last executing test programs: 6m25.589489611s ago: executing program 0 (id=225): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x100000000000000) read$char_usb(r0, &(0x7f0000000380)=""/131, 0x83) timer_create(0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 6m22.313637098s ago: executing program 0 (id=242): creat(&(0x7f0000000040)='./file0\x00', 0xc9a9c042ad77c5e5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[]) read$FUSE(r0, &(0x7f0000000580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000025c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002640)="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", 0x2000, &(0x7f0000004640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004700)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004740)='./file0\x00', 0x24c01, 0x8) io_setup(0x6, &(0x7f0000004780)=0x0) io_submit(r3, 0x2, &(0x7f00000047c0)=[&(0x7f0000004800)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f0000004840)='!', 0xffffff49, 0x3000000000000500}]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) 6m21.040468173s ago: executing program 0 (id=247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc815}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000ac0)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000b00)={&(0x7f0000000b40)=@xdp={0x2c, 0xdd86, r5, 0x1b}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000c00)='z', 0x14}], 0x1}, 0x4011) 6m20.191051678s ago: executing program 0 (id=249): mkdir(&(0x7f0000000000)='./file0\x00', 0x1cb) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xa87a}]}}]}, 0x38}}, 0x2004809c) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2020002, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/kcm\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/194, 0xc2}], 0x1, 0x182, 0xffffffff) mount$bpf(0x200000000000, &(0x7f0000000280)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000380)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x44000, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x6, 0x50}}]}}]}}, 0x0) chdir(&(0x7f0000000180)='./file0\x00') mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f00000005c0)={0x30002, 0x0, {[0x8, 0x8b, 0x90b2, 0x1, 0x4f891ad2, 0xf1b, 0x2c, 0x8]}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x1cb) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'tunl0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xa87a}]}}]}, 0x38}}, 0x2004809c) (async) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2020002, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='net/kcm\x00') (async) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/194, 0xc2}], 0x1, 0x182, 0xffffffff) (async) mount$bpf(0x200000000000, &(0x7f0000000280)='.\x00', 0x0, 0x8b7840, 0x0) (async) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x84000, 0x0) (async) mkdir(&(0x7f0000000380)='./file0/../file0\x00', 0x190) (async) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x0, &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x44000, 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x6, 0x50}}]}}]}}, 0x0) (async) chdir(&(0x7f0000000180)='./file0\x00') (async) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f00000005c0)={0x30002, 0x0, {[0x8, 0x8b, 0x90b2, 0x1, 0x4f891ad2, 0xf1b, 0x2c, 0x8]}}) (async) 6m16.924868378s ago: executing program 0 (id=257): creat(&(0x7f0000000040)='./file0\x00', 0xc9a9c042ad77c5e5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f0000000580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000025c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002640)="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", 0x2000, &(0x7f0000004640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004700)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004740)='./file0\x00', 0x24c01, 0x8) io_setup(0x6, &(0x7f0000004780)=0x0) io_submit(r3, 0x2, &(0x7f00000047c0)=[&(0x7f0000004800)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f0000004840)='!', 0xffffff49, 0x3000000000000500}]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) 6m16.411115124s ago: executing program 0 (id=261): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(0x0, 0x80) openat$random(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000004c0)=ANY=[@ANYBLOB="33020000000100000000000086dd6000000000072c40fe800000001000000000000000000001ff0200000000000000000000000000018b017811c9bfc591493b2cc6038f4b6302bb31b597130a4393656691f51fb68644f9f9b1661cda44f3"], 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000600), 0x2, 0x141102) r2 = socket$inet(0x2, 0x4, 0x1000) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000080)="8c6003c53db211d49d45e0c8bfc9bf9b50f08033242dccb1cba4fd0d5864a6ebcbc318a0117c6ef3f44d5b3ba515afc687389b5509103663c9267b798d26f97d4fb660aeb85c95ce5c73ee05e0a8ba54a5f2132a33a5727c464bd1e84cfe0fba4c1d0d5666a80995a68cb5ba51c20f4b9f826a1b4ce72d64cb8625dbff49ea430670944b784b202400a8ea8c626ef5f595349a8392e846d8c39490551f5db828837ec2aa5efc7b794f4a6c9815e0271eee2f9ee51befbc49183ce5f7e28a866ec5edc2a0e086b4e0717a4f7ef83535d77ffb974aef78662b898a6fe394", 0xdd) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) setpriority(0x2, 0x0, 0x4) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000001140)={0x0, 0x4, 0x0, 0x4, @vifc_lcl_ifindex, @broadcast}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x400) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000001200)={0x0, 0x0, 0x8, 0x2, 0xa44}) openat$nsim_port_pp_hold(0xffffffffffffff9c, &(0x7f0000000040)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x31}, 0x46b00, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fanotify_init(0x4, 0x400) r5 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x3a, 0x0, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(r6, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000087e0518200000000000000000000001fff3703e09040009fe030006000921e6fffb01222500090581034000098102"], 0x0) 6m13.671262845s ago: executing program 32 (id=261): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(0x0, 0x80) openat$random(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000004c0)=ANY=[@ANYBLOB="33020000000100000000000086dd6000000000072c40fe800000001000000000000000000001ff0200000000000000000000000000018b017811c9bfc591493b2cc6038f4b6302bb31b597130a4393656691f51fb68644f9f9b1661cda44f3"], 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000600), 0x2, 0x141102) r2 = socket$inet(0x2, 0x4, 0x1000) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000080)="8c6003c53db211d49d45e0c8bfc9bf9b50f08033242dccb1cba4fd0d5864a6ebcbc318a0117c6ef3f44d5b3ba515afc687389b5509103663c9267b798d26f97d4fb660aeb85c95ce5c73ee05e0a8ba54a5f2132a33a5727c464bd1e84cfe0fba4c1d0d5666a80995a68cb5ba51c20f4b9f826a1b4ce72d64cb8625dbff49ea430670944b784b202400a8ea8c626ef5f595349a8392e846d8c39490551f5db828837ec2aa5efc7b794f4a6c9815e0271eee2f9ee51befbc49183ce5f7e28a866ec5edc2a0e086b4e0717a4f7ef83535d77ffb974aef78662b898a6fe394", 0xdd) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) setpriority(0x2, 0x0, 0x4) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000001140)={0x0, 0x4, 0x0, 0x4, @vifc_lcl_ifindex, @broadcast}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x400) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000001200)={0x0, 0x0, 0x8, 0x2, 0xa44}) openat$nsim_port_pp_hold(0xffffffffffffff9c, &(0x7f0000000040)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x31}, 0x46b00, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fanotify_init(0x4, 0x400) r5 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x3a, 0x0, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(r6, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000087e0518200000000000000000000001fff3703e09040009fe030006000921e6fffb01222500090581034000098102"], 0x0) 5m0.731643476s ago: executing program 2 (id=484): creat(&(0x7f0000000040)='./file0\x00', 0xc9a9c042ad77c5e5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000025c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002640)="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", 0x2000, &(0x7f0000004640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004700)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004740)='./file0\x00', 0x24c01, 0x8) io_setup(0x6, &(0x7f0000004780)=0x0) io_submit(r3, 0x2, &(0x7f00000047c0)=[&(0x7f0000004800)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f0000004840)='!', 0xffffff49, 0x3000000000000500}]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) 4m59.987931485s ago: executing program 2 (id=488): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) openat(r0, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xdb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0xb, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000280)={0x3}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x7) prlimit64(r3, 0xe, &(0x7f0000000380)={0x8, 0x5}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000500)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000540)) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000580)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa2baaaaaaaaaabb080045f000780000000000119078000000000000000000004e20006490780200000003000000010000005680734ee222c29de4125f4181f6e030a5441a62cd2291500733467f517bd818d5a4a8d26ae61b4cbf1331ffc21d2e9bfb1eb3c03976ed837b6f876605ac29dcb96a8901e0711afb3db300"], 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m58.461029585s ago: executing program 2 (id=493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x560f, &(0x7f0000000280)) ioctl$VT_DISALLOCATE(r1, 0x5608) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7f, 0x0, 0x2016}}}, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000005c0)=0x4000007) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) 4m54.673403054s ago: executing program 2 (id=502): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r1 = fanotify_init(0x200, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="e0335d1583aaa5d4", 0x8}], 0x1) setsockopt$bt_BT_VOICE(r0, 0x112, 0x14, 0x0, 0xf8) 4m52.585247519s ago: executing program 2 (id=510): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2d6, 0x0, 0x9}, 0x10) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x20040400) unshare(0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000540)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES8=r1], &(0x7f00000001c0)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_usb_connect(0x0, 0x45, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000600)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/net\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_clone(0x20000, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x0) syz_ublk_add_dev(r4, 0x0, 0x0, r5, &(0x7f00000002c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) tkill(r3, 0x1f) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000340), 0x88002, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000380)=0xd) r7 = open(&(0x7f00000003c0)='./bus\x00', 0x143142, 0xc0) ftruncate(r7, 0x2007ffb) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000480)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f00000004c0)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) 4m51.260484185s ago: executing program 2 (id=516): io_uring_setup(0x4ab, &(0x7f0000000180)={0x0, 0xdd6c, 0x8, 0x1, 0x127}) syz_ublk_setup_io_uring(0x40020, &(0x7f0000000600)={0x0, 0x0, 0x100, 0x0, 0x14a}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000700)) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x101000) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f0000000140), 0x0}, 0x20) 4m35.248766482s ago: executing program 33 (id=516): io_uring_setup(0x4ab, &(0x7f0000000180)={0x0, 0xdd6c, 0x8, 0x1, 0x127}) syz_ublk_setup_io_uring(0x40020, &(0x7f0000000600)={0x0, 0x0, 0x100, 0x0, 0x14a}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000700)) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x101000) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f0000000140), 0x0}, 0x20) 4m2.713892993s ago: executing program 5 (id=678): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b2a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x23}, 0x1, 0x0, 0x0, 0x8848}, 0x4002004) 4m2.201884834s ago: executing program 5 (id=680): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f00000009c0)={{@align=0x2, {0x7, 0xd680, 0x200}}, {{[0x7, 0xffffff2f, 0x6, 0x7]}, 0x0, 0x2, 0x40, 0x0, &(0x7f00000008c0)=[{{@align=0x864d, {0x7ff, 0x100, 0x80000001, 0x1}}, 0x87cd, 0x0, 'syzkaller0\x00'}, {{@align=0x4, {0xf000, 0xf, 0xe, 0x6}}, 0x6, 0x0, '%:(\x00'}, {{@align=0x5, {0x40, 0x0, 0x9, 0x2}}, 0x7, 0x0, 'syzkaller0\x00'}, {{@align=0x400, {0x6, 0x7, 0x200, 0x5}}, 0x7ff, 0x0, '&\x00'}, {{@_ha_fsid={[0x6]}, {0x9, 0x1000, 0x2, 0x6}}, 0x7, 0x0, 'syzkaller0\x00'}]}}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000009500000500000a70000000060a010400000000000000000a00000144000480400001800b0001007461726765740000300002800800024000000002140003007339f2179455afb9fdd672ba012400000d000100434f4e4e4d41524b000000000900020073797a32000000000900010073797a31"], 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000a00)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000a40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000ac0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000b40), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000b80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x6) ptrace(0x10, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r8, 0x0, 0x240080c0) r9 = syz_open_dev$vim2m(&(0x7f0000000c00), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000c40)={0x6, 0x1, 0x4, 0x0, 0x5d}) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000000c80)=@multiplanar_fd={0x4, 0x1, 0x4, 0x0, 0x0, {}, {0x1, 0x2, 0x8, 0x5, 0x3, 0x4, "de159a49"}, 0xfd6, 0x4, {0x0}, 0x5}) vmsplice(r0, &(0x7f0000000840)=[{&(0x7f0000000480)="b4ef0577a5160ae9e9a35139b03da73bae0fd956ad9c3785460848a59ee1555e4a7e55994959e1f76c0247782f791cbcf507eea0a2076da6f18a78f608aa0067f6b55e5c5c2ab195169b119f56bb154e2c7aaab207ba9c39d41ea3a8da2a8a6cc86c673999208bd4c8b795be1b4ce6368a7aed07e6b84ae1402dcc649120d9220f5729eb9f765ba79c374bb0b4f22bb7e122b3d2c73d6d503d600bc0510b0d1d7b773560315935ff07a88f61a2949dc0d403fbe2dbc00dedf76833d738018be47316317a57ed5e5e9c9ffa7981c38e99b410fb6b8c95db50f7dc2d51edb76069b5ee8c", 0xe3}, {&(0x7f0000000580)="96baa4dc60b0ff0757082449f7158d9f605a235dd0ebec1a29b72c6b71b70033df867a870e59f7d235dd03d1fa6c5cd2aeabe935964c2274b2f2e3d023e8a5b5", 0x40}, {&(0x7f00000005c0)="2f29168cc361d4eb6d600bdcf43ad286d027f21feb7d7917555f19930d1c4f3be6145291462928a95d71e127f0989d68b324ceeb4761ea2a735ec5c40e3e586e63b2ef1d85d1c694", 0x48}, {&(0x7f0000000640)="8f6da6fa687bfdade6ca7f04072e944afda4f59bd87bc202b54d0b9f3d9f4afa0f666ed04961d4b32ebaef6216d02dca6eb4c06e8cead813c8b54afb23954c148b3cb3b108dbf66a9bb45cead4dc5be01a6f84b52a33442f9f896125fa40027413b3cb0343815303177778a9cb0500794e9f9030807d01285c29a6e7760cea1fe626c5ace40b0f70f4440261d5ea43e4c2350ecbee8b967aee00b71f84c3d092454e9b8f8953b1730929326bcea9", 0xae}, {&(0x7f0000000700)="da7086a0eca9d748b1896e9f859d224212b69ca28c8a5414f9db89d039e870f6df0725ec8deb89695f03c981a4c895b175fe5c97daf770923829de18afd416f831da8141b9edd50b938310f904c90b61fc93", 0x52}, {&(0x7f0000000780)="0851d072e31b45ea5f4207716412fcaff42c260286740cf6cf36526a4ae7265171caacb5b402559bfca624c0fc856c5b002a6f43081bdcc18234840aed958c3093b23d532113678acfe53517117b689e9911b681ebe765c1e441986450c5e2f797d55079ac707d242ba2eb6f5b683a8f3108f6432f5acb7ed8c8b6bcefcd918c3e53346947225fac6d1b791b26cd55736cb2049104d765d0cd1ea4d02305342162ce7b79e52a35b53e287fa3ad372e84cd333698c3e7", 0xb6}], 0x6, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000018c0)=@newqdisc={0x58, 0x24, 0x601, 0x0, 0x4000000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x54d, 0xa, 0x2, 0x4, 0x400, 0x6, 0xfffffffd, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtclass={0x24, 0x29, 0x1, 0x0, 0x400, {0x0, 0x0, 0x0, r4, {0xfff8, 0x4}, {0x7, 0xfff1}, {0xfff2, 0xfffe}}}, 0x24}}, 0x0) 4m0.703722801s ago: executing program 5 (id=683): r0 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000000c0)='1\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x80041) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000040)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x5, 0x20001, 0x0, 0x0, 0x4ffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010036bd7000fbdbdf2505000000030001800d0001007564703a73797ab047f3ec0014000280080001000b000000080004005f0d0000"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) getsockopt$MRT6(r1, 0x29, 0xcf, &(0x7f0000000140), &(0x7f0000000540)=0x4) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a600", @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf250300000004000500"], 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000400)={{{@in=@local, @in=@empty, 0x4e23, 0x0, 0x4e20, 0x8000, 0x2, 0x0, 0x0, 0x73}, {0xfffffffffffffffe, 0x4000000000000001, 0x0, 0xfffffffffffb, 0x5, 0x7, 0x4, 0x100000000000000}, {0x0, 0x0, 0x0, 0x4}, 0x80006c, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3501, 0x1, 0x1, 0x0, 0x40000, 0x80000001, 0xc6ff}}, 0xe8) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x4e23, 0xaf, @private0, 0xfffffffd}, 0x1c) close(0x3) 4m0.255703478s ago: executing program 5 (id=685): mkdirat(0xffffffffffffff9c, &(0x7f00000027c0)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/rpc\x00') write(0xffffffffffffffff, &(0x7f0000000100), 0xff7f) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="94", 0xf000}, {0x0}], 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') r2 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$nci(r2, &(0x7f0000000300)=ANY=[], 0x102) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f0000000380)=[{&(0x7f00000003c0)='2', 0x1}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='\x00', 0x9801) move_mount(r5, &(0x7f00000004c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000540)='./file0/file0\x00', 0x0, 0x80000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000580)='\x00', 0x89901) mount_setattr(r6, &(0x7f00000005c0)='.\x00', 0x9000, &(0x7f0000000600)={0x0, 0x0, 0x80000, {r6}}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x12}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) mount$tmpfs(0x0, &(0x7f0000002800)='./file0\x00', &(0x7f0000002840), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='mpol=bind:0-151']) 3m57.107917132s ago: executing program 5 (id=693): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000280)={0x28, 0x2, r2, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, 0x7ffffffe}) dup3(r0, r1, 0x0) 3m56.368881863s ago: executing program 5 (id=695): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount(&(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='cramfs\x00', 0x800080, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000002c0)=ANY=[], 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000003c0)={r2, 0xffff}, &(0x7f0000000400)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000007110120000000000950000070000000042de9af0c730f5c8eb2ad0244a42871737"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x100}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000640)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbee9, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000700)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000840), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000880)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), 0xffffffffffffffff) 3m55.272641571s ago: executing program 34 (id=695): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount(&(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='cramfs\x00', 0x800080, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000002c0)=ANY=[], 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000003c0)={r2, 0xffff}, &(0x7f0000000400)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000007110120000000000950000070000000042de9af0c730f5c8eb2ad0244a42871737"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x100}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000640)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbee9, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000700)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000840), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000880)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), 0xffffffffffffffff) 3m4.717865412s ago: executing program 6 (id=917): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) setresuid(0xee01, 0xee00, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000280)="b9800000c00f3235000400000f300f0116b9800000c00f3235008000000f300f0866baf80cb83848f189ef66bafc0cb800000000efb97b0800000f320fff58f466baf80cb85f1c548aef66bafc0cb000eec4e1a1ece3660ffa26", 0x5a}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m4.602378273s ago: executing program 6 (id=918): syz_emit_ethernet(0x5e, &(0x7f0000000440)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0180f2", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8000, {[@generic={0x1, 0xa, "0000000000f1cba4"}, @window={0x3, 0x3}, @fastopen={0x22, 0x4, "97d7"}]}}}}}}}}, 0x0) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f00000001c0)="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", 0x1d8, 0xfffffffffffffffc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x34, r1, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0xf040}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000005c0)={r3, &(0x7f00000004c0)='(!/%@}\x00', 0x82, &(0x7f0000000500)={@align=0x9, {0x4da, 0x4, 0x5, 0x4}}, 0x775, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x6}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}, 0x1, 0x40000, 0x0, 0x4008000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@ipv4, @in6=@private2}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}}, 0x24}}, 0x24040084) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40a01, 0x23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x1fd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) 2m56.527858661s ago: executing program 3 (id=949): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0x8000, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x80, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x6, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x7, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x80, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000340), 0x1010, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000240)=@target={'target ', {'PCI:', '5', ':', 'b', ':', 'd', '.', '1e'}}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0xf8) 2m56.380931339s ago: executing program 3 (id=952): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x7, 0x7fffffff}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xa, 0x1c}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r3 = fsopen(0x0, 0x0) fsmount(r3, 0x0, 0x8e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000080)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @empty, 0xf66e}}, 0x24) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) syz_usb_connect$cdc_ecm(0x5597c7114de75d6a, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r5, 0x84, 0x85, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x4, @mcast2, 0x8}}, 0x6}, &(0x7f0000000400)=0x90) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x40000000, 0x0) 2m56.368166396s ago: executing program 6 (id=953): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000180)={0x82, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x2, r1, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, 0x7ffffffe}) dup3(0xffffffffffffffff, r0, 0x0) 2m56.150230247s ago: executing program 6 (id=954): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x50) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x24, &(0x7f0000000180)=0x7, 0x4) (async) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f9f500", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="d8010000", @ANYRES64, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000000)={r0}) 2m55.980285583s ago: executing program 3 (id=955): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x10001) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/filehandle\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='mydomain / -4\n', 0xe) write(r0, 0x0, 0x0) setns(0xc9, 0x0) r4 = socket$netlink(0x10, 0x3, 0xb) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='K'], 0x14}, 0x1, 0x0, 0x0, 0x20804}, 0x44800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) pipe(&(0x7f0000000040)) (async) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x10001) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/filehandle\x00', 0x2, 0x0) (async) write(r3, &(0x7f00000001c0)='mydomain / -4\n', 0xe) (async) write(r0, 0x0, 0x0) (async) setns(0xc9, 0x0) (async) socket$netlink(0x10, 0x3, 0xb) (async) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='K'], 0x14}, 0x1, 0x0, 0x0, 0x20804}, 0x44800) (async) 2m55.907215189s ago: executing program 6 (id=956): r0 = syz_ublk_setup_io_uring(0x1b, &(0x7f0000000580)={0x0, 0x9f03, 0x80, 0x0, 0x1b9}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x88}, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1) pipe2$watch_queue(0x0, 0x80) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000007c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000a80)={0x73622a85, 0x1100, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000b00)={0x60, 0x0, &(0x7f00000008c0)=[@request_freeze={0x400c6313, 0x1, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x1, 0x50, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=[r5, 0xffffffffffffffff, r4, r5, r7, r0], 0x18}, @flat=@weak_binder={0x77622a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=[r7, 0xffffffffffffffff, r6, r7, r4, 0xffffffffffffffff, r7], 0x1c}}, &(0x7f0000000880)={0x0, 0x28, 0x40}}}, @enter_looper, @acquire]}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000bc0)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000c00)={0x8, 0x0, &(0x7f0000000c40)=[@acquire]}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000c80)={0x4c, 0x0, &(0x7f0000000cc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000d80)}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000e80)={0x44, 0x0, &(0x7f0000000ec0)=[@reply={0x40406301, {0x3, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000f40)={@flat=@binder={0x73622a85, 0x1000, 0x3, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x3}}, &(0x7f0000000fc0)={0x0, 0x18, 0x40}}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000340)='openpromfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac2.0/c_sync\x00', 0x0, 0x0) write$input_event(r10, &(0x7f0000000780)={{}, 0x1, 0x4, 0x9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x6}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f00000006c0), 0xa82, 0x0) write$selinux_load(r4, &(0x7f0000000700)=ANY=[], 0xffbc) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) 2m55.598922645s ago: executing program 3 (id=961): r0 = io_uring_setup(0x5940, &(0x7f0000000340)={0x0, 0x800000, 0x400, 0x2, 0x12a}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000580)=0xf) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000640)=0x3) 2m55.431312954s ago: executing program 6 (id=963): sync() (async, rerun: 32) sync() (rerun: 32) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x3) (async) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x4, 0x9, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x49, 0xd, 0x9}}) sync() (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x17, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x13e123e3, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0xf, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x3}, @generic={0x30, 0x9, 0x0, 0xc486, 0x90}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x6}]}, &(0x7f0000000200)='GPL\x00', 0x9, 0x5, &(0x7f0000000240)=""/5, 0x41000, 0x11, '\x00', 0x0, @fallback=0x3, r1, 0x8, &(0x7f0000000280)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000380)=[r1, r1, r3], &(0x7f00000003c0)=[{0x2, 0x2, 0xd, 0x2}, {0x0, 0x4, 0xb, 0x8}, {0x3, 0x1, 0xb, 0x5}, {0x4, 0x5, 0x8, 0x4}, {0x0, 0x2, 0xa, 0x5}, {0x2, 0x5, 0x6}], 0x10, 0x6}, 0x94) (async) sync() (async) sync() (async) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000500)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x22, r2}) (async) sync() r4 = syz_clone(0x4018000, &(0x7f0000000540)="d773f915e2c0ec01da20c4d485109f574f0aaf8b3a3d8bdcb9e9ed5ab3b496e0aefe9de4c88d136591fc24651d22c87c22010380fe408c4950539cf0628797b1652a17b42ccf6f6c7edcb77e7c1a9ac0bf89d6ab5d7ed90be118e9253074d85e813978af2e5f230a62d6b125ca9c43906c0b6ba48798e36c62e5cc233d0555943a7a9254c93761ca21163f29", 0x8c, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="650d797880157e6753c9d40855dbb963da001b75f84f6e5deab835cb13b4") syz_pidfd_open(r4, 0x0) (async) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d0e, &(0x7f00000006c0)) bind$alg(r1, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(aegis256-aesni)\x00'}, 0x58) mmap$IORING_OFF_PBUF_RING(0x0, 0x7, 0x2, 0x2010, r1, 0x8788abc4) (async, rerun: 64) r5 = dup(r3) (rerun: 64) r6 = syz_open_dev$ndb(&(0x7f0000000780), 0x0, 0x400000) ioctl$NBD_DO_IT(r6, 0xab03) socket$packet(0x11, 0x3, 0x300) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000007c0), 0x4000) ioctl$XFS_IOC_READLINK_BY_HANDLE(r1, 0xc038586c, &(0x7f0000000900)={r7, &(0x7f0000000800)='aead\x00', 0x74000, &(0x7f0000000840)={@_ha_fsid={[0x4, 0x8000]}, {0x0, 0x9, 0x9, 0x6}}, 0xfffffffd, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)=0x1000}) ioctl$BTRFS_IOC_DEV_REPLACE(r7, 0xca289435, &(0x7f0000000940)={0x2, 0x3, @status={[0x0, 0x4, 0x9, 0x8, 0x8, 0x7]}, [0xfffffffffffffff9, 0x3, 0x3, 0x80, 0x9, 0x7f, 0x2, 0x9, 0x2, 0x7, 0x0, 0x80000001, 0x2, 0x9, 0x400, 0x7, 0x0, 0x6, 0x3, 0x3, 0x80000000, 0x7, 0x3, 0x2, 0x3, 0x6, 0x5, 0x10001, 0x281a, 0x101, 0xc60000, 0x2, 0x4e, 0x45, 0x5, 0x1, 0x3, 0xb, 0x0, 0x1ff, 0xfffffffffffffff1, 0xeacb, 0x10000, 0x100000000, 0x100000000, 0x4, 0x2e841775, 0x3, 0x200, 0x80000000, 0x2, 0x7, 0x8000, 0x9, 0x401, 0x2, 0xffffffffffffffff, 0x7ff, 0x8, 0xad, 0x9, 0x4, 0x7, 0x7c]}) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r8, 0x65, 0x6, &(0x7f0000001380), &(0x7f00000013c0)=0x4) (async) sync() (async) fsmount(r5, 0x0, 0x88) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001740)={0xfffffffffffffffc, 0x0, &(0x7f0000001700)={&(0x7f0000001400)={0x2f0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8, 0x1, r2}, {0x190, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x4000}, 0x24000004) 2m54.729625123s ago: executing program 3 (id=965): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) setresuid(0xee01, 0xee00, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000280)="b9800000c00f3235000400000f300f0116b9800000c00f3235008000000f300f0866baf80cb83848f189ef66bafc0cb800000000efb97b0800000f320fff58f466baf80cb85f1c548aef66bafc0cb000eec4e1a1ece3660ffa26", 0x5a}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m54.317379083s ago: executing program 3 (id=968): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x182) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x2a) write(r1, &(0x7f00000006c0)='100', 0x3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700), 0x81, 0x0) r2 = syz_pidfd_open(0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\"'], 0x0}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESHEX=r2], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000380), 0x651, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt(r7, 0x11b, 0x8, 0x0, 0x0) recvmmsg(r5, &(0x7f00000003c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="970000002d0007012bbd70df5fc56bf205"], 0xa8}, 0x1, 0x0, 0x0, 0x14008004}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="01000000040000000800000cc00b00001d0000008c00857a6fe98e3406402beb563c44dcb36166c4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="010000000300"/28], 0x50) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 2m37.124536757s ago: executing program 35 (id=963): sync() (async, rerun: 32) sync() (rerun: 32) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x3) (async) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x4, 0x9, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x49, 0xd, 0x9}}) sync() (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x17, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x13e123e3, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0xf, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x3}, @generic={0x30, 0x9, 0x0, 0xc486, 0x90}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x6}]}, &(0x7f0000000200)='GPL\x00', 0x9, 0x5, &(0x7f0000000240)=""/5, 0x41000, 0x11, '\x00', 0x0, @fallback=0x3, r1, 0x8, &(0x7f0000000280)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000380)=[r1, r1, r3], &(0x7f00000003c0)=[{0x2, 0x2, 0xd, 0x2}, {0x0, 0x4, 0xb, 0x8}, {0x3, 0x1, 0xb, 0x5}, {0x4, 0x5, 0x8, 0x4}, {0x0, 0x2, 0xa, 0x5}, {0x2, 0x5, 0x6}], 0x10, 0x6}, 0x94) (async) sync() (async) sync() (async) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000500)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x22, r2}) (async) sync() r4 = syz_clone(0x4018000, &(0x7f0000000540)="d773f915e2c0ec01da20c4d485109f574f0aaf8b3a3d8bdcb9e9ed5ab3b496e0aefe9de4c88d136591fc24651d22c87c22010380fe408c4950539cf0628797b1652a17b42ccf6f6c7edcb77e7c1a9ac0bf89d6ab5d7ed90be118e9253074d85e813978af2e5f230a62d6b125ca9c43906c0b6ba48798e36c62e5cc233d0555943a7a9254c93761ca21163f29", 0x8c, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="650d797880157e6753c9d40855dbb963da001b75f84f6e5deab835cb13b4") syz_pidfd_open(r4, 0x0) (async) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d0e, &(0x7f00000006c0)) bind$alg(r1, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(aegis256-aesni)\x00'}, 0x58) mmap$IORING_OFF_PBUF_RING(0x0, 0x7, 0x2, 0x2010, r1, 0x8788abc4) (async, rerun: 64) r5 = dup(r3) (rerun: 64) r6 = syz_open_dev$ndb(&(0x7f0000000780), 0x0, 0x400000) ioctl$NBD_DO_IT(r6, 0xab03) socket$packet(0x11, 0x3, 0x300) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000007c0), 0x4000) ioctl$XFS_IOC_READLINK_BY_HANDLE(r1, 0xc038586c, &(0x7f0000000900)={r7, &(0x7f0000000800)='aead\x00', 0x74000, &(0x7f0000000840)={@_ha_fsid={[0x4, 0x8000]}, {0x0, 0x9, 0x9, 0x6}}, 0xfffffffd, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)=0x1000}) ioctl$BTRFS_IOC_DEV_REPLACE(r7, 0xca289435, &(0x7f0000000940)={0x2, 0x3, @status={[0x0, 0x4, 0x9, 0x8, 0x8, 0x7]}, [0xfffffffffffffff9, 0x3, 0x3, 0x80, 0x9, 0x7f, 0x2, 0x9, 0x2, 0x7, 0x0, 0x80000001, 0x2, 0x9, 0x400, 0x7, 0x0, 0x6, 0x3, 0x3, 0x80000000, 0x7, 0x3, 0x2, 0x3, 0x6, 0x5, 0x10001, 0x281a, 0x101, 0xc60000, 0x2, 0x4e, 0x45, 0x5, 0x1, 0x3, 0xb, 0x0, 0x1ff, 0xfffffffffffffff1, 0xeacb, 0x10000, 0x100000000, 0x100000000, 0x4, 0x2e841775, 0x3, 0x200, 0x80000000, 0x2, 0x7, 0x8000, 0x9, 0x401, 0x2, 0xffffffffffffffff, 0x7ff, 0x8, 0xad, 0x9, 0x4, 0x7, 0x7c]}) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r8, 0x65, 0x6, &(0x7f0000001380), &(0x7f00000013c0)=0x4) (async) sync() (async) fsmount(r5, 0x0, 0x88) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001740)={0xfffffffffffffffc, 0x0, &(0x7f0000001700)={&(0x7f0000001400)={0x2f0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8, 0x1, r2}, {0x190, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x4000}, 0x24000004) 2m37.074249216s ago: executing program 36 (id=968): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x182) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x2a) write(r1, &(0x7f00000006c0)='100', 0x3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700), 0x81, 0x0) r2 = syz_pidfd_open(0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\"'], 0x0}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESHEX=r2], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000380), 0x651, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt(r7, 0x11b, 0x8, 0x0, 0x0) recvmmsg(r5, &(0x7f00000003c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="970000002d0007012bbd70df5fc56bf205"], 0xa8}, 0x1, 0x0, 0x0, 0x14008004}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="01000000040000000800000cc00b00001d0000008c00857a6fe98e3406402beb563c44dcb36166c4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="010000000300"/28], 0x50) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 39.133023529s ago: executing program 4 (id=1316): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x82000) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) 37.968609342s ago: executing program 4 (id=1321): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40082, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0x40000005) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_setup(0x2e08, &(0x7f0000000380)={0x0, 0x5acf, 0x40, 0xffffffff}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000400)={0xaa, 0x1a5}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000440)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) accept4(r1, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r4, 0x0, 0x0) write(r4, &(0x7f00000004c0)='1', 0x1) ioctl$PPPIOCSACTIVE(r0, 0x40087446, 0x0) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) 37.187867364s ago: executing program 4 (id=1327): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x101002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) timer_create(0x0, &(0x7f0000000500)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000540)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000580)={0x2, 0x0, 0xfd8e, 0x7}) timer_settime(0x0, 0x1, &(0x7f00000005c0)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x123301, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt(r1, 0x85, 0x7d, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000000680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000740), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x102, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x6, 0x0, 0x1, 0xd, 0x0, 0x2, 0x5}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000090a010400000000000000000a0000040900020073797a3100000000c617000b3f6983de8608000a40fffffffc08000540000080090001006c6173740000000004000280140001800c000100636f756e746572000400028014000000110001000000"], 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f0000000940)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000980)='source', &(0x7f00000009c0)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a40)='source', &(0x7f0000000a80)='%(,c\xbe\r\xcc:', 0x0) close(0x3) r3 = open(&(0x7f0000000ac0)='.\x00', 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r3, 0xc028583e, &(0x7f0000000b00)={{[0x1, 0xa86, 0x3, 0x200]}, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000040)=[{{@_ha_fsid={[0x3, 0x7]}, {0x7ff, 0xffc, 0x8, 0x6}}, 0x7fffffff, 0x0, 'sysfs\x00'}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2800009) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00001ae000/0x2000)=nil, 0x2000, 0x0) 36.553609618s ago: executing program 4 (id=1330): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x21c}}], 0x30, 0x801}], 0x1, 0x0) 35.762575921s ago: executing program 4 (id=1333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) memfd_create(&(0x7f0000000040)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x0, 0x0}) timer_create(0x0, 0x0, 0x0) r3 = io_uring_setup(0x5940, &(0x7f0000000340)={0x0, 0x800000, 0x400, 0x2, 0x12a}) syz_open_dev$dri(0x0, 0x1000000000000000, 0x410000) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x141102) writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000580)=0xf) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$TCFLSH(r5, 0x400455c8, 0x2) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000005c0)={r6}) bind$xdp(r7, &(0x7f0000000600)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r7) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000640)=0x3) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f00000015c0)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={r8, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000001680)="b9ff03076844268cb89e14f088a847e0ffff2000ffffff88000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000010003904000000ffedffffffde00000044a79cb738bbc66795b2e56501340c", @ANYRES32=0x0, @ANYBLOB="80000000000000001c0012800b00010062726964676500000c0002800500070000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r0) 34.81375567s ago: executing program 4 (id=1336): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x20042) r2 = fsopen(&(0x7f0000000240)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000000600)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) close(r2) sync() ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x3, 0x2, 0x0, 0x6}, 0xffff}) write$sndseq(r1, &(0x7f0000000200)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x89, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x20000000, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffe2e}}, 0x20) 19.086235635s ago: executing program 37 (id=1336): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x20042) r2 = fsopen(&(0x7f0000000240)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000000600)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) close(r2) sync() ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x3, 0x2, 0x0, 0x6}, 0xffff}) write$sndseq(r1, &(0x7f0000000200)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x89, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x20000000, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffe2e}}, 0x20) 18.999533632s ago: executing program 7 (id=1401): gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x1f, 0x1, 0x0, 0x0, 0x545, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1, 0xc, &(0x7f0000001000)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0xc000, 0x0}, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file2\x00', 0x0, 0x10}, 0x18) socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f00007af000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet6(0xa, 0x3, 0xff) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0xa, 0x3, 0x87) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@local, 0x40, r6}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@ipv6_newaddr={0x17, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfd, {0xa, 0x3f, 0x0, 0xc8, r6}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x8001, 0x3, 0xfffffff9}}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x22}}, @IFA_TARGET_NETNSID={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) 17.494643241s ago: executing program 7 (id=1403): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000240)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000700)={0x14, &(0x7f00000005c0)={0x0, 0xc, 0x2, {0x2, 0x5}}, 0x0}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000940)=ANY=[], 0x0, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x2}, 0x0, 0x0, 0x0}) 15.398003833s ago: executing program 8 (id=1411): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x802) writev(r0, &(0x7f0000000140), 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000380)) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) getpgrp(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019840)=ANY=[@ANYBLOB="1a00000004000000e27f00000100000040000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000021492d8e9c16aeb974aff5152909fb13a749ee772eb7fff4df6e3dad79758fa8b7d69a6f0ccea32d567564f96e0509e5c1ec078a045d2c4790a633c81f8ec1931f3d1db823b24106e416d52f5805fdb829b13dc998bda189170381cd435ae7e1381987dfd0970a9bc778d90441a77b62bd2b9c8010ac29aaab33df6ea0aeae96918da1d128ab0e764e74ac55e2097618a2c62a7a761f50075f4bf360186841ff431825a26ef4533d7a5bfdfb56660c105eea97c301b8bfe46fd8857d3489d82440100ba6f4dd473f086f22b32cb4ce74394498975faa791f220f44339970c7f0e0d2f66935ae69"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000019700)={0x1, 0x3, &(0x7f00000197c0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8ffd0000, 0x71, 0x10, 0x31}}, &(0x7f0000019800)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000019980), 0x10}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r3, &(0x7f0000000540)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019540)=0x7) set_mempolicy(0x6, &(0x7f0000019580)=0x8000000000000001, 0xe0) mkdirat(0xffffffffffffff9c, &(0x7f00000195c0)='./mnt\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000019a00)={{0x1, 0x1, 0x18, r3}, '127.0.0.1:file0\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB='%\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="e2bcd2a1942c6e2ce9e22012c5f70cb2099d9520c99913d960ab35358734167562eac8b6cf113bc6707678814ae4d52c0775389a031591595f98fc525c5bdd5f422ef24037d0b211f1df9651aaabd59de5a8588f36992b6f533697a488be2c47b697c27239589663b0835b44dc7b06d756500d4a5e7319e556c431673e8ded80ff64e7df684e1f5ac051241d08a2bfc394ad232bf70e75a1ec9cee6718e20bcd17a2b387c2b444d5540405a33407de48dfe36ace9a2d1107897ad049e99f1c3f7d7383db99b9f09bb07f171c9091abb72e51755118ab2846e6d298ed9debc91309", @ANYRES32, @ANYRES64=0x0], 0x20) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x4, 0x4, 0x34343459, 0x5, 0xf, 0x6, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4}}) ioctl$KDSIGACCEPT(r4, 0x5607, 0xe) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000017) timer_settime(0x0, 0x1, 0x0, 0x0) 13.767048577s ago: executing program 8 (id=1414): r0 = syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001540)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000014c0)=[{&(0x7f00000000c0)="a0eafc9e3ff872f2464933e79e9063ca1922ad233167c8268d195420639bd62dc8ff60608e08490e1248019d2b65b7a961d5eb86ea8ef902ed31e2d438d05e35ae4b53a2a6d8491cf2aa3122756dfad46726e6ef8ace783879123dacd11247c6cf2caa984aa48602e84d936a928bd011d120823839ef7fb6d563535d293a425a60d59ee65f8a14983a36202330c24496f9e93328a3c42c85a4e70070138bf6ba22dd3a5f75e9afdb14ec60a2172d28d992182de5323e5a25df2960404f03fa8e14c41ed42f26a231787fa552cac734b229fffe104efcd24fc8f84f970513f059d4a27734a9fdaa577d899bcb0064a8fe5afb24eddeb84369", 0xf8}, {&(0x7f0000000280)="853b52b490558b75c8ee64e34c063755d4a98a78f0449c8c2d8d91a61d2a2f02eae0f56b7e6a672aa96cb0dd1f8e2a132521f27b72d9e164fa7fd61105ebe0ddba6b5c5a63116a73d2fe98c4841a8888e72cccd10a31078a66cd4a56a5f5fd45d97428024f7c9cff946aec09bf6dede1e26ce6e852666cad4480d9b31c244537e2480494c7ea9618503357badbd4cdde4e5dac6ee4376dd43b206b88ec522120a79d8dae323b869d869fd561e9568ee057ce8b99280b0c08e24817e36ef3a55f85440859e099080d961d14272ce69e24ceb157f09df31f247d805ca2fcedc0029985248ed16c3b0edecd1e87dfd936ee17bad91b93fb69", 0xf7}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)}, {&(0x7f00000013c0)="381ac1f87f2384a9c8f245658c9e17bba1c375856c6e8fe2ba05e7275dd1e923118b90b5ebae8060cfdf", 0x2a}, {&(0x7f0000001400)="1bcbe45004b2a418ef1f311b00dddf8cd7c67cb9247c8d6b69f7d763516525931791bdc6c7a983dc0a1f28590fd4482db35a2a9ad9646d1081b0b0067ce90615f10b8ad23532496936e680dbe72a9218b80aae394b5a36a92fb4fa84c50ea3a60aa579e8340f0fc2e47b9460a7ea2ad276b05289a06019c5e71d1e006ea700cddf3e20aec12d3e1c0eb82c5e61ec0186d5d66c96", 0x94}], 0x6, 0x0, 0x0, 0x20000080}}], 0x1, 0x4044080) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000200)={'\x00@\x00', 0xfffe, 0x6, 0x2, 0x0, 0x0, "f759ca34000400000800", '\x00', "03000600", '\x00', ["8bada940edffea0a0800", "c2fed6cb0200004000", '\x00', "00000000000000000100"]}) 13.655305572s ago: executing program 7 (id=1415): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"f5399d49", 0x6cf, 0x1, 0x70, 0x9, 0x5, "5cc7ef0e85738e4a226797b8dd15b1", "e64fbc25", "0c317a81", "83157683", ["d8625b7679c8fe99f0b2fd48", "f661777f325a4e7d746d9ce3", "9f3b9e8f966e74859d38a6a8", "b1160e9cca58c74ecbe1b815"]}) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000d80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0), 0x0, 0x10, &(0x7f0000000e00), 0xfffffffffffffddd}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xfffd}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r2, 0x0, 0xe, 0x0, &(0x7f0000000ec0)="8357b73d2891c310143d9abe84dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) timer_settime(r1, 0x1, &(0x7f0000000180)={{}, {0x77359400}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000280)={'vlan0\x00', @remote}) lseek(r4, 0x4, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000005580)=""/102392, 0x18ff8) 12.541575595s ago: executing program 9 (id=1416): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000002180)={0x2, 0x0, [{0x1, 0x0, 0x7, 0x0, 0x0, 0x24}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000002200)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2}, {0x40000001, 0x0, 0x0, 0x31237646, 0x0, 0x6}]}) 11.648652258s ago: executing program 9 (id=1418): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000003c0)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x107) 11.353179234s ago: executing program 7 (id=1419): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000002c0)={0x84, @local, 0x4e20, 0x3, 'lc\x00', 0xb, 0x7, 0x8}, 0xfffffffffffffef4) socket$kcm(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x42890}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000000)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000300)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x4002, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @remote, {[@ssrr={0x89, 0x23, 0xd8, [@empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @multicast2, @remote]}, @cipso={0x86, 0x5a, 0x2, [{0x2, 0xf, "1494252ae4b8a59441dfad4bb9"}, {0x7, 0xe, "36f2d9ae9bce2787c30387ba"}, {0x1, 0x12, "476b70b16545d0de1a94bec8b260163c"}, {0x6, 0xa, "f8fdbd0a72d3914f"}, {0x5, 0xc, "29e9adf9786259fffc3e"}, {0x7, 0xf, "ab8fac178c5d8dac5966ed6086"}]}]}}}}}}}, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000100)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) r3 = syz_open_dev$mtd(&(0x7f00000000c0), 0x46, 0x1) ioctl$MEMREADOOB64(r3, 0x1269, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)}) 10.902456864s ago: executing program 9 (id=1420): r0 = socket(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'veth1\x00', {0x2, 0x4e21, @private=0xa010102}}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2) getpid() (async) r3 = getpid() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) rseq(0x0, 0xfde1, 0x0, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000900)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000980)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) connect$unix(r4, &(0x7f0000000980)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000a00), 0x318, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000a00), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000a40), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000ac0)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) (async) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000ac0)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x9e, 0x200, 0x3, 0xe794f8a5}, 0x10) write(r7, &(0x7f0000000f80)="240000001e005f0214fffffffffffff80700000001000000000000000500090002000000", 0x24) (async) write(r7, &(0x7f0000000f80)="240000001e005f0214fffffffffffff80700000001000000000000000500090002000000", 0x24) sendmsg$nl_xfrm(r1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf886dd6a7abd6a00006701fc000000000000000000000000000000ff0200000000000000000000000000019247d70e13100a6a96f58874e76e91fe5bd9ec6609ac07347e6aac0fcdf7a1656062b9c77049ee4ec6e1cbab32a0e9b8f599b94b4ed0ca1f0340aa56ecad52b9671859caaed478294bc609930b7c94e12bf04e918ca7c2a5a111013209ab61720872f91beb9c594b62c9fa60b675452524a24a8aa51b566e072ebc4a04b2e0c9fdff1d01238c2b6fa129e0cb84cc"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 10.413661206s ago: executing program 8 (id=1421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) memfd_create(&(0x7f0000000040)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x0, 0x0}) timer_create(0x0, 0x0, 0x0) r3 = io_uring_setup(0x5940, &(0x7f0000000340)={0x0, 0x800000, 0x400, 0x2, 0x12a}) syz_open_dev$dri(0x0, 0x1000000000000000, 0x410000) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000580)=0xf) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$TCFLSH(r5, 0x400455c8, 0x2) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000005c0)={r6}) bind$xdp(r7, &(0x7f0000000600)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r7) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000640)=0x3) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f00000015c0)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={r8, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000001680)="b9ff03076844268cb89e14f088a847e0ffff2000ffffff88000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000010003904000000ffedffffffde00000044a79cb738bbc66795b2e56501340c", @ANYRES32=0x0, @ANYBLOB="80000000000000001c0012800b00010062726964676500000c0002800500070000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r0) 9.878047004s ago: executing program 7 (id=1422): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f00000003c0)=""/102392, 0x18ff8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000193c0), 0x4000000004002, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000019400), 0xc2900, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x201f23) 9.720754443s ago: executing program 8 (id=1423): clock_gettime(0x6, &(0x7f00000006c0)) io_getevents(0x0, 0x2e5, 0x0, &(0x7f0000000100), &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840), 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0xc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000240)) r3 = syz_open_pts(r2, 0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000340)=0xf) mq_timedsend(0xffffffffffffffff, &(0x7f0000000900)="1dbba070ccb0263c216ddb97a79d9a153e0a6d78d2c50628888308fbce8eb81037b1958a935fc72f6d6a49cde35801ad48d7b5ac0b0a12786f32b9a21c9c663cadfc187056b22febaeb756cc60bab17483727cc43873b12fa836dc45acac9c4e145ef1e3c8710fdf2456f653b938d26956e026d858b3493b14c151ad62818038cc91b2a327252a1779dbb98bc6517507de9fcbb6f84cd8b7bcbb6e", 0x9b, 0x85, &(0x7f0000000a00)) ioctl$TCSBRK(r3, 0x400455c8, 0x6) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000003c0)=0xc0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000400)=0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000440)=0x2f) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000480)=0xcf) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x102) mount(0x0, &(0x7f0000000680)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./mnt\x00', 0x0) mount(&(0x7f0000000780)=@filename='./dev/sda1\x00', &(0x7f00000007c0)='./mnt\x00', &(0x7f0000000800)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000880)='./mnt\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0x103a42, 0x0) ftruncate(r4, 0x5) 8.771978513s ago: executing program 7 (id=1424): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000240)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000700)={0x14, &(0x7f00000005c0)={0x0, 0xc, 0x2, {0x2, 0x5}}, 0x0}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000940)=ANY=[], 0x0, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x2}, 0x0, 0x0, 0x0}) 8.76816224s ago: executing program 1 (id=1425): prlimit64(0x0, 0xe, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x2, 0x7fff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000193c0)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000019580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000195c0)={0x0, 0x0, &(0x7f0000019600)={&(0x7f0000019640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000196c0), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000019700)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000019740)={0x0, 0x0, &(0x7f0000019780)={&(0x7f00000197c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xe, 0xb}, {0x7, 0xffe2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008840}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000019800)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000019840), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000019880)={0x0, 0x0, &(0x7f00000198c0)={&(0x7f0000019900)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 8.617216167s ago: executing program 9 (id=1426): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (rerun: 32) io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d9, 0x2}) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) (async) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003700)=@newchain={0x50, 0x64, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xc, 0x9}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0xb}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7f}}, @TCA_RATE={0x6, 0x5, {0xd4, 0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) (async, rerun: 64) r3 = getpid() (rerun: 64) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000480), 0x400000000000041, 0x0) (async, rerun: 64) recvmmsg(r4, &(0x7f0000000600), 0x10106, 0x2, 0x0) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000680)={0x0, 0xffffffffffffff05, &(0x7f00000006c0)={&(0x7f0000000700)={0x18, r7, 0x321, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24044094}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/18, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) 8.459441305s ago: executing program 8 (id=1427): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0x20, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x1}, {0xffff, 0xe}, {0x0, 0xe11295f698dfeb6a}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x1, 0xb0}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}]}, 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000004c0)='asymmetric\x00', &(0x7f0000000500)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000100)='user\x00', &(0x7f0000000180)=@chain={'key_or_keyring:', r1}) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000680)={r1, 0x2e, 0x9b}, 0x0, &(0x7f00000006c0)="866a9ce9fe7c0c0a41c6ff9a138ab2776e7cbf3292fdc84c77b758218542631854b7b08a2362a85183d6a3c5f1f1", &(0x7f0000000700)=""/155) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000007c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000800)={0x73622a85, 0x0, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000840)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000ac0)={0x8, 0x0, &(0x7f0000000b00)=[@increfs]}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b40)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000b80)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000c80)={0x8, 0x0, &(0x7f0000000cc0)=[@acquire], 0xfffffffffffffdca}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000d00)={0x4c, 0x0, &(0x7f0000000d40)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000dc0)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x800001, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000e40)={0x0, 0x18, 0x40}}, 0x1000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000300)=0x4, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r7, 0x8, &(0x7f00000005c0)=0x4000007) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd}) 7.565351039s ago: executing program 9 (id=1428): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) write$dsp(r0, &(0x7f0000000100)='S', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000003c0)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000440)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f00000022c0)=""/102392, 0x18ff8) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') r7 = io_uring_setup(0x402, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000000280)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f00000002c0)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000000300)={0x1, 0x5, 0x1, '\x00', 0x4388}, 0x1) io_uring_enter(r7, 0x0, 0x1, 0x9, &(0x7f0000000340), 0x18) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000540)=""/212, 0xd4}], 0x1, 0x33, 0x0) 7.443602205s ago: executing program 1 (id=1429): socket$inet(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000008c0)={0x1, &(0x7f0000000900)=[{0x6, 0x5, 0x0, 0x7ffc0001}]}) inotify_init() r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) write(r3, &(0x7f0000000980)='1\n', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x15, @loopback}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000a40)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000a80)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000b00)={0x2, 0x15, @loopback}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x800) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r7, &(0x7f0000000b80)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) close(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000bc0)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.639197036s ago: executing program 8 (id=1430): ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000100)={{}, 0x0, 0x28, @inherit={0x90, &(0x7f0000000040)={0x1, 0x9, 0x2, 0xce, {0x2a, 0x8000, 0x88, 0xfffffffffffffff8, 0x4a13}, [0x8, 0x86c7, 0x6, 0xc3, 0xffff, 0xfffffffffffffff8, 0x8791, 0x6, 0x6]}}, @subvolid=0x401}) syz_open_dev$I2C(&(0x7f0000000000), 0x8000000003, 0x240) r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000015c0), r3) getsockname$packet(r3, &(0x7f0000001600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001640)=0x14) sendmsg$nl_route(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000001740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001780)=0x14) sendmsg$nl_route(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x1, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$alg(r0, &(0x7f0000001880), 0x492492492492627, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0xc, 0xe, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f00000039c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003a00)={r6, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000003a80)="b9ff0b078059268cb89e14f088a82de0ffff200000070001000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$xdp(0x2c, 0x3, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001100)={0x8, 0x10, {0xffffffffffffffff}, {}, 0x330, 0x6}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x804) openat$cgroup(0xffffffffffffffff, &(0x7f0000001240)='syz0\x00', 0x200002, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001280)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000013c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x0) syz_emit_ethernet(0x35, &(0x7f00000014c0)=ANY=[@ANYBLOB="0180c20000000200000000010027424203"], 0x0) write$tun(0xffffffffffffffff, 0x0, 0x6a) 5.722131328s ago: executing program 1 (id=1431): mount(&(0x7f0000000180)=@filename='none\x00', 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x143102) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x1c3902, 0x0) fsopen(&(0x7f0000000580)='nfs\x00', 0x0) socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820}, 0x24008054) sendmsg$tipc(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="86", 0x64}], 0x1}, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000280), 0x4) sendmsg$tipc(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) recvmsg(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/208, 0xd0}], 0x1, 0x0, 0x0, 0x18000000}, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x5, 0x59, 0x0, 0x0) 3.705027847s ago: executing program 9 (id=1432): mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x3, 0xfffffffffffffff9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./tracing\x00', &(0x7f00000005c0)='tracefs\x00', 0x0, 0x0) r0 = syz_io_uring_complete(0x0, 0x0) pread64(r0, &(0x7f0000000640)=""/87, 0x57, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f00002ec000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271b, &(0x7f00000004c0)=""/1, &(0x7f0000000500)=0xf002) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, &(0x7f0000000080)={@align=0x4, {0x2, 0x1, 0xfffffff9, 0xffffffffffff0000}}, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x40}) munmap(&(0x7f0000faa000/0x1000)=nil, 0x1000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000180)={0x1, [[0x6, 0x7, 0x1ff, 0x10000, 0x8, 0x1, 0x7], [0x400, 0x7, 0x7, 0x7, 0x2, 0x0, 0x2, 0x6], [0x80000000, 0x5, 0xa9bf, 0x10, 0x3, 0x8, 0x85ce, 0xffff7fff]], '\x00', [{0x100, 0x7, 0x1, 0x1, 0x1}, {0x7, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x7, 0x0, 0x1, 0x1, 0x1}, {0x2, 0x40, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, {0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x8, 0x0, 0x0, 0x1}, {0x4da, 0xff, 0x1, 0x0, 0x0, 0x1}, {0x4, 0xfffffffb, 0x0, 0x0, 0x1, 0x1}, {0x4, 0x343, 0x1, 0x0, 0x1}, {0x3, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x2c6, 0x1}]}) 2.064127932s ago: executing program 1 (id=1433): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000940)="0f0000000401666f6f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006261720000000000000000", 0x10a) (fail_nth: 5) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r4, 0x4112, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200047fd, 0x0, 0x0) sendmsg$nl_netfilter(r7, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x10) 1.013105312s ago: executing program 1 (id=1434): socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000019440)='cgroup2\x00', 0x1) (fail_nth: 5) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x82) r6 = openat$cgroup_procs(r5, &(0x7f0000019480)='cgroup.threads\x00', 0x2, 0x0) pread64(r6, &(0x7f00000194c0)=""/245, 0xf5, 0x80387) 0s ago: executing program 1 (id=1435): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xf4, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='a', 0x200000c1, 0x9000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc4d2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) kernel console output (not intermixed with test programs): 92529064.511:2296): avc: denied { mount } for pid=11053 comm="syz.7.1220" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 443.561810][T11056] Bluetooth: MGMT ver 1.23 [ 443.657264][ T191] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 443.657597][ T191] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 443.657891][ T191] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 443.657930][ T191] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 443.730885][ T191] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 443.732175][ T191] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 443.764481][ T191] usb 5-1: USB disconnect, device number 31 [ 443.768190][T11061] netlink: 'syz.4.1234': attribute type 2 has an invalid length. [ 443.768211][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1234'. [ 443.807468][T11061] comedi: valid board names for 8255 driver are: [ 443.807483][T11061] 8255 [ 443.807489][T11061] comedi: valid board names for vmk80xx driver are: [ 443.807497][T11061] vmk80xx [ 443.807503][T11061] comedi: valid board names for usbduxsigma driver are: [ 443.807511][T11061] usbduxsigma [ 443.807518][T11061] comedi: valid board names for usbduxfast driver are: [ 443.807526][T11061] usbduxfast [ 443.807532][T11061] comedi: valid board names for usbdux driver are: [ 443.807540][T11061] usbdux [ 443.807545][T11061] comedi: valid board names for ni6501 driver are: [ 443.807553][T11061] ni6501 [ 443.807558][T11061] comedi: valid board names for dt9812 driver are: [ 443.807565][T11061] dt9812 [ 443.807571][T11061] comedi: valid board names for ni_labpc_cs driver are: [ 443.807578][T11061] ni_labpc_cs [ 443.807584][T11061] comedi: valid board names for ni_daq_700 driver are: [ 443.807591][T11061] ni_daq_700 [ 443.807596][T11061] comedi: valid board names for labpc_pci driver are: [ 443.807604][T11061] labpc_pci [ 443.807610][T11061] comedi: valid board names for adl_pci9118 driver are: [ 443.807619][T11061] pci9118dg [ 443.807624][T11061] pci9118hg [ 443.807630][T11061] pci9118hr [ 443.807636][T11061] comedi: valid board names for 8255_pci driver are: [ 443.807644][T11061] 8255_pci [ 443.807650][T11061] comedi: valid board names for s526 driver are: [ 443.807658][T11061] s526 [ 443.807664][T11061] comedi: valid board names for multiq3 driver are: [ 443.807672][T11061] multiq3 [ 443.807677][T11061] comedi: valid board names for pcmuio driver are: [ 443.807685][T11061] pcmuio48 [ 443.807691][T11061] pcmuio96 [ 443.807697][T11061] comedi: valid board names for pcmmio driver are: [ 443.807704][T11061] pcmmio [ 443.807710][T11061] comedi: valid board names for pcmda12 driver are: [ 443.807717][T11061] pcmda12 [ 443.807723][T11061] comedi: valid board names for pcmad driver are: [ 443.807731][T11061] pcmad12 [ 443.807737][T11061] pcmad16 [ 443.807742][T11061] comedi: valid board names for ni_labpc driver are: [ 443.807750][T11061] lab-pc-1200 [ 443.807803][T11061] lab-pc-1200ai [ 443.807811][T11061] lab-pc+ [ 443.807817][T11061] comedi: valid board names for atmio16 driver are: [ 443.807825][T11061] atmio16 [ 443.807831][T11061] atmio16d [ 443.807838][T11061] comedi: valid board names for ni_at_ao driver are: [ 443.807845][T11061] at-ao-6 [ 443.807851][T11061] at-ao-10 [ 443.807857][T11061] comedi: valid board names for ni_at_a2150 driver are: [ 443.807866][T11061] ni_at_a2150 [ 443.807872][T11061] comedi: valid board names for adq12b driver are: [ 443.807880][T11061] adq12b [ 443.807886][T11061] comedi: valid board names for mpc624 driver are: [ 443.807893][T11061] mpc624 [ 443.807899][T11061] comedi: valid board names for c6xdigio driver are: [ 443.807907][T11061] c6xdigio [ 443.807913][T11061] comedi: valid board names for aio_iiro_16 driver are: [ 443.807921][T11061] aio_iiro_16 [ 443.807927][T11061] comedi: valid board names for aio_aio12_8 driver are: [ 443.807935][T11061] aio_aio12_8 [ 443.807941][T11061] aio_ai12_8 [ 443.807947][T11061] aio_ao12_4 [ 443.807952][T11061] comedi: valid board names for fl512 driver are: [ 443.807960][T11061] fl512 [ 443.807966][T11061] comedi: valid board names for dmm32at driver are: [ 443.807973][T11061] dmm32at [ 443.807979][T11061] comedi: valid board names for dt282x driver are: [ 443.807986][T11061] dt2821 [ 443.807991][T11061] dt2821-f [ 443.807997][T11061] dt2821-g [ 443.808002][T11061] dt2823 [ 443.808008][T11061] dt2824-pgh [ 443.808014][T11061] dt2824-pgl [ 443.808019][T11061] dt2825 [ 443.808025][T11061] dt2827 [ 443.808031][T11061] dt2828 [ 443.808037][T11061] dt2829 [ 443.808094][T11061] dt21-ez [ 443.808101][T11061] dt23-ez [ 443.808107][T11061] dt24-ez [ 443.808114][T11061] dt24-ez-pgl [ 443.808120][T11061] comedi: valid board names for dt2817 driver are: [ 443.808128][T11061] dt2817 [ 443.808134][T11061] comedi: valid board names for dt2815 driver are: [ 443.808142][T11061] dt2815 [ 443.808148][T11061] comedi: valid board names for dt2814 driver are: [ 443.808156][T11061] dt2814 [ 443.808162][T11061] comedi: valid board names for dt2811 driver are: [ 443.808170][T11061] dt2811-pgh [ 443.808176][T11061] dt2811-pgl [ 443.808183][T11061] comedi: valid board names for dt2801 driver are: [ 443.808191][T11061] dt2801 [ 443.808196][T11061] comedi: valid board names for das6402 driver are: [ 443.808204][T11061] das6402-12 [ 443.808210][T11061] das6402-16 [ 443.808216][T11061] comedi: valid board names for das1800 driver are: [ 443.808223][T11061] das-1701st [ 443.808229][T11061] das-1701st-da [ 443.808235][T11061] das-1702st [ 443.808242][T11061] das-1702st-da [ 443.808248][T11061] das-1702hr [ 443.808254][T11061] das-1702hr-da [ 443.808260][T11061] das-1701ao [ 443.808266][T11061] das-1702ao [ 443.808272][T11061] das-1801st [ 443.808278][T11061] das-1801st-da [ 443.808284][T11061] das-1802st [ 443.808290][T11061] das-1802st-da [ 443.808296][T11061] das-1802hr [ 443.808302][T11061] das-1802hr-da [ 443.808308][T11061] das-1801hc [ 443.808315][T11061] das-1802hc [ 443.808320][T11061] das-1801ao [ 443.808327][T11061] das-1802ao [ 443.808332][T11061] comedi: valid board names for das800 driver are: [ 443.808340][T11061] das-800 [ 443.808346][T11061] cio-das800 [ 443.808352][T11061] das-801 [ 443.808358][T11061] cio-das801 [ 443.808364][T11061] das-802 [ 443.808369][T11061] cio-das802 [ 443.808375][T11061] cio-das802/16 [ 443.808381][T11061] comedi: valid board names for isa-das08 driver are: [ 443.808389][T11061] isa-das08 [ 443.808396][T11061] das08-pgm [ 443.808402][T11061] das08-pgh [ 443.808408][T11061] das08-pgl [ 443.808414][T11061] das08-aoh [ 443.808421][T11061] das08-aol [ 443.808426][T11061] das08-aom [ 443.808433][T11061] das08/jr-ao [ 443.808438][T11061] das08jr-16-ao [ 443.808444][T11061] pc104-das08 [ 443.808451][T11061] das08jr/16 [ 443.808457][T11061] comedi: valid board names for das16m1 driver are: [ 443.808464][T11061] das16m1 [ 443.808470][T11061] comedi: valid board names for dac02 driver are: [ 443.808477][T11061] dac02 [ 443.808484][T11061] comedi: valid board names for rti802 driver are: [ 443.808491][T11061] rti802 [ 443.808497][T11061] comedi: valid board names for rti800 driver are: [ 443.808505][T11061] rti800 [ 443.808511][T11061] rti815 [ 443.808518][T11061] comedi: valid board names for pcm3724 driver are: [ 443.808525][T11061] pcm3724 [ 443.808532][T11061] comedi: valid board names for pcl818 driver are: [ 443.808539][T11061] pcl818l [ 443.808545][T11061] pcl818h [ 443.808551][T11061] pcl818hd [ 443.808556][T11061] pcl818hg [ 443.808562][T11061] pcl818 [ 443.808568][T11061] pcl718 [ 443.808574][T11061] pcm3718 [ 443.808579][T11061] comedi: valid board names for pcl816 driver are: [ 443.808586][T11061] pcl816 [ 443.808591][T11061] pcl814b [ 443.808598][T11061] comedi: valid board names for pcl812 driver are: [ 443.808605][T11061] pcl812 [ 443.808611][T11061] pcl812pg [ 443.808617][T11061] acl8112pg [ 443.808623][T11061] acl8112dg [ 443.808629][T11061] acl8112hg [ 443.808635][T11061] a821pgl [ 443.808641][T11061] a821pglnda [ 443.808647][T11061] a821pgh [ 443.808653][T11061] a822pgl [ 443.808658][T11061] a822pgh [ 443.808664][T11061] a823pgl [ 443.808670][T11061] a823pgh [ 443.808676][T11061] pcl813 [ 443.808681][T11061] pcl813b [ 443.808687][T11061] acl8113 [ 443.808692][T11061] iso813 [ 443.808698][T11061] acl8216 [ 443.808704][T11061] a826pg [ 443.808710][T11061] comedi: valid board names for pcl730 driver are: [ 443.808718][T11061] pcl730 [ 443.808724][T11061] iso730 [ 443.808730][T11061] acl7130 [ 443.808735][T11061] pcm3730 [ 443.808741][T11061] pcl725 [ 443.808747][T11061] p8r8dio [ 443.808752][T11061] acl7225b [ 443.808758][T11061] p16r16dio [ 443.808764][T11061] pcl733 [ 443.808770][T11061] pcl734 [ 443.808776][T11061] opmm-1616-xt [ 443.808782][T11061] pearl-mm-p [ 443.808788][T11061] ir104-pbf [ 443.808840][T11061] comedi: valid board names for pcl726 driver are: [ 443.808850][T11061] pcl726 [ 443.808856][T11061] pcl727 [ 443.808863][T11061] pcl728 [ 443.808869][T11061] acl6126 [ 443.808876][T11061] acl6128 [ 443.808884][T11061] comedi: valid board names for pcl724 driver are: [ 444.201728][T11061] pcl724 [ 444.201741][T11061] pcl722 [ 444.201746][T11061] pcl731 [ 444.201753][T11061] acl7122 [ 444.201759][T11061] acl7124 [ 444.201765][T11061] pet48dio [ 444.201771][T11061] pcmio48 [ 444.201777][T11061] onyx-mm-dio [ 444.201785][T11061] comedi: valid board names for pcl711 driver are: [ 444.201794][T11061] pcl711 [ 444.201799][T11061] pcl711b [ 444.201805][T11061] acl8112hg [ 444.201811][T11061] acl8112dg [ 444.201817][T11061] comedi: valid board names for amplc_pc263 driver are: [ 444.201825][T11061] pc263 [ 444.201831][T11061] comedi: valid board names for amplc_pc236 driver are: [ 444.201838][T11061] pc36at [ 444.201844][T11061] comedi: valid board names for amplc_dio200 driver are: [ 444.201852][T11061] pc212e [ 444.201858][T11061] pc214e [ 444.201864][T11061] pc215e [ 444.201869][T11061] pc218e [ 444.201875][T11061] pc272e [ 444.201881][T11061] comedi: valid board names for comedi_parport driver are: [ 444.201889][T11061] comedi_parport [ 444.201894][T11061] comedi: valid board names for comedi_test driver are: [ 444.201901][T11061] comedi_test [ 444.201906][T11061] comedi: valid board names for comedi_bond driver are: [ 444.201913][T11061] comedi_bond [ 444.441431][T11065] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 444.448389][ T30] audit: type=1400 audit(1792529065.721:2297): avc: denied { connect } for pid=11066 comm="syz.1.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 444.529979][ T30] audit: type=1400 audit(1792529065.801:2298): avc: denied { write } for pid=11066 comm="syz.1.1236" path="socket:[35456]" dev="sockfs" ino=35456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 444.536994][ T30] audit: type=1400 audit(1792529065.801:2299): avc: denied { setopt } for pid=11066 comm="syz.1.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 444.593391][ T30] audit: type=1400 audit(1792529065.871:2300): avc: denied { read write } for pid=11070 comm="syz.9.1237" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 444.593701][ T30] audit: type=1400 audit(1792529065.871:2301): avc: denied { open } for pid=11070 comm="syz.9.1237" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 444.969469][T11088] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1238'. [ 445.143683][T11092] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 445.143726][T11092] Error validating options; rc = [-22] [ 445.239792][T11094] ucma_write: process 792 (syz.4.1241) changed security contexts after opening file descriptor, this is not allowed. [ 446.860066][T11108] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1246'. [ 446.907871][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1246'. [ 448.020450][T11108] bridge1: port 1(veth3) entered blocking state [ 448.020536][T11108] bridge1: port 1(veth3) entered disabled state [ 448.020645][T11108] veth3: entered allmulticast mode [ 448.051045][T11108] veth3: entered promiscuous mode [ 448.203089][T11115] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 8 out of range (51000000..2150000000) [ 448.228677][T11117] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 449.784834][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 449.784851][ T30] audit: type=1400 audit(1792529071.051:2315): avc: denied { unmount } for pid=9979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 451.117027][ T30] audit: type=1400 audit(1792529072.061:2316): avc: denied { setopt } for pid=11130 comm="syz.1.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 451.117082][ T30] audit: type=1326 audit(1792529072.091:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.1255" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66699f559 code=0x7ffc0000 [ 451.117122][ T30] audit: type=1326 audit(1792529072.091:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.1255" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66699f559 code=0x7ffc0000 [ 451.117160][ T30] audit: type=1326 audit(1792529072.121:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.1255" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66699f559 code=0x7ffc0000 [ 451.117198][ T30] audit: type=1326 audit(1792529072.121:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.1255" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66699f559 code=0x7ffc0000 [ 451.117236][ T30] audit: type=1326 audit(1792529072.121:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.1255" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb66699f559 code=0x7ffc0000 [ 451.117273][ T30] audit: type=1326 audit(1792529072.131:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.1255" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66699f559 code=0x7ffc0000 [ 451.117457][ T30] audit: type=1326 audit(1792529072.131:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.1255" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66699f559 code=0x7ffc0000 [ 451.117496][ T30] audit: type=1326 audit(1792529072.201:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.1255" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66699f559 code=0x7ffc0000 [ 451.127541][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 451.319109][ T191] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 451.349063][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 451.363489][ T10] usb 10-1: New USB device found, idVendor=0499, idProduct=1000, bcdDevice=8e.c1 [ 451.364303][ T10] usb 10-1: config 253 has an invalid interface number: 167 but max is 0 [ 451.364323][ T10] usb 10-1: config 253 has no interface number 0 [ 451.364353][ T10] usb 10-1: config 253 interface 167 altsetting 15 endpoint 0x7 has invalid wMaxPacketSize 0 [ 451.364373][ T10] usb 10-1: config 253 interface 167 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 451.364392][ T10] usb 10-1: config 253 interface 167 altsetting 15 has a duplicate endpoint with address 0xA, skipping [ 451.364409][ T10] usb 10-1: config 253 interface 167 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 451.364426][ T10] usb 10-1: config 253 interface 167 has no altsetting 0 [ 451.366053][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.366073][ T10] usb 10-1: Product: syz [ 451.366085][ T10] usb 10-1: Manufacturer: æ˜ë¿±î¦šç‡¿ç‡‰æ‰¥æ¶á†¥äº¸ä¹ä …ï«šï´¶å½ã¾¹ë熅奇욦ì¤èŽ£ë˜Œéº†æ¿“茾괥鴱 [ 451.366105][ T10] usb 10-1: SerialNumber: syz [ 451.472894][ T191] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 451.474349][ T191] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.474373][ T191] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.474393][ T191] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 451.474425][ T191] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.483950][ T191] usb 8-1: config 0 descriptor?? [ 451.580071][T11127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.580422][T11127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.610057][ T10] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 451.754225][ T10] snd-usb-audio 10-1:253.167: probe with driver snd-usb-audio failed with error -2 [ 451.799057][ T10] usb 10-1: USB disconnect, device number 5 [ 451.833635][ T6443] udevd[6443]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:253.167/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 452.526899][T11142] FAULT_INJECTION: forcing a failure. [ 452.526899][T11142] name failslab, interval 1, probability 0, space 0, times 0 [ 452.526931][T11142] CPU: 1 UID: 0 PID: 11142 Comm: syz.4.1252 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.526954][T11142] Tainted: [L]=SOFTLOCKUP [ 452.526960][T11142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 452.526970][T11142] Call Trace: [ 452.526977][T11142] [ 452.526984][T11142] dump_stack_lvl+0x100/0x190 [ 452.527016][T11142] should_fail_ex.cold+0x5/0xa [ 452.527041][T11142] should_failslab+0xc2/0x120 [ 452.527068][T11142] __kmalloc_noprof+0xfc/0x840 [ 452.527090][T11142] ? __pfx_dynamic_dname+0x10/0x10 [ 452.527112][T11142] ? tomoyo_encode2+0xfb/0x3c0 [ 452.527136][T11142] tomoyo_encode2+0xfb/0x3c0 [ 452.527157][T11142] tomoyo_encode+0x29/0x50 [ 452.527173][T11142] tomoyo_realpath_from_path+0x18c/0x690 [ 452.527198][T11142] tomoyo_path_number_perm+0x23c/0x580 [ 452.527222][T11142] ? tomoyo_path_number_perm+0x22e/0x580 [ 452.527250][T11142] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 452.527285][T11142] ? __lock_acquire+0x5c0/0x1f40 [ 452.527321][T11142] ? __fget_files+0x34/0x3d0 [ 452.527348][T11142] ? find_held_lock+0x2b/0x80 [ 452.527374][T11142] ? hook_file_ioctl_common+0x140/0x440 [ 452.527402][T11142] ? __fget_files+0x21f/0x3d0 [ 452.527434][T11142] security_file_ioctl+0xd3/0x230 [ 452.527463][T11142] __x64_sys_ioctl+0xb7/0x210 [ 452.527488][T11142] do_syscall_64+0x123/0x790 [ 452.527518][T11142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.527538][T11142] RIP: 0033:0x7f8c02d9f559 [ 452.527555][T11142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.527572][T11142] RSP: 002b:00007f8c00ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.527593][T11142] RAX: ffffffffffffffda RBX: 00007f8c03025fa0 RCX: 00007f8c02d9f559 [ 452.527606][T11142] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 452.527624][T11142] RBP: 00007f8c00ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 452.527635][T11142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.527646][T11142] R13: 00007f8c03026038 R14: 00007f8c03025fa0 R15: 00007ffe3603b0f8 [ 452.527673][T11142] [ 452.527692][T11142] ERROR: Out of memory at tomoyo_realpath_from_path. [ 452.544689][ T191] usbhid 8-1:0.0: can't add hid device: -71 [ 452.544774][ T191] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 452.737340][ T191] usb 8-1: USB disconnect, device number 12 [ 454.316764][T11157] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 454.316785][T11157] block device autoloading is deprecated and will be removed. [ 454.320940][T11163] FAULT_INJECTION: forcing a failure. [ 454.320940][T11163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.320983][T11163] CPU: 1 UID: 0 PID: 11163 Comm: syz.8.1262 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.321007][T11163] Tainted: [L]=SOFTLOCKUP [ 454.321014][T11163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 454.321024][T11163] Call Trace: [ 454.321031][T11163] [ 454.321038][T11163] dump_stack_lvl+0x100/0x190 [ 454.321068][T11163] should_fail_ex.cold+0x5/0xa [ 454.321091][T11163] _copy_to_user+0x32/0xd0 [ 454.321120][T11163] simple_read_from_buffer+0xcb/0x170 [ 454.321148][T11163] proc_fail_nth_read+0x1af/0x230 [ 454.321175][T11163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 454.321203][T11163] ? rw_verify_area+0xce/0x6d0 [ 454.321221][T11163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 454.321246][T11163] vfs_read+0x1e4/0xb40 [ 454.321267][T11163] ? lock_acquire+0x1d1/0x380 [ 454.321286][T11163] ? __fget_files+0x34/0x3d0 [ 454.321309][T11163] ? __pfx_vfs_read+0x10/0x10 [ 454.321327][T11163] ? find_held_lock+0x2b/0x80 [ 454.321352][T11163] ? __fget_files+0x215/0x3d0 [ 454.321379][T11163] ? __fget_files+0x21f/0x3d0 [ 454.321409][T11163] ksys_read+0x12a/0x250 [ 454.321430][T11163] ? __pfx_ksys_read+0x10/0x10 [ 454.321457][T11163] do_syscall_64+0x123/0x790 [ 454.321487][T11163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.321504][T11163] RIP: 0033:0x7fe63255fd8e [ 454.321519][T11163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 454.321534][T11163] RSP: 002b:00007fe63354ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 454.321558][T11163] RAX: ffffffffffffffda RBX: 00007fe6335506c0 RCX: 00007fe63255fd8e [ 454.321570][T11163] RDX: 000000000000000f RSI: 00007fe6335500a0 RDI: 0000000000000006 [ 454.321581][T11163] RBP: 00007fe633550090 R08: 0000000000000000 R09: 0000000000000000 [ 454.321591][T11163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.321602][T11163] R13: 00007fe632826038 R14: 00007fe632825fa0 R15: 00007ffdeba50d58 [ 454.321628][T11163] [ 454.392951][T11165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.593070][T11169] FAULT_INJECTION: forcing a failure. [ 454.593070][T11169] name failslab, interval 1, probability 0, space 0, times 0 [ 454.593102][T11169] CPU: 0 UID: 0 PID: 11169 Comm: syz.8.1264 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.593127][T11169] Tainted: [L]=SOFTLOCKUP [ 454.593134][T11169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 454.593145][T11169] Call Trace: [ 454.593152][T11169] [ 454.593159][T11169] dump_stack_lvl+0x100/0x190 [ 454.593190][T11169] should_fail_ex.cold+0x5/0xa [ 454.593216][T11169] should_failslab+0xc2/0x120 [ 454.593243][T11169] kmem_cache_alloc_noprof+0x92/0x6a0 [ 454.593268][T11169] ? skb_clone+0x190/0x400 [ 454.593293][T11169] skb_clone+0x190/0x400 [ 454.593314][T11169] nfnetlink_rcv_batch+0x1c8/0x2880 [ 454.593341][T11169] ? kmem_cache_free+0x127/0x6c0 [ 454.593363][T11169] ? __lock_acquire+0x5c0/0x1f40 [ 454.593389][T11169] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 454.593417][T11169] ? lock_acquire+0x1d1/0x380 [ 454.593438][T11169] ? avc_has_perm_noaudit+0x56/0x470 [ 454.593468][T11169] ? avc_has_perm_noaudit+0x145/0x470 [ 454.593490][T11169] ? __asan_memset+0x23/0x50 [ 454.593510][T11169] ? __nla_validate_parse+0x1e7/0x28b0 [ 454.593539][T11169] ? __pfx___nla_validate_parse+0x10/0x10 [ 454.593561][T11169] ? rcu_is_watching+0x13/0xc0 [ 454.593585][T11169] ? cap_capable+0x107/0x430 [ 454.593613][T11169] ? __nla_parse+0x40/0x60 [ 454.593636][T11169] nfnetlink_rcv+0x3bd/0x440 [ 454.593658][T11169] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 454.593685][T11169] netlink_unicast+0x65f/0x950 [ 454.593708][T11169] ? __pfx_netlink_unicast+0x10/0x10 [ 454.593733][T11169] netlink_sendmsg+0xa02/0x1020 [ 454.593757][T11169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.593782][T11169] ? selinux_socket_sendmsg+0x198/0x2f0 [ 454.593811][T11169] ? ____sys_sendmsg+0xa4d/0xbe0 [ 454.593835][T11169] ____sys_sendmsg+0xa4d/0xbe0 [ 454.593856][T11169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.593876][T11169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.593905][T11169] ? lock_acquire+0x1d1/0x380 [ 454.593925][T11169] ? get_pid_task+0x2a/0x250 [ 454.593953][T11169] ___sys_sendmsg+0x190/0x1e0 [ 454.593980][T11169] ? __pfx____sys_sendmsg+0x10/0x10 [ 454.594005][T11169] ? get_pid_task+0x106/0x250 [ 454.594045][T11169] ? find_held_lock+0x2b/0x80 [ 454.594091][T11169] __sys_sendmsg+0x160/0x210 [ 454.594111][T11169] ? __pfx___sys_sendmsg+0x10/0x10 [ 454.594145][T11169] do_syscall_64+0x123/0x790 [ 454.594175][T11169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.594193][T11169] RIP: 0033:0x7fe63259f559 [ 454.594208][T11169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.594224][T11169] RSP: 002b:00007fe633550028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.594243][T11169] RAX: ffffffffffffffda RBX: 00007fe632825fa0 RCX: 00007fe63259f559 [ 454.594255][T11169] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 454.594266][T11169] RBP: 00007fe633550090 R08: 0000000000000000 R09: 0000000000000000 [ 454.594277][T11169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.594287][T11169] R13: 00007fe632826038 R14: 00007fe632825fa0 R15: 00007ffdeba50d58 [ 454.594312][T11169] [ 454.821479][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 454.882127][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'. [ 454.941498][T11178] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1268'. [ 454.978973][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 454.980827][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 454.988612][ T10] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 454.988637][ T10] usb 5-1: config 0 has no interface number 0 [ 454.988847][ T10] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 454.988873][ T10] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 454.998324][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1268'. [ 455.053402][ T10] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 455.053427][ T10] usb 5-1: Product: syz [ 455.053441][ T10] usb 5-1: Manufacturer: syz [ 455.053455][ T10] usb 5-1: SerialNumber: syz [ 455.059294][ T10] usb 5-1: config 0 descriptor?? [ 455.071525][ T10] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 455.098782][ T10] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 455.109480][ T10] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 455.112618][ T10] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 455.114955][ T10] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 455.116798][ T10] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 455.118826][ T10] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 455.156047][ T30] kauditd_printk_skb: 700 callbacks suppressed [ 455.156077][ T30] audit: type=1400 audit(1792529076.431:3025): avc: denied { setopt } for pid=11185 comm="syz.9.1269" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 455.158632][ T30] audit: type=1400 audit(1792529076.431:3026): avc: denied { write } for pid=11185 comm="syz.9.1269" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 455.161808][ T30] audit: type=1400 audit(1792529076.431:3027): avc: denied { open } for pid=11185 comm="syz.9.1269" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 455.165313][ T30] audit: type=1400 audit(1792529076.441:3028): avc: denied { ioctl } for pid=11185 comm="syz.9.1269" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 455.189540][T11178] bridge2: port 1(veth5) entered blocking state [ 455.189616][T11178] bridge2: port 1(veth5) entered disabled state [ 455.189710][T11178] veth5: entered allmulticast mode [ 455.192611][T11178] veth5: entered promiscuous mode [ 455.201204][T11174] tipc: Started in network mode [ 455.201230][T11174] tipc: Node identity ac1414aa, cluster identity 4711 [ 455.201439][T11174] tipc: New replicast peer: 172.20.20.187 [ 455.201949][T11174] tipc: Enabled bearer , priority 10 [ 455.313576][ T10] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 455.315328][ T10] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 455.317402][ T10] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 455.332720][ T30] audit: type=1400 audit(1792529076.591:3029): avc: denied { ioctl } for pid=11155 comm="syz.4.1261" path="socket:[37483]" dev="sockfs" ino=37483 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 455.352384][ T30] audit: type=1400 audit(1792529076.621:3030): avc: denied { write } for pid=11189 comm="syz.9.1270" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 455.379603][ T10] usb 5-1: USB disconnect, device number 32 [ 455.387763][ T10] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 455.394199][ T10] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 455.398676][ T10] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 455.402527][ T10] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 455.403308][ T10] keyspan 5-1:0.107: device disconnected [ 455.464113][ T30] audit: type=1400 audit(1792529076.731:3031): avc: denied { create } for pid=11189 comm="syz.9.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 455.468699][ T30] audit: type=1400 audit(1792529076.731:3032): avc: denied { write } for pid=11189 comm="syz.9.1270" path="socket:[37552]" dev="sockfs" ino=37552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 455.468961][T11190] ieee802154 phy1 wpan1: encryption failed: -22 [ 455.535488][ T30] audit: type=1400 audit(1792529076.801:3033): avc: denied { mount } for pid=11191 comm="syz.8.1271" name="/" dev="autofs" ino=36507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 455.564963][ T30] audit: type=1400 audit(1792529076.831:3034): avc: denied { name_bind } for pid=11191 comm="syz.8.1271" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 455.867696][T11198] bridge_slave_0: left allmulticast mode [ 455.867720][T11198] bridge_slave_0: left promiscuous mode [ 455.870290][T11198] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.898053][T11198] bridge_slave_1: left allmulticast mode [ 455.898078][T11198] bridge_slave_1: left promiscuous mode [ 455.898240][T11198] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.928088][T11198] bond0: (slave bond_slave_0): Releasing backup interface [ 455.937854][T11198] bond0: (slave bond_slave_1): Releasing backup interface [ 455.956991][T11198] team0: Port device team_slave_0 removed [ 455.968742][T11198] team0: Port device team_slave_1 removed [ 455.975471][T11198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.975493][T11198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.977963][T11198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.977980][T11198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.016555][T11198] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 456.054817][T11205] team0: Port device xfrm0 added [ 456.062788][T11208] tipc: Started in network mode [ 456.062813][T11208] tipc: Node identity a661d6dbb3e1, cluster identity 4711 [ 456.063042][T11208] tipc: Enabled bearer , priority 0 [ 456.310817][ T9585] tipc: Node number set to 2886997162 [ 456.851474][T11223] netlink: 'syz.8.1280': attribute type 11 has an invalid length. [ 457.179128][ T5692] tipc: Node number set to 360765147 [ 457.583890][T11224] ip6gre1: entered allmulticast mode [ 457.699878][ T8737] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 457.744897][T11234] FAULT_INJECTION: forcing a failure. [ 457.744897][T11234] name failslab, interval 1, probability 0, space 0, times 0 [ 457.744927][T11234] CPU: 1 UID: 0 PID: 11234 Comm: syz.7.1283 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.744951][T11234] Tainted: [L]=SOFTLOCKUP [ 457.744957][T11234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 457.744967][T11234] Call Trace: [ 457.744974][T11234] [ 457.744981][T11234] dump_stack_lvl+0x100/0x190 [ 457.745018][T11234] should_fail_ex.cold+0x5/0xa [ 457.745043][T11234] should_failslab+0xc2/0x120 [ 457.745068][T11234] __kmalloc_cache_node_noprof+0x94/0x720 [ 457.745089][T11234] ? __get_vm_area_node+0x124/0x350 [ 457.745116][T11234] __get_vm_area_node+0x124/0x350 [ 457.745140][T11234] __vmalloc_node_range_noprof+0x268/0x1420 [ 457.745162][T11234] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 457.745184][T11234] ? up_write+0x2dc/0x5b0 [ 457.745208][T11234] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 457.745228][T11234] ? lock_acquire+0x1d1/0x380 [ 457.745247][T11234] ? find_held_lock+0x2b/0x80 [ 457.745269][T11234] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 457.745291][T11234] ? avc_has_perm_noaudit+0x11e/0x470 [ 457.745312][T11234] ? avc_has_perm_noaudit+0x145/0x470 [ 457.745329][T11234] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 457.745349][T11234] __vmalloc_node_noprof+0xad/0xf0 [ 457.745371][T11234] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 457.745393][T11234] __vmalloc_noprof+0xa3/0x120 [ 457.745414][T11234] ? __pfx___vmalloc_noprof+0x10/0x10 [ 457.745438][T11234] ? rcu_is_watching+0x13/0xc0 [ 457.745459][T11234] ? cap_capable+0x107/0x430 [ 457.745478][T11234] bpf_prog_alloc_no_stats+0x59/0x690 [ 457.745497][T11234] ? security_capable+0x80/0x260 [ 457.745518][T11234] bpf_prog_alloc+0x3b/0x200 [ 457.745537][T11234] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 457.745558][T11234] bpf_prog_load+0x49e/0x2ab0 [ 457.745587][T11234] ? __pfx_bpf_prog_load+0x10/0x10 [ 457.745626][T11234] __sys_bpf+0x1f46/0x4a30 [ 457.745648][T11234] ? __pfx___sys_bpf+0x10/0x10 [ 457.745664][T11234] ? find_held_lock+0x2b/0x80 [ 457.745685][T11234] ? get_pid_task+0xfc/0x250 [ 457.745704][T11234] ? get_pid_task+0xfc/0x250 [ 457.745730][T11234] ? find_held_lock+0x2b/0x80 [ 457.745757][T11234] ? rcu_read_lock_any_held+0x6a/0x90 [ 457.745771][T11234] ? find_held_lock+0x2b/0x80 [ 457.745792][T11234] ? ksys_write+0x190/0x250 [ 457.745810][T11234] ? ksys_write+0x190/0x250 [ 457.745828][T11234] ? lock_acquire+0x1d1/0x380 [ 457.745859][T11234] ? fput+0x7c/0x100 [ 457.745881][T11234] ? ksys_write+0x1ac/0x250 [ 457.745901][T11234] ? __x64_sys_bpf+0xce/0x140 [ 457.745918][T11234] __x64_sys_bpf+0xce/0x140 [ 457.745938][T11234] ? do_syscall_64+0xae/0x790 [ 457.745962][T11234] do_syscall_64+0x123/0x790 [ 457.745985][T11234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.746001][T11234] RIP: 0033:0x7fcc0a19f559 [ 457.746021][T11234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.746036][T11234] RSP: 002b:00007fcc0b034028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 457.746053][T11234] RAX: ffffffffffffffda RBX: 00007fcc0a426090 RCX: 00007fcc0a19f559 [ 457.746064][T11234] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 457.746073][T11234] RBP: 00007fcc0b034090 R08: 0000000000000000 R09: 0000000000000000 [ 457.746082][T11234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.746090][T11234] R13: 00007fcc0a426128 R14: 00007fcc0a426090 R15: 00007ffde436a218 [ 457.746111][T11234] [ 457.752636][T11231] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1281'. [ 457.781353][T11234] syz.7.1283: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 457.781410][T11234] CPU: 1 UID: 0 PID: 11234 Comm: syz.7.1283 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.781432][T11234] Tainted: [L]=SOFTLOCKUP [ 457.781438][T11234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 457.781448][T11234] Call Trace: [ 457.781454][T11234] [ 457.781460][T11234] dump_stack_lvl+0x100/0x190 [ 457.781488][T11234] warn_alloc.cold+0x9e/0xb2 [ 457.781507][T11234] ? __pfx_warn_alloc+0x10/0x10 [ 457.781524][T11234] ? __kasan_kmalloc+0x8a/0xb0 [ 457.781553][T11234] ? __get_vm_area_node+0x22b/0x350 [ 457.781580][T11234] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 457.781607][T11234] ? up_write+0x2dc/0x5b0 [ 457.781631][T11234] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 457.781654][T11234] ? lock_acquire+0x1d1/0x380 [ 457.781673][T11234] ? find_held_lock+0x2b/0x80 [ 457.781696][T11234] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 457.781719][T11234] ? avc_has_perm_noaudit+0x11e/0x470 [ 457.781741][T11234] ? avc_has_perm_noaudit+0x145/0x470 [ 457.781761][T11234] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 457.781781][T11234] __vmalloc_node_noprof+0xad/0xf0 [ 457.781804][T11234] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 457.781827][T11234] __vmalloc_noprof+0xa3/0x120 [ 457.781850][T11234] ? __pfx___vmalloc_noprof+0x10/0x10 [ 457.781875][T11234] ? rcu_is_watching+0x13/0xc0 [ 457.781897][T11234] ? cap_capable+0x107/0x430 [ 457.781919][T11234] bpf_prog_alloc_no_stats+0x59/0x690 [ 457.781939][T11234] ? security_capable+0x80/0x260 [ 457.781960][T11234] bpf_prog_alloc+0x3b/0x200 [ 457.781979][T11234] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 457.782001][T11234] bpf_prog_load+0x49e/0x2ab0 [ 457.782035][T11234] ? __pfx_bpf_prog_load+0x10/0x10 [ 457.782076][T11234] __sys_bpf+0x1f46/0x4a30 [ 457.782099][T11234] ? __pfx___sys_bpf+0x10/0x10 [ 457.782117][T11234] ? find_held_lock+0x2b/0x80 [ 457.782139][T11234] ? get_pid_task+0xfc/0x250 [ 457.782160][T11234] ? get_pid_task+0xfc/0x250 [ 457.782188][T11234] ? find_held_lock+0x2b/0x80 [ 457.782215][T11234] ? rcu_read_lock_any_held+0x6a/0x90 [ 457.782230][T11234] ? find_held_lock+0x2b/0x80 [ 457.782251][T11234] ? ksys_write+0x190/0x250 [ 457.782270][T11234] ? ksys_write+0x190/0x250 [ 457.782288][T11234] ? lock_acquire+0x1d1/0x380 [ 457.782321][T11234] ? fput+0x7c/0x100 [ 457.782343][T11234] ? ksys_write+0x1ac/0x250 [ 457.782365][T11234] ? __x64_sys_bpf+0xce/0x140 [ 457.782381][T11234] __x64_sys_bpf+0xce/0x140 [ 457.782400][T11234] ? do_syscall_64+0xae/0x790 [ 457.782424][T11234] do_syscall_64+0x123/0x790 [ 457.782449][T11234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.782465][T11234] RIP: 0033:0x7fcc0a19f559 [ 457.782480][T11234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.782495][T11234] RSP: 002b:00007fcc0b034028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 457.782510][T11234] RAX: ffffffffffffffda RBX: 00007fcc0a426090 RCX: 00007fcc0a19f559 [ 457.782520][T11234] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 457.782530][T11234] RBP: 00007fcc0b034090 R08: 0000000000000000 R09: 0000000000000000 [ 457.782540][T11234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.782549][T11234] R13: 00007fcc0a426128 R14: 00007fcc0a426090 R15: 00007ffde436a218 [ 457.782571][T11234] [ 457.782578][T11234] Mem-Info: [ 457.782585][T11234] active_anon:24291 inactive_anon:14281 isolated_anon:0 [ 457.782585][T11234] active_file:3154 inactive_file:61448 isolated_file:0 [ 457.782585][T11234] unevictable:0 dirty:852 writeback:0 [ 457.782585][T11234] slab_reclaimable:11851 slab_unreclaimable:113998 [ 457.782585][T11234] mapped:42862 shmem:25607 pagetables:1842 [ 457.782585][T11234] sec_pagetables:0 bounce:0 [ 457.782585][T11234] kernel_misc_reclaimable:0 [ 457.782585][T11234] free:1221313 free_pcp:14627 free_cma:0 [ 457.782633][T11234] Node 0 active_anon:82828kB inactive_anon:51108kB active_file:12616kB inactive_file:245600kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171448kB dirty:3408kB writeback:0kB shmem:82076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16340kB pagetables:7252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 457.782675][T11234] Node 1 active_anon:14336kB inactive_anon:6016kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:20352kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 457.782713][T11234] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 457.782755][T11234] lowmem_reserve[]: 0 2451 2452 2452 2452 [ 457.782782][T11234] Node 0 DMA32 free:955980kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:82828kB inactive_anon:51108kB active_file:12616kB inactive_file:245600kB unevictable:0kB writepending:3408kB zspages:580kB present:3129332kB managed:2510840kB mlocked:0kB bounce:0kB free_pcp:56428kB local_pcp:22532kB free_cma:0kB [ 457.789124][T11234] lowmem_reserve[]: 0 0 0 0 0 [ 457.789155][T11234] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:60kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 457.789198][T11234] lowmem_reserve[]: 0 0 0 0 0 [ 457.789223][T11234] Node 1 Normal free:3913916kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:14336kB inactive_anon:6016kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2080kB local_pcp:0kB free_cma:0kB [ 457.789268][T11234] lowmem_reserve[]: 0 0 0 0 0 [ 457.789293][T11234] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 457.789405][T11234] Node 0 DMA32: 1839*4kB (UM) 1068*8kB (UME) 1510*16kB (UME) 1331*32kB (UME) 858*64kB (UME) 568*128kB (UME) 199*256kB (UME) 129*512kB (UME) 36*1024kB (UM) 3*2048kB (ME) 143*4096kB (UM) = 955996kB [ 457.789524][T11234] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 457.789598][T11234] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 13*16kB (UM) 16*32kB (UM) 15*64kB (UM) 6*128kB (UM) 11*256kB (UM) 14*512kB (UM) 2*1024kB (M) 2*2048kB (U) 951*4096kB (M) = 3913916kB [ 457.789716][T11234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 457.789729][T11234] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 457.789741][T11234] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 457.789753][T11234] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 457.789765][T11234] 90257 total pagecache pages [ 457.789771][T11234] 2 pages in swap cache [ 457.789776][T11234] Free swap = 124840kB [ 457.789782][T11234] Total swap = 124996kB [ 457.789788][T11234] 2097051 pages RAM [ 457.789794][T11234] 0 pages HighMem/MovableOnly [ 457.789799][T11234] 437710 pages reserved [ 457.789805][T11234] 0 pages cma reserved [ 458.339302][T11239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.792135][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1281'. [ 458.915034][T11231] bridge1: port 1(veth3) entered blocking state [ 458.916740][T11231] bridge1: port 1(veth3) entered disabled state [ 458.916846][T11231] veth3: entered allmulticast mode [ 458.922866][T11231] veth3: entered promiscuous mode [ 459.532858][ T9582] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 459.707903][ T9582] usb 8-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 459.711594][ T9582] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 459.711613][ T9582] usb 8-1: Product: syz [ 459.711625][ T9582] usb 8-1: Manufacturer: syz [ 459.909419][T11242] kvm: user requested TSC rate below hardware speed [ 460.025863][T11250] FAULT_INJECTION: forcing a failure. [ 460.025863][T11250] name failslab, interval 1, probability 0, space 0, times 0 [ 460.025884][T11250] CPU: 1 UID: 0 PID: 11250 Comm: syz.9.1288 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.025902][T11250] Tainted: [L]=SOFTLOCKUP [ 460.025906][T11250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 460.025913][T11250] Call Trace: [ 460.025917][T11250] [ 460.025922][T11250] dump_stack_lvl+0x100/0x190 [ 460.025943][T11250] should_fail_ex.cold+0x5/0xa [ 460.025960][T11250] should_failslab+0xc2/0x120 [ 460.025978][T11250] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 460.025992][T11250] ? lock_acquire+0x1d1/0x380 [ 460.026006][T11250] ? proc_alloc_inode+0x25/0x200 [ 460.026020][T11250] ? __pfx_proc_alloc_inode+0x10/0x10 [ 460.026033][T11250] proc_alloc_inode+0x25/0x200 [ 460.026050][T11250] alloc_inode+0x68/0x250 [ 460.026063][T11250] new_inode+0x22/0x1c0 [ 460.026075][T11250] ? __d_lookup+0x266/0x4a0 [ 460.026091][T11250] proc_sys_make_inode+0x47/0x5c0 [ 460.026106][T11250] proc_sys_fill_cache.isra.0+0x29a/0x3c0 [ 460.026120][T11250] ? do_raw_spin_lock+0x128/0x260 [ 460.026135][T11250] ? __pfx_proc_sys_fill_cache.isra.0+0x10/0x10 [ 460.026148][T11250] ? proc_sys_readdir+0x2c4/0xb50 [ 460.026165][T11250] proc_sys_readdir+0x452/0xb50 [ 460.026182][T11250] ? __pfx_proc_sys_readdir+0x10/0x10 [ 460.026194][T11250] ? find_held_lock+0x2b/0x80 [ 460.026211][T11250] ? __pfx_down_read_killable+0x10/0x10 [ 460.026224][T11250] ? avc_policy_seqno+0x9/0x20 [ 460.026235][T11250] ? selinux_file_permission+0x8f/0x6d0 [ 460.026256][T11250] iterate_dir+0x2ba/0xc10 [ 460.026273][T11250] __x64_sys_getdents64+0x13b/0x2c0 [ 460.026289][T11250] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 460.026303][T11250] ? fput+0x7c/0x100 [ 460.026319][T11250] ? __pfx_filldir64+0x10/0x10 [ 460.026339][T11250] do_syscall_64+0x123/0x790 [ 460.026357][T11250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.026369][T11250] RIP: 0033:0x7fdfccf9f559 [ 460.026379][T11250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.026389][T11250] RSP: 002b:00007fdfcde87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 460.026401][T11250] RAX: ffffffffffffffda RBX: 00007fdfcd225fa0 RCX: 00007fdfccf9f559 [ 460.026408][T11250] RDX: 0000000000000400 RSI: 0000200000000300 RDI: 0000000000000003 [ 460.026415][T11250] RBP: 00007fdfcde87090 R08: 0000000000000000 R09: 0000000000000000 [ 460.026421][T11250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.026428][T11250] R13: 00007fdfcd226038 R14: 00007fdfcd225fa0 R15: 00007ffca95f40b8 [ 460.026443][T11250] [ 460.348618][T11256] pimreg: entered allmulticast mode [ 460.358163][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 460.358181][ T30] audit: type=1400 audit(1792529081.621:3046): avc: denied { ioctl } for pid=11255 comm="syz.8.1291" path="socket:[36603]" dev="sockfs" ino=36603 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 460.358871][ T30] audit: type=1804 audit(1792529081.621:3047): pid=11253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.1289" name="/newroot/50/tracing/events/msr/read_msr/enable" dev="tracefs" ino=19680823 res=1 errno=0 [ 460.401116][ T9582] scsi host1: uas [ 460.425436][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1291'. [ 460.531591][T11261] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1292'. [ 460.541321][T11261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1292'. [ 460.558206][T11264] FAULT_INJECTION: forcing a failure. [ 460.558206][T11264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.558236][T11264] CPU: 0 UID: 0 PID: 11264 Comm: syz.9.1294 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.558261][T11264] Tainted: [L]=SOFTLOCKUP [ 460.558267][T11264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 460.558282][T11264] Call Trace: [ 460.558288][T11264] [ 460.558296][T11264] dump_stack_lvl+0x100/0x190 [ 460.558328][T11264] should_fail_ex.cold+0x5/0xa [ 460.558355][T11264] _copy_from_user+0x2e/0xd0 [ 460.558384][T11264] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 460.558411][T11264] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 460.558445][T11264] do_sock_getsockopt+0x530/0x6e0 [ 460.558474][T11264] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 460.558503][T11264] ? __fget_files+0x34/0x3d0 [ 460.558536][T11264] ? find_held_lock+0x2b/0x80 [ 460.558571][T11264] ? __fget_files+0x21f/0x3d0 [ 460.558603][T11264] __sys_getsockopt+0x148/0x260 [ 460.558631][T11264] ? __x64_sys_getsockopt+0xbd/0x160 [ 460.558650][T11264] __x64_sys_getsockopt+0xbd/0x160 [ 460.558667][T11264] ? do_syscall_64+0xae/0x790 [ 460.558694][T11264] ? lockdep_hardirqs_on+0x7d/0x110 [ 460.558721][T11264] do_syscall_64+0x123/0x790 [ 460.558750][T11264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.558769][T11264] RIP: 0033:0x7fdfccf9f559 [ 460.558788][T11264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.558806][T11264] RSP: 002b:00007fdfcde87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 460.558824][T11264] RAX: ffffffffffffffda RBX: 00007fdfcd225fa0 RCX: 00007fdfccf9f559 [ 460.558836][T11264] RDX: 000000000000007f RSI: 0000000000000084 RDI: 0000000000000003 [ 460.558847][T11264] RBP: 00007fdfcde87090 R08: 0000200000000b00 R09: 0000000000000000 [ 460.558859][T11264] R10: 0000200000000ac0 R11: 0000000000000246 R12: 0000000000000001 [ 460.558870][T11264] R13: 00007fdfcd226038 R14: 00007fdfcd225fa0 R15: 00007ffca95f40b8 [ 460.558894][T11264] [ 460.590793][T11261] UBIFS error (pid: 11261): cannot open "ubi0_0", error -19 [ 460.604883][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1292'. [ 460.688097][T11265] 9pnet_virtio: no channels available for device syz [ 460.737774][ C1] usb 8-1: stat urb: status -71 [ 460.738085][ C1] usb 8-1: cmd cmplt err -71 [ 460.750658][ T9584] usb 8-1: USB disconnect, device number 13 [ 460.768942][ T9584] scsi 1:0:0:0: tag#16 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 460.769087][ T9584] scsi 1:0:0:0: tag#16 CDB: Inquiry 12 00 00 00 24 00 [ 460.802955][ T10] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 461.048125][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 461.111344][ T10] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 461.111372][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 461.445421][ T10] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 461.445450][ T10] usb 9-1: Product: syz [ 461.445464][ T10] usb 9-1: Manufacturer: syz [ 461.445478][ T10] usb 9-1: SerialNumber: syz [ 461.449072][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 461.723119][ T10] usb 9-1: config 0 descriptor?? [ 462.499199][ T10] usb 9-1: selecting invalid altsetting 0 [ 463.492732][T11277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1296'. [ 463.565595][T11275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1296'. [ 463.573930][ T10] usb 9-1: USB disconnect, device number 7 [ 463.643034][ T6410] udevd[6410]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 463.712204][T11275] bridge1: port 1(veth5) entered blocking state [ 463.712282][T11275] bridge1: port 1(veth5) entered disabled state [ 463.712343][T11275] veth5: entered allmulticast mode [ 463.713197][T11275] veth5: entered promiscuous mode [ 463.739421][ T30] audit: type=1400 audit(1792529085.011:3048): avc: denied { listen } for pid=11282 comm="syz.7.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 463.739968][ T30] audit: type=1400 audit(1792529085.011:3049): avc: denied { accept } for pid=11282 comm="syz.7.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 463.814781][T11283] netlink: 'syz.7.1297': attribute type 4 has an invalid length. [ 463.814802][T11283] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1297'. [ 463.817389][T11283] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 464.201211][ T30] audit: type=1400 audit(1792529085.471:3050): avc: denied { create } for pid=11299 comm="syz.4.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 464.202929][ T30] audit: type=1400 audit(1792529085.471:3051): avc: denied { ioctl } for pid=11299 comm="syz.4.1301" path="socket:[37990]" dev="sockfs" ino=37990 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 464.209516][ T30] audit: type=1400 audit(1792529085.471:3052): avc: denied { bind } for pid=11299 comm="syz.4.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 464.299321][T11301] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1301'. [ 464.820577][ T30] audit: type=1400 audit(1792529086.081:3053): avc: denied { write } for pid=11303 comm="syz.8.1303" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 464.834222][T11304] loop6: detected capacity change from 0 to 4096 [ 465.035906][T11304] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 465.035926][T11304] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 465.035933][T11304] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 465.035960][T11304] loop6: [ 465.089948][T11310] netlink: 'syz.4.1305': attribute type 1 has an invalid length. [ 465.089969][T11310] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1305'. [ 465.140043][T11309] FAULT_INJECTION: forcing a failure. [ 465.140043][T11309] name failslab, interval 1, probability 0, space 0, times 0 [ 465.140075][T11309] CPU: 1 UID: 0 PID: 11309 Comm: syz.7.1304 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.140099][T11309] Tainted: [L]=SOFTLOCKUP [ 465.140106][T11309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 465.140117][T11309] Call Trace: [ 465.140126][T11309] [ 465.140134][T11309] dump_stack_lvl+0x100/0x190 [ 465.140165][T11309] should_fail_ex.cold+0x5/0xa [ 465.140192][T11309] should_failslab+0xc2/0x120 [ 465.140220][T11309] __kmalloc_noprof+0xfc/0x840 [ 465.140242][T11309] ? rcu_is_watching+0x13/0xc0 [ 465.140269][T11309] ? tomoyo_realpath_from_path+0xb6/0x690 [ 465.140293][T11309] tomoyo_realpath_from_path+0xb6/0x690 [ 465.140316][T11309] tomoyo_path_number_perm+0x23c/0x580 [ 465.140339][T11309] ? tomoyo_path_number_perm+0x22e/0x580 [ 465.140365][T11309] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 465.140401][T11309] ? __lock_acquire+0x5c0/0x1f40 [ 465.140437][T11309] ? __fget_files+0x34/0x3d0 [ 465.140465][T11309] ? find_held_lock+0x2b/0x80 [ 465.140491][T11309] ? hook_file_ioctl_common+0x140/0x440 [ 465.140523][T11309] ? __fget_files+0x21f/0x3d0 [ 465.140554][T11309] security_file_ioctl+0xd3/0x230 [ 465.140582][T11309] __x64_sys_ioctl+0xb7/0x210 [ 465.140607][T11309] do_syscall_64+0x123/0x790 [ 465.140638][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.140657][T11309] RIP: 0033:0x7fcc0a19f559 [ 465.140672][T11309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.140690][T11309] RSP: 002b:00007fcc0b055028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.140708][T11309] RAX: ffffffffffffffda RBX: 00007fcc0a425fa0 RCX: 00007fcc0a19f559 [ 465.140721][T11309] RDX: 00002000000001c0 RSI: 000000004008ae89 RDI: 0000000000000005 [ 465.140733][T11309] RBP: 00007fcc0b055090 R08: 0000000000000000 R09: 0000000000000000 [ 465.140744][T11309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.140755][T11309] R13: 00007fcc0a426038 R14: 00007fcc0a425fa0 R15: 00007ffde436a218 [ 465.140781][T11309] [ 465.144478][T11309] ERROR: Out of memory at tomoyo_realpath_from_path. [ 465.388274][ T30] audit: type=1400 audit(1792529086.661:3054): avc: denied { create } for pid=11293 comm="syz.9.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 465.429224][ T30] audit: type=1400 audit(1792529086.691:3055): avc: denied { ioctl } for pid=11293 comm="syz.9.1300" path="socket:[36732]" dev="sockfs" ino=36732 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 465.465394][ T30] audit: type=1400 audit(1792529086.701:3056): avc: denied { connect } for pid=11293 comm="syz.9.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 465.526242][T11312] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1307'. [ 465.586901][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1307'. [ 466.003864][ T30] audit: type=1400 audit(1792529087.271:3057): avc: denied { bind } for pid=11316 comm="syz.1.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 466.008497][ T30] audit: type=1400 audit(1792529087.271:3058): avc: denied { name_bind } for pid=11316 comm="syz.1.1306" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 466.080523][ T30] audit: type=1400 audit(1792529087.341:3059): avc: denied { node_bind } for pid=11316 comm="syz.1.1306" saddr=255.255.255.255 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 466.124246][ T30] audit: type=1400 audit(1792529087.391:3060): avc: denied { connect } for pid=11316 comm="syz.1.1306" laddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 466.267800][ T30] audit: type=1400 audit(1792529087.531:3061): avc: denied { create } for pid=11316 comm="syz.1.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 466.348253][ T30] audit: type=1400 audit(1792529087.611:3062): avc: denied { connect } for pid=11316 comm="syz.1.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 466.559557][T11314] bridge4: port 1(veth7) entered blocking state [ 466.561092][T11314] bridge4: port 1(veth7) entered disabled state [ 466.636080][T11314] veth7: entered allmulticast mode [ 466.810218][T11314] veth7: entered promiscuous mode [ 466.969536][T11315] bridge0: port 3(syz_tun) entered blocking state [ 466.969888][T11315] bridge0: port 3(syz_tun) entered disabled state [ 467.058758][T11315] syz_tun: entered allmulticast mode [ 467.060657][T11315] syz_tun: entered promiscuous mode [ 467.060909][T11315] bridge0: port 3(syz_tun) entered blocking state [ 467.060955][T11315] bridge0: port 3(syz_tun) entered listening state [ 467.207040][ T30] audit: type=1400 audit(1792529088.471:3063): avc: denied { read } for pid=11320 comm="syz.7.1308" dev="sockfs" ino=36765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 467.305145][T11327] FAULT_INJECTION: forcing a failure. [ 467.305145][T11327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.305168][T11327] CPU: 1 UID: 0 PID: 11327 Comm: syz.8.1311 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.305183][T11327] Tainted: [L]=SOFTLOCKUP [ 467.305188][T11327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 467.305194][T11327] Call Trace: [ 467.305198][T11327] [ 467.305203][T11327] dump_stack_lvl+0x100/0x190 [ 467.305223][T11327] should_fail_ex.cold+0x5/0xa [ 467.305240][T11327] _copy_from_user+0x2e/0xd0 [ 467.305258][T11327] copy_msghdr_from_user+0x9f/0x4c0 [ 467.305275][T11327] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 467.305294][T11327] ? lock_acquire+0x1d1/0x380 [ 467.305307][T11327] ? get_pid_task+0x2a/0x250 [ 467.305324][T11327] ___sys_sendmsg+0x106/0x1e0 [ 467.305341][T11327] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.305357][T11327] ? get_pid_task+0x106/0x250 [ 467.305377][T11327] ? find_held_lock+0x2b/0x80 [ 467.305402][T11327] __sys_sendmsg+0x160/0x210 [ 467.305414][T11327] ? __pfx___sys_sendmsg+0x10/0x10 [ 467.305434][T11327] do_syscall_64+0x123/0x790 [ 467.305454][T11327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.305465][T11327] RIP: 0033:0x7fe63259f559 [ 467.305475][T11327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.305486][T11327] RSP: 002b:00007fe633550028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.305497][T11327] RAX: ffffffffffffffda RBX: 00007fe632825fa0 RCX: 00007fe63259f559 [ 467.305504][T11327] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000003 [ 467.305510][T11327] RBP: 00007fe633550090 R08: 0000000000000000 R09: 0000000000000000 [ 467.305517][T11327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.305523][T11327] R13: 00007fe632826038 R14: 00007fe632825fa0 R15: 00007ffdeba50d58 [ 467.305542][T11327] [ 467.498999][ T9585] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 467.649449][ T9585] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 467.650339][ T9585] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.650359][ T9585] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 467.651223][ T9585] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 467.651263][ T9585] usb 8-1: SerialNumber: syz [ 467.730025][T11334] bond1: option resend_igmp: invalid value (4936) [ 467.730050][T11334] bond1: option resend_igmp: allowed values 0 - 255 [ 467.734661][T11334] bond1 (unregistering): Released all slaves [ 467.772086][T11337] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1313'. [ 467.894452][ T9585] usb 8-1: 0:2 : does not exist [ 467.894515][ T9585] usb 8-1: unit 5: unexpected type 0x0a [ 467.944453][T11340] ptp ptp0: max value is 20 [ 468.054246][ T9585] usb 8-1: USB disconnect, device number 14 [ 468.138080][ T6443] udevd[6443]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.275319][T11346] tipc: Enabled bearer , priority 0 [ 468.284947][T11346] tipc: Resetting bearer [ 468.401507][T11346] tipc: Disabling bearer [ 468.461038][T11350] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1318'. [ 468.969030][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 469.165571][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1320'. [ 469.277695][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1320'. [ 469.437845][T11357] bridge3: port 1(veth7) entered blocking state [ 469.437927][T11357] bridge3: port 1(veth7) entered disabled state [ 469.454519][T11362] FAULT_INJECTION: forcing a failure. [ 469.454519][T11362] name failslab, interval 1, probability 0, space 0, times 0 [ 469.454541][T11362] CPU: 1 UID: 0 PID: 11362 Comm: syz.8.1322 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.454557][T11362] Tainted: [L]=SOFTLOCKUP [ 469.454561][T11362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 469.454568][T11362] Call Trace: [ 469.454572][T11362] [ 469.454577][T11362] dump_stack_lvl+0x100/0x190 [ 469.454598][T11362] should_fail_ex.cold+0x5/0xa [ 469.454614][T11362] should_failslab+0xc2/0x120 [ 469.454631][T11362] __kmalloc_noprof+0xfc/0x840 [ 469.454646][T11362] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 469.454665][T11362] kernfs_fop_write_iter+0x26a/0x5f0 [ 469.454682][T11362] vfs_write+0x6af/0x1050 [ 469.454698][T11362] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 469.454715][T11362] ? __pfx_vfs_write+0x10/0x10 [ 469.454727][T11362] ? find_held_lock+0x2b/0x80 [ 469.454753][T11362] ksys_write+0x12a/0x250 [ 469.454767][T11362] ? __pfx_ksys_write+0x10/0x10 [ 469.454781][T11362] ? trace_hardirqs_off+0x70/0x170 [ 469.454803][T11362] do_syscall_64+0x123/0x790 [ 469.454832][T11362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.454850][T11362] RIP: 0033:0x7fe63259f559 [ 469.454867][T11362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.454880][T11362] RSP: 002b:00007fe633550028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 469.454891][T11362] RAX: ffffffffffffffda RBX: 00007fe632825fa0 RCX: 00007fe63259f559 [ 469.454898][T11362] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003 [ 469.454905][T11362] RBP: 00007fe633550090 R08: 0000000000000000 R09: 0000000000000000 [ 469.454911][T11362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.454918][T11362] R13: 00007fe632826038 R14: 00007fe632825fa0 R15: 00007ffdeba50d58 [ 469.454933][T11362] [ 469.610164][ T5692] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 469.662769][T11357] veth7: entered allmulticast mode [ 469.665226][T11357] veth7: entered promiscuous mode [ 469.748817][T11354] bridge0: port 4(syz_tun) entered blocking state [ 469.749587][T11354] bridge0: port 4(syz_tun) entered disabled state [ 469.749723][T11354] syz_tun: entered allmulticast mode [ 469.772614][T11354] syz_tun: entered promiscuous mode [ 469.773556][T11354] bridge0: port 4(syz_tun) entered blocking state [ 469.773600][T11354] bridge0: port 4(syz_tun) entered listening state [ 469.852406][ T5692] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 469.854737][ T5692] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.854766][ T5692] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.854798][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.859808][ T5692] metro_usb 2-1:1.0: Metrologic USB to Serial converter detected [ 469.882353][ T5692] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 469.918583][T11360] ptp ptp0: new virtual clock ptp1 [ 469.918607][T11360] ptp ptp0: guarantee physical clock free running [ 469.930087][T11369] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 470.089061][T11355] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 470.142642][ T5692] kernel write not supported for file /uinput (pid: 5692 comm: kworker/0:4) [ 470.236469][T11379] kAFS: unable to lookup cell 'ÿ' [ 470.242459][T11387] kAFS: unable to lookup cell '(,c¾Ì' [ 470.254992][ T5692] usb 2-1: USB disconnect, device number 40 [ 470.299069][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1329'. [ 470.307605][ T5692] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 470.356919][ T5692] metro_usb 2-1:1.0: device disconnected [ 471.150492][ T9584] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 471.432409][ T9584] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 471.433311][ T9584] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 471.433338][ T9584] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 471.433360][ T9584] usb 8-1: config 0 interface 0 has no altsetting 0 [ 471.436569][ T9584] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 471.436593][ T9584] usb 8-1: Product: syz [ 471.436608][ T9584] usb 8-1: Manufacturer: syz [ 471.436622][ T9584] usb 8-1: SerialNumber: syz [ 471.438849][ T9584] usb 8-1: config 0 descriptor?? [ 471.513627][ T9584] usb 8-1: selecting invalid altsetting 0 [ 471.529511][ T2696] block nbd0: Possible stuck request ffff8880299b5080: control (read@0,1024B). Runtime 270 seconds [ 471.529545][ T2696] block nbd0: Possible stuck request ffff8880299b5240: control (read@1024,1024B). Runtime 270 seconds [ 471.529567][ T2696] block nbd0: Possible stuck request ffff8880299b5400: control (read@2048,1024B). Runtime 270 seconds [ 471.529590][ T2696] block nbd0: Possible stuck request ffff8880299b55c0: control (read@3072,1024B). Runtime 270 seconds [ 471.605022][T11402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1333'. [ 472.334813][ T9584] usb 8-1: USB disconnect, device number 15 [ 472.424248][ T6410] udevd[6410]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.457924][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 472.457943][ T30] audit: type=1400 audit(1792529093.721:3083): avc: denied { mount } for pid=11404 comm="syz.8.1334" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 472.509085][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1335'. [ 472.548023][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1335'. [ 472.573678][T11408] bridge1: port 1(veth3) entered blocking state [ 472.573903][T11408] bridge1: port 1(veth3) entered disabled state [ 472.574014][T11408] veth3: entered allmulticast mode [ 472.575305][T11408] veth3: entered promiscuous mode [ 472.617347][T11408] bridge0: port 4(syz_tun) entered blocking state [ 472.617459][T11408] bridge0: port 4(syz_tun) entered disabled state [ 472.617573][T11408] syz_tun: entered allmulticast mode [ 472.640676][T11408] syz_tun: entered promiscuous mode [ 472.641784][T11408] bridge0: port 4(syz_tun) entered blocking state [ 472.641870][T11408] bridge0: port 4(syz_tun) entered listening state [ 472.648936][ C1] bridge0: port 4(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 472.649670][ C1] bridge0: topology change detected, propagating [ 472.747539][ T5602] Bluetooth: min 0 < 6 [ 472.747634][ T5602] Bluetooth: min 0 < 6 [ 472.747724][ T5602] Bluetooth: min 0 < 6 [ 472.747792][ T5602] Bluetooth: min 0 < 6 [ 472.747863][ T5602] Bluetooth: min 0 < 6 [ 472.747930][ T5602] Bluetooth: min 0 < 6 [ 472.748003][ T5602] Bluetooth: min 0 < 6 [ 472.748070][ T5602] Bluetooth: min 0 < 6 [ 472.748138][ T5602] Bluetooth: min 0 < 6 [ 472.748200][ T5602] Bluetooth: min 0 < 6 [ 472.748262][ T5602] Bluetooth: min 0 < 6 [ 472.748322][ T5602] Bluetooth: min 0 < 6 [ 472.748383][ T5602] Bluetooth: min 0 < 6 [ 472.748444][ T5602] Bluetooth: min 0 < 6 [ 472.748527][ T5602] Bluetooth: min 0 < 6 [ 472.748596][ T5602] Bluetooth: min 0 < 6 [ 472.748659][ T5602] Bluetooth: min 0 < 6 [ 472.748721][ T5602] Bluetooth: min 0 < 6 [ 472.748782][ T5602] Bluetooth: min 0 < 6 [ 472.748843][ T5602] Bluetooth: min 0 < 6 [ 472.750341][ T5602] Bluetooth: min 0 < 6 [ 472.750416][ T5602] Bluetooth: min 0 < 6 [ 472.750481][ T5602] Bluetooth: min 0 < 6 [ 472.750542][ T5602] Bluetooth: min 0 < 6 [ 472.750605][ T5602] Bluetooth: min 0 < 6 [ 472.750668][ T5602] Bluetooth: min 0 < 6 [ 472.750730][ T5602] Bluetooth: min 0 < 6 [ 472.750798][ T5602] Bluetooth: min 0 < 6 [ 472.750860][ T5602] Bluetooth: min 0 < 6 [ 472.750927][ T5602] Bluetooth: min 0 < 6 [ 472.750989][ T5602] Bluetooth: min 0 < 6 [ 472.751056][ T5602] Bluetooth: min 0 < 6 [ 472.751121][ T5602] Bluetooth: min 0 < 6 [ 472.760672][ T5602] Bluetooth: min 0 < 6 [ 472.762267][ T5602] Bluetooth: min 0 < 6 [ 472.762341][ T5602] Bluetooth: min 0 < 6 [ 472.762410][ T5602] Bluetooth: min 0 < 6 [ 472.762477][ T5602] Bluetooth: min 0 < 6 [ 472.762543][ T5602] Bluetooth: min 0 < 6 [ 472.762612][ T5602] Bluetooth: min 0 < 6 [ 472.762978][ T5602] Bluetooth: min 0 < 6 [ 472.763053][ T5602] Bluetooth: min 0 < 6 [ 472.763124][ T5602] Bluetooth: min 0 < 6 [ 472.763188][ T5602] Bluetooth: min 0 < 6 [ 472.763252][ T5602] Bluetooth: min 0 < 6 [ 472.763315][ T5602] Bluetooth: min 0 < 6 [ 472.763379][ T5602] Bluetooth: min 0 < 6 [ 472.763440][ T5602] Bluetooth: min 0 < 6 [ 472.763502][ T5602] Bluetooth: min 0 < 6 [ 472.763564][ T5602] Bluetooth: min 0 < 6 [ 472.763627][ T5602] Bluetooth: min 0 < 6 [ 472.763691][ T5602] Bluetooth: min 0 < 6 [ 472.766159][ T5602] Bluetooth: min 0 < 6 [ 472.766234][ T5602] Bluetooth: min 0 < 6 [ 472.766304][ T5602] Bluetooth: min 0 < 6 [ 472.766381][ T5602] Bluetooth: min 0 < 6 [ 472.766448][ T5602] Bluetooth: min 0 < 6 [ 472.766511][ T5602] Bluetooth: min 0 < 6 [ 472.766571][ T5602] Bluetooth: min 0 < 6 [ 472.766629][ T5602] Bluetooth: min 0 < 6 [ 472.766694][ T5602] Bluetooth: min 0 < 6 [ 472.766755][ T5602] Bluetooth: min 0 < 6 [ 472.766825][ T5602] Bluetooth: min 0 < 6 [ 472.767841][ T5602] Bluetooth: min 0 < 6 [ 472.767917][ T5602] Bluetooth: min 0 < 6 [ 472.820842][T11425] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 473.067447][T11436] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 473.115787][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1343'. [ 473.129383][T11436] md: couldn't update array info. -22 [ 473.144057][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1343'. [ 473.173162][T11438] bridge2: port 1(veth5) entered blocking state [ 473.173248][T11438] bridge2: port 1(veth5) entered disabled state [ 473.173369][T11438] veth5: entered allmulticast mode [ 473.176347][T11438] veth5: entered promiscuous mode [ 473.658479][T11450] syzkaller0: entered promiscuous mode [ 473.658501][T11450] syzkaller0: entered allmulticast mode [ 473.707802][T11441] FAULT_INJECTION: forcing a failure. [ 473.707802][T11441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.707832][T11441] CPU: 1 UID: 0 PID: 11441 Comm: syz.1.1344 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.707858][T11441] Tainted: [L]=SOFTLOCKUP [ 473.707864][T11441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 473.707875][T11441] Call Trace: [ 473.707882][T11441] [ 473.707890][T11441] dump_stack_lvl+0x100/0x190 [ 473.707921][T11441] should_fail_ex.cold+0x5/0xa [ 473.707948][T11441] _copy_to_user+0x32/0xd0 [ 473.707978][T11441] simple_read_from_buffer+0xcb/0x170 [ 473.708015][T11441] proc_fail_nth_read+0x1af/0x230 [ 473.708045][T11441] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 473.708075][T11441] ? rw_verify_area+0xce/0x6d0 [ 473.708096][T11441] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 473.708124][T11441] vfs_read+0x1e4/0xb40 [ 473.708147][T11441] ? lock_acquire+0x1d1/0x380 [ 473.708168][T11441] ? __fget_files+0x34/0x3d0 [ 473.708194][T11441] ? __pfx_vfs_read+0x10/0x10 [ 473.708215][T11441] ? find_held_lock+0x2b/0x80 [ 473.708243][T11441] ? __fget_files+0x215/0x3d0 [ 473.708276][T11441] ? __fget_files+0x21f/0x3d0 [ 473.708310][T11441] ksys_read+0x12a/0x250 [ 473.708333][T11441] ? __pfx_ksys_read+0x10/0x10 [ 473.708355][T11441] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 473.708380][T11441] ? syscall_user_dispatch+0x76/0x130 [ 473.708409][T11441] do_syscall_64+0x123/0x790 [ 473.708440][T11441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.708460][T11441] RIP: 0033:0x7fb66695fd8e [ 473.708476][T11441] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 473.708492][T11441] RSP: 002b:00007fb667903fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 473.708510][T11441] RAX: ffffffffffffffda RBX: 00007fb6679046c0 RCX: 00007fb66695fd8e [ 473.708523][T11441] RDX: 000000000000000f RSI: 00007fb6679040a0 RDI: 0000000000000003 [ 473.708534][T11441] RBP: 00007fb667904090 R08: 0000000000000000 R09: 0000000000000000 [ 473.708546][T11441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.708557][T11441] R13: 00007fb666c26038 R14: 00007fb666c25fa0 R15: 00007ffce903f6b8 [ 473.708583][T11441] [ 474.028986][ T9578] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 474.309581][ T9578] usb 10-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice= 1.00 [ 474.310472][ T9578] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 474.310499][ T9578] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 474.310521][ T9578] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 474.310542][ T9578] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 474.310563][ T9578] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 474.312258][ T9578] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.312281][ T9578] usb 10-1: Product: syz [ 474.312295][ T9578] usb 10-1: Manufacturer: syz [ 474.312311][ T9578] usb 10-1: SerialNumber: syz [ 474.317905][T11450] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 474.318023][T11450] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 474.318133][T11450] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 474.318240][T11450] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 474.331782][T11458] netlink: 'syz.1.1350': attribute type 10 has an invalid length. [ 474.341152][T11458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.344120][T11458] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 474.387640][T11458] syz_tun: left allmulticast mode [ 474.387661][T11458] syz_tun: left promiscuous mode [ 474.387806][T11458] bridge0: port 4(syz_tun) entered disabled state [ 474.446752][T11458] dummy0: left promiscuous mode [ 474.450794][T11458] bridge0: port 3(dummy0) entered disabled state [ 474.470721][T11458] bond0: (slave batadv0): Releasing backup interface [ 474.528078][T11458] bridge_slave_0: left allmulticast mode [ 474.528201][T11458] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.585534][ T30] audit: type=1400 audit(1792529095.851:3084): avc: denied { connect } for pid=11449 comm="syz.9.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 474.621906][ T9578] comedi comedi5: unable to reset configuration [ 474.621931][ T9578] dt9812 10-1:1.0: driver 'dt9812' failed to auto-configure device. [ 474.624912][ T9578] dt9812 10-1:1.0: probe with driver dt9812 failed with error -71 [ 474.625091][T11458] bridge_slave_1: left allmulticast mode [ 474.625111][T11458] bridge_slave_1: left promiscuous mode [ 474.625256][T11458] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.643970][ T9584] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 474.683407][T11458] bond0: (slave bond_slave_0): Releasing backup interface [ 474.703079][T11458] bond0: (slave bond_slave_1): Releasing backup interface [ 474.725359][T11458] team0: Port device team_slave_0 removed [ 474.748249][T11458] team0: Port device team_slave_1 removed [ 474.749016][ T9582] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 474.761960][T11458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.761980][T11458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.782811][T11458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.782830][T11458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.787755][T11458] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 474.809206][ T30] audit: type=1400 audit(1792529096.071:3085): avc: denied { append } for pid=11465 comm="syz.8.1352" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 474.823634][ T5602] Bluetooth: hci3: command tx timeout [ 474.846641][ T9584] usb 8-1: Using ep0 maxpacket: 32 [ 474.854978][ T9584] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 474.856019][ T9584] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.856044][ T9584] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.857517][ T9584] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 474.857538][ T9584] usb 8-1: Product: syz [ 474.857551][ T9584] usb 8-1: Manufacturer: syz [ 474.915040][ T9584] hub 8-1:4.0: USB hub found [ 474.928951][ T9582] usb 2-1: Using ep0 maxpacket: 8 [ 474.929627][ T9582] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 474.930502][ T9582] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.930559][ T9582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.932896][ T9582] usb 2-1: config 0 descriptor?? [ 474.935993][ T9582] ldusb 2-1:0.0: Interrupt in endpoint not found [ 474.947932][ T5692] usb 10-1: USB disconnect, device number 6 [ 475.074126][T11469] nvme_fabrics: missing parameter 'transport=%s' [ 475.074144][T11469] nvme_fabrics: missing parameter 'nqn=%s' [ 475.143507][ T30] audit: type=1400 audit(1792529096.411:3086): avc: denied { mount } for pid=11471 comm="syz.8.1354" name="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 475.148552][ T30] audit: type=1400 audit(1792529096.411:3087): avc: denied { search } for pid=11471 comm="syz.8.1354" name="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 475.148664][ T30] audit: type=1400 audit(1792529096.411:3088): avc: denied { search } for pid=11471 comm="syz.8.1354" name="usb_gadget" dev="configfs" ino=3706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 475.230813][ T30] audit: type=1400 audit(1792529096.501:3089): avc: denied { unmount } for pid=9977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 475.272314][T11474] FAULT_INJECTION: forcing a failure. [ 475.272314][T11474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.272345][T11474] CPU: 1 UID: 0 PID: 11474 Comm: syz.8.1355 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.272373][T11474] Tainted: [L]=SOFTLOCKUP [ 475.272380][T11474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 475.272390][T11474] Call Trace: [ 475.272397][T11474] [ 475.272405][T11474] dump_stack_lvl+0x100/0x190 [ 475.272437][T11474] should_fail_ex.cold+0x5/0xa [ 475.272463][T11474] _copy_to_user+0x32/0xd0 [ 475.272492][T11474] simple_read_from_buffer+0xcb/0x170 [ 475.272521][T11474] proc_fail_nth_read+0x1af/0x230 [ 475.272551][T11474] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 475.272580][T11474] ? rw_verify_area+0xce/0x6d0 [ 475.272599][T11474] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 475.272628][T11474] vfs_read+0x1e4/0xb40 [ 475.272652][T11474] ? lock_acquire+0x1d1/0x380 [ 475.272674][T11474] ? __fget_files+0x34/0x3d0 [ 475.272701][T11474] ? __pfx_vfs_read+0x10/0x10 [ 475.272721][T11474] ? find_held_lock+0x2b/0x80 [ 475.272748][T11474] ? __fget_files+0x215/0x3d0 [ 475.272780][T11474] ? __fget_files+0x21f/0x3d0 [ 475.272813][T11474] ksys_read+0x12a/0x250 [ 475.272835][T11474] ? __pfx_ksys_read+0x10/0x10 [ 475.272864][T11474] do_syscall_64+0x123/0x790 [ 475.272895][T11474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.272914][T11474] RIP: 0033:0x7fe63255fd8e [ 475.272930][T11474] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 475.272946][T11474] RSP: 002b:00007fe63354ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 475.272970][T11474] RAX: ffffffffffffffda RBX: 00007fe6335506c0 RCX: 00007fe63255fd8e [ 475.272982][T11474] RDX: 000000000000000f RSI: 00007fe6335500a0 RDI: 0000000000000003 [ 475.272993][T11474] RBP: 00007fe633550090 R08: 0000000000000000 R09: 0000000000000000 [ 475.273004][T11474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.273015][T11474] R13: 00007fe632826038 R14: 00007fe632825fa0 R15: 00007ffdeba50d58 [ 475.273041][T11474] [ 475.383541][T11476] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1356'. [ 475.413110][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1356'. [ 475.460088][T11476] bridge5: port 1(veth9) entered blocking state [ 475.461973][T11476] bridge5: port 1(veth9) entered disabled state [ 475.462075][T11476] veth9: entered allmulticast mode [ 475.467335][T11476] veth9: entered promiscuous mode [ 475.488938][ C0] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 475.488988][ C0] bridge0: topology change detected, propagating [ 476.078989][ T5692] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 476.230230][ T5692] usb 9-1: Using ep0 maxpacket: 32 [ 476.230891][ T5692] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 476.231802][ T5692] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 476.231825][ T5692] usb 9-1: config 0 has no interface number 0 [ 476.231860][ T5692] usb 9-1: config 0 interface 12 has no altsetting 0 [ 476.233609][ T5692] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.233631][ T5692] usb 9-1: Product: syz [ 476.233646][ T5692] usb 9-1: Manufacturer: syz [ 476.233660][ T5692] usb 9-1: SerialNumber: syz [ 476.237699][ T5692] usb 9-1: config 0 descriptor?? [ 476.599219][ T191] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 476.749441][ T191] usb 10-1: Using ep0 maxpacket: 16 [ 476.754304][ T191] usb 10-1: unable to get BOS descriptor or descriptor too short [ 476.754357][ T191] usb 10-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=8d.0a [ 476.755248][ T191] usb 10-1: config 5 has an invalid interface number: 14 but max is 0 [ 476.755269][ T191] usb 10-1: config 5 has no interface number 0 [ 476.755300][ T191] usb 10-1: config 5 interface 14 altsetting 120 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 476.755324][ T191] usb 10-1: config 5 interface 14 has no altsetting 0 [ 476.764394][ T191] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.764417][ T191] usb 10-1: Product: syz [ 476.764429][ T191] usb 10-1: Manufacturer: syz [ 476.764442][ T191] usb 10-1: SerialNumber: syz [ 476.889225][T11478] Bluetooth: hci3: command tx timeout [ 476.991032][ T191] iguanair 10-1:5.14: probe with driver iguanair failed with error -12 [ 476.999966][ T191] usb 10-1: USB disconnect, device number 7 [ 477.174416][ T9584] hub 8-1:4.0: config failed, can't read hub descriptor (err -22) [ 477.212088][ T9584] usb 8-1: USB disconnect, device number 16 [ 477.387790][ T191] usb 2-1: USB disconnect, device number 41 [ 477.459760][T11478] Bluetooth: hci6: command 0x0406 tx timeout [ 477.605908][T11504] FAULT_INJECTION: forcing a failure. [ 477.605908][T11504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.605943][T11504] CPU: 1 UID: 0 PID: 11504 Comm: syz.1.1365 Tainted: G L syzkaller #0 PREEMPT(full) [ 477.605967][T11504] Tainted: [L]=SOFTLOCKUP [ 477.605973][T11504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 477.605983][T11504] Call Trace: [ 477.605989][T11504] [ 477.605997][T11504] dump_stack_lvl+0x100/0x190 [ 477.606023][T11504] should_fail_ex.cold+0x5/0xa [ 477.606039][T11504] strncpy_from_user+0x3b/0x2d0 [ 477.606057][T11504] ? get_pid_task+0x106/0x250 [ 477.606078][T11504] path_setxattrat+0x127/0x3b0 [ 477.606098][T11504] ? __pfx_path_setxattrat+0x10/0x10 [ 477.606119][T11504] ? ksys_write+0x190/0x250 [ 477.606139][T11504] ? ksys_write+0x190/0x250 [ 477.606167][T11504] ? fput+0x7c/0x100 [ 477.606183][T11504] ? ksys_write+0x1ac/0x250 [ 477.606197][T11504] ? __pfx_ksys_write+0x10/0x10 [ 477.606212][T11504] __x64_sys_fsetxattr+0xc5/0x140 [ 477.606229][T11504] ? do_syscall_64+0xae/0x790 [ 477.606255][T11504] ? lockdep_hardirqs_on+0x7d/0x110 [ 477.606280][T11504] do_syscall_64+0x123/0x790 [ 477.606304][T11504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.606315][T11504] RIP: 0033:0x7fb66699f559 [ 477.606325][T11504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.606336][T11504] RSP: 002b:00007fb6678e3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 477.606348][T11504] RAX: ffffffffffffffda RBX: 00007fb666c26090 RCX: 00007fb66699f559 [ 477.606355][T11504] RDX: 0000200000000400 RSI: 00002000000003c0 RDI: 0000000000000003 [ 477.606364][T11504] RBP: 00007fb6678e3090 R08: 0000000000000000 R09: 0000000000000000 [ 477.606374][T11504] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 477.606385][T11504] R13: 00007fb666c26128 R14: 00007fb666c26090 R15: 00007ffce903f6b8 [ 477.606409][T11504] [ 477.612115][T11500] nvme_fabrics: missing parameter 'transport=%s' [ 477.612127][T11500] nvme_fabrics: missing parameter 'nqn=%s' [ 477.856469][T11506] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1367'. [ 477.876325][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1367'. [ 477.911921][T11506] bridge4: port 1(veth9) entered blocking state [ 477.912083][T11506] bridge4: port 1(veth9) entered disabled state [ 477.912192][T11506] veth9: entered allmulticast mode [ 477.913631][T11506] veth9: entered promiscuous mode [ 477.948953][ C1] bridge0: port 4(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 477.949019][ C1] bridge0: topology change detected, propagating [ 478.324774][T11513] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 478.379137][ T5692] f81534 9-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 478.379188][ T5692] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 478.379206][ T5692] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 478.379267][ T5692] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 478.404687][ T5692] usb 9-1: USB disconnect, device number 8 [ 478.454269][T11518] FAULT_INJECTION: forcing a failure. [ 478.454269][T11518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.454301][T11518] CPU: 1 UID: 0 PID: 11518 Comm: syz.9.1371 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.454326][T11518] Tainted: [L]=SOFTLOCKUP [ 478.454332][T11518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 478.454343][T11518] Call Trace: [ 478.454349][T11518] [ 478.454356][T11518] dump_stack_lvl+0x100/0x190 [ 478.454386][T11518] should_fail_ex.cold+0x5/0xa [ 478.454410][T11518] _copy_from_user+0x2e/0xd0 [ 478.454436][T11518] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 478.454468][T11518] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 478.454500][T11518] do_sock_getsockopt+0x530/0x6e0 [ 478.454528][T11518] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 478.454557][T11518] ? __fget_files+0x34/0x3d0 [ 478.454583][T11518] ? find_held_lock+0x2b/0x80 [ 478.454616][T11518] ? __fget_files+0x21f/0x3d0 [ 478.454646][T11518] __sys_getsockopt+0x148/0x260 [ 478.454672][T11518] ? __x64_sys_getsockopt+0xbd/0x160 [ 478.454690][T11518] __x64_sys_getsockopt+0xbd/0x160 [ 478.454722][T11518] ? do_syscall_64+0xae/0x790 [ 478.454747][T11518] ? lockdep_hardirqs_on+0x7d/0x110 [ 478.454774][T11518] do_syscall_64+0x123/0x790 [ 478.454803][T11518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.454827][T11518] RIP: 0033:0x7fdfccf9f559 [ 478.454842][T11518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.454858][T11518] RSP: 002b:00007fdfcde87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 478.454876][T11518] RAX: ffffffffffffffda RBX: 00007fdfcd225fa0 RCX: 00007fdfccf9f559 [ 478.454888][T11518] RDX: 000000000000007f RSI: 0000000000000084 RDI: 0000000000000003 [ 478.454899][T11518] RBP: 00007fdfcde87090 R08: 0000200000000b00 R09: 0000000000000000 [ 478.454910][T11518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.454920][T11518] R13: 00007fdfcd226038 R14: 00007fdfcd225fa0 R15: 00007ffca95f40b8 [ 478.454944][T11518] [ 478.769101][ T30] audit: type=1400 audit(1792529100.021:3090): avc: denied { create } for pid=11515 comm="syz.7.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 479.018985][ T4922] Bluetooth: hci3: command 0x2021 tx timeout [ 479.048819][ T30] audit: type=1400 audit(1792529100.071:3091): avc: denied { write } for pid=11515 comm="syz.7.1370" path="socket:[39466]" dev="sockfs" ino=39466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 479.222159][ T30] audit: type=1400 audit(1792529100.491:3092): avc: denied { shutdown } for pid=11522 comm="syz.1.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 479.301245][ T30] audit: type=1400 audit(1792529100.571:3093): avc: denied { bind } for pid=11522 comm="syz.1.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 479.334628][T11521] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1372'. [ 479.352993][ T30] audit: type=1400 audit(1792529100.621:3094): avc: denied { write } for pid=11522 comm="syz.1.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 479.402979][T11526] FAULT_INJECTION: forcing a failure. [ 479.402979][T11526] name failslab, interval 1, probability 0, space 0, times 0 [ 479.403000][T11526] CPU: 0 UID: 0 PID: 11526 Comm: syz.8.1374 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.403016][T11526] Tainted: [L]=SOFTLOCKUP [ 479.403020][T11526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 479.403027][T11526] Call Trace: [ 479.403031][T11526] [ 479.403037][T11526] dump_stack_lvl+0x100/0x190 [ 479.403058][T11526] should_fail_ex.cold+0x5/0xa [ 479.403074][T11526] should_failslab+0xc2/0x120 [ 479.403093][T11526] kmem_cache_alloc_noprof+0x92/0x6a0 [ 479.403107][T11526] ? d_instantiate+0x8a/0xb0 [ 479.403118][T11526] ? alloc_empty_file+0x5b/0x1c0 [ 479.403131][T11526] alloc_empty_file+0x5b/0x1c0 [ 479.403142][T11526] alloc_file_pseudo+0x183/0x290 [ 479.403154][T11526] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 479.403164][T11526] ? alloc_fd+0x471/0x7a0 [ 479.403182][T11526] ? do_raw_spin_unlock+0x145/0x1e0 [ 479.403200][T11526] __anon_inode_getfile+0xe8/0x280 [ 479.403217][T11526] anon_inode_getfile_fmode+0x37/0xa0 [ 479.403232][T11526] do_signalfd4+0x346/0x470 [ 479.403249][T11526] __x64_sys_signalfd+0x120/0x1a0 [ 479.403264][T11526] ? __pfx___x64_sys_signalfd+0x10/0x10 [ 479.403284][T11526] do_syscall_64+0x123/0x790 [ 479.403303][T11526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.403314][T11526] RIP: 0033:0x7fe63259f559 [ 479.403324][T11526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.403335][T11526] RSP: 002b:00007fe633550028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 479.403347][T11526] RAX: ffffffffffffffda RBX: 00007fe632825fa0 RCX: 00007fe63259f559 [ 479.403355][T11526] RDX: 0000000000000008 RSI: 0000200000000140 RDI: ffffffffffffffff [ 479.403362][T11526] RBP: 00007fe632636b20 R08: 0000000000000000 R09: 0000000000000000 [ 479.403370][T11526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.403377][T11526] R13: 00007fe632826038 R14: 00007fe632825fa0 R15: 00007ffdeba50d58 [ 479.403392][T11526] [ 479.686279][T11532] netlink: 'syz.8.1377': attribute type 16 has an invalid length. [ 479.686294][T11532] netlink: 'syz.8.1377': attribute type 17 has an invalid length. [ 479.834410][ T30] audit: type=1400 audit(1792529101.101:3095): avc: denied { ioctl } for pid=11529 comm="syz.9.1376" path="/71/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=4088 ioctlcmd=0x5220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 479.884719][T11532] ip6gre1: left allmulticast mode [ 479.913905][ T8715] bridge1: port 1(veth3) entered blocking state [ 479.913995][ T8715] bridge1: port 1(veth3) entered forwarding state [ 479.915640][ T8715] bridge2: port 1(veth5) entered blocking state [ 479.915721][ T8715] bridge2: port 1(veth5) entered forwarding state [ 479.917277][ T8715] bridge4: port 1(veth7) entered blocking state [ 479.917360][ T8715] bridge4: port 1(veth7) entered forwarding state [ 479.928439][ T8715] bridge5: port 1(veth9) entered blocking state [ 479.928532][ T8715] bridge5: port 1(veth9) entered forwarding state [ 479.936337][ T8734] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 479.936525][ T8734] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 479.962152][ T5692] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 480.072311][ T30] audit: type=1400 audit(1792529101.341:3096): avc: denied { append } for pid=11541 comm="syz.1.1380" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 480.074263][ T30] audit: type=1400 audit(1792529101.341:3097): avc: denied { open } for pid=11541 comm="syz.1.1380" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 480.433241][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 481.146951][ T4922] Bluetooth: hci3: command 0x2021 tx timeout [ 481.529688][ T30] audit: type=1400 audit(1792529102.801:3098): avc: denied { read write } for pid=11541 comm="syz.1.1380" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 481.915303][ T5692] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 482.295035][T11560] FAULT_INJECTION: forcing a failure. [ 482.295035][T11560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.295067][T11560] CPU: 0 UID: 0 PID: 11560 Comm: syz.1.1385 Tainted: G L syzkaller #0 PREEMPT(full) [ 482.295090][T11560] Tainted: [L]=SOFTLOCKUP [ 482.295097][T11560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 482.295108][T11560] Call Trace: [ 482.295115][T11560] [ 482.295123][T11560] dump_stack_lvl+0x100/0x190 [ 482.295154][T11560] should_fail_ex.cold+0x5/0xa [ 482.295181][T11560] _copy_to_user+0x32/0xd0 [ 482.295214][T11560] simple_read_from_buffer+0xcb/0x170 [ 482.295244][T11560] proc_fail_nth_read+0x1af/0x230 [ 482.295274][T11560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 482.295304][T11560] ? rw_verify_area+0xce/0x6d0 [ 482.295324][T11560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 482.295351][T11560] vfs_read+0x1e4/0xb40 [ 482.295374][T11560] ? lock_acquire+0x1d1/0x380 [ 482.295394][T11560] ? __fget_files+0x34/0x3d0 [ 482.295421][T11560] ? __pfx_vfs_read+0x10/0x10 [ 482.295447][T11560] ? find_held_lock+0x2b/0x80 [ 482.295476][T11560] ? __fget_files+0x215/0x3d0 [ 482.295507][T11560] ? __fget_files+0x21f/0x3d0 [ 482.295542][T11560] ksys_read+0x12a/0x250 [ 482.295564][T11560] ? __pfx_ksys_read+0x10/0x10 [ 482.295594][T11560] do_syscall_64+0x123/0x790 [ 482.295625][T11560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.295644][T11560] RIP: 0033:0x7fb66695fd8e [ 482.295659][T11560] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 482.295676][T11560] RSP: 002b:00007fb667903fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 482.295694][T11560] RAX: ffffffffffffffda RBX: 00007fb6679046c0 RCX: 00007fb66695fd8e [ 482.295706][T11560] RDX: 000000000000000f RSI: 00007fb6679040a0 RDI: 0000000000000003 [ 482.295717][T11560] RBP: 00007fb667904090 R08: 0000000000000000 R09: 0000000000000000 [ 482.295728][T11560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.295738][T11560] R13: 00007fb666c26038 R14: 00007fb666c25fa0 R15: 00007ffce903f6b8 [ 482.295765][T11560] [ 482.401372][T11561] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1386'. [ 482.409594][ C0] bridge0: port 3(syz_tun) entered learning state [ 482.695465][T11566] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1387'. [ 483.221419][ T4922] Bluetooth: hci3: command 0x2021 tx timeout [ 483.339096][ T9586] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 483.490785][ T9586] usb 10-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 483.609080][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 483.653496][ T9586] usb 10-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 483.653530][ T9586] usb 10-1: Product: syz [ 483.825632][ T9586] usb 10-1: config 0 descriptor?? [ 483.835149][ T9586] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 483.835617][ T9586] usb 10-1: Detected FT232H [ 484.577903][ T30] audit: type=1400 audit(1792529105.841:3099): avc: denied { write } for pid=11576 comm="syz.8.1383" name="usb_gadget" dev="configfs" ino=3706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 484.578111][ T30] audit: type=1400 audit(1792529105.841:3100): avc: denied { add_name } for pid=11576 comm="syz.8.1383" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 484.578342][ T30] audit: type=1400 audit(1792529105.841:3101): avc: denied { create } for pid=11576 comm="syz.8.1383" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 484.591945][T11580] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 484.617022][ T30] audit: type=1400 audit(1792529105.881:3102): avc: denied { ioctl } for pid=11578 comm="syz.1.1392" path="/dev/input/event1" dev="devtmpfs" ino=918 ioctlcmd=0x583a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 484.679098][ T9586] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 484.681641][ T9586] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 484.685584][ T9586] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 484.713060][ T9586] usb 10-1: USB disconnect, device number 8 [ 484.728475][ T9586] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 484.740288][ T9586] ftdi_sio 10-1:0.0: device disconnected [ 484.777543][ T30] audit: type=1400 audit(1792529106.041:3103): avc: denied { accept } for pid=11578 comm="syz.1.1392" lport=51113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 484.968957][ C1] bridge0: port 4(syz_tun) entered learning state [ 485.299528][ T4922] Bluetooth: hci3: command 0x2021 tx timeout [ 486.068126][T11595] wg1 speed is unknown, defaulting to 1000 [ 486.076015][T11595] rxe_eth0 speed is unknown, defaulting to 1000 [ 486.313678][T11595] vcan0 speed is unknown, defaulting to 1000 [ 486.403244][ T30] audit: type=1400 audit(1792529107.491:3104): avc: denied { create } for pid=11592 comm="syz.8.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 486.669239][ T30] audit: type=1326 audit(1792529107.941:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.1.1395" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66699f559 code=0x7ffc0000 [ 486.669348][ T30] audit: type=1326 audit(1792529107.941:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.1.1395" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66699f559 code=0x7ffc0000 [ 486.670265][ T30] audit: type=1326 audit(1792529107.941:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.1.1395" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66699f559 code=0x7ffc0000 [ 486.670376][ T30] audit: type=1326 audit(1792529107.941:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.1.1395" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66699f559 code=0x7ffc0000 [ 486.816868][T11599] fuse: Bad value for 'user_id' [ 486.816882][T11599] fuse: Bad value for 'user_id' [ 487.031789][T11607] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1399'. [ 487.369121][ T4922] Bluetooth: hci3: command 0x2021 tx timeout [ 489.553667][ T4922] Bluetooth: hci3: command 0x2021 tx timeout [ 489.593171][ T30] kauditd_printk_skb: 869 callbacks suppressed [ 489.593189][ T30] audit: type=1400 audit(1792529110.861:3978): avc: denied { watch watch_reads } for pid=11612 comm="syz.9.1402" path="pipe:[29030]" dev="pipefs" ino=29030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 489.821539][ T4922] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 489.828042][ T4922] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 489.843551][ T4922] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 489.845222][ T4922] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 489.845733][ T4922] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 489.879771][ T30] audit: type=1400 audit(1792529111.151:3979): avc: denied { mounton } for pid=11621 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 490.200952][ T30] audit: type=1400 audit(1792529111.461:3980): avc: denied { create } for pid=11632 comm="syz.9.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 490.239510][ T9584] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 490.304131][ T4922] Bluetooth: hci6: unexpected event for opcode 0x0000 [ 490.389550][ T9584] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 490.392123][ T9584] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.392149][ T9584] usb 8-1: Product: syz [ 490.392164][ T9584] usb 8-1: Manufacturer: syz [ 490.392178][ T9584] usb 8-1: SerialNumber: syz [ 490.629424][ T5690] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 490.636286][T11646] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 490.803179][ T5690] usb 2-1: Using ep0 maxpacket: 8 [ 490.805502][ T5690] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 490.808629][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.808652][ T5690] usb 2-1: Product: syz [ 490.808667][ T5690] usb 2-1: Manufacturer: syz [ 490.808682][ T5690] usb 2-1: SerialNumber: syz [ 490.837725][ T5690] usb 2-1: config 0 descriptor?? [ 490.859821][ T5690] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 490.866489][T11621] wg1 speed is unknown, defaulting to 1000 [ 490.899153][T11621] rxe_eth0 speed is unknown, defaulting to 1000 [ 490.899285][ T9584] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 490.899333][ T9584] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 491.227474][T11621] vcan0 speed is unknown, defaulting to 1000 [ 491.308992][ T5690] gspca_sonixj: reg_r err -32 [ 491.309059][ T5690] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 491.317381][ T5690] usb 2-1: USB disconnect, device number 42 [ 491.369530][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.609013][ T4922] Bluetooth: hci3: command 0x2021 tx timeout [ 491.711974][ T9584] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 491.712025][ T9584] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 491.712530][ T9584] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 491.752623][ T9584] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 491.931819][ T4922] Bluetooth: hci4: command tx timeout [ 492.377328][ T30] audit: type=1400 audit(1792529113.658:3981): avc: denied { read write } for pid=11662 comm="syz.8.1411" name="sg0" dev="devtmpfs" ino=899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 492.377676][ T30] audit: type=1400 audit(1792529113.658:3982): avc: denied { open } for pid=11662 comm="syz.8.1411" path="/dev/sg0" dev="devtmpfs" ino=899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 492.435366][ T30] audit: type=1400 audit(1792529113.718:3983): avc: denied { ioctl } for pid=11662 comm="syz.8.1411" path="/dev/sg0" dev="devtmpfs" ino=899 ioctlcmd=0x227c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 493.496270][ T9584] usb 8-1: USB disconnect, device number 17 [ 493.960525][ T4922] Bluetooth: hci3: command 0x2021 tx timeout [ 494.074621][ T4922] Bluetooth: hci4: command tx timeout [ 494.458160][ T4922] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 494.471079][ T4922] Bluetooth: hci6: Injecting HCI hardware error event [ 494.540885][ T4922] Bluetooth: hci6: hardware error 0x00 [ 494.733287][T11621] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.737710][T11621] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.737829][T11621] bridge_slave_0: entered allmulticast mode [ 494.741314][T11621] bridge_slave_0: entered promiscuous mode [ 494.747792][T11621] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.749374][T11621] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.749466][T11621] bridge_slave_1: entered allmulticast mode [ 494.752356][T11621] bridge_slave_1: entered promiscuous mode [ 494.844233][T11621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.858519][T11621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.940324][T11621] team0: Port device team_slave_0 added [ 494.947749][T11621] team0: Port device team_slave_1 added [ 495.018961][T11621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.018975][T11621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.018988][T11621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.023173][T11621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.023183][T11621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.023196][T11621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.128408][T11687] ªªªªª»: renamed from vlan0 (while UP) [ 495.651491][T11621] hsr_slave_0: entered promiscuous mode [ 495.655568][T11621] hsr_slave_1: entered promiscuous mode [ 495.659151][T11621] debugfs: 'hsr0' already exists in 'hsr' [ 495.659167][T11621] Cannot create hsr debugfs directory [ 495.853124][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.008994][ T5602] Bluetooth: hci3: command 0x2021 tx timeout [ 496.057092][T11691] 0x000000000000-0x000000020000 : "" [ 496.089072][ T5602] Bluetooth: hci4: command tx timeout [ 496.212976][T11691] ftl_cs: FTL header not found. [ 496.383655][ T30] audit: type=1400 audit(1792529117.668:3984): avc: denied { search } for pid=11696 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.387167][ T30] audit: type=1400 audit(1792529117.668:3985): avc: denied { search } for pid=11696 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.388818][ T30] audit: type=1400 audit(1792529117.668:3986): avc: denied { search } for pid=11696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.389028][ T30] audit: type=1400 audit(1792529117.678:3987): avc: denied { search } for pid=11696 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.402330][ T30] audit: type=1400 audit(1792529117.688:3988): avc: denied { read } for pid=11700 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.404089][ T30] audit: type=1400 audit(1792529117.688:3989): avc: denied { read open } for pid=11700 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.404390][ T30] audit: type=1400 audit(1792529117.688:3990): avc: denied { getattr } for pid=11700 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.405802][ T30] audit: type=1400 audit(1792529117.688:3991): avc: denied { getattr } for pid=11700 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 496.478803][ T30] audit: type=1400 audit(1792529117.758:3992): avc: denied { read } for pid=11702 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 496.479186][ T30] audit: type=1400 audit(1792529117.768:3993): avc: denied { open } for pid=11702 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 496.729358][ T4922] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 496.784481][T11621] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.917113][T11717] xt_NETMAP: bad MAP_IPS. [ 496.919344][T11718] xt_NETMAP: bad MAP_IPS. [ 497.231438][T11715] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1421'. [ 497.344339][T11621] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.779124][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 497.779171][ C0] bridge0: topology change detected, propagating [ 498.362735][ T4922] Bluetooth: hci3: command 0x2021 tx timeout [ 498.362770][ T4922] Bluetooth: hci4: command tx timeout [ 498.611535][T11621] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.644177][T11737] tipc: Enabled bearer , priority 0 [ 499.775766][T11756] binder: BINDER_SET_CONTEXT_MGR already set [ 499.775776][T11756] binder: 11755:11756 ioctl 4018620d 200000000b80 returned -16 [ 499.776093][T11756] binder: 11755:11756 ioctl c0306201 200000000c80 returned -14 [ 500.329030][ C1] bridge0: port 4(syz_tun) entered forwarding state [ 500.329048][ C1] bridge0: topology change detected, propagating [ 500.477426][ T5602] Bluetooth: hci3: command 0x2021 tx timeout [ 500.693520][T11621] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.389390][ T30] kauditd_printk_skb: 280 callbacks suppressed [ 501.389403][ T30] audit: type=1326 audit(1792529122.678:4274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.1.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb66695fd8e code=0x7ffc0000 [ 501.390603][ T30] audit: type=1326 audit(1792529122.678:4275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.1.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb66695fd8e code=0x7ffc0000 [ 501.391767][ T30] audit: type=1326 audit(1792529122.678:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.1.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb66695fd8e code=0x7ffc0000 [ 501.392920][ T30] audit: type=1326 audit(1792529122.678:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.1.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb66695fd8e code=0x7ffc0000 [ 501.394085][ T30] audit: type=1326 audit(1792529122.678:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.1.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb66695fd8e code=0x7ffc0000 [ 501.395303][ T30] audit: type=1326 audit(1792529122.678:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.1.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb66695fd8e code=0x7ffc0000 [ 501.396436][ T30] audit: type=1326 audit(1792529122.678:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.1.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb66695fd8e code=0x7ffc0000 [ 501.397585][ T30] audit: type=1326 audit(1792529122.678:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.1.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb66695fd8e code=0x7ffc0000 [ 501.398742][ T30] audit: type=1326 audit(1792529122.678:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.1.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb66695fd8e code=0x7ffc0000 [ 501.399960][ T30] audit: type=1326 audit(1792529122.688:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.1.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb66695fd8e code=0x7ffc0000 [ 501.659922][ T5997] block nbd0: Possible stuck request ffff8880299b5080: control (read@0,1024B). Runtime 300 seconds [ 501.659956][ T5997] block nbd0: Possible stuck request ffff8880299b5240: control (read@1024,1024B). Runtime 300 seconds [ 501.659976][ T5997] block nbd0: Possible stuck request ffff8880299b5400: control (read@2048,1024B). Runtime 300 seconds [ 501.659995][ T5997] block nbd0: Possible stuck request ffff8880299b55c0: control (read@3072,1024B). Runtime 300 seconds [ 502.513895][ T5602] Bluetooth: hci3: command 0x2021 tx timeout [ 504.569393][ T5602] Bluetooth: hci3: command 0x2021 tx timeout [ 505.219614][T11621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 505.337463][T11621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 505.338052][T11621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 505.788095][T11621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 505.808405][T11621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 505.849997][T11621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 505.850696][T11621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 505.864733][T11621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 506.171589][T11621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.173332][T11810] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1430'. [ 506.188276][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1430'. [ 506.729437][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 506.744938][T11818] FAULT_INJECTION: forcing a failure. [ 506.744938][T11818] name failslab, interval 1, probability 0, space 0, times 0 [ 506.744990][T11818] CPU: 0 UID: 0 PID: 11818 Comm: syz.1.1434 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.745015][T11818] Tainted: [L]=SOFTLOCKUP [ 506.745022][T11818] Hardware ** replaying previous printk message ** [ 506.745022][T11818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 506.745033][T11818] Call Trace: [ 506.745040][T11818] [ 506.745046][T11818] dump_stack_lvl+0x100/0x190 [ 506.745069][T11818] should_fail_ex.cold+0x5/0xa [ 506.745086][T11818] should_failslab+0xc2/0x120 [ 506.745103][T11818] __kmalloc_cache_noprof+0x91/0x6d0 [ 506.745115][T11818] ? cgroup_init_fs_context+0x4eb/0x9c0 [ 506.745130][T11818] ? fscontext_alloc_log+0x4a/0x1b0 [ 506.745148][T11818] fscontext_alloc_log+0x4a/0x1b0 [ 506.745163][T11818] __x64_sys_fsopen+0x159/0x220 [ 506.745178][T11818] do_syscall_64+0x123/0x790 [ 506.745197][T11818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.745209][T11818] RIP: 0033:0x7fb66699f559 [ 506.745219][T11818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.745230][T11818] RSP: 002b:00007fb6678e3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 506.745241][T11818] RAX: ffffffffffffffda RBX: 00007fb666c26090 RCX: 00007fb66699f559 [ 506.745249][T11818] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000019440 [ 506.745255][T11818] RBP: 00007fb6678e3090 R08: 0000000000000000 R09: 0000000000000000 [ 506.745262][T11818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.745268][T11818] R13: 00007fb666c26128 R14: 00007fb666c26090 R15: 00007ffce903f6b8 [ 506.745282][T11818] [ 507.170053][ T32] INFO: task syz.6.963:9912 blocked for more than 144 seconds. [ 507.170074][ T32] Tainted: G L syzkaller #0 [ 507.170084][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 507.170091][ T32] task:syz.6.963 state:D stack:28152 pid:9912 tgid:9911 ppid:8174 task_flags:0x400040 flags:0x00080002 [ 507.170143][ T32] Call Trace: [ 507.170149][ T32] [ 507.170158][ T32] __schedule+0x1259/0x6980 [ 507.170185][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 507.170210][ T32] ? do_raw_spin_lock+0x128/0x260 [ 507.170239][ T32] ? __pfx___schedule+0x10/0x10 [ 507.170258][ T32] ? find_held_lock+0x2b/0x80 [ 507.170282][ T32] ? schedule+0x225/0x2c0 [ 507.170312][ T32] schedule+0xdd/0x2c0 [ 507.170333][ T32] schedule_preempt_disabled+0x13/0x30 [ 507.170355][ T32] __mutex_lock+0xccf/0x1c20 [ 507.170370][ T32] ? sync_bdevs+0x153/0x480 [ 507.170394][ T32] ? sync_bdevs+0x1ff/0x480 [ 507.170416][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 507.170440][ T32] ? iput.part.0+0x1a0/0x1050 [ 507.170458][ T32] ? sync_bdevs+0x67/0x480 [ 507.170484][ T32] ? sync_bdevs+0x153/0x480 [ 507.170504][ T32] sync_bdevs+0x153/0x480 [ 507.170528][ T32] ksys_sync+0xb0/0xf0 [ 507.170546][ T32] ? __pfx_ksys_sync+0x10/0x10 [ 507.170567][ T32] ? do_syscall_64+0xae/0x790 [ 507.170592][ T32] __do_sys_sync+0xe/0x20 [ 507.170608][ T32] do_syscall_64+0x123/0x790 [ 507.170633][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.170651][ T32] RIP: 0033:0x7f0f9f99f559 [ 507.170665][ T32] RSP: 002b:00007f0fa07e8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 507.170680][ T32] RAX: ffffffffffffffda RBX: 00007f0f9fc25fa0 RCX: 00007f0f9f99f559 [ 507.170692][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 507.170702][ T32] RBP: 00007f0f9fc25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 507.170713][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.170723][ T32] R13: 00007f0f9fc26038 R14: 00007f0f9fc25fa0 R15: 00007ffdf4a49e58 [ 507.170746][ T32] [ 507.170754][ T32] INFO: task syz.6.963:9913 blocked for more than 144 seconds. [ 507.170767][ T32] Tainted: G L syzkaller #0 [ 507.170776][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 507.170783][ T32] task:syz.6.963 state:D stack:28728 pid:9913 tgid:9911 ppid:8174 task_flags:0x400040 flags:0x00080002 [ 507.170834][ T32] Call Trace: [ 507.170839][ T32] [ 507.170848][ T32] __schedule+0x1259/0x6980 [ 507.170870][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 507.170893][ T32] ? do_raw_spin_lock+0x128/0x260 [ 507.170922][ T32] ? __pfx___schedule+0x10/0x10 [ 507.170942][ T32] ? find_held_lock+0x2b/0x80 [ 507.170966][ T32] ? schedule+0x225/0x2c0 [ 507.170991][ T32] schedule+0xdd/0x2c0 [ 507.171013][ T32] schedule_preempt_disabled+0x13/0x30 [ 507.171035][ T32] __mutex_lock+0xccf/0x1c20 [ 507.171051][ T32] ? sync_bdevs+0x153/0x480 [ 507.171074][ T32] ? sync_bdevs+0x1ff/0x480 [ 507.171097][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 507.171121][ T32] ? iput.part.0+0x1a0/0x1050 [ 507.171139][ T32] ? sync_bdevs+0x67/0x480 [ 507.171166][ T32] ? sync_bdevs+0x153/0x480 [ 507.171186][ T32] sync_bdevs+0x153/0x480 [ 507.171212][ T32] ksys_sync+0xb0/0xf0 [ 507.171229][ T32] ? __pfx_ksys_sync+0x10/0x10 [ 507.171261][ T32] ? do_syscall_64+0xae/0x790 [ 507.171285][ T32] __do_sys_sync+0xe/0x20 [ 507.171306][ T32] do_syscall_64+0x123/0x790 [ 507.181198][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.181226][ T32] RIP: 0033:0x7f0f9f99f559 [ 507.181240][ T32] RSP: 002b:00007f0fa07c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 507.181257][ T32] RAX: ffffffffffffffda RBX: 00007f0f9fc26090 RCX: 00007f0f9f99f559 [ 507.181268][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 507.181277][ T32] RBP: 00007f0f9fc26090 R08: 0000000000000000 R09: 0000000000000000 [ 507.181288][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.181297][ T32] R13: 00007f0f9fc26128 R14: 00007f0f9fc26090 R15: 00007ffdf4a49e58 [ 507.181326][ T32] [ 507.181334][ T32] INFO: task syz.6.963:9918 blocked for more than 144 seconds. [ 507.181349][ T32] Tainted: G L syzkaller #0 [ 507.181358][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 507.181365][ T32] task:syz.6.963 state:D stack:27544 pid:9918 tgid:9911 ppid:8174 task_flags:0x400040 flags:0x00080002 [ 507.181415][ T32] Call Trace: [ 507.181421][ T32] [ 507.181430][ T32] __schedule+0x1259/0x6980 [ 507.181453][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 507.181478][ T32] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 507.181507][ T32] ? __pfx___schedule+0x10/0x10 [ 507.181526][ T32] ? find_held_lock+0x2b/0x80 [ 507.181550][ T32] ? schedule+0x225/0x2c0 [ 507.181575][ T32] schedule+0xdd/0x2c0 [ 507.181596][ T32] schedule_preempt_disabled+0x13/0x30 [ 507.181617][ T32] __mutex_lock+0xccf/0x1c20 [ 507.181633][ T32] ? sync_bdevs+0x153/0x480 [ 507.181660][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 507.181674][ T32] ? __pfx___schedule+0x10/0x10 [ 507.181703][ T32] ? iput.part.0+0x1a0/0x1050 [ 507.181721][ T32] ? in_gate_area_no_mm+0x57/0x80 [ 507.181746][ T32] ? sync_bdevs+0x153/0x480 [ 507.181765][ T32] sync_bdevs+0x153/0x480 [ 507.181790][ T32] ksys_sync+0xb0/0xf0 [ 507.181808][ T32] ? __pfx_ksys_sync+0x10/0x10 [ 507.181829][ T32] ? do_syscall_64+0xae/0x790 [ 507.181853][ T32] __do_sys_sync+0xe/0x20 [ 507.181869][ T32] do_syscall_64+0x123/0x790 [ 507.181895][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.181912][ T32] RIP: 0033:0x7f0f9f99f559 [ 507.181924][ T32] RSP: 002b:00007f0fa0785028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 507.181939][ T32] RAX: ffffffffffffffda RBX: 00007f0f9fc26270 RCX: 00007f0f9f99f559 [ 507.181950][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 507.181960][ T32] RBP: 00007f0f9fc26270 R08: 0000000000000000 R09: 0000000000000000 [ 507.181970][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.181980][ T32] R13: 00007f0f9fc26308 R14: 00007f0f9fc26270 R15: 00007ffdf4a49e58 [ 507.182004][ T32] [ 507.182011][ T32] INFO: task syz.6.963:9919 blocked for more than 144 seconds. [ 507.182023][ T32] Tainted: G L syzkaller #0 [ 507.182032][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 507.182038][ T32] task:syz.6.963 state:D stack:28488 pid:9919 tgid:9911 ppid:8174 task_flags:0x400040 flags:0x00080002 [ 507.182098][ T32] Call Trace: [ 507.182103][ T32] [ 507.182112][ T32] __schedule+0x1259/0x6980 [ 507.182132][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 507.182156][ T32] ? do_raw_spin_lock+0x128/0x260 [ 507.182184][ T32] ? __pfx___schedule+0x10/0x10 [ 507.182204][ T32] ? find_held_lock+0x2b/0x80 [ 507.182227][ T32] ? schedule+0x225/0x2c0 [ 507.182252][ T32] schedule+0xdd/0x2c0 [ 507.182273][ T32] schedule_preempt_disabled+0x13/0x30 [ 507.182294][ T32] __mutex_lock+0xccf/0x1c20 [ 507.182314][ T32] ? sync_bdevs+0x153/0x480 [ 507.182340][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 507.182354][ T32] ? __pfx___schedule+0x10/0x10 [ 507.182382][ T32] ? iput.part.0+0x1a0/0x1050 [ 507.182400][ T32] ? in_gate_area_no_mm+0x57/0x80 [ 507.182425][ T32] ? sync_bdevs+0x153/0x480 [ 507.182445][ T32] sync_bdevs+0x153/0x480 [ 507.182469][ T32] ksys_sync+0xb0/0xf0 [ 507.182486][ T32] ? __pfx_ksys_sync+0x10/0x10 [ 507.182507][ T32] ? do_syscall_64+0xae/0x790 [ 507.182530][ T32] __do_sys_sync+0xe/0x20 [ 507.182546][ T32] do_syscall_64+0x123/0x790 [ 507.182572][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.182588][ T32] RIP: 0033:0x7f0f9f99f559 [ 507.182600][ T32] RSP: 002b:00007f0f9dbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 507.182615][ T32] RAX: ffffffffffffffda RBX: 00007f0f9fc26360 RCX: 00007f0f9f99f559 [ 507.188394][ T5602] Bluetooth: hci3: command 0x2021 tx timeout [ 507.190445][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 507.190458][ T32] RBP: 00007f0f9fc26360 R08: 0000000000000000 R09: 0000000000000000 [ 507.190468][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.190478][ T32] R13: 00007f0f9fc263f8 R14: 00007f0f9fc26360 R15: 00007ffdf4a49e58 [ 507.190502][ T32] [ 507.190510][ T32] INFO: task syz.6.963:9920 blocked for more than 144 seconds. [ 507.190524][ T32] Tainted: G L syzkaller #0 [ 507.190533][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 507.190540][ T32] task:syz.6.963 state:D stack:27976 pid:9920 tgid:9911 ppid:8174 task_flags:0x400040 flags:0x00080002 [ 507.190589][ T32] Call Trace: [ 507.190594][ T32] [ 507.190603][ T32] __schedule+0x1259/0x6980 [ 507.190628][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 507.190659][ T32] ? __pfx___schedule+0x10/0x10 [ 507.190679][ T32] ? find_held_lock+0x2b/0x80 [ 507.190703][ T32] ? schedule+0x225/0x2c0 [ 507.190748][ T32] schedule+0xdd/0x2c0 [ 507.190770][ T32] schedule_preempt_disabled+0x13/0x30 [ 507.190792][ T32] __mutex_lock+0xccf/0x1c20 [ 507.190807][ T32] ? sync_bdevs+0x153/0x480 [ 507.190834][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 507.190847][ T32] ? __pfx___schedule+0x10/0x10 [ 507.190876][ T32] ? iput.part.0+0x1a0/0x1050 [ 507.190894][ T32] ? in_gate_area_no_mm+0x57/0x80 [ 507.190919][ T32] ? sync_bdevs+0x153/0x480 [ 507.190939][ T32] sync_bdevs+0x153/0x480 [ 507.190964][ T32] ksys_sync+0xb0/0xf0 [ 507.190981][ T32] ? __pfx_ksys_sync+0x10/0x10 [ 507.191002][ T32] ? do_syscall_64+0xae/0x790 [ 507.191026][ T32] __do_sys_sync+0xe/0x20 [ 507.191042][ T32] do_syscall_64+0x123/0x790 [ 507.191067][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.191083][ T32] RIP: 0033:0x7f0f9f99f559 [ 507.191096][ T32] RSP: 002b:00007f0f9dbd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 507.191111][ T32] RAX: ffffffffffffffda RBX: 00007f0f9fc26450 RCX: 00007f0f9f99f559 [ 507.191122][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 507.191131][ T32] RBP: 00007f0f9fc26450 R08: 0000000000000000 R09: 0000000000000000 [ 507.191141][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.191151][ T32] R13: 00007f0f9fc264e8 R14: 00007f0f9fc26450 R15: 00007ffdf4a49e58 [ 507.191174][ T32] [ 507.191180][ T32] INFO: task syz.6.963:9921 blocked for more than 144 seconds. [ 507.191193][ T32] Tainted: G L syzkaller #0 [ 507.191201][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 507.191207][ T32] task:syz.6.963 state:D stack:28488 pid:9921 tgid:9911 ppid:8174 task_flags:0x400040 flags:0x00080002 [ 507.191255][ T32] Call Trace: [ 507.191260][ T32] [ 507.191269][ T32] __schedule+0x1259/0x6980 [ 507.191290][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 507.191325][ T32] ? __pfx___schedule+0x10/0x10 [ 507.191346][ T32] ? find_held_lock+0x2b/0x80 [ 507.191369][ T32] ? schedule+0x225/0x2c0 [ 507.191394][ T32] schedule+0xdd/0x2c0 [ 507.191415][ T32] schedule_preempt_disabled+0x13/0x30 [ 507.191436][ T32] __mutex_lock+0xccf/0x1c20 [ 507.191452][ T32] ? sync_bdevs+0x153/0x480 [ 507.191478][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 507.191492][ T32] ? __pfx___schedule+0x10/0x10 [ 507.191521][ T32] ? iput.part.0+0x1a0/0x1050 [ 507.191538][ T32] ? in_gate_area_no_mm+0x57/0x80 [ 507.191562][ T32] ? sync_bdevs+0x153/0x480 [ 507.191582][ T32] sync_bdevs+0x153/0x480 [ 507.191606][ T32] ksys_sync+0xb0/0xf0 [ 507.191623][ T32] ? __pfx_ksys_sync+0x10/0x10 [ 507.191644][ T32] ? do_syscall_64+0xae/0x790 [ 507.191667][ T32] __do_sys_sync+0xe/0x20 [ 507.191683][ T32] do_syscall_64+0x123/0x790 [ 507.191709][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.191725][ T32] RIP: 0033:0x7f0f9f99f559 [ 507.191737][ T32] RSP: 002b:00007f0f9dbb4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 507.191751][ T32] RAX: ffffffffffffffda RBX: 00007f0f9fc26540 RCX: 00007f0f9f99f559 [ 507.191762][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 507.191772][ T32] RBP: 00007f0f9fc26540 R08: 0000000000000000 R09: 0000000000000000 [ 507.191782][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.191792][ T32] R13: 00007f0f9fc265d8 R14: 00007f0f9fc26540 R15: 00007ffdf4a49e58 [ 507.191816][ T32] [ 507.191822][ T32] INFO: task syz.6.963:9923 blocked for more than 144 seconds. [ 507.191835][ T32] Tainted: G L syzkaller #0 [ 507.191843][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 507.191849][ T32] task:syz.6.963 state:D stack:28488 pid:9923 tgid:9911 ppid:8174 task_flags:0x400040 flags:0x00080002 [ 507.194892][ T32] Call Trace: [ 507.194898][ T32] [ 507.194908][ T32] __schedule+0x1259/0x6980 [ 507.194930][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 507.194954][ T32] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 507.194981][ T32] ? __pfx___schedule+0x10/0x10 [ 507.195001][ T32] ? find_held_lock+0x2b/0x80 [ 507.195024][ T32] ? schedule+0x225/0x2c0 [ 507.195049][ T32] schedule+0xdd/0x2c0 [ 507.195070][ T32] schedule_preempt_disabled+0x13/0x30 [ 507.195092][ T32] __mutex_lock+0xccf/0x1c20 [ 507.195107][ T32] ? sync_bdevs+0x153/0x480 [ 507.195133][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 507.195147][ T32] ? __pfx___schedule+0x10/0x10 [ 507.195177][ T32] ? iput.part.0+0x1a0/0x1050 [ 507.195194][ T32] ? in_gate_area_no_mm+0x57/0x80 [ 507.195218][ T32] ? sync_bdevs+0x153/0x480 [ 507.195238][ T32] sync_bdevs+0x153/0x480 [ 507.195263][ T32] ksys_sync+0xb0/0xf0 [ 507.195280][ T32] ? __pfx_ksys_sync+0x10/0x10 [ 507.195306][ T32] ? do_syscall_64+0xae/0x790 [ 507.195330][ T32] __do_sys_sync+0xe/0x20 [ 507.195346][ T32] do_syscall_64+0x123/0x790 [ 507.195371][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.195387][ T32] RIP: 0033:0x7f0f9f99f559 [ 507.195401][ T32] RSP: 002b:00007f0f9db93028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 507.195416][ T32] RAX: ffffffffffffffda RBX: 00007f0f9fc26630 RCX: 00007f0f9f99f559 [ 507.195427][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 507.195437][ T32] RBP: 00007f0f9fc26630 R08: 0000000000000000 R09: 0000000000000000 [ 507.195447][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.195457][ T32] R13: 00007f0f9fc266c8 R14: 00007f0f9fc26630 R15: 00007ffdf4a49e58 [ 507.195480][ T32] [ 507.195511][ T32] [ 507.195511][ T32] Showing all locks held in the system: [ 507.195518][ T32] locks held by kworker/0:1/10: 2, last CPU#0: [ 507.195530][ T32] #0: ffff88801d059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 507.195569][ T32] #1: ffffc900000f7d08 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 507.195608][ T32] locks held by pr/ttyS0/31: 2, last CPU#1: [ 507.195620][ T32] #0: ffffffff8fdd8978 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 507.195662][ T32] #1: ffffffff9cc84578 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 507.195708][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 507.195719][ T32] #0: ffffffff8fdec660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 507.195785][ T32] locks held by getty/5359: 2, on CPU#1: [ 507.195796][ T32] #0: ffff8880388410a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 507.195838][ T32] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1540 [ 507.195878][ T32] locks held by syz-executor/5600: 1, last CPU#0: [ 507.195890][ T32] #0: ffff888051bf0460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 507.195934][ T32] locks held by udevd/6684: 1, on CPU#0: [ 507.195945][ T32] #0: ffff8880298e1350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 507.195992][ T32] locks held by kworker/u8:35/8730: 3, on CPU#1: [ 507.196004][ T32] #0: ffff888034cd1940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 507.196040][ T32] #1: ffffc90004e07d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 507.196076][ T32] #2: ffffffff91cd7e80 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 507.196117][ T32] locks held by kworker/u8:51/8755: 3, last CPU#0: [ 507.196128][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 507.196163][ T32] #1: ffffc90003607d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 507.196199][ T32] #2: ffff88802eb77258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 507.196242][ T32] locks held by kworker/1:14/9584: 3, last CPU#1: [ 507.196253][ T32] #0: ffff88801d05a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 507.200171][ T32] #1: ffffc90003367d08 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 507.200217][ T32] #2: ffff88802ce6d1d8 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x100 [ 507.200261][ T32] locks held by kworker/1:16/9586: 3, last CPU#1: [ 507.200273][ T32] #0: ffff88801d05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 507.200315][ T32] #1: ffffc90003247d08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 507.200354][ T32] #2: ffff88803595d250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x6330 [ 507.200403][ T32] locks held by syz.6.963/9912: 1, on CPU#1: [ 507.200415][ T32] #0: ffff8880298e1350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 507.200459][ T32] locks held by syz.6.963/9913: 1, on CPU#0: [ 507.200471][ T32] #0: ffff8880298e1350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 507.200514][ T32] locks held by syz.6.963/9918: 1, on CPU#1: [ 507.200526][ T32] #0: ffff8880298e1350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 507.200570][ T32] locks held by syz.6.963/9919: 1, on CPU#1: [ 507.200582][ T32] #0: ffff8880298e1350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 507.200624][ T32] locks held by syz.6.963/9920: 1, on CPU#1: [ 507.200636][ T32] #0: ffff8880298e1350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 507.200679][ T32] locks held by syz.6.963/9921: 1, on CPU#1: [ 507.200690][ T32] #0: ffff8880298e1350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 507.200734][ T32] locks held by syz.6.963/9923: 1, on CPU#1: [ 507.200745][ T32] #0: ffff8880298e1350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 507.200788][ T32] locks held by syz-executor/9979: 1, last CPU#1: [ 507.200800][ T32] #0: ffff888029382460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 507.200846][ T32] locks held by syz.4.1336/11416: 1, on CPU#0: [ 507.200858][ T32] #0: ffff8880298e1350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 507.200901][ T32] locks held by syz-executor/11621: 1, on CPU#1: [ 507.200913][ T32] #0: ffffffff91cd7e80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0 [ 507.200957][ T32] locks held by syz.8.1430/11810: 3, on CPU#1: [ 507.200969][ T32] #0: ffffffff91055b68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 507.201013][ T32] #1: ffffffff91cd7e80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620 [ 507.201054][ T32] #2: ffffffff8fdf8568 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 507.201095][ T32] locks held by syz.8.1430/11813: 1, on CPU#1: [ 507.201107][ T32] #0: ffffffff91cd7e80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x4dd/0xac0 [ 507.201147][ T32] locks held by sed/11817: 2, last CPU#1: [ 507.201158][ T32] #0: ffff8880252b8f80 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 507.201200][ T32] #1: ffffffff8fdec660 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 507.201247][ T32] [ 507.201251][ T32] ============================================= [ 507.201251][ T32] [ 507.201259][ T32] NMI backtrace for cpu 0 [ 507.201271][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 507.201293][ T32] Tainted: [L]=SOFTLOCKUP [ 507.201304][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 507.201314][ T32] Call Trace: [ 507.201320][ T32] [ 507.201326][ T32] dump_stack_lvl+0x100/0x190 [ 507.201352][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 507.201378][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 507.201398][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 507.201421][ T32] sys_info+0x141/0x190 [ 507.201440][ T32] watchdog+0xcb6/0x1030 [ 507.201465][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 507.201488][ T32] ? __pfx_watchdog+0x10/0x10 [ 507.201509][ T32] ? __kthread_parkme+0x18f/0x230 [ 507.201532][ T32] ? kthread+0x13a/0x450 [ 507.201553][ T32] ? __pfx_watchdog+0x10/0x10 [ 507.201572][ T32] kthread+0x373/0x450 [ 507.201595][ T32] ? __pfx_kthread+0x10/0x10 [ 507.201619][ T32] ret_from_fork+0x730/0xd60 [ 507.201640][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 507.201660][ T32] ? __switch_to+0x800/0x10f0 [ 507.201682][ T32] ? __pfx_kthread+0x10/0x10 [ 507.201705][ T32] ret_from_fork_asm+0x1a/0x30 [ 507.201734][ T32] [ 507.201750][ T32] Sending NMI from CPU 0 to CPUs 1: [ 507.201771][ C1] NMI backtrace for cpu 1 [ 507.201782][ C1] CPU: 1 UID: 0 PID: 31 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.201805][ C1] Tainted: [L]=SOFTLOCKUP [ 507.201810][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 507.201818][ C1] RIP: 0010:io_serial_in+0x87/0xb0 [ 507.201840][ C1] Code: 30 59 fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 d8 77 cd fc eb a2 e8 61 78 [ 507.201852][ C1] RSP: 0018:ffffc90000a77950 EFLAGS: 00000002 [ 507.201864][ C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 507.201873][ C1] RDX: 00000000000003fd RSI: ffffffff85b33340 RDI: ffffffff9cc845a0 [ 507.201882][ C1] RBP: ffffffff9cc84560 R08: 0000000000000001 R09: 000000000000001f [ 507.201891][ C1] R10: 0000000000000000 R11: 205d383138313154 R12: 0000000000000000 [ 507.201899][ C1] R13: 0000000000000020 R14: fffffbfff3990909 R15: dffffc0000000000 [ 507.201919][ C1] FS: 0000000000000000(0000) GS:ffff888122a40000(0000) knlGS:0000000000000000 [ 507.201934][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 507.201943][ C1] CR2: 00007fb666988b80 CR3: 0000000042118000 CR4: 00000000003526f0 [ 507.201952][ C1] Call Trace: [ 507.201957][ C1] [ 507.201964][ C1] wait_for_lsr+0x13a/0x210 [ 507.201982][ C1] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 507.201998][ C1] __serial8250_console_fifo_write+0xa5/0x290 [ 507.202012][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 507.202033][ C1] serial8250_console_write+0x1108/0x14f0 [ 507.202052][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 507.202068][ C1] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 507.202084][ C1] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 507.202102][ C1] nbcon_emit_next_record+0x8f7/0xa70 [ 507.202118][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 507.202133][ C1] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 507.202147][ C1] ? do_raw_spin_lock+0xf0/0x260 [ 507.202168][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 507.202186][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 507.202204][ C1] nbcon_emit_one+0x1a8/0x2b0 [ 507.202218][ C1] ? __pfx_nbcon_emit_one+0x10/0x10 [ 507.202235][ C1] nbcon_kthread_func+0x5ef/0x800 [ 507.202251][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 507.202268][ C1] ? __kthread_parkme+0x18f/0x230 [ 507.202286][ C1] ? kthread+0x13a/0x450 [ 507.202303][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 507.202316][ C1] kthread+0x373/0x450 [ 507.202333][ C1] ? __pfx_kthread+0x10/0x10 [ 507.202352][ C1] ret_from_fork+0x730/0xd60 [ 507.202367][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 507.202382][ C1] ? __switch_to+0x800/0x10f0 [ 507.202400][ C1] ? __pfx_kthread+0x10/0x10 [ 507.202418][ C1] ret_from_fork_asm+0x1a/0x30 [ 507.202437][ C1] [ 507.205689][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 509.687717][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 509.698378][ T32] Tainted: [L]=SOFTLOCKUP [ 509.702689][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 509.712736][ T32] Call Trace: [ 509.716007][ T32] [ 509.718932][ T32] dump_stack_lvl+0x100/0x190 [ 509.723637][ T32] vpanic+0x553/0x970 [ 509.727607][ T32] ? __pfx_vpanic+0x10/0x10 [ 509.732098][ T32] panic+0xd1/0xe0 [ 509.735799][ T32] ? __pfx_panic+0x10/0x10 [ 509.740196][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 509.746335][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 509.752468][ T32] ? watchdog.cold+0x1ec/0x234 [ 509.757214][ T32] watchdog.cold+0x1fd/0x234 [ 509.761791][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 509.767582][ T32] ? __pfx_watchdog+0x10/0x10 [ 509.772245][ T32] ? __kthread_parkme+0x18f/0x230 [ 509.777267][ T32] ? kthread+0x13a/0x450 [ 509.781499][ T32] ? __pfx_watchdog+0x10/0x10 [ 509.786157][ T32] kthread+0x373/0x450 [ 509.790213][ T32] ? __pfx_kthread+0x10/0x10 [ 509.794787][ T32] ret_from_fork+0x730/0xd60 [ 509.799359][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 509.804450][ T32] ? __switch_to+0x800/0x10f0 [ 509.809111][ T32] ? __pfx_kthread+0x10/0x10 [ 509.813685][ T32] ret_from_fork_asm+0x1a/0x30 [ 509.818439][ T32] [ 509.821679][ T32] Kernel Offset: disabled [ 509.825986][ T32] Rebooting in 86400 seconds..