0xfdd, 0x0, 0x0}, &(0x7f0000000000)=0x40) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 3.17737772s ago: executing program 6 (id=5213): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20048884) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fb000000"], 0x830200) fallocate(r2, 0x0, 0x0, 0x1000f4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) truncate(&(0x7f0000000080)='./bus\x00', 0x95a) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x4, 0x1, 0x0, 0x2, 0x2}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @loopback, 0x2}}}, 0x30) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) 3.171782539s ago: executing program 5 (id=5214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x22003, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x510}, 0x1, 0x0, 0x0, 0x5}, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000100)={0xf0f017, 0x3}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x3, r5, 0x9}, 0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}}, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000200)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) mount$overlay(0x0, 0x0, 0x0, 0x800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x401}, 0x50) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f00000002c0)=0x108005, 0x4) lsetxattr$security_selinux(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000280)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c, 0x3) openat$cgroup_pressure(r1, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi5\x00', 0x642840, 0x0) 2.95100496s ago: executing program 6 (id=5215): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x9, 0x0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x7fff, 0x2, 0xdb, 0x28080, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%-5lx \x00'}, 0x20) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0x7}, @generic={0x10, 0x8, 0xc, 0xdd, 0xd}], &(0x7f0000000040)='GPL\x00', 0x1, 0xce, &(0x7f0000000080)=""/206, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x10, 0xb7c, 0x7}, 0x10, r0, 0x0, 0x9, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r1, r2, r3, 0xffffffffffffffff, r4, r5, r6], &(0x7f0000000500)=[{0x3, 0x4, 0x10, 0xc}, {0x0, 0x4, 0x7, 0x5}, {0x3, 0x3, 0xf, 0x2}, {0x5, 0x2, 0x4, 0x3}, {0x5, 0x5, 0xa, 0x7}, {0x2, 0x1, 0x1, 0x6}, {0x0, 0x2, 0x1, 0xa}, {0x0, 0x4, 0x10, 0xa}, {0x1, 0x2, 0x4, 0xc}], 0x10, 0x3}, 0x94) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xd4, 0x12, 0x200, 0x70bd2d, 0x25dfdbfb, {0xb, 0x7, 0xd, 0xb3, {0x4e20, 0x4e21, [0x5, 0x3a, 0x8, 0x9], [0x2, 0x101, 0x7ff], r8, [0x4, 0x800]}, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x38, 0x1, "a188576c9bf4bd51f39777222569d247ed3c93a94a8756653ac4cd3d14cf3f02a4c30932801f6717b0ee9bdde76532b4482a23fb"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "1c71bb09470647e1295646ffea1756e61db55a9052b033929738b72ac7707d7b18c2b9b3a36a9a3cc76c3bb3b4c8cdb1143bc6a384b4a3c433388c12333665aed3e19525e30b18f81fe82b45"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000051}, 0x4000) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000880), 0x8380, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000008c0)={r9, r4, 0x2e, 0x0, @void}, 0x10) r10 = dup(r7) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r9, 0x5761, &(0x7f0000000900)={0x2, 0x0, [{0x4, 0x66a6, 0x5a47, [0x394000, 0x0, 0x0, 0x2f, 0x5, 0x80000001, 0xfff, 0x8]}, {0x10001, 0x94e3, 0xb, [0x1, 0x1, 0xbf47, 0x1, 0x4, 0x7ff, 0x40, 0xe5f]}]}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000980)={'vxcan1\x00'}) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f00000009c0)='\x00', &(0x7f0000000a00)='\x00', 0x0) ioctl$sock_ifreq(r9, 0x8919, &(0x7f0000000a40)={'syzkaller1\x00', @ifru_hwaddr}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000a80)={0x3, 'veth1_virt_wifi\x00', {0x4}, 0x16}) recvmsg$can_j1939(r10, &(0x7f0000001c80)={&(0x7f0000000ac0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1, &(0x7f0000001b80)=""/241, 0xf1}, 0x0) syz_open_dev$sndmidi(&(0x7f0000001cc0), 0xfffffffffffffffe, 0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f0000001d00), 0x2, 0x0) setitimer(0x2, &(0x7f0000001d40)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000001d80)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001dc0)={r4, 0xffffffffffffffff}, 0x4) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000001e40)=@add_del={0x2, &(0x7f0000001e00)='ip6tnl0\x00'}) socket(0x18, 0x3, 0x8) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r11, 0x8008f511, &(0x7f0000001e80)) ioctl$sock_ifreq(r7, 0x8926, &(0x7f0000001ec0)={'veth0_macvtap\x00', @ifru_ivalue=0x7}) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) getpid() 2.665002087s ago: executing program 4 (id=5163): r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000380), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') pwritev(r4, &(0x7f00000004c0)=[{&(0x7f0000000280)="91", 0x1}], 0x1, 0xfff, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x0, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x4, 0x5f, 0xa, 0x5, 0xffff2d37, 0x6, 0x3dd1, 0xff, 0x6, 0x5, 0x4, 0x0, 0xb, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x20007, 0x83, 0x9, 0x4c74, 0x0, 0x3, 0x2, 0xe, 0x0, 0x400, 0x7, 0x17, 0x9, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0xffff8001, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10, 0x8000012f, 0x8004, 0x5, 0x3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x0, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xfff, 0x7, 0x7fff, 0x206, 0x400, 0x7, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xf, 0x6744, 0x2, 0x4, 0x4, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x2bc2, 0x1, 0xa3ad, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x8], [0x7, 0x1, 0x4, 0x20005, 0xfffffffe, 0x100, 0x8d2, 0xff, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x8000008, 0x8, 0x86, 0x3, 0x3038, 0xff, 0xb, 0x2, 0x2, 0x2, 0x7, 0x2000000a, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x601, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xacc, 0x5, 0x7, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x6, 0x3, 0x2006, 0x80a2ed, 0x4, 0x80000000], [0x9, 0xbb33, 0xa, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x5, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x2, 0x7e, 0x100, 0x9602, 0x7, 0x1, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d690, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x4, 0x40b1e, 0xd7, 0x10200, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000000)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='J', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x7, 0x9}, 0x8) 2.262194082s ago: executing program 5 (id=5216): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.185926211s ago: executing program 5 (id=5217): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x2}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(r2, &(0x7f0000000a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x4008000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0xfffffffd, [{0xa, 0x2, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x5f, 0x61, 0x0, 0x61]}}, 0x0, 0x4c}, 0x28) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='bbr', 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00082bbee225f82000ff00"/22], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.171351345s ago: executing program 5 (id=5218): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x48, 0x0, @fd=r0, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x20000b) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x24008004) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x2, 0x1) socket$kcm(0x10, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x60}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfe33) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f00000040c0), 0x87, 0x3, 0x0, 0x0, 0x2) 2.008546017s ago: executing program 0 (id=5219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x80) 1.686880685s ago: executing program 4 (id=5220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x968, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x4000000}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2}, 0x94) 1.629256309s ago: executing program 7 (id=5221): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) prlimit64(r0, 0xe, &(0x7f0000000200)={0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000000)=0x6, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x14) setgroups(0xefff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x96=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x5c7180, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ni\x00'}, 0xffffffffffffffbd) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) listen(r4, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) 1.628623438s ago: executing program 6 (id=5222): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23}, 0x38) close_range(r0, r0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000006200)=""/141, &(0x7f0000000100)=0x8d) r8 = socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x2, 0x0) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x8080, 0x7, 0x2, 0x0, {{0xd, 0x4, 0x3, 0x0, 0x34, 0x68, 0x0, 0x91, 0x6, 0x0, @broadcast, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x9a, 0x1, 0x8, [{@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x101}]}, @rr={0x7, 0xb, 0xb6, [@dev={0xac, 0x14, 0x14, 0x25}, @multicast1]}]}}}}}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@mpls_getnetconf={0x4c, 0x52, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @NETCONFA_IFINDEX={0x8, 0x1, r9}, @NETCONFA_IFINDEX={0x8, 0x1, r9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1.610935971s ago: executing program 5 (id=5223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x9, 0xffffffff, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7800, 0xf000, 0x80, 0xffffffff}}) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)=@deltfilter={0x90, 0x2d, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0x1, 0x5}, {0xfff2, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_POLICE={0x54, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2a}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x8, 0x16, 0x2, 0x0, {0x2, 0x0, 0x3, 0xff72, 0x3, 0x140afbe}, {0x1, 0x0, 0xc46, 0xb, 0x70f0, 0x2}, 0x1, 0x4201}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}]}}, @TCA_RATE={0x6, 0x5, {0x3c, 0x81}}]}, 0x90}, 0x1, 0x0, 0x0, 0x400c0d0}, 0x884) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket(0x10, 0x3, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000540), &(0x7f0000000580)='system_u:object_r:var_auth_t:s0\x00', 0x20, 0x1) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0xf, &(0x7f00000027c0)=@ringbuf={{}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{0x5, 0x1, 0xb, 0xa}, {}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000a80)='GPL\x00'}, 0x94) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = dup3(r10, r9, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000080)={0x14, r1, 0xedceecb76ebd4fd, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x5884) 417.478101ms ago: executing program 0 (id=5224): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000180)=0xfffffffe) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$watch_queue(&(0x7f00000021c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = io_uring_setup(0x7649, &(0x7f0000002200)={0x0, 0x2ab8, 0x1000, 0x1, 0x18b, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000002280)=r0, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=r2, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00100000000000e10000000000000200000000000000f8e21597e4245bbae0f128626c4b755557000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, 0x0, &(0x7f0000000a40)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), 0x0}, 0x20) socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000007870400b50e000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) 221.768947ms ago: executing program 4 (id=5225): prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x1400200bce) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x43f6d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000340)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/216, &(0x7f00000000c0)=""/87, &(0x7f00000004c0)=""/57, 0x200000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x0, 0x0, &(0x7f0000000680)='GPL\x00'}, 0x94) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) 0s ago: executing program 5 (id=5226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x20}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000c80)='syzkaller\x00'}, 0x94) kernel console output (not intermixed with test programs): ces, check your ipvs configuration [ 1658.513224][ T30] kauditd_printk_skb: 175 callbacks suppressed [ 1658.513245][ T30] audit: type=1400 audit(2000000355.399:25014): avc: denied { read write } for pid=22909 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1658.592948][ T30] audit: type=1400 audit(2000000355.399:25015): avc: denied { open } for pid=22909 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1658.705765][ T30] audit: type=1400 audit(2000000355.399:25016): avc: denied { ioctl } for pid=22909 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1658.772880][ T30] audit: type=1400 audit(2000000355.449:25017): avc: denied { bpf } for pid=23664 comm="syz.5.4941" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1658.823892][ T30] audit: type=1400 audit(2000000355.529:25018): avc: denied { ioctl } for pid=23664 comm="syz.5.4941" path="/dev/video3" dev="devtmpfs" ino=936 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1658.873103][T23673] netlink: 'syz.6.4942': attribute type 1 has an invalid length. [ 1658.920427][ T30] audit: type=1400 audit(2000000355.529:25019): avc: denied { create } for pid=23654 comm="syz.4.4938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1658.972486][ T30] audit: type=1400 audit(2000000355.529:25020): avc: denied { listen } for pid=23654 comm="syz.4.4938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1659.000865][ T30] audit: type=1400 audit(2000000355.539:25021): avc: denied { create } for pid=23654 comm="syz.4.4938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1659.040042][T23678] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1659.051751][T23678] bond1: (slave bond2): making interface the new active one [ 1659.060104][T23678] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1659.073458][T23682] tipc: Enabling of bearer rejected, failed to enable media [ 1659.082927][ T30] audit: type=1400 audit(2000000355.549:25022): avc: denied { getopt } for pid=23654 comm="syz.4.4938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1659.163226][ T30] audit: type=1400 audit(2000000355.549:25023): avc: denied { write } for pid=23654 comm="syz.4.4938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1659.243612][T22575] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1659.322687][T23689] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4948'. [ 1659.697739][T23692] IPVS: length: 141 != 8 [ 1659.874738][ T3812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1659.928792][T22575] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1659.946318][T22575] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1659.966546][T22575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.984677][T22575] usb 1-1: config 0 descriptor?? [ 1660.312930][T23702] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 1660.521548][T22575] steelseries 0003:1038:12B6.0019: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 1660.976442][T22594] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1661.104891][T23711] netlink: 'syz.6.4954': attribute type 10 has an invalid length. [ 1661.170941][T23711] team0: Device veth1_macvtap failed to register rx_handler [ 1661.175252][T22594] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1661.501196][T22594] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1661.503130][T17016] usb 1-1: USB disconnect, device number 119 [ 1661.517066][T22594] usb 6-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1661.547292][T22594] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.581725][T22594] usb 6-1: config 0 descriptor?? [ 1661.675387][ T6248] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1662.463323][T22594] hid-led 0003:04D8:F372.001A: item fetching failed at offset 5/7 [ 1662.491792][T22594] hid-led 0003:04D8:F372.001A: probe with driver hid-led failed with error -22 [ 1663.023932][T23724] delete_channel: no stack [ 1663.053534][T22594] usb 6-1: USB disconnect, device number 10 [ 1663.438909][ T3812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1663.527076][ T30] kauditd_printk_skb: 193 callbacks suppressed [ 1663.527093][ T30] audit: type=1400 audit(2000000360.429:25217): avc: denied { read write } for pid=22909 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1663.621813][ T30] audit: type=1400 audit(2000000360.429:25218): avc: denied { read write open } for pid=22909 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1663.704301][ T30] audit: type=1400 audit(2000000360.429:25219): avc: denied { ioctl } for pid=22909 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1663.822983][T17016] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1664.441177][ T30] audit: type=1400 audit(2000000360.469:25220): avc: denied { read write } for pid=22824 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1664.497263][ T30] audit: type=1400 audit(2000000360.469:25221): avc: denied { read } for pid=23741 comm="syz.6.4962" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1664.546747][ T30] audit: type=1400 audit(2000000360.469:25222): avc: denied { read open } for pid=23741 comm="syz.6.4962" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1664.675499][T17016] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1664.694990][T17016] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1664.725930][T17016] usb 5-1: config 220 has an invalid descriptor of length 50, skipping remainder of the config [ 1664.727449][T23750] fuse: Bad value for 'fd' [ 1664.742854][T17016] usb 5-1: config 220 has no interface number 2 [ 1664.755863][ T30] audit: type=1400 audit(2000000360.479:25223): avc: denied { open } for pid=22824 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1664.791312][T17016] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1664.833125][T17016] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1664.861299][T17016] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1664.873158][ T30] audit: type=1400 audit(2000000360.479:25224): avc: denied { ioctl } for pid=22824 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1664.910403][T17016] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1664.928921][T17016] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1664.940283][T17016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.960527][ T30] audit: type=1400 audit(2000000360.489:25225): avc: denied { execmem } for pid=23741 comm="syz.6.4962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1664.991829][T17016] usb 5-1: Product: syz [ 1665.002254][T17016] usb 5-1: Manufacturer: syz [ 1665.012426][T17016] usb 5-1: SerialNumber: syz [ 1665.068641][ T30] audit: type=1400 audit(2000000360.579:25226): avc: denied { ioctl } for pid=23739 comm="syz.4.4961" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1665.123910][ T6818] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1665.572274][T17016] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1665.580537][T17016] uvcvideo 5-1:220.0: No valid video chain found. [ 1665.588786][T17016] usb 5-1: selecting invalid altsetting 0 [ 1665.614245][T17016] usb 5-1: selecting invalid altsetting 0 [ 1665.620011][T17016] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1666.201583][T17016] usb 5-1: USB disconnect, device number 100 [ 1666.737418][T23780] tipc: Enabling of bearer rejected, failed to enable media [ 1666.835311][ T3812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1666.892133][T23789] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4976'. [ 1666.977728][T23795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4980'. [ 1667.169806][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888068637c00: rx timeout, send abort [ 1667.669931][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888068637400: rx timeout, send abort [ 1667.680111][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888068637c00: abort rx timeout. Force session deactivation [ 1668.178299][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888068637400: abort rx timeout. Force session deactivation [ 1668.962493][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.009789][ T30] kauditd_printk_skb: 194 callbacks suppressed [ 1669.009823][ T30] audit: type=1400 audit(2000000364.999:25421): avc: denied { execmem } for pid=23807 comm="syz.0.4985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1669.108902][ T30] audit: type=1400 audit(2000000365.109:25422): avc: denied { execmem } for pid=23805 comm="syz.7.4984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1669.129713][ T30] audit: type=1400 audit(2000000365.199:25423): avc: denied { read } for pid=5177 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1669.152450][ T30] audit: type=1400 audit(2000000365.199:25424): avc: denied { search } for pid=5177 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1669.176064][ T30] audit: type=1400 audit(2000000365.219:25426): avc: denied { prog_load } for pid=23802 comm="syz.5.4982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1669.195815][ T30] audit: type=1400 audit(2000000365.219:25427): avc: denied { bpf } for pid=23802 comm="syz.5.4982" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1669.221809][ T30] audit: type=1400 audit(2000000365.219:25428): avc: denied { map_create } for pid=23802 comm="syz.5.4982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1669.245776][ T30] audit: type=1400 audit(2000000365.229:25429): avc: denied { perfmon } for pid=23802 comm="syz.5.4982" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1669.343666][ T30] audit: type=1400 audit(2000000365.229:25430): avc: denied { create } for pid=23802 comm="syz.5.4982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1669.436961][ T30] audit: type=1400 audit(2000000365.239:25431): avc: denied { setopt } for pid=23802 comm="syz.5.4982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1669.475847][ T6248] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1669.785396][T23828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4989'. [ 1670.774632][ T3812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1671.122355][T23849] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4996'. [ 1671.719178][T23859] FAULT_INJECTION: forcing a failure. [ 1671.719178][T23859] name failslab, interval 1, probability 0, space 0, times 0 [ 1671.743374][T23859] CPU: 0 UID: 0 PID: 23859 Comm: syz.6.4999 Tainted: G L syzkaller #0 PREEMPT(full) [ 1671.743407][T23859] Tainted: [L]=SOFTLOCKUP [ 1671.743415][T23859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1671.743426][T23859] Call Trace: [ 1671.743433][T23859] [ 1671.743441][T23859] dump_stack_lvl+0x16c/0x1f0 [ 1671.743469][T23859] should_fail_ex+0x512/0x640 [ 1671.743494][T23859] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1671.743519][T23859] should_failslab+0xc2/0x120 [ 1671.743547][T23859] __kmalloc_cache_noprof+0x72/0x800 [ 1671.743568][T23859] ? __kasan_kmalloc+0xaa/0xb0 [ 1671.743591][T23859] ? fscontext_alloc_log+0x4a/0x1b0 [ 1671.743618][T23859] ? hpfs_init_fs_context+0x472/0x8b0 [ 1671.743642][T23859] ? fscontext_alloc_log+0x4a/0x1b0 [ 1671.743667][T23859] fscontext_alloc_log+0x4a/0x1b0 [ 1671.743693][T23859] __x64_sys_fsopen+0x157/0x240 [ 1671.743720][T23859] do_syscall_64+0xcd/0xf80 [ 1671.743745][T23859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.743765][T23859] RIP: 0033:0x7f08d5d8f749 [ 1671.743784][T23859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1671.743803][T23859] RSP: 002b:00007f08d6c02038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1671.743828][T23859] RAX: ffffffffffffffda RBX: 00007f08d5fe5fa0 RCX: 00007f08d5d8f749 [ 1671.743842][T23859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 1671.743854][T23859] RBP: 00007f08d6c02090 R08: 0000000000000000 R09: 0000000000000000 [ 1671.743866][T23859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1671.743878][T23859] R13: 00007f08d5fe6038 R14: 00007f08d5fe5fa0 R15: 00007ffcac154ca8 [ 1671.743907][T23859] [ 1672.035476][ T6818] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1672.425326][T23849] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿaã' [ 1672.616123][T22594] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1672.944982][T22594] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1672.967905][T22594] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1673.029775][T22594] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.046610][T22594] usb 7-1: config 0 descriptor?? [ 1673.059939][T23880] netlink: 'syz.5.5006': attribute type 3 has an invalid length. [ 1673.163978][ T6818] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1674.397886][ T30] kauditd_printk_skb: 206 callbacks suppressed [ 1674.397907][ T30] audit: type=1400 audit(2000000370.409:25637): avc: denied { create } for pid=23881 comm="syz.4.5007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1674.438887][T22594] lg-g15 0003:046D:C222.001B: unknown main item tag 0x0 [ 1674.557302][T23888] random: crng reseeded on system resumption [ 1675.390751][T23868] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5001'. [ 1675.400882][T23874] pty pty20: ldisc open failed (-12), clearing slot 20 [ 1675.425852][T22594] lg-g15 0003:046D:C222.001B: unknown main item tag 0x0 [ 1675.435633][T22594] lg-g15 0003:046D:C222.001B: unknown main item tag 0x0 [ 1675.443638][T22594] lg-g15 0003:046D:C222.001B: unknown main item tag 0x0 [ 1675.446332][ T30] audit: type=1400 audit(2000000370.419:25638): avc: denied { write } for pid=23881 comm="syz.4.5007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1675.451316][T22594] lg-g15 0003:046D:C222.001B: unknown main item tag 0x0 [ 1675.471325][ T30] audit: type=1400 audit(2000000370.499:25639): avc: denied { create } for pid=23881 comm="syz.4.5007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1675.504660][ T30] audit: type=1400 audit(2000000370.509:25640): avc: denied { read write } for pid=23881 comm="syz.4.5007" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1675.528713][T22594] lg-g15 0003:046D:C222.001B: unknown main item tag 0x0 [ 1675.528747][T22594] lg-g15 0003:046D:C222.001B: unknown main item tag 0x0 [ 1675.544410][ T9] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1675.556423][T22594] lg-g15 0003:046D:C222.001B: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.6-1/input0 [ 1675.568388][ T30] audit: type=1400 audit(2000000370.509:25641): avc: denied { open } for pid=23881 comm="syz.4.5007" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1675.593153][ T30] audit: type=1400 audit(2000000370.509:25642): avc: denied { ioctl } for pid=23881 comm="syz.4.5007" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1675.770256][ T30] audit: type=1400 audit(2000000371.339:25643): avc: denied { ioctl } for pid=23867 comm="syz.6.5001" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1675.865781][T23897] FAULT_INJECTION: forcing a failure. [ 1675.865781][T23897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1675.879291][T23897] CPU: 1 UID: 0 PID: 23897 Comm: syz.5.5009 Tainted: G L syzkaller #0 PREEMPT(full) [ 1675.879322][T23897] Tainted: [L]=SOFTLOCKUP [ 1675.879329][T23897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1675.879340][T23897] Call Trace: [ 1675.879348][T23897] [ 1675.879356][T23897] dump_stack_lvl+0x16c/0x1f0 [ 1675.879384][T23897] should_fail_ex+0x512/0x640 [ 1675.879414][T23897] _copy_from_user+0x2e/0xd0 [ 1675.879441][T23897] copy_msghdr_from_user+0x98/0x160 [ 1675.879469][T23897] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1675.879504][T23897] ? lock_acquire+0x179/0x330 [ 1675.879539][T23897] ___sys_sendmsg+0xfe/0x1d0 [ 1675.879567][T23897] ? __pfx____sys_sendmsg+0x10/0x10 [ 1675.879591][T23897] ? __lock_acquire+0x433/0x22f0 [ 1675.879652][T23897] __sys_sendmsg+0x16d/0x220 [ 1675.879678][T23897] ? __pfx___sys_sendmsg+0x10/0x10 [ 1675.879702][T23897] ? irqentry_exit+0x1dd/0x8c0 [ 1675.879723][T23897] ? rcu_is_watching+0x12/0xc0 [ 1675.879757][T23897] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 1675.879788][T23897] do_syscall_64+0xcd/0xf80 [ 1675.879813][T23897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.879833][T23897] RIP: 0033:0x7fa1b378f749 [ 1675.879850][T23897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1675.879869][T23897] RSP: 002b:00007fa1b19b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1675.879889][T23897] RAX: ffffffffffffffda RBX: 00007fa1b39e6180 RCX: 00007fa1b378f749 [ 1675.879902][T23897] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 000000000000000a [ 1675.879915][T23897] RBP: 00007fa1b19b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1675.879927][T23897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1675.879939][T23897] R13: 00007fa1b39e6218 R14: 00007fa1b39e6180 R15: 00007fff77792ec8 [ 1675.879969][T23897] [ 1676.204080][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1676.220751][T23895] tipc: Enabling of bearer rejected, failed to enable media [ 1676.274172][ T9] usb 5-1: unable to read config index 0 descriptor/all [ 1676.296004][ T9] usb 5-1: can't read configurations, error -71 [ 1676.317244][ T30] audit: type=1400 audit(2000000371.399:25644): avc: denied { create } for pid=23872 comm="syz.0.5004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1676.403300][ T30] audit: type=1400 audit(2000000371.409:25645): avc: denied { read } for pid=23872 comm="syz.0.5004" dev="nsfs" ino=4026532831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1676.493184][T22594] usb 7-1: USB disconnect, device number 6 [ 1676.615918][ T30] audit: type=1400 audit(2000000371.409:25646): avc: denied { open } for pid=23872 comm="syz.0.5004" path="net:[4026532831]" dev="nsfs" ino=4026532831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1676.665153][T20898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1678.197205][T23924] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1678.236866][T23924] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5017'. [ 1678.570638][T23929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5019'. [ 1678.630559][T23931] misc userio: No port type given on /dev/userio [ 1678.736009][T23931] lo speed is unknown, defaulting to 1000 [ 1678.804739][ T3812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1680.162921][ T30] kauditd_printk_skb: 175 callbacks suppressed [ 1680.162941][ T30] audit: type=1400 audit(2000000376.229:25822): avc: denied { read write } for pid=23950 comm="syz.0.5026" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1680.270711][T23961] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5027'. [ 1680.280343][ T30] audit: type=1400 audit(2000000376.229:25823): avc: denied { open } for pid=23950 comm="syz.0.5026" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1680.308698][T23961] bridge0: port 4(team0) entered blocking state [ 1680.315556][T23961] bridge0: port 4(team0) entered disabled state [ 1680.321998][T23961] team0: entered allmulticast mode [ 1680.332105][ T30] audit: type=1400 audit(2000000376.239:25824): avc: denied { ioctl } for pid=23950 comm="syz.0.5026" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1680.363906][T23961] team_slave_0: entered allmulticast mode [ 1680.370496][T23961] team_slave_1: entered allmulticast mode [ 1680.381588][T23961] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1680.398835][ T30] audit: type=1400 audit(2000000377.209:25825): avc: denied { create } for pid=23960 comm="syz.4.5027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1680.422038][T23961] team0: entered promiscuous mode [ 1680.440476][T23961] team_slave_0: entered promiscuous mode [ 1680.457470][T23961] team_slave_1: entered promiscuous mode [ 1680.474566][T23961] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1680.483863][ T30] audit: type=1400 audit(2000000377.209:25826): avc: denied { ioctl } for pid=23960 comm="syz.4.5027" path="socket:[85737]" dev="sockfs" ino=85737 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1680.567981][ T30] audit: type=1400 audit(2000000377.219:25827): avc: denied { read write } for pid=23959 comm="syz.5.5028" name="video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1680.602986][ T30] audit: type=1400 audit(2000000377.219:25828): avc: denied { read write open } for pid=23959 comm="syz.5.5028" path="/dev/video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1680.649996][ T30] audit: type=1400 audit(2000000377.239:25829): avc: denied { ioctl } for pid=23959 comm="syz.5.5028" path="/dev/video3" dev="devtmpfs" ino=936 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1680.740088][ T30] audit: type=1400 audit(2000000377.509:25830): avc: denied { read write } for pid=22909 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1680.819632][ T30] audit: type=1400 audit(2000000377.509:25831): avc: denied { open } for pid=22909 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1680.884563][ T4739] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1681.299848][T23981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1681.309628][T23981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.529500][T23999] siw: device registration error -23 [ 1682.563651][T20898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1682.831492][T24010] fuse: Bad value for 'fd' [ 1682.862430][T24010] FAULT_INJECTION: forcing a failure. [ 1682.862430][T24010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1682.876243][T24010] CPU: 1 UID: 0 PID: 24010 Comm: syz.0.5042 Tainted: G L syzkaller #0 PREEMPT(full) [ 1682.876271][T24010] Tainted: [L]=SOFTLOCKUP [ 1682.876275][T24010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1682.876282][T24010] Call Trace: [ 1682.876287][T24010] [ 1682.876292][T24010] dump_stack_lvl+0x16c/0x1f0 [ 1682.876310][T24010] should_fail_ex+0x512/0x640 [ 1682.876329][T24010] copy_folio_from_iter_atomic+0x3ba/0x1a10 [ 1682.876354][T24010] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1682.876370][T24010] ? shmem_write_begin+0x176/0x300 [ 1682.876384][T24010] ? __pfx_shmem_write_begin+0x10/0x10 [ 1682.876397][T24010] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 1682.876417][T24010] generic_perform_write+0x221/0x900 [ 1682.876440][T24010] ? __pfx_generic_perform_write+0x10/0x10 [ 1682.876458][T24010] ? generic_update_time+0xcf/0xf0 [ 1682.876472][T24010] ? mnt_put_write_access_file+0x45/0xf0 [ 1682.876483][T24010] ? file_update_time_flags+0x35c/0x520 [ 1682.876499][T24010] shmem_file_write_iter+0x10e/0x140 [ 1682.876515][T24010] aio_write+0x3b9/0x910 [ 1682.876530][T24010] ? __pfx_aio_write+0x10/0x10 [ 1682.876546][T24010] ? irqentry_exit+0x1dd/0x8c0 [ 1682.876559][T24010] ? lockdep_hardirqs_on+0x7c/0x110 [ 1682.876583][T24010] ? io_submit_one+0x1243/0x1df0 [ 1682.876596][T24010] io_submit_one+0x1243/0x1df0 [ 1682.876615][T24010] ? __pfx_io_submit_one+0x10/0x10 [ 1682.876644][T24010] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1682.876669][T24010] ? __might_fault+0xe3/0x190 [ 1682.876681][T24010] ? __might_fault+0x13b/0x190 [ 1682.876696][T24010] ? __x64_sys_io_submit+0x1a9/0x350 [ 1682.876710][T24010] __x64_sys_io_submit+0x1a9/0x350 [ 1682.876725][T24010] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1682.876739][T24010] ? fput+0x70/0xf0 [ 1682.876758][T24010] do_syscall_64+0xcd/0xf80 [ 1682.876774][T24010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.876786][T24010] RIP: 0033:0x7f4bc4f8f749 [ 1682.876796][T24010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1682.876806][T24010] RSP: 002b:00007f4bc5ece038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1682.876818][T24010] RAX: ffffffffffffffda RBX: 00007f4bc51e6090 RCX: 00007f4bc4f8f749 [ 1682.876825][T24010] RDX: 0000200000000780 RSI: 0000000000000002 RDI: 00007f4bc5ea5000 [ 1682.876833][T24010] RBP: 00007f4bc5ece090 R08: 0000000000000000 R09: 0000000000000000 [ 1682.876839][T24010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1682.876846][T24010] R13: 00007f4bc51e6128 R14: 00007f4bc51e6090 R15: 00007ffd2c46f1d8 [ 1682.876862][T24010] [ 1683.264481][ T7792] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1683.767695][ T7792] usb 7-1: Using ep0 maxpacket: 16 [ 1683.830915][ T7792] usb 7-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1683.842305][ T7792] usb 7-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1683.863883][ T7792] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1683.870529][ T7792] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1683.912364][ T7792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.936678][ T7792] usb 7-1: config 0 descriptor?? [ 1684.185150][ T6126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1684.296393][T24025] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1684.315900][T24025] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5047'. [ 1684.868452][ T7792] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 1684.876507][ T7792] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 1684.884468][ T7792] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 1684.891647][ T7792] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 1684.945106][ T7792] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 1684.973146][ T7792] mcp2221 0003:04D8:00DD.001C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1685.093400][T24005] netlink: 'syz.6.5040': attribute type 21 has an invalid length. [ 1685.227227][ T30] kauditd_printk_skb: 174 callbacks suppressed [ 1685.227240][ T30] audit: type=1400 audit(2000000382.029:26006): avc: denied { execmem } for pid=24037 comm="syz.0.5049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1685.259835][ T30] audit: type=1400 audit(2000000382.129:26007): avc: denied { read } for pid=24004 comm="syz.6.5040" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1686.269023][ T30] audit: type=1400 audit(2000000382.129:26008): avc: denied { read open } for pid=24004 comm="syz.6.5040" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1686.302970][ T7792] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1687.269673][T20012] usb 7-1: reset high-speed USB device number 7 using dummy_hcd [ 1687.281405][ T30] audit: type=1400 audit(2000000382.159:26009): avc: denied { ioctl } for pid=24035 comm="syz.4.5048" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1687.307919][ T30] audit: type=1400 audit(2000000382.249:26010): avc: denied { read } for pid=24037 comm="syz.0.5049" dev="nsfs" ino=4026532831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1687.463187][ T30] audit: type=1400 audit(2000000382.249:26011): avc: denied { open } for pid=24037 comm="syz.0.5049" path="net:[4026532831]" dev="nsfs" ino=4026532831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1688.222979][ T30] audit: type=1400 audit(2000000382.259:26012): avc: denied { create } for pid=24037 comm="syz.0.5049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1688.246379][ T30] audit: type=1400 audit(2000000382.269:26013): avc: denied { connect } for pid=24037 comm="syz.0.5049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1688.270836][ T7792] usb 5-1: device descriptor read/all, error -71 [ 1688.285528][ T4739] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1688.338111][ T30] audit: type=1400 audit(2000000382.349:26014): avc: denied { read } for pid=24037 comm="syz.0.5049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1688.381168][ T30] audit: type=1400 audit(2000000382.349:26015): avc: denied { create } for pid=24037 comm="syz.0.5049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1688.782945][ T794] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1688.876653][T24069] overlay: ./file0 is not a directory [ 1689.032835][ T794] usb 1-1: Using ep0 maxpacket: 8 [ 1689.039655][ T794] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1689.053117][ T794] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1689.079206][T24072] IPVS: length: 141 != 8 [ 1689.084092][ T9] usb 7-1: USB disconnect, device number 7 [ 1689.106249][ T794] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1689.135108][ T794] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1689.162450][ T794] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1689.203089][ T794] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1689.232908][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.424977][ T6126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1689.467073][ T794] usb 1-1: usb_control_msg returned -32 [ 1689.472678][ T794] usbtmc 1-1:16.0: can't read capabilities [ 1689.826220][T24077] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1689.845079][T24077] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5060'. [ 1689.872646][T24082] FAULT_INJECTION: forcing a failure. [ 1689.872646][T24082] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.885533][T24082] CPU: 1 UID: 0 PID: 24082 Comm: syz.0.5051 Tainted: G L syzkaller #0 PREEMPT(full) [ 1689.885555][T24082] Tainted: [L]=SOFTLOCKUP [ 1689.885559][T24082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1689.885566][T24082] Call Trace: [ 1689.885571][T24082] [ 1689.885575][T24082] dump_stack_lvl+0x16c/0x1f0 [ 1689.885594][T24082] should_fail_ex+0x512/0x640 [ 1689.885610][T24082] ? __kmalloc_cache_node_noprof+0x62/0x820 [ 1689.885628][T24082] should_failslab+0xc2/0x120 [ 1689.885646][T24082] __kmalloc_cache_node_noprof+0x75/0x820 [ 1689.885661][T24082] ? __get_vm_area_node+0x101/0x330 [ 1689.885677][T24082] ? __pfx_css_rstat_updated+0x10/0x10 [ 1689.885696][T24082] ? __get_vm_area_node+0x101/0x330 [ 1689.885712][T24082] __get_vm_area_node+0x101/0x330 [ 1689.885731][T24082] __vmalloc_node_range_noprof+0x271/0x1480 [ 1689.885749][T24082] ? kernel_clone+0xfc/0x910 [ 1689.885765][T24082] ? kernel_clone+0xfc/0x910 [ 1689.885775][T24082] ? rcu_read_unlock+0x17/0x60 [ 1689.885789][T24082] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1689.885810][T24082] ? rcu_is_watching+0x12/0xc0 [ 1689.885828][T24082] ? kernel_clone+0xfc/0x910 [ 1689.885839][T24082] __vmalloc_node_noprof+0xad/0xf0 [ 1689.885856][T24082] ? kernel_clone+0xfc/0x910 [ 1689.885868][T24082] copy_process+0x2c40/0x74e0 [ 1689.885878][T24082] ? __lock_acquire+0x433/0x22f0 [ 1689.885900][T24082] ? __pfx_copy_process+0x10/0x10 [ 1689.885918][T24082] kernel_clone+0xfc/0x910 [ 1689.885930][T24082] ? __pfx_kernel_clone+0x10/0x10 [ 1689.885947][T24082] ? __mutex_unlock_slowpath+0x161/0x790 [ 1689.885964][T24082] __do_sys_clone+0xce/0x120 [ 1689.885974][T24082] ? __pfx___do_sys_clone+0x10/0x10 [ 1689.885991][T24082] ? ksys_write+0x1ac/0x250 [ 1689.886008][T24082] ? __pfx_ksys_write+0x10/0x10 [ 1689.886028][T24082] do_syscall_64+0xcd/0xf80 [ 1689.886042][T24082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.886054][T24082] RIP: 0033:0x7f4bc4f8f749 [ 1689.886065][T24082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1689.886076][T24082] RSP: 002b:00007f4bc5eacfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1689.886087][T24082] RAX: ffffffffffffffda RBX: 00007f4bc51e6180 RCX: 00007f4bc4f8f749 [ 1689.886095][T24082] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00000000a0001000 [ 1689.886102][T24082] RBP: 00007f4bc5ead090 R08: 0000000000000000 R09: 0000000000000000 [ 1689.886108][T24082] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1689.886115][T24082] R13: 00007f4bc51e6218 R14: 00007f4bc51e6180 R15: 00007ffd2c46f1d8 [ 1689.886130][T24082] [ 1689.886362][T24082] syz.0.5051: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1690.159965][T24082] CPU: 1 UID: 0 PID: 24082 Comm: syz.0.5051 Tainted: G L syzkaller #0 PREEMPT(full) [ 1690.159985][T24082] Tainted: [L]=SOFTLOCKUP [ 1690.159989][T24082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1690.159996][T24082] Call Trace: [ 1690.160000][T24082] [ 1690.160005][T24082] dump_stack_lvl+0x16c/0x1f0 [ 1690.160023][T24082] warn_alloc+0x248/0x3a0 [ 1690.160038][T24082] ? __pfx_warn_alloc+0x10/0x10 [ 1690.160050][T24082] ? trace_kmalloc+0x2b/0xb0 [ 1690.160065][T24082] ? __kmalloc_cache_node_noprof+0x2df/0x820 [ 1690.160081][T24082] ? __pfx_css_rstat_updated+0x10/0x10 [ 1690.160099][T24082] ? __kasan_kmalloc+0x8a/0xb0 [ 1690.160116][T24082] ? __get_vm_area_node+0x208/0x330 [ 1690.160135][T24082] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 1690.160158][T24082] ? kernel_clone+0xfc/0x910 [ 1690.160169][T24082] ? rcu_read_unlock+0x17/0x60 [ 1690.160182][T24082] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1690.160204][T24082] ? rcu_is_watching+0x12/0xc0 [ 1690.160218][T24082] ? kernel_clone+0xfc/0x910 [ 1690.160228][T24082] __vmalloc_node_noprof+0xad/0xf0 [ 1690.160245][T24082] ? kernel_clone+0xfc/0x910 [ 1690.160257][T24082] copy_process+0x2c40/0x74e0 [ 1690.160267][T24082] ? __lock_acquire+0x433/0x22f0 [ 1690.160291][T24082] ? __pfx_copy_process+0x10/0x10 [ 1690.160309][T24082] kernel_clone+0xfc/0x910 [ 1690.160321][T24082] ? __pfx_kernel_clone+0x10/0x10 [ 1690.160338][T24082] ? __mutex_unlock_slowpath+0x161/0x790 [ 1690.160355][T24082] __do_sys_clone+0xce/0x120 [ 1690.160366][T24082] ? __pfx___do_sys_clone+0x10/0x10 [ 1690.160383][T24082] ? ksys_write+0x1ac/0x250 [ 1690.160406][T24082] ? __pfx_ksys_write+0x10/0x10 [ 1690.160438][T24082] do_syscall_64+0xcd/0xf80 [ 1690.160460][T24082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.160473][T24082] RIP: 0033:0x7f4bc4f8f749 [ 1690.160483][T24082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1690.160494][T24082] RSP: 002b:00007f4bc5eacfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1690.160505][T24082] RAX: ffffffffffffffda RBX: 00007f4bc51e6180 RCX: 00007f4bc4f8f749 [ 1690.160513][T24082] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00000000a0001000 [ 1690.160520][T24082] RBP: 00007f4bc5ead090 R08: 0000000000000000 R09: 0000000000000000 [ 1690.160526][T24082] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1690.160539][T24082] R13: 00007f4bc51e6218 R14: 00007f4bc51e6180 R15: 00007ffd2c46f1d8 [ 1690.160554][T24082] [ 1690.160559][T24082] Mem-Info: [ 1690.412368][T24082] active_anon:22269 inactive_anon:0 isolated_anon:0 [ 1690.412368][T24082] active_file:22655 inactive_file:41309 isolated_file:0 [ 1690.412368][T24082] unevictable:770 dirty:552 writeback:0 [ 1690.412368][T24082] slab_reclaimable:13301 slab_unreclaimable:105584 [ 1690.412368][T24082] mapped:34159 shmem:18593 pagetables:1241 [ 1690.412368][T24082] sec_pagetables:0 bounce:0 [ 1690.412368][T24082] kernel_misc_reclaimable:0 [ 1690.412368][T24082] free:1255452 free_pcp:22050 free_cma:0 [ 1690.457990][T24082] Node 0 active_anon:89076kB inactive_anon:0kB active_file:90516kB inactive_file:165032kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:136564kB dirty:2208kB writeback:0kB shmem:72836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13292kB pagetables:4824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1690.490211][T24082] Node 1 active_anon:0kB inactive_anon:0kB active_file:104kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1690.520298][T24082] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1690.550113][T24082] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 1690.555853][T24082] Node 0 DMA32 free:1103392kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:89076kB inactive_anon:0kB active_file:90516kB inactive_file:165032kB unevictable:1544kB writepending:2208kB zspages:0kB present:3129332kB managed:2541840kB mlocked:8kB bounce:0kB free_pcp:78984kB local_pcp:49404kB free_cma:0kB [ 1690.589554][T24082] lowmem_reserve[]: 0 0 1 1 1 [ 1690.594679][T24082] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1690.624230][T24082] lowmem_reserve[]: 0 0 0 0 0 [ 1690.628921][T24082] Node 1 Normal free:3903056kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:104kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9216kB local_pcp:6304kB free_cma:0kB [ 1690.661182][T24082] lowmem_reserve[]: 0 0 0 0 0 [ 1690.665892][T24082] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1690.678814][T24082] Node 0 DMA32: 5994*4kB (UME) 2912*8kB (UME) 2514*16kB (UM) 650*32kB (UME) 327*64kB (UME) 101*128kB (UME) 129*256kB (UME) 61*512kB (UM) 26*1024kB (UM) 7*2048kB (ME) 209*4096kB (UM) = 1103432kB [ 1690.697865][T24082] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1690.709323][T24082] Node 1 Normal: 216*4kB (UME) 80*8kB (UME) 51*16kB (UME) 292*32kB (UME) 129*64kB (UME) 37*128kB (UME) 16*256kB (UME) 1*512kB (U) 3*1024kB (UME) 2*2048kB (ME) 944*4096kB (M) = 3903056kB [ 1690.727677][T24082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1690.737240][T24082] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1690.746531][T24082] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1690.756079][T24082] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1690.765366][T24082] 82553 total pagecache pages [ 1690.770031][T24082] 0 pages in swap cache [ 1690.774497][T24082] Free swap = 124996kB [ 1690.778634][T24082] Total swap = 124996kB [ 1690.782801][T24082] 2097051 pages RAM [ 1690.786589][T24082] 0 pages HighMem/MovableOnly [ 1690.811421][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 1690.811438][ T30] audit: type=1400 audit(2000000387.709:26109): avc: denied { prog_load } for pid=24076 comm="syz.7.5060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1690.845569][T24082] 429565 pages reserved [ 1690.846848][ T30] audit: type=1400 audit(2000000387.749:26110): avc: denied { bpf } for pid=24076 comm="syz.7.5060" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1690.849767][T24082] 0 pages cma reserved [ 1691.043445][ T30] audit: type=1400 audit(2000000387.799:26111): avc: denied { prog_load } for pid=24079 comm="syz.5.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1691.155727][T24089] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1691.466458][ T2981] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1691.491273][ T30] audit: type=1400 audit(2000000387.799:26112): avc: denied { bpf } for pid=24079 comm="syz.5.5061" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1691.534125][ T30] audit: type=1400 audit(2000000387.799:26113): avc: denied { perfmon } for pid=24079 comm="syz.5.5061" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1691.551590][T24093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5063'. [ 1691.560847][ T30] audit: type=1400 audit(2000000387.819:26114): avc: denied { create } for pid=24081 comm="syz.6.5062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1691.639405][ T30] audit: type=1400 audit(2000000388.039:26115): avc: denied { read } for pid=24079 comm="syz.5.5061" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1691.673373][ T30] audit: type=1400 audit(2000000388.049:26116): avc: denied { open } for pid=24079 comm="syz.5.5061" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1691.699076][ T30] audit: type=1400 audit(2000000388.049:26117): avc: denied { ioctl } for pid=24079 comm="syz.5.5061" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1691.701334][T24095] netlink: 'syz.6.5065': attribute type 1 has an invalid length. [ 1691.735717][ T30] audit: type=1400 audit(2000000388.069:26118): avc: denied { map_create } for pid=24079 comm="syz.5.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1691.862089][T24105] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5065'. [ 1691.916350][T24103] loop9: detected capacity change from 0 to 7 [ 1691.923135][T24103] buffer_io_error: 4 callbacks suppressed [ 1691.923157][T24103] Buffer I/O error on dev loop9, logical block 0, async page read [ 1691.936842][T24103] Buffer I/O error on dev loop9, logical block 0, async page read [ 1691.944818][T24103] Buffer I/O error on dev loop9, logical block 0, async page read [ 1691.948134][ T7792] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1691.952847][T24103] Buffer I/O error on dev loop9, logical block 0, async page read [ 1691.968273][T24103] Buffer I/O error on dev loop9, logical block 0, async page read [ 1691.976197][T24103] Buffer I/O error on dev loop9, logical block 0, async page read [ 1691.984078][T24103] Buffer I/O error on dev loop9, logical block 0, async page read [ 1691.991908][T24103] ldm_validate_partition_table(): Disk read failed. [ 1691.998526][T24103] Buffer I/O error on dev loop9, logical block 0, async page read [ 1692.006788][T24103] Buffer I/O error on dev loop9, logical block 0, async page read [ 1692.014676][T24103] Buffer I/O error on dev loop9, logical block 0, async page read [ 1692.022559][T24103] Dev loop9: unable to read RDB block 0 [ 1692.028293][T24103] loop9: unable to read partition table [ 1692.034073][T24103] loop9: partition table beyond EOD, truncated [ 1692.040212][T24103] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1692.040212][T24103] ) failed (rc=-5) [ 1692.053724][T17263] usb 1-1: USB disconnect, device number 120 [ 1692.442972][ T7792] usb 5-1: Using ep0 maxpacket: 16 [ 1692.449671][T24105] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1692.476254][T24105] bond3: (slave bond4): making interface the new active one [ 1692.491024][ T7792] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1692.502552][T24105] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1692.512594][ T7792] usb 5-1: config 0 has no interface number 0 [ 1692.520205][ T7792] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1692.601044][ T7792] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1692.616935][ T7792] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1692.627302][ T7792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.636937][ T7792] usb 5-1: Product: syz [ 1692.641233][ T7792] usb 5-1: Manufacturer: syz [ 1692.646373][ T7792] usb 5-1: SerialNumber: syz [ 1692.654634][ T7792] usb 5-1: config 0 descriptor?? [ 1692.665745][ T7792] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1692.728667][T24101] binder: 24100:24101 ioctl c0306201 200000000180 returned -14 [ 1692.737552][T24101] binder: 24100:24101 ioctl c0306201 0 returned -14 [ 1692.783478][ T3812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1693.037260][T24123] IPVS: length: 141 != 8 [ 1693.043332][T24123] bridge0: entered promiscuous mode [ 1693.054760][T24125] binder: 24097:24125 ioctl c00c620f 2000000003c0 returned -22 [ 1693.711708][T24123] bridge0: left promiscuous mode [ 1694.300433][ T4739] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1694.773059][ T5931] usb 5-1: USB disconnect, device number 105 [ 1694.965294][T24143] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5077'. [ 1694.975719][T24143] netlink: 'syz.0.5077': attribute type 6 has an invalid length. [ 1694.990946][T24143] netlink: 'syz.0.5077': attribute type 5 has an invalid length. [ 1695.019781][T24143] netlink: 'syz.0.5077': attribute type 4 has an invalid length. [ 1695.127621][T24150] bridge0: port 3(gretap0) entered blocking state [ 1695.134192][T24150] bridge0: port 3(gretap0) entered disabled state [ 1695.140766][T24150] gretap0: entered allmulticast mode [ 1695.147632][T24150] gretap0: entered promiscuous mode [ 1695.153367][T24150] bridge0: port 3(gretap0) entered blocking state [ 1695.159929][T24150] bridge0: port 3(gretap0) entered forwarding state [ 1695.170263][T24147] openvswitch: netlink: Unknown key attributes 1 [ 1695.447936][T24159] syzkaller0: entered promiscuous mode [ 1695.456371][T24159] syzkaller0: entered allmulticast mode [ 1695.551566][T24159] tipc: Started in network mode [ 1695.562369][T24159] tipc: Node identity 2ac144efe389, cluster identity 4711 [ 1695.590634][T24159] tipc: Enabled bearer , priority 0 [ 1695.615542][T24158] tipc: Resetting bearer [ 1695.727605][T24158] tipc: Disabling bearer [ 1695.735752][T14413] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1695.825286][ T30] kauditd_printk_skb: 295 callbacks suppressed [ 1695.825302][ T30] audit: type=1400 audit(2000000392.729:26414): avc: denied { read write } for pid=22824 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1695.862624][ T30] audit: type=1400 audit(2000000392.729:26415): avc: denied { open } for pid=22824 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1695.936410][ T30] audit: type=1400 audit(2000000392.729:26416): avc: denied { ioctl } for pid=22824 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1695.966073][ T30] audit: type=1400 audit(2000000392.819:26417): avc: denied { read } for pid=24171 comm="syz.0.5090" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1696.213228][ T30] audit: type=1400 audit(2000000392.819:26418): avc: denied { open } for pid=24171 comm="syz.0.5090" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1696.327179][ T30] audit: type=1400 audit(2000000392.819:26419): avc: denied { ioctl } for pid=24171 comm="syz.0.5090" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1696.352910][T22288] Bluetooth: hci0: command 0x0406 tx timeout [ 1696.467700][ T30] audit: type=1400 audit(2000000392.829:26420): avc: denied { create } for pid=24171 comm="syz.0.5090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1696.493605][ T30] audit: type=1400 audit(2000000392.829:26421): avc: denied { write } for pid=24171 comm="syz.0.5090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1696.992042][ T30] audit: type=1400 audit(2000000392.829:26422): avc: denied { read } for pid=24171 comm="syz.0.5090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1697.057963][ T30] audit: type=1400 audit(2000000392.829:26423): avc: denied { ioctl } for pid=24171 comm="syz.0.5090" path="socket:[86854]" dev="sockfs" ino=86854 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1697.185242][T24192] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 1697.385640][ T4267] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1697.933836][T24201] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1698.092860][T22575] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1698.287317][T22575] usb 6-1: Using ep0 maxpacket: 8 [ 1698.295089][T22575] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1698.333293][T22575] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1698.357175][T22575] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1698.368260][T22575] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1698.388319][T22575] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1698.402245][T22575] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1698.431848][T22575] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.486848][T24213] tipc: Enabling of bearer <õdp:syz1> rejected, media not registered [ 1698.592448][T24183] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5093'. [ 1698.749870][T22575] usb 6-1: usb_control_msg returned -32 [ 1698.763088][T22575] usbtmc 6-1:16.0: can't read capabilities [ 1698.805093][T24219] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 1699.203274][ T4739] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1699.486613][T24226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5103'. [ 1699.742960][ T5931] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1699.913223][ T5931] usb 7-1: config 3 has an invalid interface number: 61 but max is 0 [ 1699.968712][ T5931] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.042274][ T5931] usb 7-1: config 3 has no interface number 0 [ 1700.087492][ T5931] usb 7-1: config 3 interface 61 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1700.165525][ T5931] usb 7-1: config 3 interface 61 has no altsetting 0 [ 1700.246114][ T5931] usb 7-1: string descriptor 0 read error: -22 [ 1700.265320][ T5931] usb 7-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 1700.292408][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.309378][ T5931] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1700.409665][T22575] usb 6-1: USB disconnect, device number 11 [ 1700.622301][T14864] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1700.653707][T24240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1700.719317][T24229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1700.728743][T24240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1700.766021][T24229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1700.776557][ T5931] snd-usb-audio 7-1:3.61: probe with driver snd-usb-audio failed with error -2 [ 1700.947116][ T5931] usb 7-1: USB disconnect, device number 8 [ 1700.964483][ T30] kauditd_printk_skb: 175 callbacks suppressed [ 1700.964499][ T30] audit: type=1400 audit(2000000397.849:26599): avc: denied { execmem } for pid=24242 comm="syz.4.5109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1701.382993][ T30] audit: type=1400 audit(2000000398.069:26600): avc: denied { create } for pid=24241 comm="syz.5.5110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1701.403877][ T30] audit: type=1400 audit(2000000398.269:26601): avc: denied { create } for pid=24246 comm="syz.0.5111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1701.445621][ T30] audit: type=1400 audit(2000000398.289:26602): avc: denied { write } for pid=24246 comm="syz.0.5111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1702.017663][ T30] audit: type=1400 audit(2000000398.289:26603): avc: denied { read write } for pid=22824 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1702.044186][ T30] audit: type=1400 audit(2000000398.289:26604): avc: denied { open } for pid=22824 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1702.328698][ T30] audit: type=1400 audit(2000000398.289:26605): avc: denied { ioctl } for pid=22824 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1702.741916][ T30] audit: type=1400 audit(2000000398.289:26606): avc: denied { create } for pid=24246 comm="syz.0.5111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1702.909991][ T30] audit: type=1400 audit(2000000398.289:26607): avc: denied { allowed } for pid=24246 comm="syz.0.5111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1703.664773][T24267] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1703.691992][T22551] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1703.723013][ T5931] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1703.747824][T24272] 9pnet_fd: Insufficient options for proto=fd [ 1703.983673][ T5931] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 1704.041952][ T5931] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 1704.147815][ T5931] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1704.175004][ T5931] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1704.185315][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1704.194419][ T5931] usb 7-1: Product: syz [ 1704.202356][ T5931] usb 7-1: Manufacturer: syz [ 1704.207436][ T5931] usb 7-1: SerialNumber: syz [ 1704.215752][ T5931] usb 7-1: config 0 descriptor?? [ 1704.227691][ T5931] usb 7-1: selecting invalid altsetting 0 [ 1704.292234][T24288] tipc: Enabling of bearer rejected, failed to enable media [ 1704.403618][T24292] 9pnet_fd: Insufficient options for proto=fd [ 1704.453462][T24293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1704.511550][T24293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1704.524559][T17263] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1704.743719][T17263] usb 5-1: device descriptor read/64, error -71 [ 1704.750034][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1704.766285][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1704.776160][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1704.786579][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1704.800185][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1704.812211][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1704.821469][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1704.830707][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1704.855283][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1704.892307][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1704.909082][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1704.921808][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1704.931562][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1704.939630][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1704.950397][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1704.961588][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1704.969762][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1704.979862][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1704.989871][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.000204][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.011341][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.022087][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.032857][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.045119][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.053735][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1705.064585][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.077198][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.096613][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.108486][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.123229][T17263] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1705.125240][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.142119][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.152084][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.162460][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.172690][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.182638][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.198109][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.208540][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.219527][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.229481][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.239816][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.250127][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.260322][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.271233][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.281006][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.292841][T24296] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.398378][T24262] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1705.408192][ T5931] usb 7-1: USB disconnect, device number 9 [ 1705.944404][T24311] x_tables: duplicate underflow at hook 1 [ 1706.444037][ T30] kauditd_printk_skb: 217 callbacks suppressed [ 1706.444087][ T30] audit: type=1400 audit(2000000402.819:26808): avc: denied { create } for pid=24300 comm="syz.0.5125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1706.493815][ T30] audit: type=1400 audit(2000000402.839:26809): avc: denied { setopt } for pid=24300 comm="syz.0.5125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1706.536344][ T30] audit: type=1400 audit(2000000402.879:26810): avc: denied { ioctl } for pid=24300 comm="syz.0.5125" path="/dev/sg0" dev="devtmpfs" ino=774 ioctlcmd=0xae00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1706.671923][T22288] Bluetooth: hci2: command 0x040f tx timeout [ 1706.710465][ T30] audit: type=1400 audit(2000000402.899:26811): avc: denied { create } for pid=24300 comm="syz.0.5125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1706.780405][ T30] audit: type=1400 audit(2000000402.919:26812): avc: denied { write } for pid=24300 comm="syz.0.5125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1706.825026][T22574] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1706.830629][ T30] audit: type=1400 audit(2000000403.349:26813): avc: denied { bind } for pid=24303 comm="syz.4.5126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1707.008100][ T30] audit: type=1400 audit(2000000403.349:26814): avc: denied { setopt } for pid=24303 comm="syz.4.5126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1707.030089][ T30] audit: type=1400 audit(2000000403.379:26815): avc: denied { accept } for pid=24303 comm="syz.4.5126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1707.070235][ T30] audit: type=1400 audit(2000000403.379:26816): avc: denied { write } for pid=24303 comm="syz.4.5126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1707.091330][ T30] audit: type=1400 audit(2000000403.379:26818): avc: denied { read write } for pid=22824 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1707.635914][ T5931] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1707.850259][T24335] netlink: 'syz.7.5133': attribute type 1 has an invalid length. [ 1707.907243][T24329] overlay: ./file0 is not a directory [ 1707.957414][T24340] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1707.969053][ T5931] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1707.981490][T24340] bond1: (slave bond2): making interface the new active one [ 1707.989181][ T5931] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1708.000090][T24340] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1708.008792][ T5931] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.031113][ T5931] usb 7-1: config 220 has no interface number 2 [ 1708.040691][ T5931] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1708.064697][ T5931] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1708.087209][ T5931] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1708.099307][ T5931] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1708.149602][ T6126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1708.152562][ T5931] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1708.240666][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.253265][ T794] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1708.255524][ T5931] usb 7-1: Product: syz [ 1708.546811][ T5931] usb 7-1: Manufacturer: syz [ 1708.551480][ T5931] usb 7-1: SerialNumber: syz [ 1708.588701][ T794] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1708.608105][ T794] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1708.628523][ T794] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.645235][ T794] usb 1-1: config 220 has no interface number 2 [ 1708.652331][ T794] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1708.667998][ T794] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1708.676646][ T794] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1708.684126][ T794] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1708.713457][ T794] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1708.738175][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.756707][T24351] FAULT_INJECTION: forcing a failure. [ 1708.756707][T24351] name failslab, interval 1, probability 0, space 0, times 0 [ 1708.757975][ T794] usb 1-1: Product: syz [ 1708.774784][ T794] usb 1-1: Manufacturer: syz [ 1708.779408][ T794] usb 1-1: SerialNumber: syz [ 1708.803161][T24351] CPU: 0 UID: 0 PID: 24351 Comm: syz.4.5138 Tainted: G L syzkaller #0 PREEMPT(full) [ 1708.803194][T24351] Tainted: [L]=SOFTLOCKUP [ 1708.803200][T24351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1708.803210][T24351] Call Trace: [ 1708.803216][T24351] [ 1708.803223][T24351] dump_stack_lvl+0x16c/0x1f0 [ 1708.803248][T24351] should_fail_ex+0x512/0x640 [ 1708.803273][T24351] ? kmem_cache_alloc_noprof+0x62/0x760 [ 1708.803298][T24351] should_failslab+0xc2/0x120 [ 1708.803325][T24351] kmem_cache_alloc_noprof+0x75/0x760 [ 1708.803345][T24351] ? security_file_alloc+0x34/0x2b0 [ 1708.803372][T24351] ? security_file_alloc+0x34/0x2b0 [ 1708.803391][T24351] security_file_alloc+0x34/0x2b0 [ 1708.803411][T24351] init_file+0x93/0x4c0 [ 1708.803430][T24351] alloc_empty_file+0x73/0x1e0 [ 1708.803449][T24351] alloc_file_pseudo+0x13a/0x230 [ 1708.803468][T24351] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1708.803489][T24351] ? _raw_spin_unlock+0x28/0x50 [ 1708.803506][T24351] ? alloc_fd+0x471/0x7d0 [ 1708.803524][T24351] __anon_inode_getfile+0xe8/0x280 [ 1708.803549][T24351] __anon_inode_getfd+0x5c/0x150 [ 1708.803572][T24351] __x64_sys_fsopen+0x18b/0x240 [ 1708.803596][T24351] do_syscall_64+0xcd/0xf80 [ 1708.803617][T24351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.803633][T24351] RIP: 0033:0x7fd6d178f749 [ 1708.803647][T24351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1708.803662][T24351] RSP: 002b:00007fd6d26ec038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1708.803679][T24351] RAX: ffffffffffffffda RBX: 00007fd6d19e5fa0 RCX: 00007fd6d178f749 [ 1708.803691][T24351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 1708.803701][T24351] RBP: 00007fd6d26ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1708.803711][T24351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1708.803721][T24351] R13: 00007fd6d19e6038 R14: 00007fd6d19e5fa0 R15: 00007ffc988debf8 [ 1708.803745][T24351] [ 1709.128018][ T794] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1709.172406][ T794] uvcvideo 1-1:220.0: No valid video chain found. [ 1709.229481][ T794] usb 1-1: selecting invalid altsetting 0 [ 1709.301180][ T794] usb 1-1: selecting invalid altsetting 0 [ 1709.338203][ T794] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1709.613101][T21282] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1709.695163][T24358] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1709.717219][T24358] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5140'. [ 1709.743323][ T794] usb 1-1: USB disconnect, device number 121 [ 1710.012699][T24353] netlink: 388 bytes leftover after parsing attributes in process `syz.5.5139'. [ 1710.100712][ T5931] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1710.124926][ T5931] uvcvideo 7-1:220.0: No valid video chain found. [ 1710.142285][ T5931] usb 7-1: selecting invalid altsetting 0 [ 1710.202404][ T5931] usb 7-1: selecting invalid altsetting 0 [ 1710.228780][ T5931] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1710.245876][ T794] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1710.249398][ T5931] usb 7-1: USB disconnect, device number 10 [ 1710.431564][ T794] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1710.471937][ T794] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1710.495088][ T794] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1710.505109][T17263] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1710.534262][ T794] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1710.805699][T21282] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1710.931812][ T794] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1710.943526][ T794] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1710.961640][ T794] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1710.976338][ T794] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1710.988105][ T794] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1710.999015][ T794] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1711.125823][T17263] usb 5-1: Using ep0 maxpacket: 32 [ 1711.136988][ T794] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1711.210548][ T794] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1711.220485][ T794] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1711.232268][ T794] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1711.667110][T17263] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1711.676469][ T30] kauditd_printk_skb: 152 callbacks suppressed [ 1711.676486][ T30] audit: type=1400 audit(2000000408.179:26970): avc: denied { create } for pid=24373 comm="syz.7.5145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1711.709346][T17263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.717841][ T794] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1711.727973][T17263] usb 5-1: Product: syz [ 1711.732204][ T794] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1711.738957][T17263] usb 5-1: Manufacturer: syz [ 1711.744035][T17263] usb 5-1: SerialNumber: syz [ 1711.752930][T24381] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5147'. [ 1712.006638][ T30] audit: type=1400 audit(2000000408.189:26971): avc: denied { setopt } for pid=24373 comm="syz.7.5145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1712.032044][ T30] audit: type=1400 audit(2000000408.189:26972): avc: denied { write } for pid=24373 comm="syz.7.5145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1712.042113][T24391] netlink: 'syz.7.5150': attribute type 1 has an invalid length. [ 1712.052664][T17263] usb 5-1: config 0 descriptor?? [ 1712.065321][ T794] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1712.083951][ T794] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1712.084884][T24391] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1712.099271][ T794] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1712.109159][ T30] audit: type=1400 audit(2000000408.189:26973): avc: denied { connect } for pid=24373 comm="syz.7.5145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1712.127611][T24391] bond3: (slave geneve2): making interface the new active one [ 1712.141164][ T794] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1712.148081][T24391] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1712.152998][ T794] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1712.175977][ T30] audit: type=1400 audit(2000000408.189:26974): avc: denied { name_connect } for pid=24373 comm="syz.7.5145" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1712.201897][ T794] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1712.203079][ T5931] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1712.211817][ T30] audit: type=1400 audit(2000000408.539:26975): avc: denied { create } for pid=24373 comm="syz.7.5145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1712.239273][ T794] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1712.249356][ T794] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1712.259895][ T794] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1712.263719][ T30] audit: type=1400 audit(2000000408.549:26976): avc: denied { ioctl } for pid=24373 comm="syz.7.5145" path="socket:[87762]" dev="sockfs" ino=87762 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1712.270386][ T794] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1712.292214][ T30] audit: type=1400 audit(2000000408.549:26977): avc: denied { ioctl } for pid=24365 comm="syz.4.5143" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1712.338130][ T794] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1712.341301][ T30] audit: type=1400 audit(2000000408.549:26978): avc: denied { ioctl } for pid=24365 comm="syz.4.5143" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1712.350302][ T794] usb 1-1: Product: syz [ 1712.377580][ T30] audit: type=1400 audit(2000000408.559:26979): avc: denied { ioctl } for pid=24365 comm="syz.4.5143" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1712.383940][T17263] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 108 [ 1712.422863][ T5931] usb 6-1: Using ep0 maxpacket: 8 [ 1712.429878][ T5931] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1712.439052][T22551] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1712.443092][ T5931] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1712.455528][ T794] usb 1-1: Manufacturer: syz [ 1712.464802][ T5931] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1712.467610][ T794] usb 1-1: SerialNumber: syz [ 1712.486550][ T794] usb 1-1: config 0 descriptor?? [ 1712.490989][ T5931] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1712.494796][ T794] yurex 1-1:0.0: Could not find endpoints [ 1712.523265][ T5931] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1712.536596][ T5931] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1712.572860][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.619632][T24367] i2c i2c-1: adapter quirk: no zero length (addr 0x0001, size 0, read) [ 1712.792981][ T5931] usb 6-1: usb_control_msg returned -32 [ 1712.798608][ T5931] usbtmc 6-1:16.0: can't read capabilities [ 1713.210992][T24413] FAULT_INJECTION: forcing a failure. [ 1713.210992][T24413] name failslab, interval 1, probability 0, space 0, times 0 [ 1713.223855][T24413] CPU: 1 UID: 0 PID: 24413 Comm: syz.5.5146 Tainted: G L syzkaller #0 PREEMPT(full) [ 1713.223887][T24413] Tainted: [L]=SOFTLOCKUP [ 1713.223894][T24413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1713.223905][T24413] Call Trace: [ 1713.223911][T24413] [ 1713.223920][T24413] dump_stack_lvl+0x16c/0x1f0 [ 1713.223948][T24413] should_fail_ex+0x512/0x640 [ 1713.223973][T24413] ? kmem_cache_alloc_node_noprof+0x65/0x7f0 [ 1713.224001][T24413] should_failslab+0xc2/0x120 [ 1713.224029][T24413] kmem_cache_alloc_node_noprof+0x78/0x7f0 [ 1713.224051][T24413] ? alloc_vmap_area+0xd97/0x29a0 [ 1713.224083][T24413] ? alloc_vmap_area+0xd97/0x29a0 [ 1713.224107][T24413] alloc_vmap_area+0xd97/0x29a0 [ 1713.224145][T24413] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1713.224180][T24413] __get_vm_area_node+0x1ca/0x330 [ 1713.224213][T24413] __vmalloc_node_range_noprof+0x271/0x1480 [ 1713.224242][T24413] ? kernel_clone+0xfc/0x910 [ 1713.224270][T24413] ? kernel_clone+0xfc/0x910 [ 1713.224289][T24413] ? rcu_read_unlock+0x17/0x60 [ 1713.224313][T24413] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1713.224348][T24413] ? rcu_is_watching+0x12/0xc0 [ 1713.224372][T24413] ? kernel_clone+0xfc/0x910 [ 1713.224390][T24413] __vmalloc_node_noprof+0xad/0xf0 [ 1713.224418][T24413] ? kernel_clone+0xfc/0x910 [ 1713.224440][T24413] copy_process+0x2c40/0x74e0 [ 1713.224458][T24413] ? __lock_acquire+0x433/0x22f0 [ 1713.224495][T24413] ? __pfx_copy_process+0x10/0x10 [ 1713.224530][T24413] kernel_clone+0xfc/0x910 [ 1713.224552][T24413] ? __pfx_kernel_clone+0x10/0x10 [ 1713.224589][T24413] ? __mutex_unlock_slowpath+0x161/0x790 [ 1713.224617][T24413] __do_sys_clone+0xce/0x120 [ 1713.224636][T24413] ? __pfx___do_sys_clone+0x10/0x10 [ 1713.224669][T24413] ? ksys_write+0x1ac/0x250 [ 1713.224694][T24413] ? __pfx_ksys_write+0x10/0x10 [ 1713.224729][T24413] do_syscall_64+0xcd/0xf80 [ 1713.224754][T24413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1713.224774][T24413] RIP: 0033:0x7fa1b378f749 [ 1713.224791][T24413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1713.224809][T24413] RSP: 002b:00007fa1b19b3fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1713.224828][T24413] RAX: ffffffffffffffda RBX: 00007fa1b39e6180 RCX: 00007fa1b378f749 [ 1713.224841][T24413] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00000000a0001000 [ 1713.224854][T24413] RBP: 00007fa1b19b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1713.224867][T24413] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1713.224878][T24413] R13: 00007fa1b39e6218 R14: 00007fa1b39e6180 R15: 00007fff77792ec8 [ 1713.224908][T24413] [ 1713.524766][T17263] usb 1-1: USB disconnect, device number 122 [ 1714.003994][ T4267] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1714.118770][ T794] usb 5-1: USB disconnect, device number 108 [ 1714.289348][T24420] random: crng reseeded on system resumption [ 1714.745753][T24426] IPVS: length: 141 != 8 [ 1714.753790][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1715.147930][T13793] usb 6-1: USB disconnect, device number 12 [ 1715.440475][T22551] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1715.536108][T24436] IPVS: length: 141 != 8 [ 1715.902579][T24434] netlink: 'syz.7.5161': attribute type 10 has an invalid length. [ 1715.943433][T24434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1715.964097][T24439] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5162'. [ 1715.983453][T24434] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1716.002194][T24440] netlink: 'syz.7.5161': attribute type 10 has an invalid length. [ 1716.014334][T24440] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5161'. [ 1716.042901][T24440] batadv0: entered promiscuous mode [ 1716.080678][T24440] batadv0: entered allmulticast mode [ 1716.204079][T24440] bond0: (slave batadv0): Releasing backup interface [ 1716.361584][T24440] bridge0: port 4(batadv0) entered blocking state [ 1716.393100][T24446] can: request_module (can-proto-3) failed. [ 1716.405942][T24440] bridge0: port 4(batadv0) entered disabled state [ 1716.653057][ T794] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1716.771287][ T30] kauditd_printk_skb: 181 callbacks suppressed [ 1716.771305][ T30] audit: type=1400 audit(2000000413.669:27161): avc: denied { ioctl } for pid=24437 comm="syz.6.5162" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1716.870332][ T30] audit: type=1400 audit(2000000413.769:27162): avc: denied { create } for pid=24454 comm="syz.0.5166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1716.971509][ T794] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1716.992978][ T30] audit: type=1400 audit(2000000413.789:27163): avc: denied { ioctl } for pid=24437 comm="syz.6.5162" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1717.018124][ T794] usb 7-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1717.060189][ T794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.083096][ T4267] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1717.153442][ T794] usb 7-1: config 0 descriptor?? [ 1717.165176][ T7988] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1717.175278][ T7988] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1717.225390][ T30] audit: type=1400 audit(2000000413.799:27164): avc: denied { write } for pid=24454 comm="syz.0.5166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1717.292069][T24460] 9pnet_fd: Insufficient options for proto=fd [ 1717.478311][T24439] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5162'. [ 1717.523854][ T30] audit: type=1400 audit(2000000413.799:27165): avc: denied { nlmsg_write } for pid=24454 comm="syz.0.5166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1717.934871][ T30] audit: type=1400 audit(2000000413.869:27166): avc: denied { ioctl } for pid=24437 comm="syz.6.5162" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1717.999683][T24444] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1718.024632][T24466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5169'. [ 1718.063135][T24444] VFS: Can't find a romfs filesystem on dev nullb0. [ 1718.063135][T24444] [ 1718.069320][ T30] audit: type=1400 audit(2000000414.089:27167): avc: denied { ioctl } for pid=24437 comm="syz.6.5162" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1718.118269][ T4267] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.282827][ T30] audit: type=1400 audit(2000000414.089:27168): avc: denied { ioctl } for pid=24437 comm="syz.6.5162" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1718.353033][T24469] FAULT_INJECTION: forcing a failure. [ 1718.353033][T24469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1718.377474][ T30] audit: type=1400 audit(2000000414.099:27169): avc: denied { prog_load } for pid=24457 comm="syz.5.5168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1718.448352][ T30] audit: type=1400 audit(2000000414.099:27170): avc: denied { bpf } for pid=24457 comm="syz.5.5168" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1718.476353][T24469] CPU: 0 UID: 0 PID: 24469 Comm: syz.5.5170 Tainted: G L syzkaller #0 PREEMPT(full) [ 1718.476386][T24469] Tainted: [L]=SOFTLOCKUP [ 1718.476393][T24469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1718.476405][T24469] Call Trace: [ 1718.476413][T24469] [ 1718.476421][T24469] dump_stack_lvl+0x16c/0x1f0 [ 1718.476449][T24469] should_fail_ex+0x512/0x640 [ 1718.476479][T24469] _copy_from_user+0x2e/0xd0 [ 1718.476506][T24469] kstrtouint_from_user+0xd6/0x1d0 [ 1718.476526][T24469] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1718.476552][T24469] ? lock_acquire+0x179/0x330 [ 1718.476584][T24469] proc_fail_nth_write+0x83/0x220 [ 1718.476609][T24469] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1718.476639][T24469] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1718.476661][T24469] vfs_write+0x2a0/0x11d0 [ 1718.476689][T24469] ? __pfx___mutex_lock+0x10/0x10 [ 1718.476716][T24469] ? __pfx_vfs_write+0x10/0x10 [ 1718.476747][T24469] ? __fget_files+0x20e/0x3c0 [ 1718.476763][T24469] ? __print_lock_name+0x40/0xe0 [ 1718.476790][T24469] ksys_write+0x12a/0x250 [ 1718.476814][T24469] ? __pfx_ksys_write+0x10/0x10 [ 1718.476838][T24469] ? __anon_inode_getfd+0xb2/0x150 [ 1718.476868][T24469] do_syscall_64+0xcd/0xf80 [ 1718.476894][T24469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.476913][T24469] RIP: 0033:0x7fa1b378e1ff [ 1718.476929][T24469] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1718.476947][T24469] RSP: 002b:00007fa1b19f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1718.476966][T24469] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa1b378e1ff [ 1718.476978][T24469] RDX: 0000000000000001 RSI: 00007fa1b19f60a0 RDI: 0000000000000003 [ 1718.476990][T24469] RBP: 00007fa1b19f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1718.477002][T24469] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1718.477013][T24469] R13: 00007fa1b39e6038 R14: 00007fa1b39e5fa0 R15: 00007fff77792ec8 [ 1718.477040][T24469] [ 1718.493496][T22288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1718.697565][T22288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1718.706280][T22288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1718.718882][T22288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1718.727034][T22288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1718.805217][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1718.884977][ T4267] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.957382][ T794] usb 7-1: USB disconnect, device number 11 [ 1718.984003][T24473] lo speed is unknown, defaulting to 1000 [ 1719.328100][ T4267] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.368772][T24470] lo speed is unknown, defaulting to 1000 [ 1719.417669][T24479] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1719.459202][ T4267] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 1719.469776][ T4267] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 1719.498727][ T4267] team0: Port device netdevsim0 removed [ 1719.514680][ T4267] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.647346][T24479] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5172'. [ 1719.657253][T24485] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1720.002608][T22596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1720.754818][T15622] Bluetooth: hci3: command tx timeout [ 1720.865349][ T4267] team0: left allmulticast mode [ 1720.908171][ T4267] team_slave_0: left allmulticast mode [ 1720.928617][ T4267] team_slave_1: left allmulticast mode [ 1720.944038][ T4267] team0: left promiscuous mode [ 1720.949135][ T4267] team_slave_0: left promiscuous mode [ 1720.957521][ T4267] team_slave_1: left promiscuous mode [ 1720.963642][ T4267] bridge0: port 4(team0) entered disabled state [ 1720.972478][ T4267] gretap0: left allmulticast mode [ 1720.977783][ T4267] gretap0: left promiscuous mode [ 1720.985989][ T4267] bridge0: port 3(gretap0) entered disabled state [ 1720.997119][ T4267] bridge_slave_1: left allmulticast mode [ 1721.003653][ T4267] bridge_slave_1: left promiscuous mode [ 1721.009608][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.019394][ T4267] bridge_slave_0: left allmulticast mode [ 1721.025411][ T4267] bridge_slave_0: left promiscuous mode [ 1721.031245][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.252909][T22575] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1721.427937][T22575] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 1721.551400][T22575] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 1721.563409][T22575] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1721.581485][T22575] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1721.590964][T22575] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1721.601159][T22575] usb 6-1: Product: syz [ 1721.607111][T22575] usb 6-1: Manufacturer: syz [ 1721.678756][T24512] FAULT_INJECTION: forcing a failure. [ 1721.678756][T24512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1721.692029][T24512] CPU: 0 UID: 0 PID: 24512 Comm: syz.7.5181 Tainted: G L syzkaller #0 PREEMPT(full) [ 1721.692062][T24512] Tainted: [L]=SOFTLOCKUP [ 1721.692069][T24512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1721.692080][T24512] Call Trace: [ 1721.692087][T24512] [ 1721.692096][T24512] dump_stack_lvl+0x16c/0x1f0 [ 1721.692124][T24512] should_fail_ex+0x512/0x640 [ 1721.692155][T24512] _copy_from_user+0x2e/0xd0 [ 1721.692182][T24512] __sys_bpf+0x248/0x4980 [ 1721.692208][T24512] ? sched_clock_cpu+0x6c/0x530 [ 1721.692241][T24512] ? __pfx___sys_bpf+0x10/0x10 [ 1721.692271][T24512] ? find_held_lock+0x2b/0x80 [ 1721.692292][T24512] ? __schedule+0x3bbb/0x6150 [ 1721.692314][T24512] ? rcu_is_watching+0x12/0xc0 [ 1721.692339][T24512] ? __schedule+0x114c/0x6150 [ 1721.692386][T24512] ? rcu_is_watching+0x12/0xc0 [ 1721.692412][T24512] __x64_sys_bpf+0x78/0xc0 [ 1721.692430][T24512] ? lockdep_hardirqs_on+0x7c/0x110 [ 1721.692452][T24512] do_syscall_64+0xcd/0xf80 [ 1721.692477][T24512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.692497][T24512] RIP: 0033:0x7f4375d8f749 [ 1721.692513][T24512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1721.692531][T24512] RSP: 002b:00007f4376c05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1721.692551][T24512] RAX: ffffffffffffffda RBX: 00007f4375fe6180 RCX: 00007f4375d8f749 [ 1721.692565][T24512] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 1721.692577][T24512] RBP: 00007f4376c05090 R08: 0000000000000000 R09: 0000000000000000 [ 1721.692589][T24512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1721.692601][T24512] R13: 00007f4375fe6218 R14: 00007f4375fe6180 R15: 00007fffc1a46d68 [ 1721.692630][T24512] [ 1721.961664][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 1721.961728][ T30] audit: type=1400 audit(2000000418.509:27306): avc: denied { read } for pid=24505 comm="syz.6.5180" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1721.992901][T22575] usb 6-1: SerialNumber: syz [ 1722.163298][T22575] usb 6-1: config 0 descriptor?? [ 1722.202369][T22575] usb 6-1: selecting invalid altsetting 0 [ 1722.222904][ T30] audit: type=1400 audit(2000000418.509:27307): avc: denied { read open } for pid=24505 comm="syz.6.5180" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1722.247703][ T30] audit: type=1400 audit(2000000419.099:27308): avc: denied { ioctl } for pid=24503 comm="syz.5.5179" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1722.303922][ T4267] bond9 (unregistering): (slave geneve3): Releasing active interface [ 1722.336733][ T30] audit: type=1400 audit(2000000419.239:27309): avc: denied { read write } for pid=22824 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1722.395431][ T4267] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1722.413040][ T30] audit: type=1400 audit(2000000419.259:27310): avc: denied { read write open } for pid=22824 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1722.591303][ T30] audit: type=1400 audit(2000000419.259:27311): avc: denied { ioctl } for pid=22824 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1722.623711][ T30] audit: type=1400 audit(2000000419.269:27312): avc: denied { unmount } for pid=22909 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1722.646892][ T30] audit: type=1400 audit(2000000419.289:27313): avc: denied { read write } for pid=22909 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1723.036310][T15622] Bluetooth: hci3: command tx timeout [ 1723.039348][ T30] audit: type=1400 audit(2000000419.289:27314): avc: denied { open } for pid=22909 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1723.195622][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1723.312922][ T30] audit: type=1400 audit(2000000419.289:27315): avc: denied { ioctl } for pid=22909 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1723.595408][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1723.605657][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1723.616595][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1723.626841][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1723.636938][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1723.659261][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1723.668791][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1723.696295][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1723.717411][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1723.725462][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1723.733564][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1723.748352][ T4267] bond1 (unregistering): Released all slaves [ 1723.766970][ T4267] bond2 (unregistering): Released all slaves [ 1723.788712][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1723.819935][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1723.846076][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1723.878418][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1723.909148][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1723.918896][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1723.943474][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1723.962337][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1723.970627][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1723.997711][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1724.016703][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1724.045747][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1724.108767][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1724.108984][ T4267] bond3 (unregistering): Released all slaves [ 1724.177029][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1724.177800][T17263] hid-generic 932B:30000:00AF.001D: unknown main item tag 0x0 [ 1724.207044][T17263] hid-generic 932B:30000:00AF.001D: unknown main item tag 0x0 [ 1724.214683][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1724.214993][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1724.248374][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1724.264928][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1724.267397][T17263] hid-generic 932B:30000:00AF.001D: unknown main item tag 0x0 [ 1724.286069][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1724.306103][T17263] hid-generic 932B:30000:00AF.001D: unknown main item tag 0x0 [ 1724.316252][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1724.323734][T17263] hid-generic 932B:30000:00AF.001D: unknown main item tag 0x0 [ 1724.331787][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1724.344187][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1724.354649][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1724.378256][T17263] hid-generic 932B:30000:00AF.001D: unknown main item tag 0x0 [ 1724.398543][T17263] hid-generic 932B:30000:00AF.001D: unknown main item tag 0x0 [ 1724.422302][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1724.422314][T17263] hid-generic 932B:30000:00AF.001D: unknown main item tag 0x0 [ 1724.422343][T17263] hid-generic 932B:30000:00AF.001D: unknown main item tag 0x0 [ 1724.465510][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1724.488111][T17263] hid-generic 932B:30000:00AF.001D: unknown main item tag 0x0 [ 1724.497624][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1724.501706][T17263] hid-generic 932B:30000:00AF.001D: hidraw0: HID v0.09 Device [syz1] on syz0 [ 1724.526676][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1724.582973][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1724.632247][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1724.668857][T24520] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1724.720463][T17545] usb 6-1: USB disconnect, device number 13 [ 1724.964421][ T4267] bond4 (unregistering): Released all slaves [ 1725.077211][T15622] Bluetooth: hci3: command tx timeout [ 1725.367624][T24544] Bluetooth: MGMT ver 1.23 [ 1725.572386][ T4267] bond5 (unregistering): Released all slaves [ 1725.663036][ T7792] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1725.700828][ T4267] bond6 (unregistering): (slave bond7): Releasing backup interface [ 1725.726959][ T4267] bond6 (unregistering): Released all slaves [ 1725.829118][ T7792] usb 6-1: Using ep0 maxpacket: 8 [ 1725.861256][ T7792] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1725.869726][ T7792] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1725.881824][ T7792] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1725.891997][ T7792] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1725.907737][ T7792] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1725.921750][ T7792] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1725.931472][ T7792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.967546][ T4267] bond7 (unregistering): Released all slaves [ 1726.177449][ T4267] bond8 (unregistering): Released all slaves [ 1726.219602][ T7792] usb 6-1: usb_control_msg returned -32 [ 1726.225395][ T7792] usbtmc 6-1:16.0: can't read capabilities [ 1726.484662][ T4267] bond9 (unregistering): Released all slaves [ 1726.574902][ T4267] bond10 (unregistering): Released all slaves [ 1726.760395][ T4267] tipc: Left network mode [ 1726.806767][ T4267] IPVS: stopping master sync thread 24192 ... [ 1726.811230][T24470] chnl_net:caif_netlink_parms(): no params data found [ 1726.997878][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 1726.997897][ T30] audit: type=1400 audit(2000000423.739:27408): avc: denied { execmem } for pid=24552 comm="syz.6.5192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1727.058998][ T30] audit: type=1400 audit(2000000423.889:27409): avc: denied { read write } for pid=24552 comm="syz.6.5192" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1727.102499][ T30] audit: type=1400 audit(2000000423.889:27410): avc: denied { open } for pid=24552 comm="syz.6.5192" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1727.137532][ T30] audit: type=1400 audit(2000000423.889:27411): avc: denied { ioctl } for pid=24552 comm="syz.6.5192" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1727.167616][T15622] Bluetooth: hci3: command tx timeout [ 1727.238839][ T30] audit: type=1400 audit(2000000423.889:27412): avc: denied { read write } for pid=22824 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1727.274838][ T30] audit: type=1400 audit(2000000423.889:27413): avc: denied { open } for pid=22824 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1727.297727][T24558] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5194'. [ 1727.316065][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1727.330406][ T30] audit: type=1400 audit(2000000423.889:27414): avc: denied { ioctl } for pid=22824 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1727.364933][ T30] audit: type=1400 audit(2000000423.979:27415): avc: denied { create } for pid=24555 comm="syz.0.5193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1727.406651][ T30] audit: type=1400 audit(2000000424.019:27416): avc: denied { create } for pid=24555 comm="syz.0.5193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1727.477767][ T30] audit: type=1400 audit(2000000424.029:27417): avc: denied { create } for pid=24557 comm="syz.7.5194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1727.499583][T24564] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 1727.505578][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1727.514579][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1727.531395][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1727.545887][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1727.563109][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1727.575446][T24470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1727.585752][T24470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.593352][T24470] bridge_slave_0: entered allmulticast mode [ 1727.599312][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1727.613835][T24470] bridge_slave_0: entered promiscuous mode [ 1727.630189][T24470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1727.639174][T24470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.646800][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1727.656591][T24470] bridge_slave_1: entered allmulticast mode [ 1727.664399][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.676145][T24470] bridge_slave_1: entered promiscuous mode [ 1728.030872][ T9] usb 7-1: usb_control_msg returned -32 [ 1728.037127][ T9] usbtmc 7-1:16.0: can't read capabilities [ 1728.066141][ T4267] hsr_slave_0: left promiscuous mode [ 1728.079574][ T4267] hsr_slave_1: left promiscuous mode [ 1728.094110][ T4267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1728.117572][ T4267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1728.153146][ T4267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1728.163857][ T4267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1728.234068][ T9] usb 6-1: USB disconnect, device number 14 [ 1728.295436][T24571] FAULT_INJECTION: forcing a failure. [ 1728.295436][T24571] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.308164][T24571] CPU: 1 UID: 0 PID: 24571 Comm: syz.6.5192 Tainted: G L syzkaller #0 PREEMPT(full) [ 1728.308183][T24571] Tainted: [L]=SOFTLOCKUP [ 1728.308188][T24571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1728.308194][T24571] Call Trace: [ 1728.308199][T24571] [ 1728.308203][T24571] dump_stack_lvl+0x16c/0x1f0 [ 1728.308222][T24571] should_fail_ex+0x512/0x640 [ 1728.308239][T24571] ? kmem_cache_alloc_noprof+0x62/0x760 [ 1728.308254][T24571] should_failslab+0xc2/0x120 [ 1728.308272][T24571] kmem_cache_alloc_noprof+0x75/0x760 [ 1728.308284][T24571] ? avc_has_perm+0x144/0x1f0 [ 1728.308300][T24571] ? dup_fd+0x52/0xc70 [ 1728.308313][T24571] ? dup_fd+0x52/0xc70 [ 1728.308322][T24571] dup_fd+0x52/0xc70 [ 1728.308337][T24571] copy_process+0x22b3/0x74e0 [ 1728.308349][T24571] ? __lock_acquire+0x433/0x22f0 [ 1728.308371][T24571] ? __pfx_copy_process+0x10/0x10 [ 1728.308389][T24571] kernel_clone+0xfc/0x910 [ 1728.308401][T24571] ? __pfx_kernel_clone+0x10/0x10 [ 1728.308417][T24571] ? __mutex_unlock_slowpath+0x161/0x790 [ 1728.308434][T24571] __do_sys_clone+0xce/0x120 [ 1728.308445][T24571] ? __pfx___do_sys_clone+0x10/0x10 [ 1728.308462][T24571] ? ksys_write+0x1ac/0x250 [ 1728.308479][T24571] ? __pfx_ksys_write+0x10/0x10 [ 1728.308503][T24571] do_syscall_64+0xcd/0xf80 [ 1728.308518][T24571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.308530][T24571] RIP: 0033:0x7f08d5d8f749 [ 1728.308541][T24571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1728.308551][T24571] RSP: 002b:00007f08d6bbffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1728.308562][T24571] RAX: ffffffffffffffda RBX: 00007f08d5fe6180 RCX: 00007f08d5d8f749 [ 1728.308570][T24571] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00000000a0001000 [ 1728.308577][T24571] RBP: 00007f08d6bc0090 R08: 0000000000000000 R09: 0000000000000000 [ 1728.308584][T24571] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1728.308590][T24571] R13: 00007f08d5fe6218 R14: 00007f08d5fe6180 R15: 00007ffcac154ca8 [ 1728.308605][T24571] [ 1728.312264][ T4267] veth1_macvtap: left promiscuous mode [ 1728.883305][ T4267] veth0_macvtap: left promiscuous mode [ 1728.906036][ T4267] veth1_vlan: left promiscuous mode [ 1728.927555][ T4267] veth0_vlan: left promiscuous mode [ 1730.199389][T17545] usb 7-1: USB disconnect, device number 12 [ 1730.274749][T24591] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5201'. [ 1730.702899][T17545] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1730.749428][ T4267] team0 (unregistering): Port device team_slave_1 removed [ 1730.830215][ T4267] team0 (unregistering): Port device team_slave_0 removed [ 1730.874528][T17545] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 1730.889195][T17545] usb 7-1: config 0 has no interface number 0 [ 1730.902843][T17545] usb 7-1: config 0 interface 20 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1730.950070][T17545] usb 7-1: config 0 interface 20 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1730.981091][T17545] usb 7-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1731.014106][T17545] usb 7-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 1731.032858][T17545] usb 7-1: New USB device strings: Mfr=51, Product=0, SerialNumber=0 [ 1731.063247][T17545] usb 7-1: Manufacturer: syz [ 1731.092156][T17545] usb 7-1: config 0 descriptor?? [ 1731.541401][T17545] hid (null): usage index exceeded [ 1731.555859][T17545] uclogic 0003:28BD:0935.001E: interface is invalid, ignoring [ 1731.773251][T24470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1731.823009][T24470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1731.867198][T17545] usb 7-1: USB disconnect, device number 13 [ 1731.939787][T24470] team0: Port device team_slave_0 added [ 1731.961249][T24470] team0: Port device team_slave_1 added [ 1732.037306][T24470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1732.045621][ T30] kauditd_printk_skb: 124 callbacks suppressed [ 1732.045701][ T30] audit: type=1400 audit(2000000428.949:27542): avc: denied { ioctl } for pid=24599 comm="syz.5.5203" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1732.053049][T24470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1732.111489][T24470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1732.125325][ T30] audit: type=1400 audit(2000000429.029:27543): avc: denied { ioctl } for pid=24599 comm="syz.5.5203" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1732.127245][T24470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1732.164089][T24470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1732.171661][ T30] audit: type=1400 audit(2000000429.069:27544): avc: denied { prog_load } for pid=24601 comm="syz.0.5204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1732.195214][T24470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1732.209668][T17263] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1732.242693][ T30] audit: type=1400 audit(2000000429.129:27545): avc: denied { bpf } for pid=24601 comm="syz.0.5204" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1732.277625][ T30] audit: type=1400 audit(2000000429.129:27546): avc: denied { perfmon } for pid=24601 comm="syz.0.5204" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1732.305809][ T30] audit: type=1400 audit(2000000429.129:27547): avc: denied { bpf } for pid=24601 comm="syz.0.5204" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1732.329429][ T30] audit: type=1400 audit(2000000429.139:27548): avc: denied { read } for pid=24601 comm="syz.0.5204" dev="nsfs" ino=4026532831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1732.355465][ T30] audit: type=1400 audit(2000000429.139:27549): avc: denied { open } for pid=24601 comm="syz.0.5204" path="net:[4026532831]" dev="nsfs" ino=4026532831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1732.380468][ T30] audit: type=1400 audit(2000000429.139:27550): avc: denied { create } for pid=24601 comm="syz.0.5204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1732.422836][T17263] usb 6-1: Using ep0 maxpacket: 32 [ 1732.568445][T17263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1732.571351][ T30] audit: type=1400 audit(2000000429.139:27551): avc: denied { ioctl } for pid=24601 comm="syz.0.5204" path="socket:[89509]" dev="sockfs" ino=89509 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1732.585370][T17263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1732.633035][T17263] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1732.668369][T24470] hsr_slave_0: entered promiscuous mode [ 1732.674172][ T4267] IPVS: stop unused estimator thread 0... [ 1732.680492][T24470] hsr_slave_1: entered promiscuous mode [ 1732.711234][T17263] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.731610][T24606] netlink: 'syz.6.5205': attribute type 1 has an invalid length. [ 1732.755912][T17263] usb 6-1: config 0 descriptor?? [ 1732.820171][T24606] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1732.865107][T24608] bond5: (slave geneve2): making interface the new active one [ 1732.875958][T24608] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1733.157915][T24614] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5206'. [ 1733.193185][T17263] usbhid 6-1:0.0: can't add hid device: -71 [ 1733.342388][T17263] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1733.358584][T24600] 9pnet_fd: Insufficient options for proto=fd [ 1733.373064][T17263] usb 6-1: USB disconnect, device number 15 [ 1733.584160][ T7792] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1733.643400][T24470] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1733.653400][T24470] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1733.662528][T24470] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1733.672225][T24470] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1733.738048][T24470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1733.753114][ T7792] usb 1-1: Using ep0 maxpacket: 8 [ 1733.757501][T24470] 8021q: adding VLAN 0 to HW filter on device team0 [ 1733.767331][ T7792] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1733.777907][T21246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.783599][ T7792] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1733.785108][T21246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1733.795584][ T7792] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1733.812491][ T7792] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1733.824184][ T7792] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1733.827866][T21246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.837717][ T7792] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1733.844323][T21246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1733.862109][ T7792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.087979][ T7792] usb 1-1: usb_control_msg returned -32 [ 1734.100106][ T7792] usbtmc 1-1:16.0: can't read capabilities [ 1734.158042][T24470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1735.195865][T24470] veth0_vlan: entered promiscuous mode [ 1735.199788][T24655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5214'. [ 1735.249858][T24470] veth1_vlan: entered promiscuous mode [ 1735.318262][T24656] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5214'. [ 1735.359433][T24470] veth0_macvtap: entered promiscuous mode [ 1735.381493][T24470] veth1_macvtap: entered promiscuous mode [ 1735.409058][T24470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1735.434498][T24470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1735.449822][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.459454][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.471146][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.480416][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.560636][T21017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.568981][T21017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.593884][T21017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.601883][T21017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.232432][T20012] usb 1-1: USB disconnect, device number 123 [ 1737.866745][T24683] binder: 24676:24683 ioctl c0306201 200000000640 returned -22 [ 1737.903354][ T30] kauditd_printk_skb: 253 callbacks suppressed [ 1737.903371][ T30] audit: type=1400 audit(2000000434.029:27805): avc: denied { prog_load } for pid=24671 comm="syz.0.5219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1738.177842][T24684] IPVS: length: 141 != 8 [ 1738.363041][ T30] audit: type=1400 audit(2000000434.029:27806): avc: denied { bpf } for pid=24671 comm="syz.0.5219" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1739.384374][ T30] audit: type=1400 audit(2000000434.029:27807): avc: denied { perfmon } for pid=24671 comm="syz.0.5219" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1843.402729][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1843.409717][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P24685/1:b..l [ 1843.418349][ C0] rcu: (detected by 0, t=10502 jiffies, g=136269, q=463 ncpus=2) [ 1843.426148][ C0] task:syz.6.5222 state:R running task stack:27160 pid:24685 tgid:24680 ppid:22909 task_flags:0x40044c flags:0x00080001 [ 1843.441053][ C0] Call Trace: [ 1843.444340][ C0] [ 1843.447277][ C0] ? __schedule+0x10b9/0x6150 [ 1843.451958][ C0] __schedule+0x1139/0x6150 [ 1843.456488][ C0] ? __pfx___schedule+0x10/0x10 [ 1843.461348][ C0] preempt_schedule_irq+0x51/0x90 [ 1843.466379][ C0] irqentry_exit+0x1d8/0x8c0 [ 1843.470977][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1843.476962][ C0] RIP: 0010:lock_release+0x183/0x2d0 [ 1843.482254][ C0] Code: 0f c1 05 b8 7a 12 12 83 f8 01 0f 85 03 01 00 00 9c 58 f6 c4 02 0f 85 ee 00 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 4d 34 12 12 0f 85 32 01 00 00 48 83 c4 18 5b 41 5c 41 [ 1843.501857][ C0] RSP: 0018:ffffc9000ccfee98 EFLAGS: 00000206 [ 1843.507921][ C0] RAX: 1c4a49220f421700 RBX: ffffffff8e3c92c0 RCX: ffffc9000ccfeea4 [ 1843.515898][ C0] RDX: 0000000000000000 RSI: ffffffff8da9585e RDI: ffffffff8bf21180 [ 1843.523872][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 00000000ffffffff [ 1843.531834][ C0] R10: ffff888078dcd4b0 R11: 00000000000062f1 R12: ffffffff816c2504 [ 1843.539794][ C0] R13: 0000000000000206 R14: ffff888078dcc980 R15: 0000000000000001 [ 1843.547761][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 1843.552987][ C0] unwind_next_frame+0x3f9/0x20a0 [ 1843.558018][ C0] ? arch_stack_walk+0x73/0x100 [ 1843.562881][ C0] __unwind_start+0x45f/0x7f0 [ 1843.567566][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1843.573726][ C0] arch_stack_walk+0x73/0x100 [ 1843.578409][ C0] ? stack_trace_save+0x8e/0xc0 [ 1843.583264][ C0] stack_trace_save+0x8e/0xc0 [ 1843.587945][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1843.593319][ C0] ? __lock_acquire+0x433/0x22f0 [ 1843.598257][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1843.603455][ C0] save_stack+0x160/0x1f0 [ 1843.607784][ C0] ? __pfx_save_stack+0x10/0x10 [ 1843.612645][ C0] ? page_ext_put+0x3e/0xd0 [ 1843.617155][ C0] __reset_page_owner+0x84/0x1a0 [ 1843.622100][ C0] free_unref_folios+0xa15/0x1600 [ 1843.627129][ C0] ? rcu_is_watching+0x12/0xc0 [ 1843.631895][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1843.637715][ C0] folios_put_refs+0x4be/0x750 [ 1843.642584][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1843.647869][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 1843.654294][ C0] shmem_undo_range+0x58f/0x1140 [ 1843.659263][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 1843.664642][ C0] ? __lock_acquire+0x433/0x22f0 [ 1843.669605][ C0] ? find_held_lock+0x2b/0x80 [ 1843.674281][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 1843.679512][ C0] ? stack_trace_save+0x8e/0xc0 [ 1843.684363][ C0] ? percpu_counter_add_batch+0xca/0x200 [ 1843.690001][ C0] shmem_evict_inode+0x3a1/0xbe0 [ 1843.694942][ C0] ? inode_wait_for_writeback+0x170/0x390 [ 1843.700663][ C0] ? kasan_save_stack+0x42/0x60 [ 1843.705513][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1843.710968][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1843.717039][ C0] ? find_held_lock+0x2b/0x80 [ 1843.721712][ C0] ? evict+0x37e/0xad0 [ 1843.725808][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1843.731271][ C0] evict+0x3c2/0xad0 [ 1843.735165][ C0] ? find_held_lock+0x2b/0x80 [ 1843.739844][ C0] ? __pfx_evict+0x10/0x10 [ 1843.744260][ C0] ? iput.part.0+0x619/0x1190 [ 1843.748942][ C0] iput.part.0+0x621/0x1190 [ 1843.753448][ C0] iput+0x35/0x40 [ 1843.757082][ C0] dentry_unlink_inode+0x29c/0x480 [ 1843.762213][ C0] __dentry_kill+0x1d0/0x600 [ 1843.766825][ C0] dput.part.0+0x4b1/0x9b0 [ 1843.771263][ C0] dput+0x1f/0x30 [ 1843.774906][ C0] __fput+0x51c/0xb70 [ 1843.778898][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1843.784101][ C0] task_work_run+0x150/0x240 [ 1843.788694][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1843.793811][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1843.799033][ C0] do_exit+0x87f/0x2bd0 [ 1843.803207][ C0] ? __pfx___might_resched+0x10/0x10 [ 1843.808505][ C0] ? __pfx_do_exit+0x10/0x10 [ 1843.813101][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1843.818134][ C0] ? find_held_lock+0x2b/0x80 [ 1843.822813][ C0] do_group_exit+0xd3/0x2a0 [ 1843.827319][ C0] get_signal+0x2671/0x26d0 [ 1843.831819][ C0] ? fput+0xcf/0xf0 [ 1843.835626][ C0] ? __sys_sendmmsg+0x35f/0x420 [ 1843.840486][ C0] ? __pfx_get_signal+0x10/0x10 [ 1843.845345][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 1843.850904][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1843.857078][ C0] exit_to_user_mode_loop+0x8c/0x540 [ 1843.862372][ C0] do_syscall_64+0x4ee/0xf80 [ 1843.866974][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.872953][ C0] RIP: 0033:0x7f08d5d8f749 [ 1843.877364][ C0] RSP: 002b:00007f08d6be1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1843.885773][ C0] RAX: 000000000000000b RBX: 00007f08d5fe6090 RCX: 00007f08d5d8f749 [ 1843.893748][ C0] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000007 [ 1843.901724][ C0] RBP: 00007f08d5e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1843.909690][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1843.917656][ C0] R13: 00007f08d5fe6128 R14: 00007f08d5fe6090 R15: 00007ffcac154ca8 [ 1843.925642][ C0] [ 1843.928661][ C0] rcu: rcu_preempt kthread starved for 10451 jiffies! g136269 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1843.939957][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1843.949919][ C0] rcu: RCU grace-period kthread stack dump: [ 1843.955800][ C0] task:rcu_preempt state:R running task stack:28064 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1843.969297][ C0] Call Trace: [ 1843.972590][ C0] [ 1843.975519][ C0] ? __schedule+0x10b9/0x6150 [ 1843.980198][ C0] __schedule+0x1139/0x6150 [ 1843.984716][ C0] ? __pfx___schedule+0x10/0x10 [ 1843.989575][ C0] ? find_held_lock+0x2b/0x80 [ 1843.994258][ C0] ? schedule+0x2d7/0x3a0 [ 1843.998617][ C0] schedule+0xe7/0x3a0 [ 1844.002697][ C0] schedule_timeout+0x123/0x290 [ 1844.007540][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1844.012908][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1844.018206][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1844.024008][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1844.029472][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1844.034243][ C0] ? rcu_gp_init+0xc2e/0x15e0 [ 1844.038938][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1844.044226][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1844.049420][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1844.054358][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1844.059236][ C0] rcu_gp_kthread+0x26d/0x380 [ 1844.063941][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1844.069156][ C0] ? rcu_is_watching+0x12/0xc0 [ 1844.073933][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1844.079134][ C0] ? __kthread_parkme+0x19e/0x250 [ 1844.084160][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1844.089367][ C0] kthread+0x3c5/0x780 [ 1844.093439][ C0] ? __pfx_kthread+0x10/0x10 [ 1844.098031][ C0] ? rcu_is_watching+0x12/0xc0 [ 1844.102843][ C0] ? __pfx_kthread+0x10/0x10 [ 1844.107454][ C0] ret_from_fork+0x983/0xb10 [ 1844.112043][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1844.117240][ C0] ? __switch_to+0x7af/0x10d0 [ 1844.121921][ C0] ? __pfx_kthread+0x10/0x10 [ 1844.126512][ C0] ret_from_fork_asm+0x1a/0x30 [ 1844.131293][ C0] [ 1844.134322][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1844.140657][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1844.151165][ C0] Tainted: [L]=SOFTLOCKUP [ 1844.155490][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1844.165538][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1844.171189][ C0] Code: 66 71 02 e9 93 2f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 23 25 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1844.190892][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c2 [ 1844.196960][ C0] RAX: 00000000063a76ed RBX: 0000000000000000 RCX: ffffffff8b6536f9 [ 1844.204937][ C0] RDX: 0000000000000000 RSI: ffffffff8dabb765 RDI: ffffffff8bf21180 [ 1844.212914][ C0] RBP: fffffbfff1c12f50 R08: 0000000000000001 R09: ffffed101708671d [ 1844.220887][ C0] R10: ffff8880b84338eb R11: 00000000ffffffff R12: 0000000000000000 [ 1844.228857][ C0] R13: ffffffff8e097a80 R14: ffffffff9086e4d0 R15: 0000000000000000 [ 1844.236846][ C0] FS: 0000000000000000(0000) GS:ffff888124968000(0000) knlGS:0000000000000000 [ 1844.245774][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1844.252359][ C0] CR2: 0000200000009000 CR3: 000000003338a000 CR4: 00000000003526f0 [ 1844.260328][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1844.268294][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1844.276264][ C0] Call Trace: [ 1844.279542][ C0] [ 1844.282463][ C0] default_idle+0x13/0x20 [ 1844.286796][ C0] default_idle_call+0x6c/0xb0 [ 1844.291657][ C0] do_idle+0x38d/0x510 [ 1844.295724][ C0] ? __pfx_do_idle+0x10/0x10 [ 1844.300324][ C0] cpu_startup_entry+0x4f/0x60 [ 1844.305083][ C0] rest_init+0x16b/0x2b0 [ 1844.309322][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1844.314605][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1844.320154][ C0] start_kernel+0x3f6/0x4d0 [ 1844.324660][ C0] x86_64_start_reservations+0x18/0x30 [ 1844.330116][ C0] x86_64_start_kernel+0x130/0x190 [ 1844.335230][ C0] common_startup_64+0x13e/0x148 [ 1844.340176][ C0]