last executing test programs: 6m41.08831109s ago: executing program 4 (id=4567): r0 = socket$packet(0x11, 0x3, 0x300) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) syz_emit_ethernet(0xc6, 0x0, &(0x7f0000000540)={0x0, 0x2, [0x43b, 0xb10, 0x33e, 0x6ea]}) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xd) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000003240)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x38, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x3, 0x480000) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_clone(0x18200000, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) 6m40.571769466s ago: executing program 4 (id=4571): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x2c, 0x21, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) rseq(&(0x7f0000001040)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[0x0]) vmsplice(r1, 0x0, 0x0, 0xd) 6m40.143768955s ago: executing program 4 (id=4573): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000680)) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000580)={{0x5, 0x3, 0x3, 0xfffffffe, 'syz0\x00', 0x2}, 0x1, [0xd44, 0x7fffffffffffffff, 0x0, 0x8, 0x4, 0x4, 0x7ff, 0x2, 0x2, 0x101, 0x2, 0xd, 0xf, 0x8, 0x1, 0x7, 0x4, 0x3, 0x2, 0x9, 0x0, 0xfffffffffefffffe, 0xfe7, 0x8000000000000000, 0x2, 0x8, 0x7ff, 0x9, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x5, 0x7, 0x403, 0x2, 0x10000, 0xe, 0x5, 0x8, 0x88, 0x2, 0x6, 0x4, 0x100000002, 0x0, 0x9, 0x7, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa1, 0x6, 0x8, 0x1, 0xfffffffbfffff800, 0x244, 0x1, 0x20, 0xc, 0xffffffffffffffff, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x4, 0x4, 0x4, 0xf, 0xae9, 0x3, 0xfffffffffffffffe, 0x4000000006, 0x9, 0x7, 0x4000000000000000, 0x0, 0x7ff, 0x4, 0x7, 0x205d, 0x9, 0x63, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xfff, 0x1000, 0x6, 0x4, 0x8000000000000000, 0x800000000209, 0x2, 0x7ff, 0x7, 0x8, 0x1ff, 0x0, 0x6, 0x3, 0x5, 0x796a, 0xb0b, 0x9, 0x7, 0x4, 0x4, 0x0, 0x8, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x1da0, 0x38, 0x7, 0x5, 0x2ad, 0x80000001, 0xfffffffffeffffff, 0x7]}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000070a01"], 0x20}, 0x1, 0x0, 0x0, 0x40008c0}, 0x30000000) accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x4040) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0xd}, {0xfff3, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x51}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) 6m38.487102416s ago: executing program 4 (id=4576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008060000", @ANYRES32=r2, @ANYBLOB="06006600f90000000a000600ffffffffffff00002200330030240200fffffffffffffffffffffffff4c8035ad62c820010001f0000000000"], 0x54}}, 0x4854) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000001dc0)=""/4096, 0x1000) lseek(r4, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r5 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x800ffff, 0x3a10, 0x3, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0, &(0x7f0000000180)=0x0) gettid() syz_io_uring_submit(r6, r7, r8, &(0x7f00000006c0)=@IORING_OP_MSG_RING={0x28, 0x16, 0x0, r5, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, r5}}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, &(0x7f0000000340)) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) creat(0x0, 0x6a) 6m37.481211555s ago: executing program 4 (id=4581): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x82, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x20008000) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f5, &(0x7f0000000000)) read$FUSE(r1, 0x0, 0x11) (fail_nth: 2) 6m35.224060926s ago: executing program 4 (id=4589): recvmmsg(0xffffffffffffffff, &(0x7f0000008840)=[{{&(0x7f0000000280)=@ethernet={0x0, @random}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000000440)=""/176, 0xb0}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/234, 0xea}, {&(0x7f0000003b80)=""/61, 0x3d}, {&(0x7f0000008980)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/107, 0x6b}, {&(0x7f0000004c40)=""/72, 0x48}], 0x8}, 0x2}, {{&(0x7f0000004e00)=@phonet, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004e80)=""/11, 0xb}, {&(0x7f0000004ec0)=""/44, 0x2c}, {&(0x7f0000004f00)}], 0x3, &(0x7f0000004f80)=""/196, 0xc4}, 0x1}, {{0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/81, 0x51}], 0x2, &(0x7f0000006140)=""/120, 0x78}, 0x1}, {{&(0x7f00000061c0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000007780)=[{&(0x7f0000006240)=""/184, 0xb8}, {&(0x7f0000006300)=""/73, 0x49}, {&(0x7f0000006380)=""/141, 0x8d}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f0000006500)=""/4096, 0x1000}, {&(0x7f0000007500)=""/49, 0x31}, {&(0x7f0000007540)=""/237, 0xed}, {&(0x7f00000005c0)=""/127, 0x7f}, {&(0x7f00000076c0)=""/190, 0xbe}], 0x9, &(0x7f0000007840)=""/4096, 0x1000}, 0x10001}], 0x4, 0x12002, &(0x7f0000008940)={0x77359400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0xc, 0x3, 0x0, 0x11}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r3, 0x1, 0x20000000, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x9, 0x0, 0x3, @SEQ_NOTEON=@note=0x7e, 0xa, 0x7f, 0x2}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41320}, [@IFLA_LINKINFO={0xe, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x40000}) fcntl$lock(r1, 0x24, &(0x7f0000000240)={0x2, 0x3, 0x5, 0x73f, 0xffffffffffffffff}) fcntl$lock(r7, 0x25, &(0x7f0000000140)={0x2, 0x2, 0x5, 0x80000000}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r9, &(0x7f0000002a40)) r10 = syz_io_uring_setup(0x10c7, &(0x7f0000000640)={0x0, 0x96e1, 0x1, 0x3, 0x372}, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) syz_ublk_setup_io_uring(0x2143, &(0x7f0000000780)={0x0, 0x2bf6, 0x40000, 0x2, 0x272, 0x0, r10}, &(0x7f0000000800), &(0x7f0000000840), &(0x7f00000008c0)) ioctl$SNDRV_PCM_IOCTL_RESET(r7, 0x4141, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) 6m34.902642663s ago: executing program 32 (id=4589): recvmmsg(0xffffffffffffffff, &(0x7f0000008840)=[{{&(0x7f0000000280)=@ethernet={0x0, @random}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000000440)=""/176, 0xb0}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/234, 0xea}, {&(0x7f0000003b80)=""/61, 0x3d}, {&(0x7f0000008980)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/107, 0x6b}, {&(0x7f0000004c40)=""/72, 0x48}], 0x8}, 0x2}, {{&(0x7f0000004e00)=@phonet, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004e80)=""/11, 0xb}, {&(0x7f0000004ec0)=""/44, 0x2c}, {&(0x7f0000004f00)}], 0x3, &(0x7f0000004f80)=""/196, 0xc4}, 0x1}, {{0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/81, 0x51}], 0x2, &(0x7f0000006140)=""/120, 0x78}, 0x1}, {{&(0x7f00000061c0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000007780)=[{&(0x7f0000006240)=""/184, 0xb8}, {&(0x7f0000006300)=""/73, 0x49}, {&(0x7f0000006380)=""/141, 0x8d}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f0000006500)=""/4096, 0x1000}, {&(0x7f0000007500)=""/49, 0x31}, {&(0x7f0000007540)=""/237, 0xed}, {&(0x7f00000005c0)=""/127, 0x7f}, {&(0x7f00000076c0)=""/190, 0xbe}], 0x9, &(0x7f0000007840)=""/4096, 0x1000}, 0x10001}], 0x4, 0x12002, &(0x7f0000008940)={0x77359400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0xc, 0x3, 0x0, 0x11}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r3, 0x1, 0x20000000, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x9, 0x0, 0x3, @SEQ_NOTEON=@note=0x7e, 0xa, 0x7f, 0x2}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41320}, [@IFLA_LINKINFO={0xe, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x40000}) fcntl$lock(r1, 0x24, &(0x7f0000000240)={0x2, 0x3, 0x5, 0x73f, 0xffffffffffffffff}) fcntl$lock(r7, 0x25, &(0x7f0000000140)={0x2, 0x2, 0x5, 0x80000000}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r9, &(0x7f0000002a40)) r10 = syz_io_uring_setup(0x10c7, &(0x7f0000000640)={0x0, 0x96e1, 0x1, 0x3, 0x372}, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) syz_ublk_setup_io_uring(0x2143, &(0x7f0000000780)={0x0, 0x2bf6, 0x40000, 0x2, 0x272, 0x0, r10}, &(0x7f0000000800), &(0x7f0000000840), &(0x7f00000008c0)) ioctl$SNDRV_PCM_IOCTL_RESET(r7, 0x4141, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) 2m32.09131575s ago: executing program 0 (id=5385): r0 = syz_open_dev$dmmidi(&(0x7f0000001600), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x3f, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x105842, 0xa9) writev(r2, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000180)='t', 0x1}, {0x0}, {&(0x7f0000001000)="d6", 0x1}], 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a820ff43052f002000636777fbac141443e000000d62079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000004000000080000000f"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r5}, 0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e20, 0x4, @private2, 0xeeae}}}, 0x84) 2m31.911856913s ago: executing program 0 (id=5388): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffb, 0x122c42) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x0, 0x15, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded147e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd2bf35239d2", "4f000000dd9d9ac2f63a7ad700", [0x5, 0xfffffffffffffffe]}}) r3 = dup(r2) read$FUSE(r3, &(0x7f0000003c40)={0x2020}, 0xffffff0a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 2m29.429118783s ago: executing program 0 (id=5399): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[], 0x60}, 0x1, 0x7}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000000009040000024f6996000905c6d6000000000009050202"], 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000280)={0xc}) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f90753"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80ae", 0x72}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e14575562668985", 0x15}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1", 0x18}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x1000) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m27.306770405s ago: executing program 0 (id=5406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000ff020002000a00000800040001000000", 0x24) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x0, 0x7, 0x8}, &(0x7f00000000c0)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006", @ANYRESHEX=r4], 0x74}, 0x1, 0x0, 0x0, 0x10040042}, 0x10) r5 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'gretap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000800) ioctl$sock_TIOCINQ(r5, 0x541b, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYRESDEC], 0xec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) 2m26.583934899s ago: executing program 0 (id=5408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, 0x0, 0x0, 0x59, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb"], 0x72) 2m25.312418656s ago: executing program 0 (id=5412): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x1ffffffffffffe, 0x0) read$msr(r0, &(0x7f000004b680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x2c, &(0x7f0000000100)=0x2, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfff7}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x3, 0x2, 0x1080007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0xffffffff, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x80004, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x9a, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0xf, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x19, 0xfffffffc, 0x3, 0x0, 0x1, 0x5, 0x2f, 0x0, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x6, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2850bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x20, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x0, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a623, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xb90, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x41, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x5, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0xc, 0xffff3441, 0xfff]}, 0x45c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="4c0000001300000828bd7000fedbdf25073f82c41e000000", @ANYRES32=r5, @ANYBLOB="8008000040400100050027000f0000000a000100bbbbbbbbbbbb00000a0002000180c200000100000a0002000180"], 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='vxfs\x00', 0x1000001, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = eventfd(0x81) readv(r6, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/182, 0xb6}, {0x0}], 0x2) preadv2(r6, &(0x7f0000001600)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/178, 0xb2}, {&(0x7f00000015c0)=""/29, 0x1d}], 0x3, 0xfffffff8, 0x3c8c, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES16=r1], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m10.241209779s ago: executing program 33 (id=5412): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x1ffffffffffffe, 0x0) read$msr(r0, &(0x7f000004b680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x2c, &(0x7f0000000100)=0x2, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfff7}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x3, 0x2, 0x1080007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0xffffffff, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x80004, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x9a, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0xf, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x19, 0xfffffffc, 0x3, 0x0, 0x1, 0x5, 0x2f, 0x0, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x6, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2850bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x20, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x0, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a623, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xb90, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x41, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x5, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0xc, 0xffff3441, 0xfff]}, 0x45c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="4c0000001300000828bd7000fedbdf25073f82c41e000000", @ANYRES32=r5, @ANYBLOB="8008000040400100050027000f0000000a000100bbbbbbbbbbbb00000a0002000180c200000100000a0002000180"], 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='vxfs\x00', 0x1000001, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = eventfd(0x81) readv(r6, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/182, 0xb6}, {0x0}], 0x2) preadv2(r6, &(0x7f0000001600)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/178, 0xb2}, {&(0x7f00000015c0)=""/29, 0x1d}], 0x3, 0xfffffff8, 0x3c8c, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES16=r1], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m12.132794481s ago: executing program 2 (id=5653): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d339707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf90a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089070000009876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13a0100000082c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72705edfa2cddb01f44c850e4ea450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e8894680600000000000000db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534c88d443ac8b3685135dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6faa21b0f5a0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f416661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7ea6a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d136ecc87185f2437c4fce146d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae0000000000007c012779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53d2f64ec521f6fa1cd02843a5e16074d86c9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a1167b948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfea4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f0000b2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d01005a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303d000000000000000000000000000000b17fedd6b6501a47d0e5b510f4a4fab5a62d5fa7e8ead851b01dbfdfe5823c2600"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xfffffffffffffffc, 0x5, 0x1, 0x2}) 1m11.740559735s ago: executing program 2 (id=5656): r0 = socket$packet(0x11, 0x3, 0x300) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_extract_tcp_res(&(0x7f0000000080), 0x80000000, 0xd) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) syz_emit_ethernet(0xc6, 0x0, &(0x7f0000000540)={0x0, 0x2, [0x43b, 0xb10, 0x33e, 0x6ea]}) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xd) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000003240)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x38, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x3, 0x480000) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_clone(0x18200000, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 1m11.365438703s ago: executing program 2 (id=5657): bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000200025a729bd7000fddbdf25020000cdff00000102000100080006000000000014000100fc0000000000000000000000000000000500150002"], 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2, 0x2}, [], {0x2}, {0x2}}, 0x24, 0x3) 1m10.227434736s ago: executing program 2 (id=5660): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000d19000/0x3000)=nil, &(0x7f0000935000/0xf000)=nil, &(0x7f0000df1000/0x4000)=nil, &(0x7f0000f2a000/0x1000)=nil, &(0x7f00008cd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000000c0)="ad665e71e4ce9a1dc9d05fdd4eb4a3914bcc71e53e5e00bcb4f2115e5615551a4bbc241802b989efb2f8e5061cd6f71b984223556b928bb5d9dba9a792923c1d8e80518fdd7abf6e42adf6472464d2d0021f501689640dc9107add0c5e2cdd0fa5466b2f72581f3191b689c9afbf4229981fa965e77e15e662c7f4a086d55bbfbc1ce0119004ddfd21f68e328ed742e851eb7c802574", 0x96}, 0x68) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="110000"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf67, 0x1f480, 0x0, 0x399}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x23, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) io_uring_enter(r1, 0x8ae, 0x6931, 0x17, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) ftruncate(0xffffffffffffffff, 0x800799c) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) close(r2) 1m9.281174678s ago: executing program 2 (id=5662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000040)={0x9, 0x0, [{0xae5, 0x0, 0x4}, {0xad6, 0x0, 0xd}, {0x8e3, 0x0, 0x9}, {0xbc6, 0x0, 0xc}, {0x33a, 0x0, 0x9}, {0xa4e, 0x0, 0x84}, {0x858, 0x0, 0x9}, {0x9f2, 0x0, 0xdc3}, {0x224, 0x0, 0x2}]}) (fail_nth: 3) 1m9.159942883s ago: executing program 2 (id=5664): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='stack\x00') sync() ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000340)={0x40000000, 0x9, "5841d9036bc344d2eb0ee7e1abad3384655382ff8aedc4d8d4e9fd921f85f0d9", 0x950f, 0xbb, 0x5, 0x5, 0x9, 0x8001, 0x4, 0x9, [0xd, 0x3, 0x80000000, 0x8]}) preadv(r0, &(0x7f0000001800)=[{&(0x7f0000000440)=""/116, 0x74}], 0x1, 0x200, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000700)="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", 0x65, 0x0, 0x0, 0xffffffffffffff4d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="12000000040000000400000011"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=r4, 0x3a, 0x1, 0xd40, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)}, 0x40) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_opts(r2, 0x29, 0x3b, 0x0, 0x8) accept4(r2, 0x0, 0x0, 0x80800) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xf) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)=ANY=[@ANYBLOB="2800000098ce010200000000000000000a00000a1400078008000140000000020800020800000004"], 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64a42, 0x108) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001"], 0x64}}, 0x0) 53.857726891s ago: executing program 34 (id=5664): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='stack\x00') sync() ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000340)={0x40000000, 0x9, "5841d9036bc344d2eb0ee7e1abad3384655382ff8aedc4d8d4e9fd921f85f0d9", 0x950f, 0xbb, 0x5, 0x5, 0x9, 0x8001, 0x4, 0x9, [0xd, 0x3, 0x80000000, 0x8]}) preadv(r0, &(0x7f0000001800)=[{&(0x7f0000000440)=""/116, 0x74}], 0x1, 0x200, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000700)="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", 0x65, 0x0, 0x0, 0xffffffffffffff4d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="12000000040000000400000011"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=r4, 0x3a, 0x1, 0xd40, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)}, 0x40) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_opts(r2, 0x29, 0x3b, 0x0, 0x8) accept4(r2, 0x0, 0x0, 0x80800) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xf) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)=ANY=[@ANYBLOB="2800000098ce010200000000000000000a00000a1400078008000140000000020800020800000004"], 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64a42, 0x108) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001"], 0x64}}, 0x0) 29.274754864s ago: executing program 1 (id=5804): recvmmsg(0xffffffffffffffff, &(0x7f0000008840)=[{{&(0x7f0000000280)=@ethernet={0x0, @random}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000000440)=""/176, 0xb0}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/234, 0xea}, {&(0x7f0000003b80)=""/61, 0x3d}, {&(0x7f0000008980)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/107, 0x6b}, {&(0x7f0000004c40)=""/72, 0x48}], 0x8, &(0x7f0000004d40)=""/149, 0x95}, 0x2}, {{&(0x7f0000004e00)=@phonet, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004e80)=""/11, 0xb}, {&(0x7f0000004ec0)=""/44, 0x2c}, {&(0x7f0000004f00)}], 0x3, &(0x7f0000004f80)=""/196, 0xc4}, 0x1}, {{0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/81, 0xfffffffffffffdbc}], 0x2, &(0x7f0000006140)=""/120, 0x78}, 0x1}, {{&(0x7f00000061c0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000007780)=[{&(0x7f0000006240)=""/184, 0xb8}, {&(0x7f0000006300)=""/73, 0x49}, {&(0x7f0000006380)=""/141, 0x99}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f0000006500)=""/4096, 0x1000}, {&(0x7f0000007500)=""/49, 0x31}, {&(0x7f0000007540)=""/237, 0xed}, {&(0x7f00000005c0)=""/127, 0x6f}, {&(0x7f00000076c0)=""/190, 0xbe}], 0x9, &(0x7f0000007840)=""/4096, 0x1000}, 0x10001}], 0x4, 0x12002, &(0x7f0000008940)={0x77359400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0xc, 0x3, 0x0, 0x11}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r3, 0x1, 0x20000000, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x9, 0x0, 0x3, @SEQ_NOTEON=@note=0x7e, 0xa, 0x7f, 0x2}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41320}, [@IFLA_LINKINFO={0xe, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x40000}) fcntl$lock(r1, 0x24, &(0x7f0000000240)={0x2, 0x3, 0x5, 0x73f, 0xffffffffffffffff}) fcntl$lock(r7, 0x25, &(0x7f0000000140)={0x2, 0x2, 0x5, 0x80000000}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r9, &(0x7f0000002a40)) r10 = syz_io_uring_setup(0x10c7, 0x0, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) syz_ublk_setup_io_uring(0x2143, &(0x7f0000000780)={0x0, 0x2bf6, 0x40000, 0x2, 0x272, 0x0, r10}, &(0x7f0000000800), &(0x7f0000000840), &(0x7f00000008c0)) ioctl$SNDRV_PCM_IOCTL_RESET(r7, 0x4141, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) 27.404183928s ago: executing program 1 (id=5809): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x0, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x60a0, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x8482) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f00000002c0)={0x28, 0x2, r4, 0x0, 0x3a98fa, 0x800, 0x6, 0x20b4e9}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000140)='S\x00', 0x2}], 0x2) mount(0x0, 0x0, 0x0, 0x81001f, &(0x7f0000000340)='norecovery') openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (fail_nth: 3) 25.012163662s ago: executing program 1 (id=5815): r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r0, 0x2007ffb) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x0, 0x0, 0x3f8, 0x1, 0x32, 0x0, 0x7}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000100)='X', 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xffffffff, 0x3, 0x5, 0x0, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) readlinkat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setitimer(0x2, &(0x7f0000000240), &(0x7f0000000280)) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) sched_rr_get_interval(0x0, &(0x7f0000000300)) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1000000017142d71"], 0x10}}, 0x80) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) sendmsg$nl_netfilter(r0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000800)={0x368, 0x6, 0x6, 0x101, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x3}, [@typed={0x112, 0x3b, 0x0, 0x0, @str='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU'}, @generic="f8b05b9af740463d26d92e91deb9c3e0bc47c15d6bb549bb0446746877c39fefecf07c61235b6e0d53f8fb6174c01d3e87aaab338dd37e1b1c96c177540ce958a62d0f72528d7afaff55e5a8b1d3d5c3bf5b06f3d40baafa3784787801bd88111099567b1a20a0e3e38f75406fc1f1eb92", @nested={0x1c9, 0xe6, 0x0, 0x1, [@nested={0x4, 0x8e}, @typed={0x8, 0x44, 0x0, 0x0, @uid=r4}, @typed={0x82, 0xcc, 0x0, 0x0, @binary="f946792d83fb19038d97933f134f1c52ea6eddadba041bb1398e6d22a242b55c84f8439ec4db495ca63db78c8e3778e8f95b343666d8d647c99dc153298ef53d4efc27855a67f8568790052afa51f536d3d40b68da70bc7f6d10899dbab1a9b6ea72114a083cbaab9e8db307367ce04a20beb4df64f0ffa08e3655efe326"}, @nested={0x4, 0x13}, @nested={0x4, 0xcc}, @typed={0x14, 0x11e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @generic="0a323aae3769e7982bf1f6a35f1fffc0d207ec9ff6d6e518086b3f7feb7bf2046d4dfd3bdc2471ff454d642c51415a2a45c355c78f66492b4a23f3ba3b0648894f125a4804d51f7492e035862d9a04350e00eb1594d2ce1587865192d80566801b9a65e2bd711ca77f7bcb2563f82f1ee641410caf0b91f79e1ccb35727102bfc8932e6023cafbf7c92a21", @generic="d2a0d7129bcf0992abb33679525be217b2f8340bceea56df0c0fb4aa9e0a943e2ca34bf134fa35868eda0f537cc621f9c22df40dd1937d969e776fcd6052df2f0e16368ffacba6fbd3ccaff1221815869b5767ff6c5c359020bb310967e82daad430b08e3e65f16b5fd4e2220b5a2fd4855aea0f6768357a404a29052726faf9d42ef6bf7cf6b37ede4f10ef91e5"]}]}, 0x368}, 0x1, 0x0, 0x0, 0x40}, 0x48000) syz_open_dev$usbfs(&(0x7f0000000340), 0xfffffffffffffff7, 0x8201) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r5, r0, 0x0, 0x7ffff000) 23.306054511s ago: executing program 1 (id=5821): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x20000000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000180)=0x3) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="ddb9da8c03a9707a20f12714547f86", 0xf}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8940441bf3a64a8154ed28057bb714d5a6906f63e488a79d3d0e4ed0073d95bf7feba09cac"], 0x108}}, 0x4004048) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/207, 0xcf}], 0x1, 0x0, 0xffffffffffffff74}, 0x20060) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000fc0)=""/4096, &(0x7f0000001fc0)=0x1000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000037000000000a20000000000a01030000000000000000010000010900010073797a310000000034000000030a01020000000000000000010000000900010073797a310000000008000540fffffffc04"], 0x7c}}, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="0a000000010001", 0x7) 22.846624518s ago: executing program 1 (id=5822): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x50) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), 0xffffffffffffffff) unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000880)={'broute\x00', 0x0, 0x0, 0x0, [0x9, 0x2, 0xff7fb5b2, 0x3a8e5b6c, 0x40000, 0x208]}, &(0x7f0000000000)=0x78) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000400}, 0x4000000) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x169140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000015c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80800008}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="080000001d3af5595884ca27bfc9b454d1345d4748226b141ec190bfe9760fb33f68fed23cb2aa5f0921a7e7f822cfea96a546c1610219a98c5a4cdc000000", @ANYRES16, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES16, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 18.488192583s ago: executing program 1 (id=5837): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r0, &(0x7f0000000140)=""/245, 0xf5, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x24008010) socket$alg(0x26, 0x5, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x0, 0x0, 0x6a0a65d351a035ca, 0x2}, 0x9c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080)=0x8, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x0, 0x0, 0x0, 0x3, 0x2}, {0x7, 0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x33}, 0x2, @in6=@loopback, 0x2, 0x3, 0x3, 0xb7, 0x0, 0x8000000}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000005c0)="0fbf1e1b000f01cb66b9800000c00f326635008000000f30660f6f01baf80c66b828e1e18866efbafc0c66b8f07f000066ef650f01c466b90100004066b893f2253166ba000000000f3026360fc75e460f060f205d", 0x55}], 0x1, 0x51, &(0x7f0000000180)=[@cstype0], 0x1000000000000083) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x37, 0x80000, 0x2) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x60) 10.026097402s ago: executing program 7 (id=5863): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 9.264901455s ago: executing program 7 (id=5866): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1}, 0x4) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, &(0x7f0000000040)) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 8.468226477s ago: executing program 6 (id=5868): userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) openat(0xffffffffffffff9c, 0x0, 0x48042, 0x8c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @local}, {0xa, 0x0, 0x7ffffffe, @mcast1, 0xa8a9}, r5, 0x2}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000000)={0x12, 0x10, 0xfa00, {0x0, r4, r3}}, 0x18) 8.395915215s ago: executing program 3 (id=5869): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000340)=0xfb78, 0x4) 7.338652864s ago: executing program 6 (id=5870): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x5c, 0x32, 0x400, 0x8070bd27, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000000}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000300)=""/136, 0x88}, {&(0x7f0000000440)=""/93, 0x5d}, {&(0x7f00000004c0)=""/195, 0xc3}, {&(0x7f00000003c0)=""/45, 0x2d}, {&(0x7f00000005c0)=""/92, 0x5c}, {&(0x7f0000000900)=""/211, 0xd3}, {&(0x7f0000000800)=""/230, 0xe6}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/195, 0xc3}], 0x9}, 0x4}, {{&(0x7f0000001d40)=@nfc_llcp, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001dc0)=""/72, 0x48}, {&(0x7f0000001e40)=""/40, 0x28}], 0x2, &(0x7f0000001f40)=""/239, 0xef}, 0x4}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002040)=""/153, 0x99}, {&(0x7f0000002100)=""/179, 0xb3}, {&(0x7f00000021c0)=""/35, 0x23}], 0x3}, 0x7}, {{&(0x7f0000002240)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000002600), 0x0, &(0x7f0000002680)=""/129, 0x81}, 0x2}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002740)=""/208, 0xd0}, {&(0x7f0000002840)=""/17, 0x11}, {&(0x7f0000002880)=""/198, 0xc6}, {&(0x7f0000002980)=""/7, 0x7}, {&(0x7f00000029c0)=""/152, 0x98}, {&(0x7f0000002a80)=""/138, 0x8a}, {&(0x7f0000002b40)=""/14, 0xe}, {&(0x7f0000002b80)=""/184, 0xb8}], 0x8, &(0x7f0000002cc0)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000003cc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000006100)=[{&(0x7f0000003d40)=""/239, 0xef}, {&(0x7f0000003e40)=""/225, 0xe1}, {&(0x7f0000003f40)=""/75, 0x4b}, {&(0x7f0000003fc0)=""/7, 0x7}, {&(0x7f0000004000)=""/59, 0x3b}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/51, 0x33}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/96, 0x60}], 0x9}, 0x4}, {{&(0x7f00000061c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000006680)=[{&(0x7f0000006240)=""/113, 0x71}, {&(0x7f0000000280)=""/21, 0x15}, {&(0x7f0000006300)=""/44, 0x2c}, {&(0x7f0000006340)=""/45, 0x2d}, {&(0x7f0000006380)=""/247, 0xf7}, {&(0x7f0000006480)=""/88, 0x58}, {&(0x7f0000006500)=""/72, 0x48}, {&(0x7f0000006580)=""/114, 0x72}, {&(0x7f0000006600)=""/77, 0x4d}], 0x9, &(0x7f0000006740)=""/1, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000007c80)=[{&(0x7f0000006780)=""/38, 0x26}, {&(0x7f00000067c0)=""/244, 0xf4}, {&(0x7f00000068c0)=""/249, 0xf9}, {&(0x7f00000069c0)=""/192, 0xc0}, {&(0x7f0000006a80)=""/199, 0xc7}, {&(0x7f0000006b80)=""/4096, 0x1000}, {&(0x7f0000007b80)=""/209, 0xd1}], 0x7, &(0x7f0000007d00)=""/67, 0x43}, 0x1}], 0x8, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) fcntl$setownex(r4, 0xf, &(0x7f0000000100)={0x0, r2}) fsopen(0x0, 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001080000000000000000000000006a472d9277433828d11c089f19cb903a6e9e5127ebbcf658fa33913b87eae7a16da9412ac6748e6a63f52b1251af1ccf537f8dadf6805eed6ae2a83194568a4c45be6efefd0546f8096b5b2c9d6242e907b340e5eebdadeb219189cf8a86e0b2a5600834ba1341be", @ANYRES32=0x0, @ANYBLOB="312000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="31a1b1bb81a6", 'wlan1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) 6.931997553s ago: executing program 3 (id=5871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r4, 0xc018aec0, &(0x7f00000000c0)={0x1}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000000c0)={0x251000, 0x201000, 0x8}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c882) r5 = socket$inet6(0xa, 0x5, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in=@rand_addr=0x64010101, 0x3, 0x5, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6}, {0x50000000000}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}}, 0xe8) close(r5) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000280)={0x5, 0x3, 0x4, 0x0, 0x5}) 6.770383736s ago: executing program 7 (id=5872): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r0, &(0x7f0000000140)=""/245, 0xf5, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x24008010) socket$alg(0x26, 0x5, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x0, 0x0, 0x6a0a65d351a035ca, 0x2}, 0x9c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080)=0x8, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x0, 0x0, 0x0, 0x3, 0x2}, {0x7, 0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x33}, 0x2, @in6=@loopback, 0x2, 0x3, 0x3, 0xb7, 0x0, 0x8000000}}, 0xe8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000005c0)="0fbf1e1b000f01cb66b9800000c00f326635008000000f30660f6f01baf80c66b828e1e18866efbafc0c66b8f07f000066ef650f01c466b90100004066b893f2253166ba000000000f3026360fc75e460f060f205d", 0x55}], 0x1, 0x51, &(0x7f0000000180)=[@cstype0], 0x1000000000000083) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x37, 0x80000, 0x2) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x60) 6.453622935s ago: executing program 5 (id=5873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x8, 0x8000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d70a000020000000620a00000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x12, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x62) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000bc0)={r3, &(0x7f0000000a00), 0x0}, 0x20) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$sock_int(r2, 0x1, 0xa, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sched_setscheduler(r1, 0x2, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @rand_addr=0x64010101}, 0x10) 5.991273731s ago: executing program 3 (id=5874): r0 = socket$packet(0x11, 0x3, 0x300) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_extract_tcp_res(&(0x7f0000000080), 0x80000000, 0xd) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xd) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000003240)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x38, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x3, 0x480000) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x18200000, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) 5.848578427s ago: executing program 5 (id=5875): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r1 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="66643d4e6ef2271c1189b564", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f000000b2c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvfrom(r4, 0x0, 0x0, 0x40010320, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read$FUSE(0xffffffffffffffff, &(0x7f0000004140)={0x2020}, 0x2020) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0xa, 0x801, 0x84) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000140)=0x401, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e26, 0x8001, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c) 4.944420231s ago: executing program 7 (id=5876): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) ioctl$NBD_DO_IT(r0, 0xab03) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x3) (async) syz_clone(0x91002000, 0x0, 0x2d, 0x0, 0x0, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0x7) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aa"], 0x20) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4004) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x141000) r6 = io_uring_setup(0x5ab7, &(0x7f0000000180)={0x0, 0xe14c, 0x0, 0x3, 0x299}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f00000000c0)={0x20a, @time={0x6000000, 0x2}, 0xd, {0x1, 0x74}, 0x8, 0x2, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r7) sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000ffdb25e096e4000008000100", @ANYRES32=0x0, @ANYBLOB="05000a000000000005000a0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44895}, 0x24004000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) 4.756368768s ago: executing program 7 (id=5877): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x28, r2, 0x21, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (fail_nth: 3) 4.663805468s ago: executing program 7 (id=5878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_getevents(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000010300)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) getpgid(0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r6, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r5, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 4.444031823s ago: executing program 6 (id=5879): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bdb1, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c850}, 0x20000014) 4.276049426s ago: executing program 6 (id=5880): recvmmsg(0xffffffffffffffff, &(0x7f0000008840)=[{{&(0x7f0000000280)=@ethernet={0x0, @random}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000000440)=""/176, 0xb0}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/234, 0xea}, {&(0x7f0000003b80)=""/61, 0x3d}, {&(0x7f0000008980)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/107, 0x6b}, {&(0x7f0000004c40)=""/72, 0x48}], 0x8, &(0x7f0000004d40)=""/149, 0x95}, 0x2}, {{&(0x7f0000004e00)=@phonet, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004e80)=""/11, 0xb}, {&(0x7f0000004ec0)=""/44, 0x2c}, {&(0x7f0000004f00)}], 0x3, &(0x7f0000004f80)=""/196, 0xc4}, 0x1}, {{0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/81, 0xfffffffffffffdbc}], 0x2, &(0x7f0000006140)=""/120, 0x78}, 0x1}, {{&(0x7f00000061c0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000007780)=[{&(0x7f0000006240)=""/184, 0xb8}, {&(0x7f0000006300)=""/73, 0x49}, {&(0x7f0000006380)=""/141, 0x99}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f0000006500)=""/4096, 0x1000}, {&(0x7f0000007500)=""/49, 0x31}, {&(0x7f0000007540)=""/237, 0xed}, {&(0x7f00000005c0)=""/127, 0x6f}, {&(0x7f00000076c0)=""/190, 0xbe}], 0x9, &(0x7f0000007840)=""/4096, 0x1000}, 0x10001}], 0x4, 0x12002, &(0x7f0000008940)={0x77359400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0xc, 0x3, 0x0, 0x11}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r3, 0x1, 0x20000000, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x9, 0x0, 0x3, @SEQ_NOTEON=@note=0x7e, 0xa, 0x7f, 0x2}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41320}, [@IFLA_LINKINFO={0xe, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x40000}) fcntl$lock(r1, 0x24, &(0x7f0000000240)={0x2, 0x3, 0x5, 0x73f, 0xffffffffffffffff}) fcntl$lock(r7, 0x25, &(0x7f0000000140)={0x2, 0x2, 0x5, 0x80000000}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r9, &(0x7f0000002a40)) r10 = syz_io_uring_setup(0x10c7, &(0x7f0000000640)={0x0, 0x96e1, 0x1, 0x3, 0x372}, &(0x7f00000006c0), &(0x7f0000000700), 0x0) syz_ublk_setup_io_uring(0x2143, &(0x7f0000000780)={0x0, 0x2bf6, 0x40000, 0x2, 0x272, 0x0, r10}, &(0x7f0000000800), &(0x7f0000000840), &(0x7f00000008c0)) ioctl$SNDRV_PCM_IOCTL_RESET(r7, 0x4141, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) 3.997536383s ago: executing program 5 (id=5881): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1}, 0x4) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, &(0x7f0000000040)) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 3.46462098s ago: executing program 3 (id=5882): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000001b00)={0xffffffff, 0x48574653, 0x1, @discrete={0x1, 0x100}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket(0x1d, 0x2, 0x6) (async) socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)) (async) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.952312626s ago: executing program 5 (id=5883): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x20000000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000180)=0x3) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="ddb9da8c03a9707a20f12714547f86", 0xf}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8940441bf3a64a8154ed28057bb714d5a6906f63e488a79d3d0e4ed0073d95bf7feba09cac"], 0x108}}, 0x4004048) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/207, 0xcf}], 0x1, 0x0, 0xffffffffffffff74}, 0x20060) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000000fc0)=""/4096, &(0x7f0000001fc0)=0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000201030000000000000000000a1000040c0019800800020001000000180002"], 0x38}, 0x1, 0x0, 0x0, 0x2404c015}, 0x40008d2) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="0a000000010001", 0x7) 2.693488038s ago: executing program 5 (id=5884): iopl(0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) unlink(&(0x7f0000000100)='./file0\x00') fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.538892986s ago: executing program 6 (id=5885): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80a00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x804c0c0}, 0x0) 2.435692969s ago: executing program 5 (id=5886): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r3, 0x9, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r2, &(0x7f00000001c0)='ns/net\x00') r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) write$nci(r7, &(0x7f0000000240)=ANY=[], 0xc) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) timer_create(0x0, 0x0, &(0x7f0000000300)) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r8, 0x8, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) execve(0x0, 0x0, 0xfffffffffffffffe) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x28001, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mknodat$loop(r7, &(0x7f0000000140)='./file0\x00', 0x2a82, 0x1) sendmmsg$inet(r7, 0x0, 0x0, 0x40001) 1.73351935s ago: executing program 3 (id=5887): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000300)={0x1}) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="013fffffffffffe000006700000008000300", @ANYRES32=r3, @ANYBLOB="0c00990002000000210000000800c400010000000800c3007413"], 0x70}}, 0x880) write$P9_RGETLOCK(r0, &(0x7f0000000340)=ANY=[], 0x200002e6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) fcntl$setpipe(r0, 0x407, 0x7000000) 1.43137535s ago: executing program 6 (id=5888): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000068a4ceb735d6951ec1cd001d00010024bd7000cddbdfdce9e7fb20", @ANYRES32=r2, @ANYBLOB="800002080a0002000180c20000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000890}, 0x24044050) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x2, 0x3, 0x4, {0xa, 0x4e24, 0x2, @private0, 0x100}}}, 0x3a) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={r3, 0x1}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000025300)=""/102392, 0x18ff8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) alarm(0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r6 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000000)=0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) 0s ago: executing program 3 (id=5889): r0 = socket$inet6(0xa, 0x2, 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfae8}, 0xf) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet(0x2, 0xa, 0x9) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x2, 0x9, 0x9}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="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", 0x145}], 0x1}}], 0x2, 0x42054) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x10001}}, './cgroup.cpu/cgroup.procs/file0\x00'}) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x21879613ee33b411) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) rmdir(&(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000008280)=[{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f00000003c0)="48114690e14def02bbf680545d95080c6689454524e7ef4208d345ca306d0a5537ff8ae655c06ebb254c6195b66393d76e7b7b375c48d4156e0d8a5e36fd3528283b0d81102aa9430dcdf0937b8a40bdac1004f1d81915fb818daf07f9f7618c7d26ef6bd5c7a31d20dac73a1a1cdae40e2a0e5543cbceaa0250d9e6d7f6a4302b10fc9004e21655b0cb63e14d11b690f673a5a502ae", 0x96}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="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", 0xfd}, {&(0x7f00000026c0)="9ecef7c273d93ee85cdadb65b7c5da61471e7fe32dd54b40a62fbd7fbd5662107c304648f8991b3e514f4d250d1dec4a10c5b46302f1c0973ed07bd168aa80d886aa1c28c3e9250d1be6a180a6eea88a7b637f1534b8518db71c4a14663e6293963eeffc77ae94f7f14dfc746e674e9038b82e97fa322212ddf35152ad74f5d5b31af6f4e407a89a6217baa93c2fecefba3cccc7dbcf0ffedded764af5490236222076768809e1531870efd63f99f715401ec74cce5a83ad9c59d87e2a471b5c4b67e9cd03117591debe2feace584a44314b8f3a1b0b693c2b", 0xd9}, {&(0x7f0000002840)="6b5993d5e04e8c527e4a26033a0c11c223a80a2114da6087d1fd05bd914f37fb6840132a00f5e1a4142d4a1f61c0502697fd485946f3c7624c9bd64866af666ae64a8cf9169671b0f40ccd8fc494eb417f9a86a299a8882b2fe47ebff214c28b6bed946bb56032f2d4090e16a340680c2cd46982d775ead866eadcaf1d3db9120d0deb0562474dbf026d05437ee4bd105c575e53488bce268d61c485a7", 0x9d}, {&(0x7f0000002900)="b7189956276bea56a1c6b25a9e33b3401c17e8d0dcaa6e0dae2da8b3686f22003f666994b26ee1e47c09183d41877e2ef33928d0a71b4ed8f7cf7d3bf7d090b02a80809e1649eb5dfc8572c96028e60cb59a207a73a325e4f2b1467654be2265e23104183beba3fba97bf1797c76513a04e833cfdaa2d0857dc8ae7ff5baf1a77aa7b4f9e1d2612c5073809ce72edbea65d4b19195d76846299f3cbf62a67601207dd810b7724f1aef9d3c36ebaef816502d5e88f86c5097b90c1b40f4492d66ff73e7e24b640ee28ba079f9704459432230e40118bb5a1b5634d4f14ad95f4d2c05ad0851ce385eb2a4", 0xea}, {&(0x7f0000002a00)="f8a371d7e86e3324e12b7b954daeab723c647a66bf67da848ed4c6c0a89f16d5f5fe6a07a462aa1bdcceed48625ef02a1a041ceb9cef6e7bf8d332f6d33bc4990af0c9efe8f0e4f83284169dce96cf598b9ce46c56ccbe0e9717c6878bc66f88f344ff177811b85744e1e58f1f984fbdb17b9481ab70d49469980aec9a4ba88e0e675f95cf20bf5407", 0x89}], 0x7, &(0x7f0000002d00)=[@iv={0xe8, 0x117, 0x2, 0xcf, "66f2c14684061e56ef5118598e5f1bc6efe490314171bdf418a91e2f86d4211cf6c0ac06318131fdf87ea56b579e301a7d919045596bc2095b47ad6a2658d9683d4d4c636fe4033ed784becee1df0f564c050b500f0994fcbcacebe0df915e0a49a73fc183355ae5f6f9606e49a05335b19bfff74a755ef3fb183084fa88ed38e8ef638abc64e184ca95921f8762dc72405e7ee415ed6101830cba03aa3e67922a98816a579b0f180a4ecea2f656790230932630f0551ec7e465d1391cd2825802531cfed6daee522c45f28683a212"}], 0xe8, 0x8000}, {0x0, 0x0, &(0x7f0000004f80)=[{&(0x7f0000002e00)="48e5defc18b1ce3923419b82ac4279368371f297ab6a7b4c7e03774738944eb417b10fa6c5fe64d32e36ec2f88e3f5bb56e520b57facd7c6713e2910280b9a13978094bab1c10fd43e03061ab5f99d8145ddcd62a152fba4a11e62971d9d1585d9a0f773765e83fdf5ff4356e6", 0x6d}, {&(0x7f0000002e80)="df8e88504ca3b3dee0a8093b968f5e04103ead86f8c30376ce1dd83c54602d46392492a59635c7f0bc5e408a0e8560b5dc289c2074238616664a33202136bed8e7e006b3b81aeddaf11a2c4b2ba3a2d0bc6ec57d57", 0x55}, {&(0x7f0000002f00)="6592ee46a42438d8d784dba39a3c9d28d4646925d7cb47c4db90e053359d5d6f961cc483ddee0b0c50a5c4f4e6450e123457c187d3324e8551189202b8a3a62da21fa37e4ec762e763464fe5a17b5cea15f12ee3e40b33a450878dde339bd8f64452356d1a7359e7be087aff8eb5e35c05b24c89fe1eb34f47f3ca8d0b4b6be55d8804b09cef7b2206db7fac32c37967191fe8963a4d495b33c0714e0d1127900e39294e326845a39440ff8c", 0xac}, {&(0x7f0000002fc0)="d705a87e0f0f60e73847a0d40c566bf9a22ff901979bb2554ee9a06fef", 0x1d}, {&(0x7f0000003000)="1b1fed4d5e10767c2406e52bc327c732bf6e62ca97283fa0dd476d6df68b362ce15e14b55978fa9efb2633447698bb59c45fafe80d2b3af9efd6c7bed487ecf98c595072ced7032e818016465ed9f521942135d3b2c62a00f95fdb872bc994915988c6a0be0bcb27f3fcb3308059c8cad8a7c67748eab0a48ee4cffca8f019a4293a5d234ebcb55a8c7fe4b1a781b1946738e49425395d0d633777b77d345262bd5c168b51409dcc5b3adb0651d97d080fa2f738d02c11", 0xb7}, {&(0x7f00000030c0)="e3ec0658b560b5c31b2d2cfcad5dc308e4d8975e01fc9da8b4a294d8b483cccc26571cb8885ea693858061e3801c5d54a4e7c58ba76a4c0ef2d807f2051c3e1d685554b82d316be059092aa335c5ecce7e5b21b0088af61e26080258aef7c201d348cc16236c", 0x66}, {&(0x7f0000003f00)="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", 0x1000}, {&(0x7f0000000640)="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", 0x114}], 0x8, &(0x7f0000000880)=[@assoc={0x18, 0x117, 0x4, 0x506}, @iv={0x28, 0x117, 0x2, 0x12, "79dca928fa1fd2fa8b73d0801aa2a10e1bc7"}, @assoc={0x18, 0x117, 0x4, 0x48}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xa8, 0x117, 0x2, 0x93, "959fa87d1b1398e17b29a1429fb5e6b1b6e11198ed31bd1547841c35e2b24bde0ccc261a0f1691c913dd16ce224f096707e161d9876ca989602154b6053c8603e21f65806f75e7340831b482c7dc13cf360876ae284e98fd5bc6d91c2acd18cd4b2fdf8ffb69ec3d8965f4ba54f4d270348e93873a6c4bf9a3fc5bf159c427b9617e70ec84d3d48ef761e95e793c18267e901f"}], 0x130}, {0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f00000050c0)="e429be513828f47ac45e3e8c4b4c16bf52e160d83bc6f278d75ce715a73cd2b9583e06826cfda9e4c52dfb", 0x2b}, {&(0x7f0000005100)="4b891c67a0341b96", 0x8}, {&(0x7f0000005140)="b22248bf165bb41810bc81c3d731bdcdebb8368103865769341f3e66596883d415fe013772cb6b49832a7cba2f806a2d9dc63e08bd21aba5b85795f8a7d23a89e6eca57c799257374e0dc1d503af2b02b83119b7be2de208e6ba5df6ce01b095e23394b14dc35b72d5ee15fb5d94cb2152a7ca148d4d5371c1eba5be77b95db9112374b6faa52e6eeca6027bb0f2d0c7b75b1cfa4400483a78cbe72d4564d94b87a0f40b8daedae3a3625c111d5954723cdd43b064f48eaeb2a6d36e71d5892fd52612e34cf8afedfefe91b5d746b54a5d0b08aafb30d929096e1401e9f69c9fc2030f64e07269", 0xe7}, {&(0x7f0000005240)="3691c0b1c5e31b202e0624e69d1d1793e73fcc198ca51b77cd246a7ef5905188e308ab7c19f5795f2210900784b73819822a6281a1d6c4bb99b2c2b2cf87ce949a61c1a93bc8adaba28a676a5bc142adb2bcd3b09c25be", 0x57}], 0x4, 0x0, 0x0, 0xc8c0}, {0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000005300)="e31deeb5b8e01dbdfaf57926bd6e03023b8f6d808183221d514c798e2702b7aeb6f52e5151a45399eccf9b3d6193fb5c73e6fd20e7cd9a177b", 0x39}, {&(0x7f0000005340)="d89ca0ab52aa627ac5fee7d5f2f14cdad59fb113f2462c2f9962374f38b4b253e1791bd6e78da9092d768217b27a21f4eab677f2cf590d018d909c0da70b699ce92df75aa9873e24cace740d8252038ee7fc74696c1fdda5b072fc3afe6d51f6288b48cf423c3afbe6d8d95d1e623f4086eef5084f013f5c4f92cd93086c0127050447c70caba1b7a709bcecae758951ab1edc4500145106e6c88204b0e7a7d061533a8198b0c352df5d21c399c8c419af65b875ca2138c15d63c73d040b7ee31043b48a52baec35abdea37782d8b1aa066dbb5b259b536fb83f3886f11934", 0xdf}, {&(0x7f0000005440)="f2d8173990a5f34cef6ba17bc834bda76ce54b7d34370f7350f852436593e534ce84435f8b", 0x25}], 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="800000000088469be288c7a36483c31a39f3e0efbcad4f42a9d65047f525dbdd7c5cbdaa2527caaeb176453c298e57be977acaf3d96788c7b4db66b00d9d56185bc09e89719d20df6ca3133004f3cec3fb33be0afa4e0ee44ddbfdbe1205a33869ca16ae854d3930d44cd6c0f10c14e9335e4cdfdd61ca621382df000000000000180000000000000017010000047a00"/168], 0x98, 0x41}, {0x0, 0x0, &(0x7f0000005880)=[{&(0x7f0000005580)="4842bb9106feb7fe4cba912517b44cb2d8e3e5f51d8a8b3aa1ba7c080324b5e759328842081e399012191e9cb8dfc977c5fb3eda2db004e6c9f15d9141ef5d2bdb58588f8dee868e8c5da903b1dcfdc6b2635aaf9c5bdb0c870f9120e03506326a0ebf5586b396a12a60ba85c3dc1b0c5da8b0ae4e2d85076e4491a38dd24b753010ba4219bd9e8088d56628b8f40f69f8ec41014db7829970c1abc052397cfa56b0dae536d30cb1ad", 0xa9}, {&(0x7f0000005640)="63a65d609f7a0ef69fb5f1b06824fc3258e0a962ea14b6c274db817367ff86170213b691954b398fc02de781ed875069747f693750a009a0d2280fd0855fc9061d3cae4b6bae859490b4acdc2f58c748b529ac60e1f21a0230ba2063284e477feb77a1b34555eac6fba3e7e5f6a76319643c7f1a26e56538f9ab7188af0a279ce6a9d427e39330f694fe47c4d8e25b5ad7b3c6a251221aa0196d36f2dbd2415ed19e3eeff96e61c591b4f48bd5546955a5698407829f11d039ed07fae9cd0fa671e71bcfb56fbfa7fd5615eadbabf86b4916bb792d2041", 0xd7}, {&(0x7f0000000780)="ddeabfe40eb2dc4f2fae3d6e14c5c1fccde13412272115ee9fed0d6f6f19b2f7bdf054cbe74614c2f1bc32dca1f41a167a43c716e1b30679b591adab5431a385f1c5670899aa4f0b1b8abfd373981c4e7079668fef1cb3e366f92708c0b642eb43e6a37cad30b767b1c2d65b106f4991ebd32d", 0x73}, {&(0x7f00000057c0)="18405db6ef14d1e620cd54eee2fab90a0916d3ad5f3e6522226b8155a073c0272bd4cbb8221026c37759533a4daf72d471505038d5e0f0c3e3b5b968bd9da54a31d56bb3722a80bd5e6ffc34b1cfdc3374c37192c1f712c9a493ed7b", 0x5c}, {&(0x7f0000005840)="a109d931e0d6c71e926900b0b772f4478632", 0x12}], 0x5, &(0x7f0000005900)=[@iv={0xc8, 0x117, 0x2, 0xb3, "4045677a810af11c5cea68942e5ac528a8b566d512ca26ce74013eb2c7c636e62703f948b04a128e81746cfb6e28774da7dc1d7650a1397b0b0795fea1b4478b5a3edd15d9fd13b45250681e0b758e0444ffe6ebc87c1af45ccaf23128a8b1b77e915e0bb4a18315f75200b969b744dbe2ddaef2fe4bb204202c6d2680b7c688488ba814fbdbb2e6a51df868ff7958f58031f4523e0ca98a0e0cf326948afcc57ebfaca4b8953f5b5885180d726350eece471e"}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x80, 0x117, 0x2, 0x6b, "dca3a48622f49324db629af62a47e0b1809c2f14a78ddc1c7afb0bab2da9e8a980debd890b434150a08ddacc4dd7b3dd03bcbc9e4db108323446c60efbbf095e541f6410b4dfa38e0c15db5f6929791e7b48eee029747a685b8f55a8d360aea833ba43811b36f1623858f9"}], 0x178, 0x4}, {0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f0000005ac0)="cb899a2e7fbd9b92298ac954ca5dfc431894792dd1952f9ac6eb61ce4d7b60418f4133e77d84a8bc5bb3c92aea7ba0f3158c121bf73648494b193b6700fe66bcebaee741aade2d6903b0710cc02ee9ab64a1a2cc46d6e90b1db89705692566898da2dbbf47545ac67907e413d2fb33f76fd16db66c772cab7036074bbda082ed3648f06652ad671bd3721658142a6a245eb5a7b740ac90f6ada4c17c1765ad4dc95edcfe73c0baa2a034", 0xaa}, {&(0x7f0000000200)="a1a112976c25db68d29a0be53d7c63d34619ad0312b75a47af11b48c98d1c27479c4f53dd8d8a053f7da2de176b1beb8d50000e3dcfaf1d32a2ad6ed3c36675b287ad01ed708e9190000006d72987a5b945d0ac4e32e5404ad4ebd6e9f858057d616dd803bb622b9d3c7", 0x6a}], 0x2, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x210}, {0x0, 0x0, &(0x7f0000009440)=[{&(0x7f0000005e40)="bf53938c910432e98c56bc93914f6c9e26ba4a4b554d8df5874a91632f718c193ed0254bdcee3fbc7fb21ade045e18afd5d42b9ba0172d8cf89938b8ed3b66abb6dd02f3c81d57ab4377da2974125b049a3dc89d875990812fd73984ebda821ce791df376ee1f13a9890ac52e71c2c779d8c0a20e5c4fdbec78585245b35048419db3374aa323ae94af04bc88d9ce63f8f0767f63c8cfbcd3319ea17ddac7dcc3f686483bab7f308c89ecdacb2e4625134a3be93acc995a9e106707712a6eafea170ccf352d739161073d586844b9af3bccd5a52cb", 0xd5}, {&(0x7f0000005f40)="41882c0b2f76c792a38ee21201f0470179e5d80e721dd7", 0x17}, {&(0x7f0000005f80)="6f9f04d9f3e173e00021c2614a8c657ba151f440791c30b6b90bd72f275e7445e426a9b429703d747813160f5c5787a30babb1bb322b81f985a6ca884ffec952d3c7effb2b4b74bdee1de7cde6808762b613caa8f61426", 0x57}, {&(0x7f0000006000)="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", 0xff}, {&(0x7f0000006100)="0ae751b97eeea3cd1183a3f494f5494f61c8aa9a76088ecead", 0x19}, {&(0x7f0000006140)="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", 0x1000}, {&(0x7f0000007140)="d9e4ee1184c6b4f0c58cffe485cf5bcd2e326e0d532a4bce4e9bf8a1cae0f2da5cb520524913415633c7749d06ad65184cd5ee57d2b58ea6e6ae178223c38841fc2e6e997a3a00e8457febf0393c46f6c570b8b6746cccb50cb01e922e6e06af", 0x60}, {&(0x7f00000071c0)="b7c25475b2eb31f595ad8267470747565bc61ff24e775853538cc74a6646378f1baa9e43be1ce74def0e1291ecca63d0380027940451a63703791bb7c11ed3b2365feba05c39dac026bd7b9ea1449f9a1f75f9cb2e522399c4435742be85e50079d886fd0f0198a9efe4f4b72276d1a1d8f5a684c2e2f27991cfca3d02c62dc047b51b061c1b4c54a688e3d504302542f591af15eba39ba85e1c98e4c89faad35671b4573f90c9bcf9c8d7c0d31894dbd90c8769d5fcf26951890113cafbce6e2bed4303aa1f39fd3741219607c3a52194b054a138a3d1f25b5c472649887dcf9b6885e780667287f572a66d0da04321961bd43c19092eb34f6213a26609a4df6914b66b5bcb98f5ef87c0ce43d8ab825d93889f381367a0ebf3cc1c64146542b76dd18a83722b800852c56884e53a455a890c5d961086d3472d342db30fb26371b62f4daaba2dcc4d44d4895b711c442e0efa00f283ac670a033fb01ff2a2cb2afeea044f84a0ee65cfbe4a7b271ec538bb9be5b51021909e9252eeee10a73e24f5b9a5d68e01de599f50ff8f88c31ab90846d62a086fad10b249bcdb6584f0b5d8125c0c79b2614785f905ad84b2a47f7b760ce9d149897e14a93030861c35e6d8a74a580f9af27cf432deae4eebafa2ae76d52ebdaa73b8a814762e37d5c563dc7b508e630e920c241dc169efb74a8e924e6189a300f90752440646f28e55a65ccfc501a60812391fbee1d09978b133946085baf7c43ac0cf7a9a2af9f9fdcc71d5dfd2ff8704a79959e4683a02bc156cfb7870328aada3ccdb0764b353d3c0948af5a216fc770d83732af323c768d7de82e5595bd8bffabc4a840c3d1fd4068383acec237842158d6a86b76649fe914af1387ca7d8f47b2c192590b2b6396fd6fe5a029c5d109eb1233fb951e0df3e4c89bef77cc604577457121d623bfa79a5a8a30f05c8956b8b51eb007a00a366aea440ae301276a49fc7b88b92842c7d0579860e817a396d72cccca60128f42b8d5d6a2d4b882bc2473135a5dc0e3265beb493f07a1251fb9b7d19a6537aca5713f267f42a0c6caea408e56113c30dbc42e98ef15260fac1df12171edbce68622ec5a4c1f310599c3a3389dc9f07a39f76970ba4f4f5fc7be266825ed01a8dae20130d82a4f2e261eebfa26de60a9e259a547bdee3ba80204939e8a7a8d4e9ee94d0a4fed1ca4bda2025da349703317d8e4adeb1f251c847bb8a8e5db7c07d688e22bcbf53c46435e1a9cf9b1da8006b62d475aba728e14741959e0acaf710c37b34956a8870a53ed3ded64f6bb452966d993478244814482cfeb2833aa7690874a59a26bb6dd399ab3b71dda2462aa250b3f3c54f1e774663ea42dfaa57bce818eb2e962f1219cbc061badc4e404deae43333f92e29e2cb1346c0be68f6c83aac94df9b602822044558597f2b4330a36970ffe0a68b54f2a8aab56914b84288324fd25f3bdcde0f6a0f439e3b10b44009791eb45be68d4ecf18e2d7c74faa51164cc5c84f67aea4905894ba34967e6a2970a1719136fe067eb029922431983073fcde1edfdcc1d2655080db36fd7b46be59d24b06e4036b9802f673ac4937c5dd1405d5752c1197c256b58856b58cee3d6df5bc47586bfd8fc6120a9ed9be6d66db45a73655cbad2248fa515e9eb7a54d70d6ac66007d28b1fdd2fa17d48c301853f39051e443d093b00af0a20eadec8b2191bd9ffd82600332f3d726a0d7749489309b9d4499a460887af495e3c693e772edcaf440b1caefff1a0cbc2e7e9974a32ab0bf32815622256423f962706ee24fa3e464f693ae553058d47fcfa9de47a91f2ff31d30f3b9603647ee41354701b95e54da744951db36b645c6303b429d74a66a3c87a8d47f04bdbee6fab46806a93d40dba0634a22a9ffe835feed915c9064cb7dfee5a30e63113d5531eddb1a01ed307ed99ea0e57d6e5ba99e5fa90c631bc55b60813d9e21de957b50e9ae5de8b8f9cb71a8f3fe44b485a2e463ad014af099ae2ab95abc3133f9143dff58c1e1ba2861b67615e60bf0a226488d4c75f16fa876b2da9e4e8c316afe48511b7af604e6e1192bfe5a220dc2b01f763c0f48e0e5820333630ad3cd1080270b3a480934d8c37f8bda3afe9245eca6a742c77cdd763a997e84a9c54f85c10ec4ec33a81c4ff9d47bad55d5a89ecb636ae5137d755f51378f3eeac60efa1aaa72fa923b6e6e4d6a6393ddfb40e09fab294e3330508e67f4400ab296120485131a2075d16ed4941e53bc1b40c226b5af3561fce5459d68fea4a8a27b282a2b65a256025b710b56d1f08d4ec4cd26f597ba202aed61290d5de909b0281baa6c5edf69222b1777abe9ae505680f9a6e425a2fffa23b107607a16384c92fee81b214e8d1ea2bc82d0ad30370ae6c3582aac6e72549f0099052388dc6566e626a0a18e4ba6473d758c7a1e72a045ffdeb3350d2e2f7fcc7912f2b1ee540faa64773c0eb4aa0404283ded01c22a1ddd6cea3e9472158db06a2d8e2cad223450f0e4a44bf4b39e284376b8c230827bc066594e3fdd3f27386d333ca40f5e60c54bad7850f606a53a155dd4989370dd9e359bf21e0683c2d60bb2e70fc41b58f0d6c4663e10c120fa45ce18be2f0acca3cf3203ad8ec4a0812e07157576e18064bc88261d18b0a0caa994fcacfad9fa4fa8fad544e9ff218b642886c4a9ed840cbb672adfbcd989413c9e56aec43f666de2daa8a07ddec99554ff54bd2e55143fe0a0998ea8a837638ca8c4c438e24c7a34e709b3ab1e826e3980b5503f9b1c23198a1787887442d07f73a4c46d59d4c28fc5004b9aaec20d98d60db7bc937fda7b2e9ce36b17e77898eabae6af3309954d48dbea0fff9a9eb252f748bef45e16f2aae9975653cfb61221a4a313b813d7773871f0c1e622469ff5505711bcb3e6bfaeab69b9d3430d1a875f3bfe316b23756b24b55f3ee78abc189038a2673eee1f5ca62d670fb89a998a3ec249c3ae9ddd7c6ba8068d9e9735df4c9d68f5595264def7f0e037e0ef7a0283c3cb4b8a1f2f1ff30b319526ff1ce1243a96c1e7f56a526cd0d6256d8fd9cf8c1aa2a52e65ab67907912ec2a17a830de61615b526af2f5f5c8164e4c9e29735210d96e183af58fd6fa8a8eedd5cc8b4d6c66b40b77a6998a5fb507908ec50a70429e04684218b04537b276d56bdddd5cad7496757e2eeda5696ec5c539b982855e0e3d8d25bfa0d19bde8ec8efd91200f3334232f2b06e976908b2bb1c6e5f832e53a4b8b6409e185cecf65469bc35aa80097a9f3a7718c7bc97092498d31914c3f856bc9299f4bcda9939a0bd200d384e900edbcf9bb279d85f64430fc8aa195362bf45abd85ef01842f5c023c828b7ebe47e139f8181c8605ba4b6e10eeea17d1fe4b5bfacb31dd42f07704d23b7a692212c10d5cca870ea12d6d03b5cf079b7ab74601c905c71725498fb7942c0df5035fa96042911a5a03a33e76fe5c1ef0e6b2efe229df6a2848db6d07aa63fe8c8f25ad3d4c31badeeab2b599769c83747466104b3717cdd735fd692f4b74ccf1a30231024a9438f01113bb7110a348c21edda035758d68e2248375a1a380e3fb3b3227d6dc6582e794415f155989dd639d57fbc66dab92242888a20f49d24b0c2ca6fc7d2415826a1d02ec7d4dc60f918dadd3c2eff7864616b5917bc6ee1d1d157783137c136d827f181b138a8daf3e88199a32918769c89d8fa03f561bff2d848c0d63755c2f5476c12acd3446ccccaa4f7558ad7f3728a477eeb55d75f46b239d2ca746e571cd7a773158ad483f2a5c38d4f8541f15dd029f9608c53ed281c1fea627f793789d9820c33950480822814e498738095b9ac2ed8ca1d4e325e5703c480630094e683bb6da54a7d2902b4137c7902f4b727de84d12a75788d03cd092e576e06dd4cb398cc666bc4436672bf5e88bb8b39bca1ee3c536042e895ed7c4044f64c4d9fa47194d5848d8a1f1922cb5d72fd9c53b90831eabee0e50a3deee0f663ff6419d7491819e6ff0d664ec733b1e0828690d817a69aa5b1390e6dae4f5b6b1ca5e1d2273092d03ef340df0ee49df0d892d1b6b6ba718b4ba9ce272ab38c5497afe0a43c93177255e4ee457c017717d66d1ee13dc17c6909eeedd5454431cda39eaf09936b16bf6feb223f09f66564692b31b610483035970dd182b39f5dea38bbcabd356c0828376d418adc64953bde6a50cccf432ffbbdbb6c67a727831af549f61551e4bad80cf0b07d3cb9842d161e68168a2cbbc80223bb24e0235246aa64a139b5540c8765f245af42694be8ca7850a04c9446a92ca3949c6c5663b2cc31daf7d5d6ac392231f7011c7b62e1edefd22d5a410f7bc376521173f5a0218eaa8bfee561c85487182d509ff29467dfdcd878aedc0dd032cf289771d7575b231288a114cfb8a4d93e5afb48b2a6b442aac8290a814acbdf7ea7f3028c516349060b16cca810092821e3a3a6e619660dbaf2682f5d87b49606a7b8b544d3b96ffc0fef10049658c90206c7b28173314507001a62ab2885a040bc79b73a2d269a42532337c281d9108bf5521c57c87661d444a2b738626ae82a458a4bb29bebfed3b1bddf7b1774678a86115ffcb25b0d67d33d943c3a923853a3ea50062ef38533f51089a0b7904cf4c97fb230a993370835ca3216e160758d0f6499a4e8c41f5351d3ad7f294a2aafcca88005c9e34786de09cf9ff3fb6c8089fac69dde6376d4728d9b008c8ca5c62a668eedf894d8b5890fcf10d641e28be6367ef6619a452c9071451547d2149841e8f6fa93e395e0b476de6830fa8d6f2cd73c8ca8f302e24e39bee006d855fe98cabf60fe4e009cc01447b766f1ee335fd1839d4a18ca27923b80484387c2fd546eeb6724563fffd52795aba94891d870b5160eed8fd727da274bf57b6779e020cb5e552b05b86cf809dda84dcc82deb32005a8ab602541798135cfabb84ed670c28bc3c971591cb5ee7f5be42062555fcb5591c955fabd7067a9aafca97e5a92ace0b56a981fb6e90558bad54f9e1d777d1f0f1ae14e02c66a363b3f18ceb618ebc82fe0c62e70202117dc7ae706971773d0031fbe2d3e9c2fed8a7800eb1cfec5b44bcaf581deeafdba56c98eb061eb0b8ae033a3f979ee3e63dc973c34273a289fcade2b1295cddc058bbf7476a935ae3e59ac5f1570d7894c8aa1522b847148539e6e96e2d40fa97bcd5cca4ea8100cbf5f818df98b9ba675100bee091b83fec4170429f5a29f40178e187556ea94c64643c24868c8a1e9f64d508386ecd4b967bcc230399f51e4a996c05ae620d42358afb8740cc482c5b2edb276ee658159061e0fb91a17a9a8debd8341bef68f25065f7c396e680cc6f315b4ae23691c124dc8c30f5dfad8d312d2309cea3bd44ae70ddc05da73da21c8d993e5db936f94d4e7867bb693a47ea299a527431341649e641ade9adf2eff9c2e50e2718da87670835e2d26007c306c281cb0538f064fcce23e4f2877ee749d71e7158379e09d3b33736bac2e432055443c0dca438cd4cd888efe7f64697a5c2fd6e9234252b5b3083df4e6f379a72840850dd2b57f37e53101e56a5562aaa9085a0190790f9ef9b7f45942839a6ab64c52ee79ef5202f425b24a568513e4565f602d0e98d28ac1d92758281c3e7f512648ddf3b2c3104610afc51288d90fc4af6e16597fea948357feb911cdd8c97c18dfa0a94d3605f65137d9e0ac532af12145453e13657b8d2ab5bc38438fa2719d5d4687941e32203b589a36382223", 0x1000}, {&(0x7f0000008440)="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", 0x1000}], 0x9, &(0x7f0000000500)=[@iv={0x78, 0x117, 0x2, 0x62, "65fa16afb5a6929a223255dd2079bdbf698baaf304e4f844ac734eda8806e8bc2d4cfa1dfb7a2c7b80ed6ab80a969c30d3daabbf4f721d84da2d86f0c121e4325b4d85efe36b923a881ccbba8ae81fca512e5fe258871f59f3982ea57c8c947b45e8"}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x90, 0x20000080}], 0x7, 0x10000) sendto$inet(r4, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x8001, 0x9, 0x7f, 0x40, 0x9, 0x9, 0x4, 0xa, 0x7d, 0x8, 0x5, 0x3, 0x20000000002}, {0x7fffffff, 0xfff6, 0x9, 0x10, 0x9, 0xf7, 0x5, 0x9, 0x7, 0x9, 0x8, 0x3, 0x1}, {0x92f, 0xfffd, 0x0, 0xb, 0x3, 0xd, 0x0, 0x2, 0xd1, 0xc0, 0x1, 0xf, 0x87}], 0x10}) setrlimit(0x32105a4f79b88146, &(0x7f00000000c0)={0x8, 0xfffffffffffeffff}) kernel console output (not intermixed with test programs): latform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input89 [ 1859.586741][T16837] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1859.627409][T16837] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1859.705768][T16837] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1859.954608][T16837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.149550][T16837] usb 4-1: Product: syz [ 1860.158371][T16837] usb 4-1: Manufacturer: syz [ 1860.169854][T16837] usb 4-1: SerialNumber: syz [ 1860.259207][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1860.267536][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1860.276256][T11396] usb 6-1: USB disconnect, device number 19 [ 1861.074896][T25892] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1861.334824][T25892] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1861.335148][T25912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1861.688668][T16837] usb 4-1: Incompatible driver and firmware versions [ 1861.725061][T16837] usb 4-1: USB disconnect, device number 29 [ 1862.805190][T25931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5265'. [ 1862.941160][T25933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5266'. [ 1863.727562][T25945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5267'. [ 1864.608999][T25953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5273'. [ 1864.618021][T25953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5273'. [ 1864.631844][T25953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5273'. [ 1864.641025][T25953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5273'. [ 1864.746224][T16837] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1864.967207][T16837] usb 4-1: Using ep0 maxpacket: 8 [ 1865.404499][T16837] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1865.412978][T16837] usb 4-1: config 179 has no interface number 0 [ 1865.451641][T16837] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1865.490892][T16837] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1865.526672][T16837] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1865.554614][T16837] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1865.581709][T16837] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1865.601065][T16837] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1865.610759][T16837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.726411][T25950] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1866.053714][T11396] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input90 [ 1866.126954][T16837] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1866.238159][ T5732] usb 4-1: USB disconnect, device number 30 [ 1866.238190][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1866.252656][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1866.296210][T16837] usb 6-1: device descriptor read/64, error -71 [ 1866.546132][T16837] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1866.954949][T16837] usb 6-1: device descriptor read/64, error -71 [ 1867.151057][T16837] usb usb6-port1: attempt power cycle [ 1867.326250][T25983] FAULT_INJECTION: forcing a failure. [ 1867.326250][T25983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1867.339821][T25983] CPU: 0 UID: 0 PID: 25983 Comm: syz.3.5282 Tainted: G L syzkaller #0 PREEMPT(full) [ 1867.339849][T25983] Tainted: [L]=SOFTLOCKUP [ 1867.339857][T25983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1867.339867][T25983] Call Trace: [ 1867.339874][T25983] [ 1867.339880][T25983] dump_stack_lvl+0x100/0x190 [ 1867.339906][T25983] should_fail_ex.cold+0x5/0xa [ 1867.339929][T25983] _copy_from_user+0x2e/0xd0 [ 1867.339952][T25983] kstrtouint_from_user+0xd6/0x1d0 [ 1867.339979][T25983] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1867.340004][T25983] ? __lock_acquire+0x49f/0x1a40 [ 1867.340036][T25983] proc_fail_nth_write+0x83/0x220 [ 1867.340062][T25983] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1867.340093][T25983] vfs_write+0x2aa/0x1050 [ 1867.340118][T25983] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1867.340144][T25983] ? __pfx_vfs_write+0x10/0x10 [ 1867.340167][T25983] ? __fget_files+0x215/0x3d0 [ 1867.340199][T25983] ? __fget_files+0x21f/0x3d0 [ 1867.340232][T25983] ksys_write+0x12a/0x250 [ 1867.340256][T25983] ? __pfx_ksys_write+0x10/0x10 [ 1867.340278][T25983] ? v4l2_ioctl+0x1c5/0x250 [ 1867.340304][T25983] do_syscall_64+0x115/0x870 [ 1867.340329][T25983] ? clear_bhb_loop+0x40/0x90 [ 1867.340350][T25983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1867.340368][T25983] RIP: 0033:0x7feaba95e68e [ 1867.340384][T25983] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1867.340400][T25983] RSP: 002b:00007feabb86dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1867.340419][T25983] RAX: ffffffffffffffda RBX: 00007feabb86e6c0 RCX: 00007feaba95e68e [ 1867.340430][T25983] RDX: 0000000000000001 RSI: 00007feabb86e0a0 RDI: 0000000000000004 [ 1867.340440][T25983] RBP: 00007feabb86e090 R08: 0000000000000000 R09: 0000000000000000 [ 1867.340450][T25983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1867.340460][T25983] R13: 00007feabac26038 R14: 00007feabac25fa0 R15: 00007ffe06647318 [ 1867.340486][T25983] [ 1868.126248][T16837] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1868.193089][T16837] usb 6-1: device descriptor read/8, error -71 [ 1868.446145][T16837] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1868.511672][T16837] usb 6-1: device descriptor read/8, error -71 [ 1868.597592][T25996] wireguard0: entered promiscuous mode [ 1868.627616][T16837] usb usb6-port1: unable to enumerate USB device [ 1868.652284][T25996] wireguard0: entered allmulticast mode [ 1869.797920][T26018] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5292'. [ 1873.434421][T16489] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1873.891427][T16489] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1873.910075][T16489] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1873.921976][T26059] lo speed is unknown, defaulting to 1000 [ 1873.937576][T16489] usb 2-1: Product: syz [ 1873.957511][T16489] usb 2-1: Manufacturer: syz [ 1873.975654][T16489] usb 2-1: SerialNumber: syz [ 1874.328832][T16489] usb 2-1: config 0 descriptor?? [ 1876.465872][T26063] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1876.503376][T16489] usb 2-1: non-Atmel transceiver xxxx008d [ 1876.978479][T26046] input: syz0 as /devices/virtual/input/input91 [ 1877.306353][T16489] usb 2-1: Firmware version (0.0) predates our first public release. [ 1877.419102][T16489] usb 2-1: Please update to version 0.2 or newer [ 1877.447956][T16489] usb 2-1: atusb_probe: initialization failed, error = -19 [ 1877.794334][T16489] usb 2-1: USB disconnect, device number 40 [ 1878.970069][T26114] cgroup: Unknown subsys name 'cpuset' [ 1880.302120][T26130] rdma_rxe: rxe_newlink: failed to add lo [ 1880.336378][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1880.367070][T26130] netlink: 'syz.2.5326': attribute type 13 has an invalid length. [ 1880.527376][T26132] binder: 26129:26132 unknown command 0 [ 1880.661525][T26132] binder: 26129:26132 ioctl c0306201 2000000001c0 returned -22 [ 1880.712021][T26130] gretap0: refused to change device tx_queue_len [ 1880.793166][T26130] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1880.989863][ T805] lo speed is unknown, defaulting to 1000 [ 1881.086635][ T805] syz2: Port: 1 Link ACTIVE [ 1881.270724][T26151] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1881.280441][T26151] block device autoloading is deprecated and will be removed. [ 1881.425139][T26156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5333'. [ 1881.886314][ T5703] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1881.911711][T26163] xt_hashlimit: size too large, truncated to 1048576 [ 1882.260727][T16489] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1882.369633][ T5703] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1882.386324][ T5703] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1882.417393][ T5703] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1882.437739][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.458739][ T5703] usb 6-1: Product: syz [ 1882.469669][ T5703] usb 6-1: Manufacturer: syz [ 1882.486208][ T5703] usb 6-1: SerialNumber: syz [ 1882.550123][T16489] usb 4-1: Using ep0 maxpacket: 8 [ 1882.561882][T16489] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1882.591227][T16489] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 153, changing to 7 [ 1882.612939][T16489] usb 4-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 1882.634148][T16489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.652402][T16489] usb 4-1: Product: syz [ 1882.661507][T16489] usb 4-1: Manufacturer: syz [ 1882.818242][T26183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5342'. [ 1882.827387][T26183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5342'. [ 1882.846423][T26183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5342'. [ 1882.856388][T26183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5342'. [ 1882.978848][T16489] usb 4-1: SerialNumber: syz [ 1883.082326][ T5703] usb 6-1: 0:1 : does not exist [ 1883.638839][ T5703] usb 6-1: BAAD GENERIC IO: no channels? [ 1884.073478][ T5703] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1884.118705][ T5703] usb 6-1: USB disconnect, device number 24 [ 1884.573246][T16489] usb 4-1: 1:1 : no UAC_FORMAT_TYPE desc [ 1884.579504][T23649] udevd[23649]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1884.606638][T16489] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1884.724873][T26192] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5347'. [ 1884.823222][T16489] usb 4-1: USB disconnect, device number 31 [ 1884.872729][T24406] udevd[24406]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1886.266223][T26234] FAULT_INJECTION: forcing a failure. [ 1886.266223][T26234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1886.560871][T26234] CPU: 1 UID: 0 PID: 26234 Comm: syz.0.5358 Tainted: G L syzkaller #0 PREEMPT(full) [ 1886.560891][T26234] Tainted: [L]=SOFTLOCKUP [ 1886.560895][T26234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1886.560902][T26234] Call Trace: [ 1886.560906][T26234] [ 1886.560910][T26234] dump_stack_lvl+0x100/0x190 [ 1886.560928][T26234] should_fail_ex.cold+0x5/0xa [ 1886.560942][T26234] _copy_from_user+0x2e/0xd0 [ 1886.560957][T26234] iommufd_fops_ioctl+0x300/0x520 [ 1886.560969][T26234] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1886.560982][T26234] ? __fget_files+0x215/0x3d0 [ 1886.560999][T26234] ? hook_file_ioctl_common+0x140/0x440 [ 1886.561014][T26234] ? selinux_file_ioctl+0x13b/0x290 [ 1886.561029][T26234] ? selinux_file_ioctl+0xb6/0x290 [ 1886.561045][T26234] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1886.561056][T26234] __x64_sys_ioctl+0x18e/0x210 [ 1886.561072][T26234] do_syscall_64+0x115/0x870 [ 1886.561092][T26234] ? clear_bhb_loop+0x40/0x90 [ 1886.561113][T26234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.561130][T26234] RIP: 0033:0x7fd33299de59 [ 1886.561142][T26234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1886.561153][T26234] RSP: 002b:00007fd33378a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1886.561165][T26234] RAX: ffffffffffffffda RBX: 00007fd332c25fa0 RCX: 00007fd33299de59 [ 1886.561172][T26234] RDX: 00002000000001c0 RSI: 0000000000003b88 RDI: 0000000000000003 [ 1886.561179][T26234] RBP: 00007fd33378a090 R08: 0000000000000000 R09: 0000000000000000 [ 1886.561186][T26234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1886.561197][T26234] R13: 00007fd332c26038 R14: 00007fd332c25fa0 R15: 00007ffea28fbf68 [ 1886.561211][T26234] [ 1886.561932][T26234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1886.657775][ T29] audit: type=1326 audit(1783766527.727:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26230 comm="syz.3.5357" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaba99de59 code=0x7ffc0000 [ 1886.946901][ T29] audit: type=1326 audit(1783766527.727:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26230 comm="syz.3.5357" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaba99de59 code=0x7ffc0000 [ 1886.989273][ T29] audit: type=1326 audit(1783766528.077:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26230 comm="syz.3.5357" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7feaba99de59 code=0x7ffc0000 [ 1887.186265][ T29] audit: type=1326 audit(1783766528.077:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26230 comm="syz.3.5357" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaba99de59 code=0x7ffc0000 [ 1887.269772][ T29] audit: type=1326 audit(1783766528.077:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26230 comm="syz.3.5357" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaba99de59 code=0x7ffc0000 [ 1887.355958][ T29] audit: type=1326 audit(1783766528.247:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26230 comm="syz.3.5357" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feaba99de59 code=0x7ffc0000 [ 1887.413454][ T29] audit: type=1326 audit(1783766528.247:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26230 comm="syz.3.5357" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaba99de59 code=0x7ffc0000 [ 1887.470140][ T29] audit: type=1326 audit(1783766528.247:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26230 comm="syz.3.5357" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaba99de59 code=0x7ffc0000 [ 1887.525044][ T29] audit: type=1326 audit(1783766528.247:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26230 comm="syz.3.5357" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaba99de59 code=0x7ffc0000 [ 1887.580301][ T29] audit: type=1326 audit(1783766528.247:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26230 comm="syz.3.5357" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feaba99de59 code=0x7ffc0000 [ 1887.607047][ T805] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1887.745409][T26257] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5359'. [ 1887.766818][ T805] usb 6-1: Using ep0 maxpacket: 16 [ 1887.785474][ T805] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1887.794521][ T805] usb 6-1: config 0 has no interface number 0 [ 1887.855804][ T805] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1887.919073][ T805] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1887.934020][ T805] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1887.952363][ T805] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1887.961820][ T805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.974549][ T805] usb 6-1: Product: syz [ 1887.981977][ T805] usb 6-1: Manufacturer: syz [ 1887.987696][ T805] usb 6-1: SerialNumber: syz [ 1888.056349][T11396] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1888.073672][ T805] usb 6-1: config 0 descriptor?? [ 1888.084289][T26244] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1888.095071][T26244] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1888.216220][T11396] usb 1-1: Using ep0 maxpacket: 16 [ 1888.224653][T11396] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1888.234902][T11396] usb 1-1: config 0 has no interface number 0 [ 1888.241898][T11396] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1888.255053][T11396] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1888.273767][T11396] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1888.291072][T11396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.303965][T11396] usb 1-1: Product: syz [ 1888.314497][T11396] usb 1-1: Manufacturer: syz [ 1888.321886][T11396] usb 1-1: SerialNumber: syz [ 1888.324043][T26244] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1888.424875][T11396] usb 1-1: config 0 descriptor?? [ 1888.434149][T26244] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1888.459166][T11396] cypress_m8 1-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1888.586722][T11396] nokiaca42v2 ttyUSB0: probe with driver nokiaca42v2 failed with error -22 [ 1888.712786][T26268] loop5: detected capacity change from 0 to 4095 [ 1889.567575][T26279] FAULT_INJECTION: forcing a failure. [ 1889.567575][T26279] name failslab, interval 1, probability 0, space 0, times 0 [ 1889.582257][T26279] CPU: 1 UID: 0 PID: 26279 Comm: syz.3.5371 Tainted: G L syzkaller #0 PREEMPT(full) [ 1889.582287][T26279] Tainted: [L]=SOFTLOCKUP [ 1889.582293][T26279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1889.582303][T26279] Call Trace: [ 1889.582310][T26279] [ 1889.582317][T26279] dump_stack_lvl+0x100/0x190 [ 1889.582346][T26279] should_fail_ex.cold+0x5/0xa [ 1889.582370][T26279] should_failslab+0xc2/0x120 [ 1889.582391][T26279] __kmalloc_cache_noprof+0x91/0x6c0 [ 1889.582419][T26279] ? cls_cgroup_change+0x1aa/0x5e0 [ 1889.582449][T26279] cls_cgroup_change+0x1aa/0x5e0 [ 1889.582477][T26279] ? __pfx_cls_cgroup_change+0x10/0x10 [ 1889.582509][T26279] ? __pfx_cls_cgroup_change+0x10/0x10 [ 1889.582533][T26279] tc_new_tfilter+0x9df/0x24a0 [ 1889.582571][T26279] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1889.582592][T26279] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1889.582640][T26279] ? find_held_lock+0x2b/0x80 [ 1889.582665][T26279] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1889.582685][T26279] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1889.582710][T26279] rtnetlink_rcv_msg+0x95e/0xe90 [ 1889.582731][T26279] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1889.582757][T26279] ? ref_tracker_free+0x37e/0x6c0 [ 1889.582782][T26279] netlink_rcv_skb+0x159/0x420 [ 1889.582806][T26279] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1889.582827][T26279] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1889.582861][T26279] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1889.582889][T26279] netlink_unicast+0x585/0x850 [ 1889.582917][T26279] ? __pfx_netlink_unicast+0x10/0x10 [ 1889.582948][T26279] netlink_sendmsg+0x8b0/0xda0 [ 1889.582976][T26279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1889.582999][T26279] ? __might_fault+0x20/0x140 [ 1889.583035][T26279] ____sys_sendmsg+0xa4d/0xbe0 [ 1889.583056][T26279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1889.583082][T26279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1889.583117][T26279] ___sys_sendmsg+0x190/0x1e0 [ 1889.583143][T26279] ? __pfx____sys_sendmsg+0x10/0x10 [ 1889.583164][T26279] ? __lock_acquire+0x49f/0x1a40 [ 1889.583188][T26279] ? get_pid_task+0x106/0x250 [ 1889.583241][T26279] __sys_sendmsg+0x160/0x210 [ 1889.583260][T26279] ? __pfx___sys_sendmsg+0x10/0x10 [ 1889.583291][T26279] do_syscall_64+0x115/0x870 [ 1889.583330][T26279] ? clear_bhb_loop+0x40/0x90 [ 1889.583359][T26279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1889.583377][T26279] RIP: 0033:0x7feaba99de59 [ 1889.583393][T26279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1889.583409][T26279] RSP: 002b:00007feabb86e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1889.583428][T26279] RAX: ffffffffffffffda RBX: 00007feabac25fa0 RCX: 00007feaba99de59 [ 1889.583440][T26279] RDX: 0000000000040010 RSI: 0000200000006040 RDI: 0000000000000004 [ 1889.583451][T26279] RBP: 00007feabb86e090 R08: 0000000000000000 R09: 0000000000000000 [ 1889.583461][T26279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1889.583472][T26279] R13: 00007feabac26038 R14: 00007feabac25fa0 R15: 00007ffe06647318 [ 1889.583498][T26279] [ 1889.941258][ T805] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 1889.953934][ T805] usb 6-1: USB disconnect, device number 25 [ 1890.668112][ T5703] usb 1-1: USB disconnect, device number 23 [ 1890.677815][ T5703] cypress_m8 1-1:0.35: device disconnected [ 1890.728112][T26292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5376'. [ 1894.127147][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1894.127172][ T29] audit: type=1400 audit(1783766535.347:3311): avc: denied { mount } for pid=26326 comm="syz.1.5387" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1894.485886][ T29] audit: type=1400 audit(1783766535.347:3312): avc: denied { mounton } for pid=26326 comm="syz.1.5387" path="/500/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1894.895455][T26335] FAULT_INJECTION: forcing a failure. [ 1894.895455][T26335] name failslab, interval 1, probability 0, space 0, times 0 [ 1894.908921][T26335] CPU: 1 UID: 0 PID: 26335 Comm: syz.2.5389 Tainted: G L syzkaller #0 PREEMPT(full) [ 1894.908950][T26335] Tainted: [L]=SOFTLOCKUP [ 1894.908956][T26335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1894.908967][T26335] Call Trace: [ 1894.908974][T26335] [ 1894.908982][T26335] dump_stack_lvl+0x100/0x190 [ 1894.909015][T26335] should_fail_ex.cold+0x5/0xa [ 1894.909038][T26335] should_failslab+0xc2/0x120 [ 1894.909059][T26335] __kmalloc_cache_noprof+0x91/0x6c0 [ 1894.909087][T26335] ? sctp_add_bind_addr+0xae/0x3e0 [ 1894.909118][T26335] sctp_add_bind_addr+0xae/0x3e0 [ 1894.909147][T26335] sctp_copy_local_addr_list+0x349/0x550 [ 1894.909170][T26335] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1894.909192][T26335] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 1894.909214][T26335] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1894.909236][T26335] sctp_bind_addr_copy+0xe0/0x530 [ 1894.909269][T26335] sctp_connect_new_asoc+0x1c9/0x770 [ 1894.909293][T26335] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1894.909326][T26335] sctp_sendmsg+0x1743/0x22e0 [ 1894.909355][T26335] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1894.909382][T26335] ? __pfx_sock_has_perm+0x10/0x10 [ 1894.909417][T26335] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1894.909440][T26335] inet_sendmsg+0x11c/0x140 [ 1894.909459][T26335] ____sys_sendmsg+0x9c9/0xbe0 [ 1894.909480][T26335] ? __pfx_inet_sendmsg+0x10/0x10 [ 1894.909500][T26335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1894.909526][T26335] ? __pfx__kstrtoull+0x10/0x10 [ 1894.909557][T26335] ___sys_sendmsg+0x190/0x1e0 [ 1894.909582][T26335] ? __pfx____sys_sendmsg+0x10/0x10 [ 1894.909617][T26335] ? find_held_lock+0x2b/0x80 [ 1894.909659][T26335] __sys_sendmmsg+0x20c/0x440 [ 1894.909681][T26335] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1894.909698][T26335] ? ksys_write+0x190/0x250 [ 1894.909742][T26335] ? fput+0x79/0x100 [ 1894.909760][T26335] ? ksys_write+0x1ac/0x250 [ 1894.909784][T26335] ? __pfx_ksys_write+0x10/0x10 [ 1894.909812][T26335] __x64_sys_sendmmsg+0x9c/0x100 [ 1894.909830][T26335] ? lockdep_hardirqs_on+0x78/0x100 [ 1894.909855][T26335] do_syscall_64+0x115/0x870 [ 1894.909880][T26335] ? clear_bhb_loop+0x40/0x90 [ 1894.909901][T26335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1894.909923][T26335] RIP: 0033:0x7f9cfb79de59 [ 1894.909938][T26335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1894.909955][T26335] RSP: 002b:00007f9cfc5a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1894.909974][T26335] RAX: ffffffffffffffda RBX: 00007f9cfba25fa0 RCX: 00007f9cfb79de59 [ 1894.909985][T26335] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 1894.909996][T26335] RBP: 00007f9cfc5a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1894.910012][T26335] R10: 0000000004008040 R11: 0000000000000246 R12: 0000000000000001 [ 1894.910023][T26335] R13: 00007f9cfba26038 R14: 00007f9cfba25fa0 R15: 00007fff963d7bf8 [ 1894.910049][T26335] [ 1895.036535][T26325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5386'. [ 1895.256779][T26337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5390'. [ 1895.310237][ T29] audit: type=1400 audit(1783766536.587:3313): avc: denied { unmount } for pid=16854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1895.334295][T26342] nbd0: detected capacity change from 0 to 549755813951 [ 1895.348682][T13810] block nbd0: Receive control failed (result -104) [ 1895.492935][T26344] lo speed is unknown, defaulting to 1000 [ 1895.736163][ T5703] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1895.814733][T26348] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1895.832081][ T805] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1895.928738][ T5703] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1895.948493][ T5703] usb 4-1: config 1 has no interface number 0 [ 1895.967954][ T5703] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1895.990614][ T805] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1895.994029][ T5703] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1896.027687][T13314] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1896.030240][ T805] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1896.047807][ T805] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1896.057720][ T805] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1896.058000][ T5703] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1896.071224][ T805] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1896.100612][ T805] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1896.102731][ T5703] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1896.116236][ T805] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1896.133687][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.134162][ T805] usb 2-1: Product: syz [ 1896.148466][ T5703] usb 4-1: Product: syz [ 1896.153593][ T805] usb 2-1: Manufacturer: syz [ 1896.171141][ T5703] usb 4-1: Manufacturer: syz [ 1896.182203][ T5703] usb 4-1: SerialNumber: syz [ 1896.184227][ T805] cdc_wdm 2-1:1.0: skipping garbage [ 1896.195228][ T805] cdc_wdm 2-1:1.0: skipping garbage [ 1896.207775][T26352] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1896.220013][ T805] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1896.227781][ T805] cdc_wdm 2-1:1.0: Unknown control protocol [ 1896.246111][T13314] usb 6-1: Using ep0 maxpacket: 8 [ 1896.253310][T13314] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1896.261821][T13314] usb 6-1: config 179 has no interface number 0 [ 1896.268616][T13314] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1896.280495][T13314] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1896.306199][T13314] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1896.351949][T13314] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1896.375014][T13314] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1896.406263][T16489] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1896.417910][T26352] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1896.430389][T13314] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1896.447690][T13314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.476360][T26363] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1896.596224][T16489] usb 1-1: Using ep0 maxpacket: 16 [ 1896.603905][T16489] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 1896.604265][ T5711] usb 2-1: USB disconnect, device number 41 [ 1896.616250][T16489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1896.634470][ T5703] usb 4-1: Incompatible driver and firmware versions [ 1896.645864][T16489] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 1896.667884][ T5703] usb 4-1: USB disconnect, device number 32 [ 1896.681109][T16489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1896.705622][T16489] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1896.740217][T16489] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1896.764131][T16489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.790018][T16489] usb 1-1: Product: syz [ 1896.795159][T16489] usb 1-1: Manufacturer: syz [ 1896.800319][T16489] usb 1-1: SerialNumber: syz [ 1896.813384][T16489] usb 1-1: config 0 descriptor?? [ 1896.825503][T16489] port100 1-1:0.0: NFC: Could not get supported command types [ 1897.015615][T26372] xt_hashlimit: size too large, truncated to 1048576 [ 1897.057831][T16489] usb 6-1: USB disconnect, device number 26 [ 1897.063802][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1897.063848][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1897.205225][T13810] Bluetooth: hci4: unexpected event for opcode 0x2024 [ 1897.260768][ T5703] usb 1-1: USB disconnect, device number 24 [ 1897.318724][ T5711] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1897.489294][ T5711] usb 3-1: Using ep0 maxpacket: 8 [ 1897.665766][ T5711] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1897.695011][ T5711] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 153, changing to 7 [ 1897.726570][ T5711] usb 3-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 1897.767996][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.851524][ T5711] usb 3-1: Product: syz [ 1897.879392][ T5711] usb 3-1: Manufacturer: syz [ 1897.916445][ T5711] usb 3-1: SerialNumber: syz [ 1898.276322][T26392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5406'. [ 1898.625954][ T5711] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc [ 1898.666648][T13314] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1898.682387][ T5711] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1899.011558][ T5711] usb 3-1: USB disconnect, device number 45 [ 1899.336633][T13314] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1899.371770][T13314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.404060][T13314] usb 4-1: Product: syz [ 1899.419953][T13314] usb 4-1: Manufacturer: syz [ 1899.434420][T13314] usb 4-1: SerialNumber: syz [ 1899.468234][T13314] usb 4-1: config 0 descriptor?? [ 1899.498825][T13314] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1899.846457][T13314] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1899.896899][T13314] sq905c 4-1:0.0: Get version command failed [ 1899.911238][T13314] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 1899.940379][T13314] usb 4-1: USB disconnect, device number 33 [ 1900.187614][ T29] audit: type=1800 audit(1783766541.467:3314): pid=26412 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.5411" name="SYSV00000000" dev="tmpfs" ino=13 res=0 errno=0 [ 1900.658101][T26419] FAULT_INJECTION: forcing a failure. [ 1900.658101][T26419] name failslab, interval 1, probability 0, space 0, times 0 [ 1900.671787][T26419] CPU: 1 UID: 0 PID: 26419 Comm: syz.2.5414 Tainted: G L syzkaller #0 PREEMPT(full) [ 1900.671818][T26419] Tainted: [L]=SOFTLOCKUP [ 1900.671824][T26419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1900.671835][T26419] Call Trace: [ 1900.671842][T26419] [ 1900.671849][T26419] dump_stack_lvl+0x100/0x190 [ 1900.671877][T26419] should_fail_ex.cold+0x5/0xa [ 1900.671901][T26419] should_failslab+0xc2/0x120 [ 1900.671923][T26419] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1900.671942][T26419] ? __lock_acquire+0x49f/0x1a40 [ 1900.671962][T26419] ? __d_alloc+0x35/0xa50 [ 1900.671986][T26419] __d_alloc+0x35/0xa50 [ 1900.672003][T26419] ? __lock_acquire+0x49f/0x1a40 [ 1900.672032][T26419] d_alloc_parallel+0x105/0x14b0 [ 1900.672065][T26419] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1900.672089][T26419] ? __d_lookup+0x25c/0x4a0 [ 1900.672117][T26419] ? __d_lookup+0x266/0x4a0 [ 1900.672147][T26419] path_openat+0x271c/0x4280 [ 1900.672175][T26419] ? __pfx_path_openat+0x10/0x10 [ 1900.672200][T26419] do_file_open+0x20e/0x430 [ 1900.672219][T26419] ? __pfx_do_file_open+0x10/0x10 [ 1900.672245][T26419] ? __pfx_kfree_link+0x10/0x10 [ 1900.672278][T26419] ? alloc_fd+0x471/0x7a0 [ 1900.672298][T26419] ? do_getname+0x191/0x390 [ 1900.672321][T26419] do_sys_openat2+0x10f/0x1e0 [ 1900.672342][T26419] ? __pfx_do_sys_openat2+0x10/0x10 [ 1900.672363][T26419] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1900.672393][T26419] ? __fget_files+0x21f/0x3d0 [ 1900.672426][T26419] __x64_sys_openat+0x12d/0x210 [ 1900.672446][T26419] ? __pfx___x64_sys_openat+0x10/0x10 [ 1900.672464][T26419] ? ksys_write+0x1ac/0x250 [ 1900.672493][T26419] do_syscall_64+0x115/0x870 [ 1900.672517][T26419] ? clear_bhb_loop+0x40/0x90 [ 1900.672537][T26419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1900.672554][T26419] RIP: 0033:0x7f9cfb75e68e [ 1900.672569][T26419] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1900.672584][T26419] RSP: 002b:00007f9cfc5a6f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1900.672601][T26419] RAX: ffffffffffffffda RBX: 00007f9cfc5a76c0 RCX: 00007f9cfb75e68e [ 1900.672613][T26419] RDX: 0000000000000000 RSI: 00007f9cfb8335aa RDI: ffffffffffffff9c [ 1900.672623][T26419] RBP: 00007f9cfc5a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1900.672633][T26419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1900.672643][T26419] R13: 00007f9cfba26038 R14: 00007f9cfba25fa0 R15: 00007fff963d7bf8 [ 1900.672668][T26419] [ 1902.240141][T26433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5417'. [ 1903.702892][T13314] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1903.951038][T13314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1904.009110][T13314] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1904.084468][T13314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1904.210868][T13314] usb 3-1: config 0 descriptor?? [ 1904.239508][T13314] pwc: Askey VC010 type 2 USB webcam detected. [ 1904.490057][T26467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5426'. [ 1904.979275][T26448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5423'. [ 1905.421463][T26478] lo speed is unknown, defaulting to 1000 [ 1906.529573][T13314] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1906.544307][T13314] pwc: recv_control_msg error -71 req 02 val 2700 [ 1906.565149][T26487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5432'. [ 1906.574176][T26487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5432'. [ 1906.583381][T26487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5432'. [ 1906.592240][T26487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5432'. [ 1906.620250][T13314] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1906.654708][T13314] pwc: recv_control_msg error -71 req 04 val 1000 [ 1906.673200][T13314] pwc: recv_control_msg error -71 req 04 val 1300 [ 1906.690084][T13314] pwc: recv_control_msg error -71 req 04 val 1400 [ 1906.707455][T13314] pwc: recv_control_msg error -71 req 02 val 2000 [ 1906.734170][T13314] pwc: recv_control_msg error -71 req 02 val 2100 [ 1906.748291][T13314] pwc: recv_control_msg error -71 req 04 val 1500 [ 1906.766191][T13314] pwc: recv_control_msg error -71 req 02 val 2500 [ 1906.786415][T13314] pwc: recv_control_msg error -71 req 02 val 2400 [ 1906.841718][T13314] pwc: recv_control_msg error -71 req 02 val 2600 [ 1906.858470][T13314] pwc: recv_control_msg error -71 req 02 val 2900 [ 1906.873688][T13314] pwc: recv_control_msg error -71 req 02 val 2800 [ 1906.895171][T13314] pwc: recv_control_msg error -71 req 04 val 1100 [ 1906.913283][T13314] pwc: recv_control_msg error -71 req 04 val 1200 [ 1907.212166][T13314] pwc: Registered as video103. [ 1907.255770][T13314] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input92 [ 1907.539935][T13314] usb 3-1: USB disconnect, device number 46 [ 1907.705586][T26504] lo speed is unknown, defaulting to 1000 [ 1909.126631][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1909.506208][T13314] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1909.864573][T13314] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1909.884031][T13314] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1909.908943][T13314] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1909.919091][T26530] cgroup: Unknown subsys name 'cpuset' [ 1909.930606][T13314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.943876][T13314] usb 3-1: Product: syz [ 1909.948636][T13314] usb 3-1: Manufacturer: syz [ 1909.958098][T13314] usb 3-1: SerialNumber: syz [ 1910.008286][ T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1910.197720][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1910.205910][ T24] usb 6-1: config 9 has an invalid interface number: 27 but max is 0 [ 1910.215807][ T24] usb 6-1: config 9 has no interface number 0 [ 1910.223209][ T24] usb 6-1: config 9 interface 27 has no altsetting 0 [ 1910.242950][ T24] usb 6-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=71.fa [ 1910.268811][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.286169][ T24] usb 6-1: Product: syz [ 1910.290682][T13314] usb 3-1: 0:1 : does not exist [ 1910.303757][T13314] usb 3-1: BAAD GENERIC IO: no channels? [ 1910.316961][ T24] usb 6-1: Manufacturer: syz [ 1910.321872][ T24] usb 6-1: SerialNumber: syz [ 1910.367519][T13314] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1910.379074][T13314] usb 3-1: USB disconnect, device number 47 [ 1910.410634][T26349] udevd[26349]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1910.456763][T26551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5444'. [ 1911.667037][T26543] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1911.687407][ T24] qmi_wwan 6-1:9.27: bogus CDC Union: master=0, slave=1 [ 1911.696972][ T24] qmi_wwan 6-1:9.27: probe with driver qmi_wwan failed with error -22 [ 1911.708752][ T24] usb 6-1: USB disconnect, device number 27 [ 1912.333995][T26575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5449'. [ 1914.258302][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.499185][T26609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5456'. [ 1915.267463][T26633] tipc: Started in network mode [ 1915.272422][T26633] tipc: Node identity 080211, cluster identity 4711 [ 1915.279199][T26633] tipc: Enabled bearer , priority 0 [ 1915.326710][T26636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5462'. [ 1915.573366][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1915.595384][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1915.607407][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1915.619439][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1915.633024][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1916.396825][ T24] tipc: Node number set to 134353152 [ 1916.437342][T26646] lo speed is unknown, defaulting to 1000 [ 1917.123168][T13314] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1917.687714][T13810] Bluetooth: hci5: command tx timeout [ 1917.726655][T13314] usb 4-1: Using ep0 maxpacket: 8 [ 1917.792641][T13314] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1917.860912][T13314] usb 4-1: config 0 has no interface number 0 [ 1918.027540][T13314] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1918.051973][T26638] lo speed is unknown, defaulting to 1000 [ 1918.056618][T13314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.085485][T13314] usb 4-1: Product: syz [ 1918.140738][T13314] usb 4-1: Manufacturer: syz [ 1918.150735][T13314] usb 4-1: SerialNumber: syz [ 1918.181424][T13314] usb 4-1: config 0 descriptor?? [ 1918.610547][T13314] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1918.636772][T13314] uvcvideo 4-1:0.31: No valid video chain found. [ 1918.660998][T13314] usb 4-1: USB disconnect, device number 34 [ 1918.768554][T26650] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1919.768375][T13810] Bluetooth: hci5: command tx timeout [ 1919.929020][T26638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1919.948655][T26638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1919.950258][T26638] bridge_slave_0: entered allmulticast mode [ 1919.971830][T26638] bridge_slave_0: entered promiscuous mode [ 1919.991064][T26638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1919.991111][T26638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1919.991200][T26638] bridge_slave_1: entered allmulticast mode [ 1919.992141][T26638] bridge_slave_1: entered promiscuous mode [ 1920.204182][T26638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1920.242509][T26638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1920.253631][T26719] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1920.338153][T26638] team0: Port device team_slave_0 added [ 1920.344129][T26638] team0: Port device team_slave_1 added [ 1920.837656][T26638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1920.867943][T26638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1921.017651][T26638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1921.680113][T26638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1921.687675][T26638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1921.759791][T26638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1921.849423][T13810] Bluetooth: hci5: command tx timeout [ 1921.945919][T26638] hsr_slave_0: entered promiscuous mode [ 1921.965856][T26638] hsr_slave_1: entered promiscuous mode [ 1921.982487][T26638] debugfs: 'hsr0' already exists in 'hsr' [ 1921.994285][T26638] Cannot create hsr debugfs directory [ 1923.648634][T26638] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1924.112013][T13810] Bluetooth: hci5: command tx timeout [ 1924.361998][T26638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1924.408310][T26638] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1924.425994][T26638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1925.181467][T26638] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1925.344851][T26638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1925.488457][T26638] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1925.523908][T26638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1925.584837][ T5703] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1925.724720][T26638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1925.773342][T26638] 8021q: adding VLAN 0 to HW filter on device team0 [ 1925.780637][ T805] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1925.814138][T16271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1925.821313][T16271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1925.829607][T21156] block nbd0: Possible stuck request ffff8880803a0000: control (read@1024,1024B). Runtime 30 seconds [ 1925.847783][ T5703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1925.871783][ T5703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1925.877976][T21156] block nbd0: Possible stuck request ffff8880803a01c0: control (read@2048,1024B). Runtime 30 seconds [ 1925.889027][T26809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5496'. [ 1925.892806][T21156] block nbd0: Possible stuck request ffff8880803a0380: control (read@3072,1024B). Runtime 30 seconds [ 1925.903465][ T5703] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1925.912762][T21156] block nbd0: Possible stuck request ffff8880803a6e40: control (read@0,1024B). Runtime 30 seconds [ 1925.943043][T24690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1925.950228][T24690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1926.071350][ T805] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1926.141242][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.187922][ T805] usb 2-1: Product: syz [ 1926.329019][ T5703] usb 6-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1926.338166][ T5703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.356476][ T5703] usb 6-1: config 0 descriptor?? [ 1926.367226][ T805] usb 2-1: Manufacturer: syz [ 1926.379572][ T805] usb 2-1: SerialNumber: syz [ 1926.399958][ T805] usb 2-1: config 0 descriptor?? [ 1926.626293][T26812] siw: device registration error -23 [ 1926.793953][ T5703] hid_parser_main: 91 callbacks suppressed [ 1926.793972][ T5703] playstation 0003:054C:09CC.0033: unknown main item tag 0x0 [ 1926.812438][ T5703] playstation 0003:054C:09CC.0033: unknown main item tag 0x0 [ 1926.820108][ T5703] playstation 0003:054C:09CC.0033: unknown main item tag 0x2 [ 1926.843207][ T5703] playstation 0003:054C:09CC.0033: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.5-1/input0 [ 1927.164063][T26790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1927.193098][T26790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1927.894796][ T5703] playstation 0003:054C:09CC.0033: Failed to retrieve feature with reportID 18: -71 [ 1927.931059][ T5703] playstation 0003:054C:09CC.0033: Failed to retrieve DualShock4 pairing info: -71 [ 1927.964652][ T5703] playstation 0003:054C:09CC.0033: Failed to get MAC address from DualShock4 [ 1927.986513][ T5703] playstation 0003:054C:09CC.0033: Failed to create dualshock4. [ 1928.029573][ T5703] playstation 0003:054C:09CC.0033: probe with driver playstation failed with error -71 [ 1928.119719][ T5703] usb 6-1: USB disconnect, device number 28 [ 1928.395317][ T805] usb 2-1: non-Atmel transceiver xxxx008d [ 1928.513504][T26638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1928.566802][T26793] input: syz0 as /devices/virtual/input/input93 [ 1928.594742][ T805] usb 2-1: Firmware version (0.0) predates our first public release. [ 1928.611806][ T805] usb 2-1: Please update to version 0.2 or newer [ 1928.621411][ T805] usb 2-1: atusb_probe: initialization failed, error = -19 [ 1928.661923][ T805] usb 2-1: USB disconnect, device number 42 [ 1928.893252][T26638] veth0_vlan: entered promiscuous mode [ 1928.919765][T26638] veth1_vlan: entered promiscuous mode [ 1929.105611][T26638] veth0_macvtap: entered promiscuous mode [ 1929.609820][T26638] veth1_macvtap: entered promiscuous mode [ 1929.650205][T26638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1929.688153][T26638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1929.737756][ T7313] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1929.772039][ T7313] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1929.941575][ T7313] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1929.977786][ T7313] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.393900][T13810] Bluetooth: Wrong link type (-57) [ 1930.429382][T16401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1930.473181][T16401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1930.602699][ T7313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1930.635162][ T7313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1930.952166][T26888] netlink: 'syz.1.5516': attribute type 2 has an invalid length. [ 1931.009166][T26888] netlink: 'syz.1.5516': attribute type 2 has an invalid length. [ 1931.716143][T13314] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1931.876260][T13314] usb 2-1: Using ep0 maxpacket: 16 [ 1931.883375][T13314] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1932.058549][T13314] usb 2-1: config 16 has an invalid interface number: 44 but max is 0 [ 1932.253826][T13314] usb 2-1: config 16 has no interface number 0 [ 1932.260308][T13314] usb 2-1: config 16 interface 44 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 32 [ 1932.270441][T13314] usb 2-1: config 16 interface 44 has no altsetting 0 [ 1932.297131][T13314] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64 [ 1932.436389][T13314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.446291][T13314] usb 2-1: Product: syz [ 1932.450564][T13314] usb 2-1: Manufacturer: syz [ 1932.488404][T13314] usb 2-1: SerialNumber: syz [ 1932.761988][T26890] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1933.028416][T13314] cypress_cy7c63 2-1:16.44: Cypress CY7C63xxx device now attached [ 1933.075183][T13314] usb 2-1: USB disconnect, device number 43 [ 1933.091203][T13314] cypress_cy7c63 2-1:16.44: Cypress CY7C63xxx device now disconnected [ 1933.117660][ T5703] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1933.207829][T26916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5522'. [ 1933.225625][T26915] FAULT_INJECTION: forcing a failure. [ 1933.225625][T26915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1933.245626][T26915] CPU: 1 UID: 0 PID: 26915 Comm: syz.6.5523 Tainted: G L syzkaller #0 PREEMPT(full) [ 1933.245654][T26915] Tainted: [L]=SOFTLOCKUP [ 1933.245660][T26915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1933.245674][T26915] Call Trace: [ 1933.245680][T26915] [ 1933.245686][T26915] dump_stack_lvl+0x100/0x190 [ 1933.245717][T26915] should_fail_ex.cold+0x5/0xa [ 1933.245737][T26915] _copy_to_user+0x32/0xd0 [ 1933.245758][T26915] simple_read_from_buffer+0xcb/0x170 [ 1933.245784][T26915] proc_fail_nth_read+0x1af/0x230 [ 1933.245805][T26915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1933.245827][T26915] ? rw_verify_area+0xce/0x6d0 [ 1933.245845][T26915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1933.245866][T26915] vfs_read+0x1e4/0xb40 [ 1933.245888][T26915] ? __pfx_vfs_read+0x10/0x10 [ 1933.245907][T26915] ? __fget_files+0x215/0x3d0 [ 1933.245934][T26915] ? __fget_files+0x21f/0x3d0 [ 1933.245964][T26915] ksys_read+0x12a/0x250 [ 1933.245984][T26915] ? __pfx_ksys_read+0x10/0x10 [ 1933.246011][T26915] do_syscall_64+0x115/0x870 [ 1933.246035][T26915] ? clear_bhb_loop+0x40/0x90 [ 1933.246056][T26915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1933.246074][T26915] RIP: 0033:0x7f252cb5e68e [ 1933.246089][T26915] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1933.246105][T26915] RSP: 002b:00007f252d9f9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1933.246124][T26915] RAX: ffffffffffffffda RBX: 00007f252d9fa6c0 RCX: 00007f252cb5e68e [ 1933.246135][T26915] RDX: 000000000000000f RSI: 00007f252d9fa0a0 RDI: 0000000000000004 [ 1933.246144][T26915] RBP: 00007f252d9fa090 R08: 0000000000000000 R09: 0000000000000000 [ 1933.246154][T26915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1933.246163][T26915] R13: 00007f252ce26128 R14: 00007f252ce26090 R15: 00007fff4b2856e8 [ 1933.246186][T26915] [ 1933.468164][ T5703] usb 6-1: Using ep0 maxpacket: 16 [ 1933.474782][ T5703] usb 6-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1933.490436][ T5703] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1933.741985][ T5703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1933.891655][ T5703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1933.935177][ T5703] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1933.964487][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1934.285380][ T5703] usb 6-1: Product: syz [ 1934.293204][ T29] audit: type=1800 audit(1783766575.567:3315): pid=26927 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.5527" name="SYSV00000000" dev="tmpfs" ino=16 res=0 errno=0 [ 1934.326521][ T5703] usb 6-1: Manufacturer: syz [ 1934.343050][ T5703] usb 6-1: SerialNumber: syz [ 1934.372222][ T5703] usb 6-1: config 0 descriptor?? [ 1934.456740][T26930] lo speed is unknown, defaulting to 1000 [ 1935.238726][ T5703] appledisplay 6-1:0.0: Error while getting initial brightness: -110 [ 1935.587175][ T5703] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110 [ 1936.079968][ T5703] usb 6-1: USB disconnect, device number 29 [ 1936.642042][T26952] xt_hashlimit: size too large, truncated to 1048576 [ 1936.838244][T26937] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1936.966099][ T5732] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1937.112911][T26966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5537'. [ 1937.197223][ T5732] usb 2-1: Using ep0 maxpacket: 8 [ 1937.318332][ T5732] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1937.441319][ T5732] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 153, changing to 7 [ 1937.463788][ T5732] usb 2-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 1937.480146][T26969] ip6gre1: entered allmulticast mode [ 1937.485532][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.496368][ T5732] usb 2-1: Product: syz [ 1937.500569][ T5732] usb 2-1: Manufacturer: syz [ 1937.505162][ T5732] usb 2-1: SerialNumber: syz [ 1937.827251][ T5732] usb 2-1: 1:1 : no UAC_FORMAT_TYPE desc [ 1937.859106][ T5732] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1938.672488][ T5732] usb 2-1: USB disconnect, device number 44 [ 1939.370660][T26349] udevd[26349]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1941.247111][T27007] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5551'. [ 1941.535966][T10794] wlan0: Trigger new scan to find an IBSS to join [ 1942.496249][T23237] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1942.543977][T27004] cgroup: Unknown subsys name 'cpuset' [ 1942.667648][T23237] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1942.686067][T23237] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1942.697264][ T5703] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1942.726623][T23237] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1942.737721][T23237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.756161][T23237] usb 6-1: Product: syz [ 1942.769140][T23237] usb 6-1: Manufacturer: syz [ 1942.781133][T23237] usb 6-1: SerialNumber: syz [ 1942.888388][ T5703] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1942.898004][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.924134][ T5703] usb 3-1: config 0 descriptor?? [ 1943.000145][T27031] lo speed is unknown, defaulting to 1000 [ 1943.032058][T23237] usb 6-1: 0:1 : does not exist [ 1943.037206][T23237] usb 6-1: BAAD GENERIC IO: no channels? [ 1943.103181][T23237] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1943.123043][T23237] usb 6-1: USB disconnect, device number 30 [ 1943.161049][T26349] udevd[26349]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1943.222883][ T5703] ath6kl: Failed to submit usb control message: -71 [ 1943.236443][ T5703] ath6kl: unable to send the bmi data to the device: -71 [ 1943.243917][ T5703] ath6kl: Unable to send get target info: -71 [ 1943.268183][ T5703] ath6kl: Failed to init ath6kl core: -71 [ 1943.278697][ T5703] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1943.298095][ T5703] usb 3-1: USB disconnect, device number 48 [ 1943.442444][ T29] audit: type=1400 audit(1783766584.717:3316): avc: denied { bind } for pid=27038 comm="syz.1.5557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1944.381838][T27031] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1944.966520][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1945.616697][T27062] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5562'. [ 1945.630285][ T48] wlan0: Trigger new scan to find an IBSS to join [ 1946.489051][T27074] cgroup: Unknown subsys name 'cpuset' [ 1946.949751][T27079] ip6gre3: entered allmulticast mode [ 1947.242167][T27082] binder: 27081:27082 ioctl c0306201 200000000080 returned -14 [ 1947.257773][T27082] binder: 27081:27082 ioctl c0306201 2000000003c0 returned -14 [ 1947.266252][ T13] wlan0: Creating new IBSS network, BSSID 3e:c3:93:b5:fd:9b [ 1948.627762][T27106] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5576'. [ 1949.197053][T27115] cgroup: Unknown subsys name 'cpuset' [ 1952.549915][ T29] audit: type=1326 audit(1783766593.827:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27148 comm="syz.5.5588" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f441a99de59 code=0x0 [ 1952.896493][ T5703] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1953.288385][ T5703] usb 6-1: Using ep0 maxpacket: 16 [ 1953.312895][T27162] ip6gre3: entered allmulticast mode [ 1953.473375][ T5703] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1953.536860][ T5703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1953.549061][ T5703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1953.559763][ T5703] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1953.594307][ T5703] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1953.817521][ T5703] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1954.052728][ T5703] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1954.063362][ T5703] usb 6-1: Manufacturer: syz [ 1954.075642][T27167] cgroup: Unknown subsys name 'cpuset' [ 1954.093860][ T5703] usb 6-1: config 0 descriptor?? [ 1954.723483][T27159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5591'. [ 1954.866094][ T5703] rc_core: IR keymap rc-hauppauge not found [ 1954.878073][ T5703] Registered IR keymap rc-empty [ 1954.885111][ T5703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1954.917610][ T5703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1954.978556][ T5703] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1955.070721][ T5703] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input94 [ 1955.088742][ T5703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1955.116239][ T5703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1955.178525][ T5703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1955.206376][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1955.223554][ T29] audit: type=1400 audit(1783766596.497:3318): avc: denied { write } for pid=27148 comm="syz.5.5588" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1955.460076][ T5703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1955.486139][ T5703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1955.506116][ T5703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1955.526184][ T5703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1955.567686][ T5703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1955.616433][ T5703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1955.656654][ T5703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1955.692248][ T5703] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1955.718626][ T5703] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1956.717024][T27202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5601'. [ 1956.726340][T27202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5601'. [ 1956.742116][T27202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5601'. [ 1956.751164][T27202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5601'. [ 1956.911858][T27200] block nbd0: Possible stuck request ffff8880803a0000: control (read@1024,1024B). Runtime 60 seconds [ 1956.922931][T27200] block nbd0: Possible stuck request ffff8880803a01c0: control (read@2048,1024B). Runtime 60 seconds [ 1956.934581][T27200] block nbd0: Possible stuck request ffff8880803a0380: control (read@3072,1024B). Runtime 60 seconds [ 1956.950166][T27200] block nbd0: Possible stuck request ffff8880803a6e40: control (read@0,1024B). Runtime 60 seconds [ 1957.005844][ T24] usb 6-1: USB disconnect, device number 31 [ 1960.469867][ T7313] wlan0: Selected IBSS BSSID 3e:c3:93:b5:fd:9b based on configured SSID [ 1963.085399][T27256] overlayfs: failed to clone upperpath [ 1963.759232][ T29] audit: type=1326 audit(1783766605.027:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27280 comm="syz.5.5617" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441a99de59 code=0x7ffc0000 [ 1963.796939][ T29] audit: type=1326 audit(1783766605.027:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27280 comm="syz.5.5617" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441a99de59 code=0x7ffc0000 [ 1963.828823][ T29] audit: type=1326 audit(1783766605.067:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27280 comm="syz.5.5617" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f441a99de59 code=0x7ffc0000 [ 1963.892316][ T29] audit: type=1326 audit(1783766605.067:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27280 comm="syz.5.5617" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441a99de59 code=0x7ffc0000 [ 1963.921691][ T29] audit: type=1326 audit(1783766605.067:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27280 comm="syz.5.5617" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441a99de59 code=0x7ffc0000 [ 1963.988481][ T29] audit: type=1326 audit(1783766605.067:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27280 comm="syz.5.5617" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f441a99de59 code=0x7ffc0000 [ 1964.071153][ T29] audit: type=1326 audit(1783766605.067:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27280 comm="syz.5.5617" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441a99de59 code=0x7ffc0000 [ 1964.220521][ T29] audit: type=1326 audit(1783766605.067:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27280 comm="syz.5.5617" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441a99de59 code=0x7ffc0000 [ 1964.312550][T27289] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5621'. [ 1964.364051][ T29] audit: type=1326 audit(1783766605.067:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27280 comm="syz.5.5617" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f441a99de59 code=0x7ffc0000 [ 1966.446192][ T29] audit: type=1326 audit(1783766605.067:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27280 comm="syz.5.5617" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441a99de59 code=0x7ffc0000 [ 1966.589821][T27317] FAULT_INJECTION: forcing a failure. [ 1966.589821][T27317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1966.652057][T27317] CPU: 1 UID: 0 PID: 27317 Comm: syz.5.5628 Tainted: G L syzkaller #0 PREEMPT(full) [ 1966.652085][T27317] Tainted: [L]=SOFTLOCKUP [ 1966.652091][T27317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1966.652100][T27317] Call Trace: [ 1966.652106][T27317] [ 1966.652113][T27317] dump_stack_lvl+0x100/0x190 [ 1966.652135][T27317] should_fail_ex.cold+0x5/0xa [ 1966.652150][T27317] _copy_from_user+0x2e/0xd0 [ 1966.652164][T27317] vmci_host_unlocked_ioctl+0x139f/0x2070 [ 1966.652183][T27317] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 1966.652201][T27317] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1966.652214][T27317] ? do_vfs_ioctl+0x226/0x13e0 [ 1966.652229][T27317] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1966.652244][T27317] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1966.652265][T27317] ? __fget_files+0x215/0x3d0 [ 1966.652282][T27317] ? hook_file_ioctl_common+0x140/0x440 [ 1966.652296][T27317] ? selinux_file_ioctl+0x13b/0x290 [ 1966.652311][T27317] ? selinux_file_ioctl+0xb6/0x290 [ 1966.652327][T27317] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 1966.652345][T27317] __x64_sys_ioctl+0x18e/0x210 [ 1966.652362][T27317] do_syscall_64+0x115/0x870 [ 1966.652378][T27317] ? clear_bhb_loop+0x40/0x90 [ 1966.652392][T27317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1966.652403][T27317] RIP: 0033:0x7f441a99de59 [ 1966.652414][T27317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1966.652425][T27317] RSP: 002b:00007f441b8fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1966.652437][T27317] RAX: ffffffffffffffda RBX: 00007f441ac25fa0 RCX: 00007f441a99de59 [ 1966.652444][T27317] RDX: 0000200000001900 RSI: 00000000000007ab RDI: 0000000000000003 [ 1966.652451][T27317] RBP: 00007f441b8fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1966.652458][T27317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1966.652465][T27317] R13: 00007f441ac26038 R14: 00007f441ac25fa0 R15: 00007fff738141c8 [ 1966.652479][T27317] [ 1967.222552][T11396] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1967.889841][T11396] usb 4-1: Using ep0 maxpacket: 16 [ 1967.928697][T27331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5632'. [ 1967.932386][T11396] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1968.077733][T11396] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1968.348361][T11396] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1968.383033][T11396] usb 4-1: config 1 has no interface number 0 [ 1968.406332][T11396] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1968.439765][T11396] usb 4-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 1968.463182][T11396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.485507][T11396] usb 4-1: Product: syz [ 1968.520022][T11396] usb 4-1: Manufacturer: syz [ 1968.570903][T27342] ip6_vti0: Caught tx_queue_len zero misconfig [ 1968.573276][T11396] usb 4-1: SerialNumber: syz [ 1969.471502][T11396] usb 4-1: USB disconnect, device number 35 [ 1969.489063][T27350] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=27350 comm=syz.1.5638 [ 1969.531438][T26349] udevd[26349]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1969.600242][T13810] Bluetooth: hci4: unexpected event for opcode 0x2023 [ 1971.386726][T13314] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1971.776121][T13314] usb 7-1: Using ep0 maxpacket: 32 [ 1971.783138][T13314] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1971.793381][T13314] usb 7-1: config 0 has no interface number 0 [ 1971.832375][T13314] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1971.903704][T13314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.967058][T13314] usb 7-1: Product: syz [ 1971.986122][T13314] usb 7-1: Manufacturer: syz [ 1972.013295][T13314] usb 7-1: SerialNumber: syz [ 1972.053421][T13314] usb 7-1: config 0 descriptor?? [ 1972.520163][T13314] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1972.563221][T13314] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1973.612465][T13810] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1973.624228][T13810] Bluetooth: hci4: Injecting HCI hardware error event [ 1973.635166][ T5620] Bluetooth: hci4: hardware error 0x00 [ 1974.286212][ T5703] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1974.436421][ T5703] usb 6-1: Using ep0 maxpacket: 8 [ 1974.448807][ T5703] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1974.471196][ T5703] usb 6-1: config 179 has no interface number 0 [ 1974.485881][ T5703] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1974.510226][ T5703] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1974.536440][ T5703] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1974.554345][ T5703] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1974.585622][ T5703] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1974.615937][ T5703] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1974.636205][ T5703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.814111][T27448] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1974.936066][T11396] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1975.104580][T11396] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1975.130087][T11396] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1975.152729][T11396] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 255 [ 1975.158565][T16489] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input95 [ 1975.188542][T11396] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1975.212156][T11396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.240512][T11396] usb 4-1: Product: syz [ 1975.252004][T11396] usb 4-1: Manufacturer: syz [ 1975.265313][T11396] usb 4-1: SerialNumber: syz [ 1975.294495][T11396] usb 4-1: config 0 descriptor?? [ 1975.302911][T27456] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1975.315817][T11396] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 1975.330977][T27333] usb 6-1: USB disconnect, device number 32 [ 1975.331086][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1975.345360][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1975.688761][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1975.714072][T13314] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 1975.766916][ T5620] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1975.786323][T27467] ªªªªª9: renamed from lo (while UP) [ 1976.104667][T13314] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 1976.154114][T13314] usb 7-1: USB disconnect, device number 2 [ 1976.527338][T27474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5664'. [ 1977.868003][T11396] scsi host1: usb-storage 4-1:0.0 [ 1978.049945][T11396] usb 4-1: USB disconnect, device number 36 [ 1978.567217][T11396] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1978.838586][T11396] usb 4-1: Using ep0 maxpacket: 32 [ 1978.975869][T11396] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1978.975903][T11396] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1978.975927][T11396] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1979.294184][T11396] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1979.294214][T11396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1979.297698][T11396] usb 4-1: config 0 descriptor?? [ 1979.420568][T27503] lo speed is unknown, defaulting to 1000 [ 1979.508573][T27494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1979.509912][T27494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1979.843565][T27504] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1979.927171][T27494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1979.953762][T27494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1980.000063][T11396] samsung 0003:0419:0600.0034: unknown main item tag 0x0 [ 1980.024033][T11396] samsung 0003:0419:0600.0034: unknown main item tag 0x0 [ 1980.050890][T11396] samsung 0003:0419:0600.0034: unknown main item tag 0x0 [ 1980.075346][T11396] samsung 0003:0419:0600.0034: unknown main item tag 0x0 [ 1980.105743][T11396] samsung 0003:0419:0600.0034: unknown main item tag 0x0 [ 1980.129052][T11396] samsung 0003:0419:0600.0034: unknown main item tag 0x0 [ 1980.149586][T11396] samsung 0003:0419:0600.0034: unknown main item tag 0x0 [ 1980.158329][T11396] samsung 0003:0419:0600.0034: unknown main item tag 0x0 [ 1980.200667][T11396] samsung 0003:0419:0600.0034: hidraw0: USB HID v80.00 Device [HID 0419:0600] on usb-dummy_hcd.3-1/input0 [ 1980.239253][T11396] usb 4-1: USB disconnect, device number 37 [ 1980.452635][T27515] fido_id[27515]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1980.648176][ T9383] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1980.863567][ T9383] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1980.882893][ T9383] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1980.911137][ T9383] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1980.943007][ T9383] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1981.055871][ T9383] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.065456][ T9383] usb 7-1: Product: syz [ 1981.069922][ T9383] usb 7-1: Manufacturer: syz [ 1981.075540][ T9383] usb 7-1: SerialNumber: syz [ 1981.108229][ T9383] usb 7-1: config 0 descriptor?? [ 1981.219425][T27516] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1981.627078][ T9383] rc_core: IR keymap rc-streamzap not found [ 1981.639184][ T9383] Registered IR keymap rc-empty [ 1981.653368][ T9383] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1981.691114][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 1981.691131][ T29] audit: type=1326 audit(1783766622.967:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27526 comm="syz.3.5679" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaba99de59 code=0x7fc00000 [ 1981.724856][ T9383] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input96 [ 1981.763947][ T9383] usb 7-1: USB disconnect, device number 3 [ 1982.371831][T27548] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1983.601063][T27561] xt_hashlimit: size too large, truncated to 1048576 [ 1983.938973][T11396] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1984.644455][T11396] usb 6-1: Using ep0 maxpacket: 8 [ 1984.661897][T11396] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1984.680038][T11396] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 153, changing to 7 [ 1984.704486][T11396] usb 6-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 1984.728237][T11396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1984.736344][T11396] usb 6-1: Product: syz [ 1984.740507][T11396] usb 6-1: Manufacturer: syz [ 1984.745909][T11396] usb 6-1: SerialNumber: syz [ 1984.825080][T27572] tmpfs: Invalid uid '0x00000000ffffffff' [ 1984.832736][T27572] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5690'. [ 1985.319771][T11396] usb 6-1: 1:1 : no UAC_FORMAT_TYPE desc [ 1985.337126][T11396] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1985.400202][ T29] audit: type=1400 audit(1783766626.677:3388): avc: denied { bind } for pid=27583 comm="syz.6.5694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1985.571023][T11396] usb 6-1: USB disconnect, device number 33 [ 1986.457798][T26349] udevd[26349]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1987.359774][T27200] block nbd0: Possible stuck request ffff8880803a0000: control (read@1024,1024B). Runtime 90 seconds [ 1987.374367][T27200] block nbd0: Possible stuck request ffff8880803a01c0: control (read@2048,1024B). Runtime 90 seconds [ 1987.385315][T27200] block nbd0: Possible stuck request ffff8880803a0380: control (read@3072,1024B). Runtime 90 seconds [ 1987.396190][T27200] block nbd0: Possible stuck request ffff8880803a6e40: control (read@0,1024B). Runtime 90 seconds [ 1988.285938][T27632] FAULT_INJECTION: forcing a failure. [ 1988.285938][T27632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1988.304987][T27632] CPU: 1 UID: 0 PID: 27632 Comm: syz.1.5707 Tainted: G L syzkaller #0 PREEMPT(full) [ 1988.305016][T27632] Tainted: [L]=SOFTLOCKUP [ 1988.305022][T27632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1988.305032][T27632] Call Trace: [ 1988.305038][T27632] [ 1988.305045][T27632] dump_stack_lvl+0x100/0x190 [ 1988.305073][T27632] should_fail_ex.cold+0x5/0xa [ 1988.305096][T27632] _copy_from_iter+0x1f4/0x1690 [ 1988.305119][T27632] ? __asan_memset+0x23/0x50 [ 1988.305145][T27632] ? __pfx__copy_from_iter+0x10/0x10 [ 1988.305164][T27632] ? __pfx___alloc_skb+0x10/0x10 [ 1988.305199][T27632] netlink_sendmsg+0x808/0xda0 [ 1988.305226][T27632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1988.305247][T27632] ? __might_fault+0x20/0x140 [ 1988.305279][T27632] ____sys_sendmsg+0xa4d/0xbe0 [ 1988.305298][T27632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1988.305322][T27632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1988.305352][T27632] ___sys_sendmsg+0x190/0x1e0 [ 1988.305372][T27632] ? __pfx____sys_sendmsg+0x10/0x10 [ 1988.305392][T27632] ? __lock_acquire+0x49f/0x1a40 [ 1988.305411][T27632] ? get_pid_task+0x106/0x250 [ 1988.305460][T27632] __sys_sendmsg+0x160/0x210 [ 1988.305478][T27632] ? __pfx___sys_sendmsg+0x10/0x10 [ 1988.305508][T27632] do_syscall_64+0x115/0x870 [ 1988.305532][T27632] ? clear_bhb_loop+0x40/0x90 [ 1988.305552][T27632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1988.305569][T27632] RIP: 0033:0x7f297cb9de59 [ 1988.305585][T27632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1988.305601][T27632] RSP: 002b:00007f297db39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1988.305617][T27632] RAX: ffffffffffffffda RBX: 00007f297ce25fa0 RCX: 00007f297cb9de59 [ 1988.305628][T27632] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 1988.305638][T27632] RBP: 00007f297db39090 R08: 0000000000000000 R09: 0000000000000000 [ 1988.305648][T27632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1988.305659][T27632] R13: 00007f297ce26038 R14: 00007f297ce25fa0 R15: 00007ffc8fc4eca8 [ 1988.305682][T27632] [ 1988.625840][T27637] xt_hashlimit: size too large, truncated to 1048576 [ 1988.968800][T16489] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1989.138028][ T29] audit: type=1400 audit(1783766630.417:3389): avc: denied { write } for pid=27645 comm="syz.5.5712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1989.246085][T16489] usb 7-1: Using ep0 maxpacket: 8 [ 1989.254434][T16489] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1989.277220][T16489] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 153, changing to 7 [ 1989.294140][T16489] usb 7-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 1989.304325][T16489] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.314047][T16489] usb 7-1: Product: syz [ 1989.320509][T16489] usb 7-1: Manufacturer: syz [ 1989.325699][T16489] usb 7-1: SerialNumber: syz [ 1990.359109][T16489] usb 7-1: 1:1 : no UAC_FORMAT_TYPE desc [ 1990.378046][T16489] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1990.441239][T16489] usb 7-1: USB disconnect, device number 4 [ 1990.493509][T24694] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1990.776973][T27616] udevd[27616]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1991.056338][ T5703] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1991.669435][ T5703] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1991.681098][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.690557][ T5703] usb 2-1: Product: syz [ 1991.694774][ T5703] usb 2-1: Manufacturer: syz [ 1991.699709][ T5703] usb 2-1: SerialNumber: syz [ 1991.720604][ T5703] usb 2-1: config 0 descriptor?? [ 1992.430169][T13810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1992.468415][T13810] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1992.520621][T13810] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1992.547536][T13810] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1992.682419][T13810] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1992.827870][ T5703] usb 2-1: Firmware version (0.0) predates our first public release. [ 1992.886472][ T5703] usb 2-1: Please update to version 0.2 or newer [ 1993.015135][T27693] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5726'. [ 1994.152112][T27693] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1994.152112][T27693] program syz.3.5726 not setting count and/or reply_len properly [ 1994.174293][T27693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5726'. [ 1994.183196][T27693] netlink: 'syz.3.5726': attribute type 10 has an invalid length. [ 1994.190993][T27693] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5726'. [ 1994.202740][T27693] geneve2: entered promiscuous mode [ 1994.207999][T27693] geneve2: entered allmulticast mode [ 1994.321625][T27686] lo speed is unknown, defaulting to 1000 [ 1994.709234][T27686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1994.716758][T27686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1994.740368][T27686] bridge_slave_0: entered allmulticast mode [ 1994.757017][T27686] bridge_slave_0: entered promiscuous mode [ 1994.767273][T27686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1994.776852][T27686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1994.784845][T27686] bridge_slave_1: entered allmulticast mode [ 1994.793434][T27686] bridge_slave_1: entered promiscuous mode [ 1994.860487][T27686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1994.912532][T27686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1994.966680][T13810] Bluetooth: hci6: command tx timeout [ 1994.994382][T27686] team0: Port device team_slave_0 added [ 1995.015818][T27686] team0: Port device team_slave_1 added [ 1995.082720][T27686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1995.095052][T27686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1995.135317][T27686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1995.151730][T27686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1995.159853][T27686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1995.225857][ T5703] usb 2-1: USB disconnect, device number 45 [ 1995.241683][T27686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1995.757703][T27686] hsr_slave_0: entered promiscuous mode [ 1995.774433][T27686] hsr_slave_1: entered promiscuous mode [ 1995.790207][T27686] debugfs: 'hsr0' already exists in 'hsr' [ 1995.807639][T27686] Cannot create hsr debugfs directory [ 1996.706146][T27758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5742'. [ 1996.715594][T27758] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5742'. [ 1996.896744][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1997.081480][T13810] Bluetooth: hci6: command tx timeout [ 1997.366171][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1997.376691][T27770] FAULT_INJECTION: forcing a failure. [ 1997.376691][T27770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1997.390521][T27770] CPU: 1 UID: 0 PID: 27770 Comm: syz.5.5745 Tainted: G L syzkaller #0 PREEMPT(full) [ 1997.390552][T27770] Tainted: [L]=SOFTLOCKUP [ 1997.390559][T27770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1997.390569][T27770] Call Trace: [ 1997.390576][T27770] [ 1997.390583][T27770] dump_stack_lvl+0x100/0x190 [ 1997.390610][T27770] should_fail_ex.cold+0x5/0xa [ 1997.390632][T27770] _copy_from_iter+0x1f4/0x1690 [ 1997.390656][T27770] ? __asan_memset+0x23/0x50 [ 1997.390683][T27770] ? __pfx__copy_from_iter+0x10/0x10 [ 1997.390703][T27770] ? __pfx___alloc_skb+0x10/0x10 [ 1997.390729][T27770] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1997.390762][T27770] netlink_sendmsg+0x808/0xda0 [ 1997.390790][T27770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1997.390813][T27770] ? __might_fault+0x20/0x140 [ 1997.390847][T27770] ____sys_sendmsg+0xa4d/0xbe0 [ 1997.390867][T27770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1997.390893][T27770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1997.390926][T27770] ___sys_sendmsg+0x190/0x1e0 [ 1997.390951][T27770] ? __pfx____sys_sendmsg+0x10/0x10 [ 1997.390971][T27770] ? __lock_acquire+0x49f/0x1a40 [ 1997.390992][T27770] ? get_pid_task+0x106/0x250 [ 1997.391046][T27770] __sys_sendmsg+0x160/0x210 [ 1997.391065][T27770] ? __pfx___sys_sendmsg+0x10/0x10 [ 1997.391095][T27770] do_syscall_64+0x115/0x870 [ 1997.391120][T27770] ? clear_bhb_loop+0x40/0x90 [ 1997.391142][T27770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1997.391159][T27770] RIP: 0033:0x7f441a99de59 [ 1997.391174][T27770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1997.391191][T27770] RSP: 002b:00007f441b8fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1997.391208][T27770] RAX: ffffffffffffffda RBX: 00007f441ac25fa0 RCX: 00007f441a99de59 [ 1997.391219][T27770] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1997.391229][T27770] RBP: 00007f441b8fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1997.391240][T27770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1997.391250][T27770] R13: 00007f441ac26038 R14: 00007f441ac25fa0 R15: 00007fff738141c8 [ 1997.391274][T27770] [ 1997.392410][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1997.523134][T27686] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1997.628749][ T24] usb 4-1: config 0 has no interface number 0 [ 1998.215746][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1998.226698][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1998.237602][ T24] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1998.291280][T27686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1998.300592][T27686] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1998.325650][T27686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1998.342503][T27686] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1998.364981][T27686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1998.383269][T27686] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1998.400606][T27686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1998.521042][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.560337][ T24] usb 4-1: config 0 descriptor?? [ 1998.809305][T13810] Bluetooth: hci0: command 0x0405 tx timeout [ 1999.126073][T13810] Bluetooth: hci6: command tx timeout [ 1999.721361][T27686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1999.794305][T27686] 8021q: adding VLAN 0 to HW filter on device team0 [ 1999.862198][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1999.869307][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1999.882647][ T24] usbhid 4-1:0.1: can't add hid device: -71 [ 1999.888738][ T24] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 1999.927707][ T24] usb 4-1: USB disconnect, device number 38 [ 1999.969854][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1999.976969][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2001.216671][T13810] Bluetooth: hci6: command tx timeout [ 2001.286196][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2001.363853][T27825] FAULT_INJECTION: forcing a failure. [ 2001.363853][T27825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2001.898828][T27825] CPU: 0 UID: 0 PID: 27825 Comm: syz.5.5756 Tainted: G L syzkaller #0 PREEMPT(full) [ 2001.898860][T27825] Tainted: [L]=SOFTLOCKUP [ 2001.898867][T27825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2001.898878][T27825] Call Trace: [ 2001.898884][T27825] [ 2001.898891][T27825] dump_stack_lvl+0x100/0x190 [ 2001.898919][T27825] should_fail_ex.cold+0x5/0xa [ 2001.898942][T27825] _copy_to_user+0x32/0xd0 [ 2001.898966][T27825] usbdev_ioctl+0x2c54/0x3aa0 [ 2001.898994][T27825] ? __pfx_usbdev_ioctl+0x10/0x10 [ 2001.899023][T27825] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2001.899044][T27825] ? do_vfs_ioctl+0x226/0x13e0 [ 2001.899067][T27825] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2001.899090][T27825] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2001.899122][T27825] ? __fget_files+0x215/0x3d0 [ 2001.899148][T27825] ? hook_file_ioctl_common+0x140/0x440 [ 2001.899172][T27825] ? selinux_file_ioctl+0x13b/0x290 [ 2001.899197][T27825] ? selinux_file_ioctl+0xb6/0x290 [ 2001.899222][T27825] ? __pfx_usbdev_ioctl+0x10/0x10 [ 2001.899246][T27825] __x64_sys_ioctl+0x18e/0x210 [ 2001.899271][T27825] do_syscall_64+0x115/0x870 [ 2001.899295][T27825] ? clear_bhb_loop+0x40/0x90 [ 2001.899317][T27825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2001.899335][T27825] RIP: 0033:0x7f441a99de59 [ 2001.899351][T27825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2001.899368][T27825] RSP: 002b:00007f441b8fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2001.899385][T27825] RAX: ffffffffffffffda RBX: 00007f441ac25fa0 RCX: 00007f441a99de59 [ 2001.899403][T27825] RDX: 0000000000000000 RSI: 0000000040085511 RDI: 0000000000000003 [ 2001.899413][T27825] RBP: 00007f441b8fb090 R08: 0000000000000000 R09: 0000000000000000 [ 2001.899423][T27825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2001.899433][T27825] R13: 00007f441ac26038 R14: 00007f441ac25fa0 R15: 00007fff738141c8 [ 2001.899457][T27825] [ 2002.145123][ T29] audit: type=1326 audit(1783766643.387:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27816 comm="syz.3.5754" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaba99de59 code=0x7fc00000 [ 2002.189558][T27686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2003.028029][T27841] FAULT_INJECTION: forcing a failure. [ 2003.028029][T27841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2003.056697][T27840] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 2003.100483][T27841] CPU: 1 UID: 0 PID: 27841 Comm: syz.5.5759 Tainted: G L syzkaller #0 PREEMPT(full) [ 2003.100512][T27841] Tainted: [L]=SOFTLOCKUP [ 2003.100518][T27841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2003.100527][T27841] Call Trace: [ 2003.100531][T27841] [ 2003.100536][T27841] dump_stack_lvl+0x100/0x190 [ 2003.100553][T27841] should_fail_ex.cold+0x5/0xa [ 2003.100570][T27841] _copy_to_user+0x32/0xd0 [ 2003.100585][T27841] simple_read_from_buffer+0xcb/0x170 [ 2003.100605][T27841] proc_fail_nth_read+0x1af/0x230 [ 2003.100621][T27841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2003.100638][T27841] ? rw_verify_area+0xce/0x6d0 [ 2003.100651][T27841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2003.100667][T27841] vfs_read+0x1e4/0xb40 [ 2003.100685][T27841] ? __pfx_vfs_read+0x10/0x10 [ 2003.100700][T27841] ? __fget_files+0x215/0x3d0 [ 2003.100720][T27841] ? __fget_files+0x21f/0x3d0 [ 2003.100741][T27841] ksys_read+0x12a/0x250 [ 2003.100756][T27841] ? __pfx_ksys_read+0x10/0x10 [ 2003.100776][T27841] do_syscall_64+0x115/0x870 [ 2003.100797][T27841] ? clear_bhb_loop+0x40/0x90 [ 2003.100818][T27841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2003.100835][T27841] RIP: 0033:0x7f441a95e68e [ 2003.100849][T27841] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2003.100864][T27841] RSP: 002b:00007f441b8d9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2003.100876][T27841] RAX: ffffffffffffffda RBX: 00007f441b8da6c0 RCX: 00007f441a95e68e [ 2003.100883][T27841] RDX: 000000000000000f RSI: 00007f441b8da0a0 RDI: 0000000000000005 [ 2003.100889][T27841] RBP: 00007f441b8da090 R08: 0000000000000000 R09: 0000000000000000 [ 2003.100896][T27841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2003.100903][T27841] R13: 00007f441ac26128 R14: 00007f441ac26090 R15: 00007fff738141c8 [ 2003.100917][T27841] [ 2003.408573][T27686] veth0_vlan: entered promiscuous mode [ 2003.417898][T27686] veth1_vlan: entered promiscuous mode [ 2003.459093][T27686] veth0_macvtap: entered promiscuous mode [ 2003.466867][T27686] veth1_macvtap: entered promiscuous mode [ 2003.478247][T27686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2003.488008][T27686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2003.512511][T24692] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2003.522018][T24692] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2003.531373][T24692] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2003.540952][T16403] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2004.470223][ T5620] Bluetooth: hci0: command 0x0405 tx timeout [ 2004.470507][T13810] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2004.575959][T27853] tipc: Started in network mode [ 2004.602217][T27853] tipc: Node identity 080211000001, cluster identity 4711 [ 2004.629773][T27853] tipc: Enabled bearer , priority 0 [ 2004.663147][T27847] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode [ 2004.971840][T27847] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode [ 2005.017259][T27853] tipc: Resetting bearer [ 2005.277093][T10794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2005.322808][T10794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2005.430669][T24694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2005.468186][T24694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2005.533577][T27864] lo speed is unknown, defaulting to 1000 [ 2005.774101][ T5711] tipc: Node number set to 134418688 [ 2006.089965][T27884] lo speed is unknown, defaulting to 1000 [ 2006.902770][ T29] audit: type=1326 audit(1783766648.177:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27885 comm="syz.6.5767" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252cb9de59 code=0x7fc00000 [ 2007.338937][T27904] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5769'. [ 2008.318243][T27916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5774'. [ 2008.337970][T27916] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27916 comm=syz.1.5774 [ 2008.438814][T27884] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2008.486288][ T5703] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2008.566143][T13314] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2008.658754][ T5703] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2008.683929][ T5703] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2008.735611][ T5703] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 2008.773219][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.808658][ T5703] usb 4-1: Product: syz [ 2008.828510][ T5703] usb 4-1: Manufacturer: syz [ 2008.849786][ T5703] usb 4-1: SerialNumber: syz [ 2009.109435][ T5703] usb 4-1: 0:1 : does not exist [ 2009.125444][ T5703] usb 4-1: BAAD GENERIC IO: no channels? [ 2009.149179][T27928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5776'. [ 2009.189672][T27928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5776'. [ 2009.198672][T27928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5776'. [ 2009.215446][T27928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5776'. [ 2009.226925][T27928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5776'. [ 2010.217770][ T5703] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2010.236359][ T5703] usb 4-1: USB disconnect, device number 39 [ 2010.267499][T27616] udevd[27616]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2010.836838][T27939] ip6gre1: entered allmulticast mode [ 2010.846782][T24694] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2011.193701][T27958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5785'. [ 2011.213841][T27958] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5785'. [ 2012.256380][T16489] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2012.320273][T27975] lo speed is unknown, defaulting to 1000 [ 2012.456713][T16489] usb 2-1: Using ep0 maxpacket: 8 [ 2012.492468][T16489] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2012.652301][T16489] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 2012.740887][T16489] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 2012.750268][T16489] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2012.768171][T16489] usb 2-1: config 0 descriptor?? [ 2013.484723][T16489] sony 0003:054C:042F.0035: ignoring exceeding usage max [ 2013.504776][T16489] sony 0003:054C:042F.0035: usage index exceeded [ 2013.532238][T16489] sony 0003:054C:042F.0035: item 0 4 2 0 parsing failed [ 2013.554099][T16489] sony 0003:054C:042F.0035: parse failed [ 2013.565044][T16489] sony 0003:054C:042F.0035: probe with driver sony failed with error -22 [ 2014.196194][T28002] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5798'. [ 2014.210161][T28002] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5798'. [ 2014.298635][T28007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5799'. [ 2014.317496][T27968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5787'. [ 2014.327407][T27968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5787'. [ 2014.474465][T27970] bond1: entered promiscuous mode [ 2014.486562][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2015.019083][T27977] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2016.239029][T16489] usb 2-1: USB disconnect, device number 47 [ 2016.660077][ T29] audit: type=1326 audit(1783766657.847:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28023 comm="syz.7.5803" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28c39de59 code=0x7fc00000 [ 2018.025566][T27200] block nbd0: Possible stuck request ffff8880803a0000: control (read@1024,1024B). Runtime 120 seconds [ 2018.038424][T27200] block nbd0: Possible stuck request ffff8880803a01c0: control (read@2048,1024B). Runtime 120 seconds [ 2018.049506][T27200] block nbd0: Possible stuck request ffff8880803a0380: control (read@3072,1024B). Runtime 120 seconds [ 2018.060566][T27200] block nbd0: Possible stuck request ffff8880803a6e40: control (read@0,1024B). Runtime 120 seconds [ 2018.146369][ T5711] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2018.380258][T28047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5810'. [ 2018.390073][T28047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5810'. [ 2018.400827][ T5711] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2018.410193][ T5711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.449326][ T5711] usb 7-1: config 0 descriptor?? [ 2018.456449][T28050] FAULT_INJECTION: forcing a failure. [ 2018.456449][T28050] name failslab, interval 1, probability 0, space 0, times 0 [ 2018.483958][ T5711] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2018.508138][T28050] CPU: 1 UID: 0 PID: 28050 Comm: syz.1.5809 Tainted: G L syzkaller #0 PREEMPT(full) [ 2018.508167][T28050] Tainted: [L]=SOFTLOCKUP [ 2018.508174][T28050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2018.508184][T28050] Call Trace: [ 2018.508190][T28050] [ 2018.508197][T28050] dump_stack_lvl+0x100/0x190 [ 2018.508224][T28050] should_fail_ex.cold+0x5/0xa [ 2018.508249][T28050] should_failslab+0xc2/0x120 [ 2018.508270][T28050] __kmalloc_cache_noprof+0x91/0x6c0 [ 2018.508295][T28050] ? rcu_is_watching+0x12/0xc0 [ 2018.508318][T28050] ? vhost_task_create+0xee/0x370 [ 2018.508338][T28050] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 2018.508366][T28050] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 2018.508388][T28050] vhost_task_create+0xee/0x370 [ 2018.508407][T28050] ? __pfx_vhost_task_create+0x10/0x10 [ 2018.508433][T28050] ? __pfx_vhost_task_fn+0x10/0x10 [ 2018.508453][T28050] ? __pfx___mutex_lock+0x10/0x10 [ 2018.508479][T28050] ? kasan_quarantine_put+0x104/0x240 [ 2018.508503][T28050] kvm_mmu_post_init_vm+0x1b3/0x360 [ 2018.508531][T28050] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 2018.508557][T28050] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 2018.508582][T28050] kvm_vcpu_ioctl+0x730/0x1700 [ 2018.508604][T28050] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2018.508625][T28050] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2018.508646][T28050] ? do_vfs_ioctl+0x226/0x13e0 [ 2018.508669][T28050] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2018.508692][T28050] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2018.508727][T28050] ? __fget_files+0x215/0x3d0 [ 2018.508751][T28050] ? hook_file_ioctl_common+0x140/0x440 [ 2018.508775][T28050] ? selinux_file_ioctl+0x13b/0x290 [ 2018.508798][T28050] ? selinux_file_ioctl+0xb6/0x290 [ 2018.508822][T28050] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2018.508847][T28050] __x64_sys_ioctl+0x18e/0x210 [ 2018.508873][T28050] do_syscall_64+0x115/0x870 [ 2018.508896][T28050] ? clear_bhb_loop+0x40/0x90 [ 2018.508918][T28050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2018.508935][T28050] RIP: 0033:0x7f297cb9de59 [ 2018.508950][T28050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2018.508966][T28050] RSP: 002b:00007f297db18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2018.508983][T28050] RAX: ffffffffffffffda RBX: 00007f297ce26090 RCX: 00007f297cb9de59 [ 2018.508995][T28050] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 2018.509005][T28050] RBP: 00007f297db18090 R08: 0000000000000000 R09: 0000000000000000 [ 2018.509016][T28050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2018.509026][T28050] R13: 00007f297ce26128 R14: 00007f297ce26090 R15: 00007ffc8fc4eca8 [ 2018.509051][T28050] [ 2018.987235][ T5711] cpia1 7-1:0.0: unexpected state after lo power cmd: 01 [ 2019.205311][T28058] ip6gre2: entered allmulticast mode [ 2019.286607][T17764] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2020.061316][ T29] audit: type=1400 audit(1783766661.337:3393): avc: denied { module_load } for pid=28056 comm="syz.7.5812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 2020.099838][ T5711] gspca_cpia1: usb_control_msg 02, error -71 [ 2020.106981][ T5711] gspca_cpia1: usb_control_msg 05, error -71 [ 2020.116074][ T5711] cpia1 7-1:0.0: unexpected systemstate: 01 [ 2020.354784][ T24] Process accounting resumed [ 2020.375119][T28061] netlink: 'syz.7.5812': attribute type 1 has an invalid length. [ 2020.388038][ T5711] usb 7-1: USB disconnect, device number 5 [ 2020.423918][T28061] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5812'. [ 2021.222121][T28052] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5811'. [ 2021.766846][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2022.632418][T28089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5821'. [ 2022.830023][T28094] lo speed is unknown, defaulting to 1000 [ 2022.875683][T28093] lo speed is unknown, defaulting to 1000 [ 2022.951875][T28098] netlink: 'syz.3.5824': attribute type 2 has an invalid length. [ 2022.972267][T28098] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5824'. [ 2024.019573][T28110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5826'. [ 2024.062704][T28110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5826'. [ 2024.074748][T28110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5826'. [ 2024.100355][T28110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5826'. [ 2024.112998][T28110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5826'. [ 2024.326510][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2024.347483][T28096] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2024.350920][T28095] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2024.398071][T28120] netlink: 'syz.3.5829': attribute type 2 has an invalid length. [ 2024.406258][T28120] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5829'. [ 2025.960775][T28137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5833'. [ 2027.479212][T28154] ip6gre1: entered allmulticast mode [ 2027.563166][T28158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5834'. [ 2028.042830][T28176] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5843'. [ 2029.580941][ T13] wlan0: Trigger new scan to find an IBSS to join [ 2029.902928][T28179] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5844'. [ 2030.140229][T28184] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5845'. [ 2030.159058][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2030.396470][T16489] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2030.555124][T16489] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2030.570585][T16489] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.691796][T16489] usb 6-1: Product: syz [ 2030.696150][T16489] usb 6-1: Manufacturer: syz [ 2030.700809][T16489] usb 6-1: SerialNumber: syz [ 2030.709996][T16489] usb 6-1: config 0 descriptor?? [ 2031.675850][T16489] usb 6-1: can't set config #0, error -71 [ 2031.738764][T16489] usb 6-1: USB disconnect, device number 34 [ 2031.805868][T28222] FAULT_INJECTION: forcing a failure. [ 2031.805868][T28222] name failslab, interval 1, probability 0, space 0, times 0 [ 2031.849837][T28222] CPU: 1 UID: 0 PID: 28222 Comm: syz.7.5851 Tainted: G L syzkaller #0 PREEMPT(full) [ 2031.849868][T28222] Tainted: [L]=SOFTLOCKUP [ 2031.849875][T28222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2031.849886][T28222] Call Trace: [ 2031.849892][T28222] [ 2031.849900][T28222] dump_stack_lvl+0x100/0x190 [ 2031.849927][T28222] should_fail_ex.cold+0x5/0xa [ 2031.849950][T28222] should_failslab+0xc2/0x120 [ 2031.849973][T28222] __kmalloc_noprof+0xfc/0x820 [ 2031.849990][T28222] ? rcu_is_watching+0x12/0xc0 [ 2031.850015][T28222] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2031.850045][T28222] tomoyo_realpath_from_path+0xb6/0x690 [ 2031.850079][T28222] tomoyo_path_number_perm+0x23c/0x580 [ 2031.850100][T28222] ? tomoyo_path_number_perm+0x22e/0x580 [ 2031.850123][T28222] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2031.850169][T28222] ? find_held_lock+0x2b/0x80 [ 2031.850193][T28222] ? __fget_files+0x215/0x3d0 [ 2031.850218][T28222] ? hook_file_ioctl_common+0x140/0x440 [ 2031.850234][T28222] ? __fget_files+0x215/0x3d0 [ 2031.850263][T28222] ? __fget_files+0x21f/0x3d0 [ 2031.850293][T28222] security_file_ioctl+0xd3/0x230 [ 2031.850318][T28222] __x64_sys_ioctl+0xb7/0x210 [ 2031.850348][T28222] do_syscall_64+0x115/0x870 [ 2031.850373][T28222] ? clear_bhb_loop+0x40/0x90 [ 2031.850395][T28222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2031.850413][T28222] RIP: 0033:0x7fb28c39de59 [ 2031.850430][T28222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2031.850447][T28222] RSP: 002b:00007fb28d301028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2031.850465][T28222] RAX: ffffffffffffffda RBX: 00007fb28c625fa0 RCX: 00007fb28c39de59 [ 2031.850477][T28222] RDX: 0000200000000080 RSI: 0000000040187013 RDI: 0000000000000003 [ 2031.850488][T28222] RBP: 00007fb28d301090 R08: 0000000000000000 R09: 0000000000000000 [ 2031.850499][T28222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2031.850510][T28222] R13: 00007fb28c626038 R14: 00007fb28c625fa0 R15: 00007ffcdfaad8a8 [ 2031.850535][T28222] [ 2031.853432][T28222] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2032.231977][ T5620] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2032.259279][ T5620] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2032.268814][ T5620] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2032.276842][ T5620] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2032.285580][ T5620] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2032.805795][ T29] audit: type=1400 audit(1783766674.047:3394): avc: denied { bind } for pid=28238 comm="syz.7.5854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2033.296151][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2033.532925][ T48] wlan0: Trigger new scan to find an IBSS to join [ 2033.659111][T28241] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 2033.962966][T28241] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 2033.984556][T28241] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 2034.067636][T28273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5855'. [ 2034.093553][T28271] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5856'. [ 2034.286186][T16489] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2034.408120][ T5620] Bluetooth: hci7: command tx timeout [ 2034.446156][T16489] usb 4-1: Using ep0 maxpacket: 32 [ 2034.463245][T16489] usb 4-1: config 2 has an invalid interface number: 45 but max is 0 [ 2034.479133][T16489] usb 4-1: config 2 has no interface number 0 [ 2034.495486][T28228] lo speed is unknown, defaulting to 1000 [ 2034.553333][T16489] usb 4-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2035.079130][T16489] usb 4-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2035.133891][T16489] usb 4-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 2035.144367][T16489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2035.153014][T10794] wlan0: Creating new IBSS network, BSSID ba:23:74:cb:a3:8a [ 2035.204509][T16489] usb 4-1: Product: syz [ 2035.228608][T16489] usb 4-1: Manufacturer: syz [ 2035.311409][T28288] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5862'. [ 2035.494562][T16489] usb 4-1: SerialNumber: syz [ 2035.523466][T16489] kobil_sct 4-1:2.45: KOBIL USB smart card terminal converter detected [ 2035.594766][T16489] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2035.864838][T28266] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 2036.283763][ T5732] usb 4-1: USB disconnect, device number 40 [ 2036.315573][T28303] xt_hashlimit: size too large, truncated to 1048576 [ 2036.370731][ T5732] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2036.432552][ T5732] kobil_sct 4-1:2.45: device disconnected [ 2036.486498][ T5620] Bluetooth: hci7: command tx timeout [ 2036.535709][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2036.569305][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.646121][T16489] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2036.920328][T16489] usb 6-1: Using ep0 maxpacket: 8 [ 2036.926997][T16489] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2036.946932][T16489] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 153, changing to 7 [ 2036.980541][T16489] usb 6-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 2036.999884][T16489] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.030984][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2037.055549][T16489] usb 6-1: Product: syz [ 2037.077036][T16489] usb 6-1: Manufacturer: syz [ 2037.091727][T16489] usb 6-1: SerialNumber: syz [ 2037.091740][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2037.127095][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2037.138964][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.530288][T16489] usb 6-1: 1:1 : no UAC_FORMAT_TYPE desc [ 2038.550382][T16489] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2038.566278][ T5620] Bluetooth: hci7: command tx timeout [ 2038.653529][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2038.665133][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2038.788061][T16489] usb 6-1: USB disconnect, device number 35 [ 2039.125369][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2039.161650][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2039.835125][T28342] fuse: Bad value for 'fd' [ 2040.397009][T28228] bridge0: port 1(bridge_slave_0) entered blocking state [ 2040.545184][T28228] bridge0: port 1(bridge_slave_0) entered disabled state [ 2040.575756][T28228] bridge_slave_0: entered allmulticast mode [ 2040.614125][T28228] bridge_slave_0: entered promiscuous mode [ 2040.652963][ T5620] Bluetooth: hci7: command tx timeout [ 2040.713132][T28369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5870'. [ 2040.923179][T28228] bridge0: port 2(bridge_slave_1) entered blocking state [ 2040.952504][T28228] bridge0: port 2(bridge_slave_1) entered disabled state [ 2040.983745][T28228] bridge_slave_1: entered allmulticast mode [ 2041.014686][T28228] bridge_slave_1: entered promiscuous mode [ 2041.372265][T28228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2041.417826][ T13] bridge_slave_1: left allmulticast mode [ 2041.435768][ T13] bridge_slave_1: left promiscuous mode [ 2041.457235][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.492573][ T13] ¾x9ÿ: left allmulticast mode [ 2041.517914][ T13] ¾x9ÿ: left promiscuous mode [ 2041.555849][ T13] bridge0: port 1(1¾x9ÿ) entered disabled state [ 2042.391479][ T29] audit: type=1400 audit(1783766683.667:3395): avc: denied { write } for pid=28381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2042.539630][ T29] audit: type=1400 audit(1783766683.817:3396): avc: denied { write } for pid=28407 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2042.616489][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2042.642446][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2042.655258][ T13] bond0 (unregistering): Released all slaves [ 2042.759673][T28410] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5883'. [ 2042.889192][ T13] bond1 (unregistering): Released all slaves [ 2042.928140][T28228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2042.954327][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2043.085729][T28228] team0: Port device team_slave_0 added [ 2043.121622][T28228] team0: Port device team_slave_1 added [ 2043.729321][T28228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2043.893429][T28228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2044.096370][T28228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2044.112295][T28228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2044.119470][T28228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2044.300658][T28228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2045.109277][ T13] tipc: Disabling bearer [ 2045.130629][ T13] tipc: Left network mode [ 2045.140099][T28432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5887'. [ 2045.592784][T28438] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5888'. [ 2045.653620][T28228] hsr_slave_0: entered promiscuous mode [ 2045.792796][T28228] hsr_slave_1: entered promiscuous mode [ 2045.830365][T28228] debugfs: 'hsr0' already exists in 'hsr' [ 2045.878199][T28228] Cannot create hsr debugfs directory [ 2046.087435][ T30] INFO: task syz.0.5412:26416 blocked for more than 143 seconds. [ 2046.165005][ T30] Tainted: G L syzkaller #0 [ 2046.189051][T28424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2046.275039][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2046.413185][ T30] task:syz.0.5412 state:D stack:27784 pid:26416 tgid:26413 ppid:21057 task_flags:0x400140 flags:0x00080002 [ 2046.588137][ T30] Call Trace: [ 2046.631545][ T30] [ 2046.665010][ T30] __schedule+0x125c/0x6730 [ 2046.729178][ T30] ? __pfx___schedule+0x10/0x10 [ 2046.782182][ T30] ? find_held_lock+0x2b/0x80 [ 2046.861573][ T30] ? schedule+0x225/0x2c0 [ 2047.087106][ T30] schedule+0xdd/0x2c0 [ 2047.134144][ T30] schedule_preempt_disabled+0x13/0x30 [ 2047.203929][ T30] __mutex_lock+0xccc/0x1bd0 [ 2047.267863][ T30] ? bdev_open+0xa2/0xe40 [ 2047.329716][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 2047.417169][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2047.519300][ T30] ? disk_block_events+0x21/0x140 [ 2047.586997][ T30] ? disk_block_events+0x3c/0x140 [ 2047.659262][ T30] ? bdev_open+0xa2/0xe40 [ 2047.718167][ T30] bdev_open+0xa2/0xe40 [ 2047.747874][ T30] ? iput+0x3a/0x40 [ 2047.765087][ T30] bdev_file_open_by_dev+0x179/0x210 [ 2047.787558][ T30] setup_bdev_super+0x78/0x730 [ 2047.802081][ T30] get_tree_bdev_flags+0x363/0x620 [ 2047.818446][ T30] ? __pfx_vxfs_fill_super+0x10/0x10 [ 2047.835507][ T30] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 2047.853474][ T30] ? cap_capable+0x107/0x430 [ 2047.864952][ T30] ? bpf_lsm_capable+0x9/0x10 [ 2047.876611][ T30] ? security_capable+0x80/0x260 [ 2047.887140][ T30] vfs_get_tree+0x92/0x320 [ 2047.896950][ T30] path_mount+0x7d0/0x23d0 [ 2047.910509][ T30] ? __pfx_path_mount+0x10/0x10 [ 2047.921235][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 2047.932834][ T29] audit: type=1400 audit(1783766689.207:3397): avc: denied { write } for pid=28431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2047.962347][ T30] ? putname+0xb1/0x110 [ 2047.972842][ T30] ? kmem_cache_free+0x127/0x6b0 [ 2047.986143][ T30] ? kfree+0x22b/0x6c0 [ 2047.993161][ T30] ? __x64_sys_mount+0x293/0x310 [ 2048.002430][ T30] __x64_sys_mount+0x293/0x310 [ 2048.013935][ T30] ? __pfx___x64_sys_mount+0x10/0x10 [ 2048.027343][ T30] do_syscall_64+0x115/0x870 [ 2048.036165][ T30] ? clear_bhb_loop+0x40/0x90 [ 2048.046073][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2048.057581][ T30] RIP: 0033:0x7fd33299de59 [ 2048.063491][ T29] audit: type=1400 audit(1783766689.337:3398): avc: denied { write } for pid=28454 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2048.096110][ T30] RSP: 002b:00007fd330bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2048.106050][ T30] RAX: ffffffffffffffda RBX: 00007fd332c26090 RCX: 00007fd33299de59 [ 2048.123759][ T30] RDX: 00002000000003c0 RSI: 00002000000001c0 RDI: 0000200000000000 [ 2048.146014][ T30] RBP: 00007fd332a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 2048.155432][ T30] R10: 0000000001000001 R11: 0000000000000246 R12: 0000000000000000 [ 2048.186054][ T30] R13: 00007fd332c26128 R14: 00007fd332c26090 R15: 00007ffea28fbf68 [ 2048.194062][ T30] [ 2048.208482][ T30] [ 2048.208482][ T30] Showing all locks held in the system: [ 2048.242153][ T30] 3 locks held by kworker/u8:1/13: [ 2048.254038][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2048.268596][ T30] #0: ffff88801ce88940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 2048.297579][ T30] #1: ffffc90000127d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 2048.361224][ T30] #2: ffffffff90a82968 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 2048.407871][ T30] 1 lock held by khungtaskd/30: [ 2048.431707][ T30] #0: ffffffff8ebe6100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 2048.458195][ T30] 1 lock held by udevd/4976: [ 2048.463970][ T30] #0: ffff88801caf7980 (&root->kernfs_rwsem){++++}-{4:4}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 2048.478812][ T30] 2 locks held by dhcpcd/5270: [ 2048.483681][ T30] #0: ffffffff90a6b3e0 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5ca/0x6b0 [ 2048.494831][ T30] #1: ffffffff90a9b580 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xcf/0xa70 [ 2048.506271][ T30] 2 locks held by getty/5364: [ 2048.512509][ T30] #0: ffff8880343020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2048.524625][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 2048.540277][ T30] 2 locks held by kworker/0:2/21834: [ 2048.547581][ T30] #0: ffff88801bc0b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 2048.558309][ T30] #1: ffffc9000508fd08 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 2048.572242][ T30] 1 lock held by udevd/26339: [ 2048.577040][ T30] #0: ffff88802cdf1350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 2048.587131][ T30] 2 locks held by syz.0.5412/26416: [ 2048.592613][ T30] #0: ffff8880597880d8 (&type->s_umount_key#101/1){+.+.}-{4:4}, at: sget_fc+0x3c8/0x1d80 [ 2048.602693][ T30] #1: ffff88802cdf1350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 2048.616017][ T30] 6 locks held by syz-executor/28228: [ 2048.625622][ T30] #0: ffff8880366a6450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2048.634965][ T30] #1: ffff88805d566080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 2048.645715][ T30] #2: ffff88802ac3bd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 2048.656284][ T30] #3: ffffffff90009c20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 2048.657454][T27200] block nbd0: Possible stuck request ffff8880803a0000: control (read@1024,1024B). Runtime 150 seconds [ 2048.677754][T27200] block nbd0: Possible stuck request ffff8880803a01c0: control (read@2048,1024B). Runtime 150 seconds [ 2048.677894][ T30] #4: [ 2048.688809][T27200] block nbd0: Possible stuck request ffff8880803a0380: control (read@3072,1024B). Runtime 150 seconds [ 2048.702577][T27200] block nbd0: Possible stuck request ffff8880803a6e40: control (read@0,1024B). Runtime 150 seconds [ 2048.715430][ T30] ffff88803593c128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 2048.728185][ T30] #5: ffff88803593b258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 2048.738445][ T30] 2 locks held by dhcpcd-run-hook/28461: [ 2048.745933][ T30] #0: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 2048.756189][ T30] #1: ffffffff9b730148 (&____s->seqcount#2){----}-{0:0}, at: __schedule+0x3cd5/0x6730 [ 2048.779646][ T30] [ 2048.782034][ T30] ============================================= [ 2048.782034][ T30] [ 2048.791035][ T30] NMI backtrace for cpu 0 [ 2048.791051][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2048.791075][ T30] Tainted: [L]=SOFTLOCKUP [ 2048.791081][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2048.791091][ T30] Call Trace: [ 2048.791097][ T30] [ 2048.791104][ T30] dump_stack_lvl+0x100/0x190 [ 2048.791129][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2048.791152][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2048.791175][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 2048.791200][ T30] sys_info+0x141/0x190 [ 2048.791217][ T30] watchdog+0xcb1/0x1030 [ 2048.791242][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2048.791265][ T30] ? __pfx_watchdog+0x10/0x10 [ 2048.791283][ T30] ? __kthread_parkme+0x18c/0x230 [ 2048.791309][ T30] ? kthread+0x13a/0x450 [ 2048.791332][ T30] ? __pfx_watchdog+0x10/0x10 [ 2048.791349][ T30] kthread+0x370/0x450 [ 2048.791374][ T30] ? __pfx_kthread+0x10/0x10 [ 2048.791400][ T30] ret_from_fork+0x72b/0xd50 [ 2048.791424][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2048.791448][ T30] ? __switch_to+0x800/0x10f0 [ 2048.791474][ T30] ? __pfx_kthread+0x10/0x10 [ 2048.791499][ T30] ret_from_fork_asm+0x1a/0x30 [ 2048.791533][ T30] [ 2048.791541][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2048.923261][ C1] NMI backtrace for cpu 1 [ 2048.923277][ C1] CPU: 1 UID: 0 PID: 28465 Comm: sed Tainted: G L syzkaller #0 PREEMPT(full) [ 2048.923314][ C1] Tainted: [L]=SOFTLOCKUP [ 2048.923319][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2048.923326][ C1] RIP: 0010:lock_release+0x248/0x310 [ 2048.923345][ C1] Code: c7 c7 40 50 c7 8e e8 f7 b5 07 00 65 49 ff 44 24 08 65 8b 05 ce e7 7d 12 83 f8 07 0f 86 f9 fd ff ff 90 0f 0b 90 e9 f0 fd ff ff 33 6a 08 00 84 c0 0f 85 f1 fd ff ff 48 8d 3d a4 65 40 0f 67 48 [ 2048.923359][ C1] RSP: 0018:ffffc9000330f2d0 EFLAGS: 00000297 [ 2048.923371][ C1] RAX: 0000000000000001 RBX: ffffffff8ebe6100 RCX: ffffffff91d33c01 [ 2048.923381][ C1] RDX: 0000000000000000 RSI: ffffffff81b7d6be RDI: ffffffff8ebe6100 [ 2048.923389][ C1] RBP: ffffffff81b7d6be R08: 0000000000000001 R09: 0000000000000007 [ 2048.923397][ C1] R10: 0000000000000200 R11: 0000000000017a1b R12: ffffc9000330f3d8 [ 2048.923406][ C1] R13: ffffc9000330f388 R14: ffffc9000330f6d8 R15: ffffc9000330f3bc [ 2048.923415][ C1] FS: 0000000000000000(0000) GS:ffff888123eeb000(0000) knlGS:0000000000000000 [ 2048.923430][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2048.923439][ C1] CR2: 00007fe5ed20c286 CR3: 0000000037f7e000 CR4: 00000000003526f0 [ 2048.923447][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 2048.923456][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2048.923464][ C1] Call Trace: [ 2048.923469][ C1] [ 2048.923476][ C1] unwind_next_frame+0x3c3/0x2090 [ 2048.923497][ C1] ? kasan_save_stack+0x30/0x50 [ 2048.923512][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2048.923533][ C1] arch_stack_walk+0x94/0xf0 [ 2048.923555][ C1] ? kasan_save_track+0x14/0x30 [ 2048.923569][ C1] ? unlink_anon_vmas+0x228/0x8e0 [ 2048.923587][ C1] stack_trace_save+0x8e/0xc0 [ 2048.923606][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2048.923626][ C1] ? __lock_acquire+0x49f/0x1a40 [ 2048.923641][ C1] kasan_save_stack+0x30/0x50 [ 2048.923654][ C1] ? kasan_save_stack+0x30/0x50 [ 2048.923680][ C1] kasan_save_track+0x14/0x30 [ 2048.923693][ C1] kasan_save_free_info+0x3b/0x70 [ 2048.923711][ C1] __kasan_slab_free+0x5f/0x80 [ 2048.923726][ C1] kmem_cache_free+0x127/0x6b0 [ 2048.923746][ C1] unlink_anon_vmas+0x228/0x8e0 [ 2048.923765][ C1] free_pgtables+0x299/0xd80 [ 2048.923782][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 2048.923801][ C1] exit_mmap+0x44c/0xa00 [ 2048.923818][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 2048.923833][ C1] ? rcu_is_watching+0x12/0xc0 [ 2048.923852][ C1] ? uprobe_clear_state+0x49/0x260 [ 2048.923870][ C1] ? find_held_lock+0x2b/0x80 [ 2048.923887][ C1] ? uprobe_clear_state+0x5f/0x260 [ 2048.923906][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 2048.923930][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 2048.923948][ C1] __mmput+0x12a/0x410 [ 2048.923963][ C1] mmput+0x67/0x80 [ 2048.923977][ C1] setup_new_exec+0x1d9/0x2a0 [ 2048.923993][ C1] load_elf_binary+0xa8f/0x51c0 [ 2048.924011][ C1] ? __lock_acquire+0x49f/0x1a40 [ 2048.924025][ C1] ? lock_acquire+0x1b9/0x370 [ 2048.924039][ C1] ? find_held_lock+0x2b/0x80 [ 2048.924055][ C1] ? load_misc_binary+0x967/0xd20 [ 2048.924071][ C1] ? __pfx_load_elf_binary+0x10/0x10 [ 2048.924088][ C1] ? find_held_lock+0x2b/0x80 [ 2048.924105][ C1] ? bprm_execve+0x8d9/0x1730 [ 2048.924121][ C1] ? bprm_execve+0x8d9/0x1730 [ 2048.924139][ C1] bprm_execve+0x8fb/0x1730 [ 2048.924158][ C1] ? __pfx_bprm_execve+0x10/0x10 [ 2048.924174][ C1] ? copy_strings.isra.0+0x491/0x790 [ 2048.924194][ C1] do_execveat_common.isra.0+0x4a5/0x580 [ 2048.924214][ C1] __x64_sys_execve+0x93/0xd0 [ 2048.924232][ C1] do_syscall_64+0x115/0x870 [ 2048.924249][ C1] ? clear_bhb_loop+0x40/0x90 [ 2048.924265][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2048.924278][ C1] RIP: 0033:0x7fe5ed152107 [ 2048.924298][ C1] Code: Unable to access opcode bytes at 0x7fe5ed1520dd. [ 2048.924304][ C1] RSP: 002b:00007ffea1dda8b8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 2048.924316][ C1] RAX: ffffffffffffffda RBX: 00005596e7773e40 RCX: 00007fe5ed152107 [ 2048.924325][ C1] RDX: 00005596e7773e68 RSI: 00005596e7773e40 RDI: 00005596e7773ef8 [ 2048.924334][ C1] RBP: 00005596e7773ef8 R08: 00007ffea1ddfe87 R09: 0000000000000000 [ 2048.924343][ C1] R10: 0000000000000008 R11: 0000000000000246 R12: 00005596e7773e68 [ 2048.924351][ C1] R13: 00007fe5ed317e8b R14: 00005596e7773e68 R15: 0000000000000000 [ 2048.924366][ C1] [ 2048.967838][ T29] audit: type=1400 audit(1783766690.247:3399): avc: denied { write } for pid=28457 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2048.993015][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2048.993033][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2048.993055][ T30] Tainted: [L]=SOFTLOCKUP [ 2048.993062][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2048.993072][ T30] Call Trace: [ 2048.993078][ T30] [ 2048.993086][ T30] dump_stack_lvl+0x100/0x190 [ 2048.993110][ T30] vpanic+0x552/0x970 [ 2048.993126][ T30] ? __pfx_vpanic+0x10/0x10 [ 2048.993143][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 2048.993167][ T30] panic+0xd1/0xe0 [ 2048.993182][ T30] ? __pfx_panic+0x10/0x10 [ 2048.993199][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 2048.993218][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 2048.993237][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 2048.993255][ T30] ? watchdog.cold+0x1ec/0x234 [ 2048.993272][ T30] ? watchdog+0xcc1/0x1030 [ 2048.993292][ T30] watchdog.cold+0x1fd/0x234 [ 2048.993313][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2048.993334][ T30] ? __pfx_watchdog+0x10/0x10 [ 2048.993351][ T30] ? __kthread_parkme+0x18c/0x230 [ 2048.993375][ T30] ? kthread+0x13a/0x450 [ 2048.993397][ T30] ? __pfx_watchdog+0x10/0x10 [ 2048.993413][ T30] kthread+0x370/0x450 [ 2048.993435][ T30] ? __pfx_kthread+0x10/0x10 [ 2048.993459][ T30] ret_from_fork+0x72b/0xd50 [ 2048.993481][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2048.993502][ T30] ? __switch_to+0x800/0x10f0 [ 2048.993526][ T30] ? __pfx_kthread+0x10/0x10 [ 2048.993551][ T30] ret_from_fork_asm+0x1a/0x30 [ 2048.993583][ T30] [ 2048.994484][ T30] Kernel Offset: disabled