last executing test programs: 2m59.664977647s ago: executing program 1 (id=1698): openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xd}}}, 0x24}}, 0x804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffea7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@index_off}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080)) 2m54.017501306s ago: executing program 1 (id=1713): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x1f, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x2c, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1}, {0x3, 0xfff2}, {0xffff, 0xa}}, [{0x8, 0xb, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 2m51.539838641s ago: executing program 1 (id=1721): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x34b8, 0x0, &(0x7f0000000100)=0x0, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r3}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m48.3785719s ago: executing program 1 (id=1734): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000500)=""/102400, 0x19000) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x100000000) 2m46.176635766s ago: executing program 1 (id=1745): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x3e, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0xa, 0x7ffb, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x2, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x10, 0xf, 0xc559, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x1, 0x1, 0x7, 0x5, 0x2, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x20000000, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8c, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x9, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x80000001, 0x0, 0x5]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000001340)={'syz0\x00', {0x0, 0x9, 0x7, 0x6}, 0x17, [0x9, 0xaa48, 0xffff0000, 0x80, 0x8000, 0x10001, 0x5, 0x1ff, 0xa, 0x7, 0x81, 0xd, 0x400, 0xd, 0x3, 0xfabc, 0x2, 0x9, 0xa, 0x5, 0x0, 0xcf21, 0x5, 0x1ff, 0x7, 0x9, 0x3, 0x51, 0x1, 0x2, 0x6, 0x7e76, 0x2e, 0x4, 0x2, 0xa8, 0x8, 0xa, 0xfb4c, 0x5, 0x3ff, 0x9, 0x8, 0xd, 0x100, 0xfffffffd, 0x6, 0x7, 0x4, 0x1f0c, 0x8, 0x571000, 0x9, 0x88c9, 0x6, 0x0, 0x7, 0xe, 0x4, 0x5, 0xb396, 0x0, 0x1, 0x1], [0x1, 0x2, 0x9, 0x0, 0x8, 0x0, 0x4, 0x7, 0xd93b5b3c, 0x1, 0x0, 0x4, 0xc, 0x9, 0x58, 0x1ff, 0x2, 0x9, 0x4, 0x66, 0x80, 0x40ecea14, 0x0, 0x2, 0x263, 0x2, 0x100, 0x4, 0x5, 0x7ff, 0xf4, 0x6, 0x3, 0x6cd, 0x780ef5c1, 0x7, 0x0, 0x7f, 0x5, 0x7, 0x9, 0x7, 0x1, 0x10001, 0x2, 0x8001, 0x2, 0xff, 0x9, 0x9, 0x5, 0x7de2, 0xfff, 0x9, 0xfffffffb, 0x2, 0x80, 0x0, 0xfffffff7, 0x8, 0x3, 0x6, 0x1, 0x40], [0xfffff07f, 0x0, 0x4, 0xffffffff, 0x2, 0xffff, 0x8, 0x80000000, 0x291, 0x6, 0x1, 0x9, 0x40, 0xb, 0x3, 0x80, 0x8001, 0x400, 0x0, 0x0, 0x4, 0x10000, 0xe47, 0xfffffffa, 0xb, 0xf3, 0x8, 0x80000001, 0xeb, 0x28, 0x2, 0x1ff, 0xb, 0x1ff, 0xb9, 0x9, 0xfffffffb, 0xf9f8, 0xb4, 0xac5, 0x2, 0x0, 0x8, 0x0, 0xfffffffb, 0xff, 0x1, 0x1, 0x4, 0x9, 0x11760, 0x5, 0x2, 0x10, 0x3, 0x7, 0x1, 0xd15, 0x401, 0x8, 0xfffffffc, 0x80, 0x5a5, 0x8], [0x8000, 0x1, 0x5, 0x9, 0xd90, 0xd, 0x3, 0x400, 0x9, 0x80000000, 0x1, 0x0, 0x7ff, 0x7, 0x0, 0x2, 0x7, 0x6f07, 0x2, 0x5, 0x80000001, 0xf, 0x40, 0x5, 0x0, 0x6, 0xe2a, 0xb, 0x4, 0x3, 0x8, 0xffff, 0x4, 0x1, 0x200, 0xc16, 0x9, 0x7fffffff, 0x5, 0x800, 0x0, 0x0, 0x101, 0x2, 0x64a0, 0x23f5ee22, 0xfffffffe, 0x8, 0x7, 0x2, 0xfffffbbf, 0x9, 0x5, 0x15, 0x40, 0x8, 0x6a, 0x1, 0x7, 0xe06, 0xc, 0x8, 0x7ff, 0x9e4]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x2f) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f00000003c0), 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000120a01810000000000000000020000090c0006400000000000000005140000001100010000000000000000000100000a"], 0x48}}, 0x40000) 2m43.022321967s ago: executing program 1 (id=1753): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000004000)=""/4099, 0x1003) write(r0, &(0x7f0000000340)="0d96e5207ecf13ba34628839e3657d6417290a", 0x13) 2m27.889599144s ago: executing program 32 (id=1753): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000004000)=""/4099, 0x1003) write(r0, &(0x7f0000000340)="0d96e5207ecf13ba34628839e3657d6417290a", 0x13) 16.825610487s ago: executing program 3 (id=2114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="03", @ANYBLOB="e38a"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfe, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000180)='3\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 16.462007199s ago: executing program 5 (id=2116): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000080)=0x2c) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x1) syz_usb_connect(0x5, 0x3a, &(0x7f0000001b80)={{0x12, 0x1, 0x201, 0xdc, 0x86, 0xb1, 0x8, 0x97b, 0x61f6, 0xd49a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28, 0x1, 0xa, 0xff, 0xb0, 0x1, "", [{{0x9, 0x4, 0x5b, 0x1, 0x0, 0xe, 0x1, 0x1, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x40, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x202, 0x6, 0x9, 0x3, 0xf, 0x41}]}]}}]}}]}}, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) 12.26470728s ago: executing program 3 (id=2126): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_open_dev$video(&(0x7f0000000280), 0x4, 0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x48080) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000300), 0x10) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x709d25, 0x100003, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xfff3, 0x5}, {0xfff2, 0xe}}}, 0x24}}, 0x800) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffed1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x20c89e, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) (async) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x74, 0x21, 0xe0, 0x40, 0x16c0, 0x5df, 0xa276, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x5, 0xd0, 0x7f, "", [{{0x9, 0x4, 0x20, 0xc, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x423}}, {0x100, &(0x7f00000000c0)=@string={0x100, 0x3, "0eb4c1f00fe3ddc7275b3871687841c4b27887868982bac3b6a45180f0368b1a20cc991c9a6d221ea87d137bfcc35eacf33ba459fa432fdeb04217afb085259d5517fad5cb049d2ddf11673e9448bf58da5e0b8029fbd4377e1a5ee772ddf115932b2eeb2d0f00ef850435a73f6fbda208061ced4c89c7333015ca636d80bdc417c836c7546b98b90eedd2eee2f806e03c516da54552444976e427403bd917422f9e51919a3cbc93b4bf6cc0c30f3594da0c9a0ab9b7e3f62c9d2ed8b4ee1b12f798f5e1629525900dac02b629c581738ee5df784c1909af9a24f45ecc8ce8f3acfd4a790f10bd007d0e2c92af98e5aea2f9078c05c86c9a19306ed570a6"}}]}) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) write(r5, &(0x7f0000000100)='3', 0x1) (async) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000200)={{r5}, 0x6, &(0x7f00000001c0)=[0x2, 0x6, 0x5, 0xa1e, 0x1a10, 0x9], 0x7, 0x8}) 12.073433444s ago: executing program 5 (id=2128): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) write$ppp(r1, &(0x7f0000000340)="b8f714ea29bf24bf3d6f435c87c07564b325a47ae1e12bfc5f3f00cff0d505ac3046b72e0cd219caa9b8359d0163c3fd64f39466e50627a61a9becfd8e39852649511a11837f0cd17e64cf997f2890ef94d52095b977db75797b7f0a3cb37e52", 0x60) open(&(0x7f0000000040)='./file0\x00', 0x6000, 0x5) r2 = userfaultfd(0x1) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe) syz_usb_connect(0x5, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100025e022d2099115268d56cd02d0301090212000100824007090499030009"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="20000000410007012dbd70e0fddbdf25027c000004002d800400018004000800"], 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) add_key$user(&(0x7f0000000440), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)='7\f', 0x2, 0xffffffffffffffff) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x6, 0xc, 0x54, @mcast2, @local, 0x8, 0x1, 0x8, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000580)={'sit0\x00', r5, 0x10, 0x700, 0xffffffff, 0x800, {{0x2b, 0x4, 0x3, 0xe, 0xac, 0x68, 0x0, 0x8, 0x2f, 0x0, @local, @local, {[@timestamp_prespec={0x44, 0x34, 0x55, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x49f5}, {@private=0xa010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x19}, 0xb}, {@remote, 0xff}, {@private=0xa010100, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @ssrr={0x89, 0x23, 0x5a, [@local, @empty, @local, @dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010102, @remote, @private=0xa010100, @multicast1]}, @ssrr={0x89, 0x17, 0x8c, [@loopback, @remote, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x21}]}, @rr={0x7, 0xb, 0x75, [@multicast2, @private=0xa010102]}, @timestamp_prespec={0x44, 0x1c, 0xaf, 0x3, 0x6, [{@local, 0xbf}, {@broadcast, 0x7}, {@multicast2, 0x1581}]}]}}}}}) get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0x1, &(0x7f0000ffe000/0x1000)=nil, 0x4) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000003, 0x204031, 0xffffffffffffffff, 0x97170000) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0x3, 0x6}, 'syz0\x00', 0x38}) socket$nl_netfilter(0x10, 0x3, 0xc) 10.552152659s ago: executing program 4 (id=2134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x80840, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r3 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x1, 0x0) mkdirat(r1, &(0x7f00000001c0)='./file0\x00', 0x109) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x20008030) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b3243078b089b3430076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 10.357722249s ago: executing program 4 (id=2136): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) 10.268568896s ago: executing program 5 (id=2137): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) 10.169354213s ago: executing program 3 (id=2138): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x24, &(0x7f0000000280)={0x0, 0xa49, 0x0, 0x0, 0x1bd}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = epoll_create1(0x0) r6 = socket$unix(0x1, 0x1, 0x0) close(r6) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x3e000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r7, &(0x7f0000000580)=@abs, &(0x7f0000000600)=0x6e) r9 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000500)={0x0, 0xa355, 0x10000, 0x2, 0x15a}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = dup(r15) syz_ublk_setup_queues(r16, r14, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255, 0x0, r9}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x6, 0x15e, 0x0, r16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000004, 0x142, 0x0, r16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8256, 0x2, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r16, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r13, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) r18 = socket(0x400000000010, 0x3, 0x0) r19 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r18, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r20, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route_sched(r15, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000001040)=@newqdisc={0x1b4, 0x24, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r20, {0x8, 0xfff3}, {0x6, 0xfff7}, {0x6, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @qdisc_kind_options=@q_tbf={{0x8}, {0x84, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xca7a211e122457eb}, @TCA_TBF_BURST={0x8, 0x6, 0x8000}, @TCA_TBF_PRATE64={0xc, 0x5, 0xfcba89fab5eceac7}, @TCA_TBF_PRATE64={0xc, 0x5, 0x1aae8f7e6e6a2bff}, @TCA_TBF_RATE64={0xc, 0x4, 0xe3e2d0ac92447683}, @TCA_TBF_PBURST={0x8, 0x7, 0x229c}, @TCA_TBF_RATE64={0xc, 0x4, 0xda086569726a5d0e}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x800, 0x3, 0x101, 0x4}, {0x3, 0x2, 0x0, 0xa, 0x9, 0x7fffffff}, 0x5, 0x3, 0x104f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x638befdeb2ef9bd6}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_STAB={0x6c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xe7, 0x7, 0x5eff, 0x1, 0x0, 0xc, 0x9}}, {0x16, 0x2, [0xadc, 0x0, 0x1, 0x0, 0x9e9b, 0x4, 0x3d4a, 0x0, 0x40]}}, {{0x1c, 0x1, {0x7, 0x3, 0x9, 0x401, 0x3, 0x4, 0x10000, 0x9}}, {0x16, 0x2, [0x1ff, 0xdb62, 0x1ff, 0x7fff, 0x40, 0x1, 0x0, 0x0, 0x3]}}]}, @TCA_RATE={0x6, 0x5, {0x10, 0xd7}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x9, 0x6, 0xfffffffb, 0x2, 0x1, 0x72, 0x3}}, {0xa, 0x2, [0x4, 0x0, 0x3]}}]}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x2, 0x0, 0x8, 0x0, 0x4, 0x9}}, {0x4}}]}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfa, 0x8, 0x7f, 0x3, 0x0, 0x0, 0x4, 0x5}}, {0xe, 0x2, [0x0, 0xff, 0xcb39, 0x9, 0x81]}}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x18, r17}, 0x10) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) mmap$IORING_OFF_SQ_RING(0x2000, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)={0xa002803f}) r21 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r24 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r21, 0x2) syz_ublk_setup_queues(r24, r23, &(0x7f0000000180)={0x0, 0xc22f, 0x800, 0x1, 0x16f, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd35, 0x20, 0x20000000, 0x364}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x262f, 0x4, 0x2, 0x43, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9360, 0x2, 0x1, 0x42}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc264, 0x2000, 0x1, 0xf4, 0x0, r1}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x4, 0x0, r24, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r22, '\x00', {0x3, 0xb44, 0x0, 0x0}}, 0x0) 10.133610986s ago: executing program 0 (id=2139): recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xed}, {{0x0, 0x0, 0x0}, 0x7f}], 0x2, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r2) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x1, 0x2, 0x1, {0xa, 0x4e23, 0x5, @private0, 0x8}}}, 0x80, 0x0}, 0x800) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="60d6b068fc45"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r8, 0x1, 0xd8}, 0x14) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0xec, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4c3}]}, 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800008, 0x31, r10, 0x65717000) ioctl$KVM_RUN(r10, 0xae80, 0x0) 10.063276458s ago: executing program 4 (id=2140): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/66], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRDESCSIZE(r2, 0x4004480d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000081e000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000051a000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r2}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x401, &(0x7f00000002c0)) r4 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) close(0x3) getresuid(0x0, &(0x7f0000000140), &(0x7f0000000180)) rseq(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5}, 0x22, 0x0, 0x0) ioctl$TCFLSH(r0, 0x89f2, 0xbffffffffffffffb) 9.83423175s ago: executing program 5 (id=2141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x80, 0x24, 0xd0f, 0x70bd30, 0x0, {0x60, 0x0, 0x0, r3, {0xc, 0xe}, {0xffe0, 0xa}, {0xd, 0xe}}, [@qdisc_kind_options=@q_red={{0x8}, {0x54, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x1}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0xffffffff}, @TCA_RED_PARMS={0x14, 0x1, {0x7, 0x0, 0xf43, 0x4, 0x17, 0xe, 0x7}}, @TCA_RED_MAX_P={0x8, 0x3, 0x101}, @TCA_RED_PARMS={0x14, 0x1, {0x4, 0x8, 0x3ff, 0x7, 0x1b, 0x6, 0x1}}, @TCA_RED_MAX_P={0x8, 0x3, 0xfffffff7}, @TCA_RED_MAX_P={0x8, 0x3, 0xe}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x55}, 0xc010) shutdown(r0, 0x1) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000001fc0)={{0x12, 0x1, 0x220, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8, 0x90, 0x3, {0x8, 0xb, 0x1, 0x0, 0x1, 0x2, 0x20, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x7, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x10, 0x8, {0x8, 0x25, 0x1, 0x3, 0x30, 0x40, 0x58}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x34, 0x1, 0x4, {0x8, 0x25, 0x1, 0x2, 0x3c, 0x6, 0x10}}}}}}}}]}}, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0}) 9.085566669s ago: executing program 2 (id=2142): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x34b8, 0x0, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000180)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r4}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r5, 0x0, 0x0, 0x1c) 8.550966902s ago: executing program 0 (id=2143): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x34b8, 0x0, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000180)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r4}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r5, 0x0, 0x0, 0x1c) 6.848241999s ago: executing program 5 (id=2144): clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xa}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x30, 0x5a, 0xffffffffffffffff, 0x70bd2a, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x86b}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}]}, 0x30}}, 0x40000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x9, @loopback, 0x4}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @mcast2}}}, 0x32) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000440)="ee", 0x1}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000280)='l', 0x1}], 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x1}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r7, &(0x7f00000002c0)=""/10, 0x5b) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000180), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000440)={0x73622a85, 0xf, 0x3}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x1, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/189, 0xbd, 0x2, 0xa}, @fda={0x66646185, 0x4, 0x2, 0x2e}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) syz_usb_connect(0xf400, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) getsockopt$netlink(r5, 0x10e, 0x8, &(0x7f0000001040)=""/4096, &(0x7f0000002040)=0x1000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0) 6.797545502s ago: executing program 2 (id=2145): socket$pppoe(0x18, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) eventfd(0xd5) connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x2040400) r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) mq_timedsend(r0, 0x0, 0x0, 0x9, &(0x7f00000002c0)={0x77359400}) socket$packet(0x11, 0x3, 0x300) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008e80)="0e24ac7705237246fc1db898fda0c7f95d375ea7f4bc7a07517a51095880f2219d9e4329f6c4e734f2bb34564a1c2e298d7eb8844d8af7b30e1a71750a2511e44b368fc6e9ae65e40e64e4b5fd3d0f87009b5727519df1ddbcbb38ef00871f00ed2543b7f2990a44482bf3d7478c3c2799dd8120fc3258cfeccf648fe15128c54d1d4272bfd44950915afd3aa0abb5b04d4dbec287df0816c3e43c2503cac6e95041aa205c5958f51a9c4c8214ae2108401b08ae7ff8440988c93424422f06c628077d767432521fefa0f8d0f387e685e4af54bdd7f931c3eace52ca7a6ba2d0fd701e5d77393e6268f52e68d97087f87edd2ae49180028bf08ab7e02c3ef12aec2f286d1bf40fd3a5f337b0f0b63d701c60bae36a5e1644bc90f34165049ac5c4fc8a0ada90e345df1420a58c92cfcc6973d3fa532b8b4088592e0f2c36f7e756139b272fc99104a93c5cf2599c683b60910af98a55b17bf646ddddb13e73d0bfdcfb3e3d261d84f83270832708f6e5b3fd2bb98e135b914e21681b409d717afa8f65dc9d3ab6a78b9b026b6aa1f1ee5872426b4bd4fd652072f86dfb96ef79649396a0f19239b0ce6ba9a8ff49f8f4820579a3169fe54b6f060a69236d57a1a13f033054fb22dbfb3f72861acc7ed51ebed60a8a03c3e16030e7a114d0690c268713d8206b34a005fb89d5123103d36ab57594fc731e8a6353ab3be3af22faa6f85b54ba78b90aba30e17dad90c31a20cc5f39c8ff50097bb310535efd6ecbc49dfc2d547bee78d5c5ebfe0d4bd3c093413e12cfefbfdb5f38c437ce831b209f3337979f6e0c46d8bf272a3ac6076c7940f905536167d2285d2a7d0e75f1765f0c080f1dfd9bae98afdfda7e7837d1081d83effab72e6eff493cc9031a299383f726227d75474e4c8378b2376fc7fef8b213b26794edc4c2fc110d917b863d25e7382b19b1b90cc90428f6aa0b1df015bcbbe83de36ff56c065ba92f1f49e61ac6bc6b3c20e42e7763dd52f66095f07e235f0062accb0eab60ce54d84391cbf2613096ded353543b5d6a884cc981b759e4499ab72881f88542208c9fd81b541514d6d2ed54683926b0d6bfe904b76215aea6db4cff8242d3ee5524acb456ec219e42d46c1b1e3fa9748404db4583537b195ad326853ed9472790656ab01bd031b19fb64b0e5227d18ea09ea7557c9afdc918c918a1fafdd18f9f54682bf0f49ba2ae14f963340dc6600e1b344ce50ed61af0726e3441583f8cf045df193dfbce93285d7fddfc0d831fefc85cd3e7920757f27a4e09b5cfa77b93a5e82f571d1293d9437cf89997011eee6ba9f9b7e6ce2fe1c381cb2db053a6e2d9351edbddcc10faf80f5b686727dd8982b12604fde3467f4a7e98b13250df7e1eef67da8f7fe3fffd3a185457aaaecb38f5ca31ea3e35cc7c6adc3873c734cb661e3c43e64bf0843b2cf1d950642eeb20d698cc9e598eb7ec71d3a0d83f311afa2d40a659a219defad76fdb7e8146756ff02a8a74abf8a8ccd72ffd7f70911698d54552aada8ef27b3f5b2644d4d0fda2976d838686a7469b296a98b67b7cc9834dc94f2292581dd242d1abb42db30d4de42c4611c0fbdc77134a6cb0c0d7b36d18a217aaabd34744ed5cac171e2a8bfe90b2dad03d0ca5f74d3eb95c454757be4c77f386c63fee91e95a508d8fcea5cd6bef9bd05e0b992da4e4cbc2f52c9cfde09b6f17f3d73fffc01d7ac55f328061516cf0e4fa50fff5b03dca67b163a68d9ddbb988f50a68fdbfc6e6feb6c892b58eb766d3429396669228dd1653bcbb5cb47c0857d27660e62d23e90178ef2b75713c2c58a207d8c21e9ce64556bfd71b40207ee76416f9f40c5601173b1d84105ac331247c021941a6a27e86de4f9a4db382f67dd6dc8e86a02a8438ddda1a636256fcac8e2328aaa3c054ab86f55c9d7bb2c2999a5c7933f092a3bf66523cb388052c65d138346ad1c5137fa383d7b9023b1868af02cf48923289162544db8fb29cf592c306a76ec92b35f33fae90f5aeac830b82dcc3f0069f668aebe6e5fe13c811f150de080632e357221d2f220ef95ce436730d1f9390d9f192220347d04ac5a94631e349ad330276b9524f775f7a8f68be7823ad7ed3ac4b4d87a12c0261846ec1dfe785b60675968e79496d7ae4e5d478661bd7125f2cc0de35422764556b63d687b339e2b25ad43ca85bc861944d19f9689dffe71d87030d23e0428942441d622de361778cbe8952f7b93c74783552b0087bff535afaf92935aa889018e46d34b2a258f863d89e4b6da841389fa63d489d135e559b7d11b8d97215323548501c275248eb07916ae3f0814c6af32f5ece7eb0330bdaac4394c518f3c8e48cafc36057cfa7788fb2f9a73bddb1d40546cf21b681e6c9ef6f0ac43c512762323209b2c878ed5a9f55e207b56a33c863eaa34a6eb14ad8de9885d52a7c073a406ea4324f8433ddfd89b269d6716072627054197928370ae01a94e3dd4d07125560a5cb1d1bfbbd8c099194de5f787a550a3400ce796e115702255d1f17d96a7fb63384ff497cf72beeb50bd24008ffc58256aec6b2faff2c20336e29bc1acd853214496893af25e8efb571c96edf64fbcd136c95e1213e73bc3f1a896fca2bde0894449ee2927c38114de5f1063d0c203c3fab1389861c4cda173a991eb275ccffe04f75d67df181c26777b18e5552b42fb4332046554109a9a6007592a62d2553dbd098f1daae593322e45f66a64bdb09869feede70d1fcc88fd4c19f4008d1b1d5f34a6025a71d9bf6ff20daccda25cbcc662cfc687ffe5ebc344468f338f4c9bbdc7ed9820feb5e3b09ace47f4253a81da7029816656613aef7456524fc68f4345bc0e7f26240d4594374d2fcb39560e2828e0e219b2417f5787add73418b465b1308d5ac5169791f55802d11354eb62940a492d955e8bd11b952a28acea90cb43af774e6fc75e57383e68937aa3643aa37f7e7665c703576579dcccf63d2bdadfbf14be796d4023689880453b0ff576fb01bb141be3c17478f0d555ca96ff7c3f3e4f53be1f088827203fab2008ec6687e4f5df305f58fe647b93ad09a70165c989498d313ca5ba05f3ce90adc80d55b56d0ec4cd5a78268cc6def7e8bb810bc29f8e742487048363815fa3fe645194ee8529ffba2b8d6756915530f142b42f31eae1703faeae14f3d81ae5c2297c3476b0f89b32f53802453fc74c80bf217097577a910a51860bbead4f73a29423816eadca7b1e2d24a9895949b352fe59f13abfa7b69c0f0061eaae2ada6d72b2f90c9c553ad8be9ee4e4ad2876851a3f3e979c4d770d7df9a27e72ab215ec3efd252d622e7ec6160ac951d1ee9b8c0adc0fc853f2a4f36602c955b61646246e07bd7b745f5d3e99f95f55a1616ed36633db6efa97a96dacf12219cf1555222cc6a589a6def5680124f7ac2f1ec83832a30fd011ff02dbf4ab01afb5989fcc678383f179b5d647cf0a762acf0714e9e4151afa39626884e6f56859d3aafc9fc7f7bbcfb27e038e238783cf56c86f0be52568c4bed0917d651f4d26f76ba6c343e075146504590da391e1c4d028dc81767294df5de9370d62756584baa3bfa31578b6f754e77b0d6ea7357d8915ff0bda182b604b014ecf7dc94ab97061765bfab2053fa863fb671fad3b6312d6e59ba0e70b0ea2476399e925f8fa2e51c9bbfac19aeb11db3dd6ea8d916c4d4eae7de17259e6155591be9b704d3e24cda131eded5e9dd6758dc90a5c7a43332957d26ac91bc65120b1c6b7b94fdf83b397bd8990747f01d3ed912abeab74bb5ae3ff2ee0009cfe8cdb6b4e75a7de3566c8ff7bdddb06b7775cf3116b029e7c85fb7189147e753d614caa490594ff2e22b7144153c635ac7b20a49c2d8575af2f546b968bea9fc4ee5ff417a6fa86ca09c8fed14ea4b721b2d5870d4b670761c70516daa07809ac3817246844f01eadda045c57d1c864cbaabedf90cb42d374392e77b3d1a1afdf962feb55a4e04a77c8fb452429007e0046a406a5f2325f0c7f75a19deed1b456ac5de6486eebbc126ff97c5ee8531a975676b61a0d79f56ff75cbcd20337119422815537a57766648777f1b5f75d358dc63764083406e2d95afd87d00099581940367ed029065df0d9008301fb92e019feac9bb406032167eb053ab07309385771aacc2c52a5d526d14721fd530e63cb7c53f27518c679ccd0f3d2db8aa52ef95c6ac3f5dac0b9b5c3a96a794690f3d49aa0e5a4a95b36609cf61d471cc2c0cd55e8cd96be47558b055280313b15907eba5761180f5229a59341faa1e11eb5b6a48ec9320efb1d9f00936d9a5d91f2bf837fe72edf6ec025c1c4e87171cc02c7342fa5d4f825157d70d8f66f6fa0542de2255373d8743612e7d4e16b8ceebf4e92c40926f21929cab343b981120236b8b0b900772a33bbe4eef06feff3c7b104cf63d92c7f9233982f9b713489fb8bf80f2feffd6c22007b63925209e158a837dc95b42d52ed764350b5f83ad54041bc15a7552c0b8c1933d674a16b0c0934277d9895c1ad01327231a7fffc4b5e1a1495489559bebff324d54f2894563a23b85d3bef62c356eb476e01e0c039287ca38626751f701ef4e20d951433940ce1138660589ff389dee9f85a7faebb9cc494bbe7138b413303af6e05806032d8131d5a25a5d7c0ed87906d92bdd87ce7d62c13989f3435ad77a29b721d8219d2cf530c2ec9edc3de9ce2dcd5053c38a6797de8d8cbd3596ed545d2dc6f825a0e65428dd73df96d5f3e40dbe5a62f0f440f712419d1558ef97bf1d0ca1d59fa1caf6ed0d422456848e196e94b4741b757935bc3aef3a46f53066dc7a74f42d539da2228fb8593ddb79ac977a8b67c0a6058efdbe23ba75fb2faf5b9f152e60b8a96ee19fbf0c417c89f882c53d389bf27a18b9e34b2a33aa27029cfed7a03335cf33d95ea803ad125237a9cc70520f18bc7e9f0c1432368a5304544f5d1e1599242bcd905f69f25cd0fcde391960fc57426e0bf22155ea315f0caee330bf3b7f4f4363f87146531175ad4f69002d46e95a48f714c9bbd9e39b95783406d477dabe03397d68e7af5ee623b4c05eb64120ca76af4f1d37348f93f39d8fa1d22fef874ce65b66f8a1aaff9db97520dab97eb8d1f99efef4d4c9704d181d687874ec4fbb400ed4ce050ac997c843e647bebeddc33eeb70201b3286ea25ad1bdb80dba1fc78a6883ecca84d17645be16bee32967bd487c6f5e0714ca819d5913436ac9aeeab4e5092ec1897dad39737365e8414246a81a731bf7d3ad8d789b42c651702b70ee786032356e3b9fc4402104ffbe55026c84e8ec5dd2a1860cefd0e7789ac2a47fa5ee9610dee980fa3c2fa7219b4e57642f31012b3e00e64285fda219fa9ca37955e3c25fd5872172ed2f5651d208897ed4e1d224243b2f241f24580e924e02cb60af5e14898028596400a770f94e67590df5fe99e9d170d061397f71f4202eca4c91c7fc27e2379358a8d9bfc28c2fb67842b0bd1e5e68e017b34084aa08e7453fc6b03bd42772643eae036f25f10e4da022818dc84f35eea2c07e4dbb41e861b8a4c6df4f0b4b785f0df55f863707a0563cdd5b9fcaa352b54071cd486cf4948575ddbe4654a566438922887a3bd304853a98283c7a4d7757cc6e8298b0121aca5fdb64d86996d8c0ddfa1ee4ccef1ee21dcf853bdb02471383f73ddae17dfef217c6a3f79b182fc36bdb47d1899e87bb4c4e490ad4a2724d223b31b889685355f349ca8bc62d39150ebccaba863bd72bf91d65cffe560eecf162b2440f9d74fe0fb3f8479fd8f6293f16e4d67b3ec30e83180444cec51d2b455a3ab2b6286d4fac1acba8b7b5026671fef497d5e050e0aa34dcecf2d06a9e4b60cdb3f9cbb7cadd73c817f255f8e2eb22d6283a7934e0fd64eaf52caab2d1862baf505889e4db1a1870f0049b3ada06d38af52535da352bedbf1e88e34595820cedd4559cbe0fe0578c557a62f56060d75c5a6806e384d3c274c218d57beecbd8e7832f3cc050668b44c1b8ff8cdcd2b85b5ecb9eca1dcc1204d27bc3689578eab43dac5658a1cfe75456b221c15ed26720a49829f96d501fda6d7839724207d6a5f6bb3d8390e90dd7c6b80e15e6b20b7c74ff3282c770eb1c77583fc97bdb5f2df62a74b3385e2e8ba06fc39730f1f02107477c215deb6c8599cdacc7c710b7b1a77afbe3b2a593f6eec5c8014dd366f5890a1a579e51d858cc8ef93aff098af9903b4e3633a3090a630e64be99f49d32d63d779f989d0198044717741d3bfab4242a05dae33f11ed6b1d850fb379f725fdb7b296d9d9b3024160d4fd735a77c8ab23f0816bfc2715a2561c3cee6e41cf79030c1500c09e75ebbd5a7aa8a0e4826542ad46a9350e969b357c142af13afdd8927cdce3d1f35493f6a7a14c5a20739d462d566fe3ab620f1ef323768bd871eb454dad947f2a871efa05d601cf9fb08d992caf6f4b0f652e13df7dfc658f50e0c9bfc3bf28114a51142f65e25435a32c8719fde2a3d5c4850e31ffa675fa44f9e54957d108e46a67a3b7d71b272ecb0385466e39238f6421b2fd6f33a258883a4501b63001ee9ecb9137162488051f7ff15e6f4be81ca31ffac70f48bcd3457fcb137a2f5108d908ba1d51b0fca7e14273b176af4b954837dc3d40b4341fd03063ee145dfc4456bb303bb0540db3aadb26240242f4a55cb9f6623b6e724e0f9d8b73d02c9fd9140873c0bb884e3cf4c844bad6f27388b56840b63d65ca760dbddf778e430e1f03c246e74e9b56a08a56617658f7fc42e3582f3181a720e51598d22062815ca3caebf36389a58278acc788035d8deb0b800180ef6537d92bfa18947cb18232bfd27e048fcd49d44c137f1d8a10294a6dd20251a00c379bb0936fcb5137c9f5a7a7404976c778912a37f1503deb27b85d3b1d886415a98348d3632c7eb4bf58fdfddd5b24407709474e4478c991a03ed8b456d9a71ec82f05791eb17425e0360493fb5ec343eba7e9c970f47f4cd85edda849cc524d42a11eaf29be950e621cd12e16e3a304516ce5c74a2b47a1baf1f3321b84318883bb023cb5f67dc3541a4d72ebb3316244f96cde4aebc1a77336a93d226c315ab02581123140e45373f40c8cfc7fb5d478607f9b38c2b95bcd55fb8a2047569ac7927b9e4208f75032abfe83442d2ca5db1ee8903888548b5fa9724520083052f8e652f1b0d39d031d2c61f63e5cfb98061b5b913dc6da26e690c85b07fa19b9bf83d124a5fcf96de21d9f00c9aaf2ec66580e4dd99c21c01b7557b7c6336cec525003157d3efdd16a52407b35225f65e44933d56c90dbeeffcfbe2b10bdd921a507592817043c88bab1882ac8863f8a73fed3310138ae56c9b5fb8aa22d5d6ab9e5ece2afb94c5054bdc8444b00a46d74716c21346f2dce31f180f3e01453d7a7aaf4200c4be278a2a88fbec4529a551189da822d1365c8ac70bd6c6cb3c3791e183eeba95e65f1f87c10b2f740bee2575807c486e3b7939f093d44693ac069089830afff26d7165712abb7ba5bf8aaa87a3d57c5670b3a45d707b87aa7689b18292d851cac59802b38bd7ab8e1c3b8a134db1a366aaa8f77a6e2c937f49961637d291970b4541e3405948ba2ef49b40f600e28861c54f06a2400f82ffb2b9a0d4c6da720f9fea31dbe3f42aa29bd126fcbfccb9d809c8bbd76d241fc2588963f10434b69e9415d20bea13c30a08b22f5f21bd945a11466d228848b7b68927725239142fc536f784b705d3bd318f5d5fce31ddd32eca57309b1f9e5cdb0164df0bc45d04db323ed272fef5e4e0554cbe0eef83999d6dd82b67a5de6986b7063851602f833a23946ffb004b9cb30f6af2108e2aee029aa3e4fd525597f4a8d0184750731821bf21aaf703753270d3f12d5ed5f7bdb47c891074a44c63bebe47c66aab7f24e422b5f549249f26cab0aac9484087871de53cdb6d575e0e7ea3c73de23460c5b1bbe1e838433de48ecc812c1e21861dc290f22733090b5d3f88910478bff51307e6d869b68a745255ca007b9f5dda63074845d4d8f03604ada7cb5f8c1bcad9f3a84bab71e6c109ef7bd8eb29ba18011430f28eee91aa83749594aa5c717c0d53e0ff68372284e356e55f9cf33716ade1e148beda327236f4005472600f99a1c2fbe10c5492d2e082d15fa962492b16029a222bce55a001b2726fad239160f3ed55e98343fa5266cd7f5e36158480430e2f802fbfa3aa6e7299ab0940eea91682c79fffb171a705a23b70173f0973ca0b0ea230b306418677be4e6bcca0e6cc7bdbf6a3a96090819d541f505402ce505b40bd7d012ffb6a62f2528c5d370b2d6d6cf4b49c6886d20a5cc94cbe5e7cdf012af5d27c0c89c190956d1aaf1911888b33f67341fe74a10cba3328b84e3c4b83bb8b25da32122ed8df7b831e77bf9528af4b0960a0abb420e931eead4dcf31849cafc6099e8a3053758200bdbb411346662442e8274bc9780fd69abb4ef9ddd292f791b846a5849610862453cdb9263ddc232492de5d24c2c52751223cb961bb9ba7c86988b2a5490c3540ada6ffb9ba287c3e15d228aa0a6491ceced135cb1533b31c0b8ca218ffe4e1a07f29b4557a05b447358350ebfdcff9793b2eb1d7e0ea082b1f4fde8207071a8beb8c1e5efc49e1153fb8fb21ebc46c4d5b404a743a54076e4987da1748a39c70c083960873ffa0b88d4cccae69cdf4630a78250db81141e216e2007b7aea7500ad3176ae8e22c5fce5f14f0aa581bbe520a6d6c5f504547b178e62236f54809dd43763107e49b0d44a7968dcdf73a8c3c395fecd8a557ab850bebf1a67e82714131e0380fd6684e8094783190ce491a03243d903b4488d574be3847b4219145f5aa05201b4bafcbe2c2c98fb4e968c15822e20c06e83b0fc24d8d30acc9e24b36cfd06ad1a073719bf3a92922111e76efac5a813faaca76acfb065ad4faf1efe403aee89bc149bfa4e907008fe5f81d4e795c7a646c2b48e79b7ba54ec42425978c4d084c3c1f66ccdf230515366b08cd506a210e92e75bf7adfbaada44b619feecc4427ca23e74b68abfe9796a6e9a1f540d6a438042f506c27bb4f4814c73541b38eb7d548010363cdf7b2b6faf1a41a10fb71bd206388f32777c6b8e3fd7f6cd76342a1fba80deba8100f878eb4e4a09287ce513bb6b1f445e3cbdf220ff5faceb36c3a7f1a1710e780b9772124e5728fed14bbe348f0f4831913ae69ff40c953cc6447babbcf55b08491357531dc9d86fbe5cd4fd0d6e03e5b71daca299a8d31c3596fb98d21acc09d03e3fe7cc1f13c3e8b49b9dd40b8397ae617b322951a4bd8fe8a1eff9f920b79ddad1639da4d4a18c12ca3b65430e41506198483d5a2a0bc058269e7575cd6dc8d1a0393748622369c107b8a5fe570a7795d98b75e23d4c05c39655c8b81a389b512461a20711487695b8d4ff2d81ab4fe8c884768cbb99640a9ec5b54d3cd13a90f318e0264038b7f91dd73205342400eb9d186ed30286ff7cb9e459341ee59638b253148cfa74bada6b959f185b5cf68a313ff757836aafbbdf1f4440ec0f44d99c3950a6e2fdc6b7d8c6120f921630b93ec31c216e93e6b3781d02ef2339dbea56125ffe79019b1689c25d35db7d3f3e5c613060400977a2f7e142b50591b2ae5738dfd208c0f4daeda71edd05beaf4fc0b128fd004bd2bf1cea1d6883b4287cab96354e8f34f9d3707763b731686cbe6c175848a9f4bdd7c2961d270d9ef63ac95aa0603d3612a8933660c303fd1a91b3eb700718cdf40a34795399a7812c89b44f7b223dbe8bb08e0c01c4bf740c95431445a6b6fae337df7778e834813b34e0e6d3f0e935fdd136e6ac50c8e11fffb518b06c734985f31884a411293a3a3757a6e5be3d2495916314dc072fc9c0dbefcb5100513df15c18e04b2ad744d660f9cb5f4c64eead30fdd52507bba003c625108e6cdfcd7a1b38e8fd4fef0d419f695904be3026aeb9bab1ad3566a0a46a2a2d092c75ae2cbad109a117b7db76b729aaab3a89bcef8a5e63008613414fa5ce56988bbe3e839ccb8e192c56115522620e0851fbd19790f3acf9669915ef0f1ca0a2ca8a5578747f2d6cbec07a7bc4128ae131b7685191d5cf05210cc4bca2dc6303747c72cc0e4165512cccd43c5a79800b84ca018190a70984d73056e2a8bbdea91fdfcda72d9f8705227c5c4fdef9e0b81948420cae7344ba872a85e2d47c1e40fefcaa8d246fac5c7abe90b2bf39ec601390dd0a8cacbe82fc1ba0cf13c3cd89220a42e82ce62ccdf63fcb1be53c91d36349c7d3aa30170dccd5262d9ee570581ae5c9f84cf5b32261d8f531f6df0636cea496c698f36aee3274f0f9dfb7d72c074530a2679d13e5cc1bfcd957be3eba04a12f8897507122fc74ad66a7f621012ea43878cfa9a2a3ed95581aebdf1ffd7a8985f65c63de9eab4286cb94e57e3076e4e2850faef69b1d9f75ff45227b9e1bcc256c0236dc63483cffb8d72543eb213b2e0a487217850ab3bf7213dabb360c35714dbab5604357ea7b23fc0ba27d0bd09dc09e7ac471088c58d28e3ef12c3054d8a017a5023f378ae81bbbf55228620e061ace44906cc82520bfac2e1d7f7e340f53215bcf6f6078d82266abaaf479e084e73f0600572a7d482a84633eefc6e196f27638e8f08c6a4c615ef98238895d2cffb221a800424e115b0e84b960424fe39a2f33a203eb42f7f5e70e8f73aa172a8adf1d977b176cae2750859c96692bdac1067b7a1b1496dbd7c8220f3f0b42938ba0779c9bfa414a0e6073556d651d526875a4cfa95e8e981f40fc6d8bdd4704a12f44612e8eb8842535edea3d609d929b3fc05c2b02bd44e02a732ba814caf9e03e0bd7f41a24b3b6e282d07d74de2ab968ac739e994c0265416a7347f44bb80d1948cf8c9a69409e850b13f379dd672eb34a732b0b1d7b67ef2ee1bcb686cc4d1f4512c1ffb105ad2e46d783e0ca5f97ef9e4ab2798ce1c29b0f3292fbf1001d9487adfc3b34b4329be6b72ebf7a62158e488bd7888060f1e562045ecf9388c492fe3e0a6ce9b92b5a3eb29c80cc69da72f7dc2f2ac730e5d82cc5b75cecdd0809db8f1cc17bf5b72ed46fa3038722b6369d9f9497b83cc2ea1d0ebea0ac1306a83249705ae0b1c0145af67388d2153dbcb8856971216ee8f3d0cc6f532f159e5e28c6308154bf8efe46333b30740e9d94993393a27eb263dc0d19f182913ffa3953a52847fe979b9e682d304944529131b02ed468c88b5aac0483ff22ad56f9630b4f6134f266ee446068edd079411571f7e77acf2035d483043b8ad85b6277dca9e590ca801dc1896acdfc88dcf3cf83fca85afefe6addd27131f8be0fd5a80a0723556639fff59d56453ec76d3ebad3f5cb04e7b758b13e3d64c2ff5c3b018f52ba9363e053ee2fd78e35b2a834a069953e759455047521ad6615ab87e6381f0363a4554b86dd14f5ab43eb6b3fff64d94af0949a9e5c63d8c8e883886e61bd36f5ca11dfe2c025290cd49f369f8a3f9023d5daa7410fba96927fd0b5d2c75e", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x3, 0x0, 0x10001, 0xfffffffd, 0x6, {0x2, 0x8000000000000000, 0x8, 0x100000000000, 0x2000000000000db4, 0x85, 0x8, 0x4, 0x200c, 0x1000, 0xe44, 0x0, 0x0, 0x40fe, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) socket(0x10, 0x3, 0x0) 6.609922097s ago: executing program 3 (id=2146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x80840, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r3 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x1, 0x0) mkdirat(r1, &(0x7f00000001c0)='./file0\x00', 0x109) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x20008030) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b3243078b089b3430076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 6.582251237s ago: executing program 4 (id=2147): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) write$ppp(r1, &(0x7f0000000340)="b8f714ea29bf24bf3d6f435c87c07564b325a47ae1e12bfc5f3f00cff0d505ac3046b72e0cd219caa9b8359d0163c3fd64f39466e50627a61a9becfd8e39852649511a11837f0cd17e64cf997f2890ef94d52095b977db75797b7f0a3cb37e52", 0x60) open(&(0x7f0000000040)='./file0\x00', 0x6000, 0x5) r2 = userfaultfd(0x1) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe) syz_usb_connect(0x5, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100025e022d2099115268d56cd02d0301090212000100824007090499030009"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="20000000410007012dbd70e0fddbdf25027c000004002d800400018004000800"], 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) add_key$user(&(0x7f0000000440), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)='7\f', 0x2, 0xffffffffffffffff) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x6, 0xc, 0x54, @mcast2, @local, 0x8, 0x1, 0x8, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000580)={'sit0\x00', r5, 0x10, 0x700, 0xffffffff, 0x800, {{0x2b, 0x4, 0x3, 0xe, 0xac, 0x68, 0x0, 0x8, 0x2f, 0x0, @local, @local, {[@timestamp_prespec={0x44, 0x34, 0x55, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x49f5}, {@private=0xa010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x19}, 0xb}, {@remote, 0xff}, {@private=0xa010100, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @ssrr={0x89, 0x23, 0x5a, [@local, @empty, @local, @dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010102, @remote, @private=0xa010100, @multicast1]}, @ssrr={0x89, 0x17, 0x8c, [@loopback, @remote, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x21}]}, @rr={0x7, 0xb, 0x75, [@multicast2, @private=0xa010102]}, @timestamp_prespec={0x44, 0x1c, 0xaf, 0x3, 0x6, [{@local, 0xbf}, {@broadcast, 0x7}, {@multicast2, 0x1581}]}]}}}}}) get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0x1, &(0x7f0000ffe000/0x1000)=nil, 0x4) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000003, 0x204031, 0xffffffffffffffff, 0x97170000) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0x3, 0x6}, 'syz0\x00', 0x38}) socket$nl_netfilter(0x10, 0x3, 0xc) 6.4830029s ago: executing program 2 (id=2148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ae"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 6.270521872s ago: executing program 0 (id=2149): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r2, r2, 0x2f}, 0x20) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="2f0000003000000004", @ANYRES32], 0x20) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) 6.19206898s ago: executing program 3 (id=2150): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100039042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="035a02001737a940280012800b00010065727370616e000018000280060010004e210000050272b9a6150f00020000000446614248f514a3dd516a4a9228cf7486733394c95c36d30cfa8b84891f7155d300000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000015}, 0x60) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x7, 0x7, &(0x7f0000000080)={0x21, "146f060000000000000000000000000000000000000000000000000000000400"}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x10270000}]}}]}, 0x48}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x80c0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000000180)={'\x00', 0x0, 0x3, 0x2}) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000440)={0x1, 0x8}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="fcffffff00000000000000001f00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r7 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1fb;(\xb5\xe1jS\xd6\x91B\xb4\xe5=\xc1+\xb9\x12\xde0\x02\xcc\x18\xae%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa7^\xff\xf5\x95\xd2q#\xc6\xca\x97\b\x00\x00\x00\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdlC\xec\xe4\x9a\xc2\fX\x0e\xbc\xa4$\x9dU\xab\xbf\xbb\x12\xe6\x9f\x1d\xe4\x8a\x00\x00\x00\x00\x00\x00\x00\xa0W\xf1H\xb4~$\x05bIp+\x81Y\x9d\xd2!\"\x9d]zs\xb7\xfc,\b\xdd9\xc6\xe03t9\tT\n\xe8\x1f\x84\x1f\xf5\xc5\xf6}\xd7\xa3SL\xfa\xda\x97\x84\xa5Oj\x9by\xd3\x03 u(\x19\xd1\xc0\x8dG\xd8a\xad\x90jz\x12\xbc\xc3\xd7\x04~\xbe\xba\xccTO\xc1\xb2:\xdd\xc1M$\xbb\xe1{\x04\xb3\x13>\xf2n\xee\xab\x83%k\x92\x16\t\xe0\xe1\xa0\xa62\xef\x12\x96\x8b\x1es:\xfe&\x00'/318, 0x0) ftruncate(r7, 0x22a8) fsetxattr$security_ima(r7, &(0x7f0000000080), &(0x7f0000000380)=ANY=[@ANYBLOB="0416"], 0x2, 0x0) 6.132167656s ago: executing program 2 (id=2151): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0xffffffffffffffff, 0x4, 0x4002) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x20002) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0xd, {0x5ea0, 0x8, 0x4, 0x8}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000600)=[@in6={0xa, 0x4e20, 0x625, @empty, 0x7}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e22, 0x471, @loopback, 0x80000000}, @in6={0xa, 0x4e24, 0x65a, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1db7}, @in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e24, 0x4, @mcast1}], 0xac) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @local}}, 0x7, 0x23}, 0x90) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000480)='./file0\x00', &(0x7f0000000000)='v7\x00', 0x1000080, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f0000000880)={0xfffffffffffffe64, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x7d5a03) r6 = dup3(r5, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002340)={r6, &(0x7f0000000500)="7a1fbe9e57d90e6cd6f93f2f64ee0cdab276e4154c7a684e896e92045629d98680f6d7d0d571a1080049037caf195b9ed2e971568bd01465f3c33961c91549f25f1387e587fbf6d68b2da726ad313f", 0x0}, 0x20) mq_notify(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 5.025512173s ago: executing program 0 (id=2152): listen(0xffffffffffffffff, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r3, 0xda8d) accept$inet(r3, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@func_proto, @var={0x5, 0x0, 0x0, 0x11}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000fc0)=""/140, 0x53, 0x8c, 0x1}, 0x28) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)={0x2, 0x0, @d}, 0x18, r4) keyctl$chown(0x4, r5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES8], 0x1c}], 0x1, 0x0, 0x0, 0x810}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 4.096544996s ago: executing program 4 (id=2153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000440)=""/213, 0xd5}, {&(0x7f0000000240)=""/189, 0xbd}], 0x2, 0x14, 0x5) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x100000000) 4.043329206s ago: executing program 3 (id=2154): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd0e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x57da, &(0x7f0000000600)={0x0, 0xf20d, 0x8, 0x1, 0x280, 0x0, r2}, &(0x7f00000005c0), &(0x7f00000000c0), &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="060000060010220420000000000000001007000000000000"]) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000400), &(0x7f0000000580)=0x4) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000000440)={0x25b, 0x410000, {0xffffffffffffffff}, {}, 0x0, 0x1000000000008}) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b00000000000800040001"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) 3.021107416s ago: executing program 2 (id=2155): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x34b8, 0x0, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000180)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r4}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r5, 0x0, 0x0, 0x1c) 2.709897773s ago: executing program 0 (id=2156): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0xfff2, 0x7}}}, 0x24}}, 0xc4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001340)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r2, {0xb, 0xfff2}, {0xfff2, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x24004810) 1.133170338s ago: executing program 5 (id=2157): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/66], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRDESCSIZE(r2, 0x4004480d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000081e000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000051a000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r2}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x401, &(0x7f00000002c0)) r4 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) close(0x3) getresuid(0x0, &(0x7f0000000140), &(0x7f0000000180)) rseq(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5}, 0x22, 0x0, 0x0) ioctl$TCFLSH(r0, 0x89f2, 0xbffffffffffffffb) 1.057083869s ago: executing program 0 (id=2158): syz_usb_connect$uac3(0x2, 0x8a, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040630730204000010203010902780003017fc008080b00010101302309040000000101"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, 0x0, 0x0) r2 = epoll_create1(0x80000) r3 = socket(0x1, 0x5, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000140)={0x60000008}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0xfffffffffffffd1a}, 0x48) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x244000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex=0x0, 0xa, 0x1, 0x0, &(0x7f0000000500)=[0x0], 0x1, 0x0, &(0x7f0000000540)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0}, 0x40) r9 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0xc2101) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x25, 0x15, @val=@tcx={@void, @value=r6, @void, @void, r8}}, 0x1c) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x9}, 0x8) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x5, 0x1, 0x0, r6}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='syzkaller\x00', 0xffffffff, 0x97, &(0x7f0000000680)=""/151, 0x842f2e77fa89b4ac, 0x0, '\x00', r7, 0x19, r6, 0x8, &(0x7f0000000740)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x2ac0e, r6, 0x3, &(0x7f00000007c0)=[r6], &(0x7f0000000800)=[{0x4, 0x5, 0x7, 0x8}, {0x2, 0x1, 0x8, 0xb}, {0x2, 0x1, 0x6, 0x2}]}, 0x94) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x90, 0x0, 0x8, {0x3, 0x3, 0xb, 0x81, 0x2, 0x82c7, {0xffffffffffffffff, 0xa, 0x9, 0x108, 0x1a20, 0xb, 0x5e5, 0x81, 0x6, 0x4000, 0x7, 0x0, 0x0, 0x6, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200), &(0x7f00000002c0)=0xc) sendmsg$netlink(r6, &(0x7f00000050c0)={&(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdbfd, 0x800000}, 0xc, 0x0, 0x0, &(0x7f0000005000)=[@rights={{0x24, 0x1, 0x1, [r5, 0xffffffffffffffff, r5, r10, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r1, r6, 0xffffffffffffffff, r5, r10, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r9]}}, @cred={{0x1c}}], 0xa8, 0x10}, 0x10) writev(r0, &(0x7f00000003c0), 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000001140)=0x1000, 0x4) close_range(r11, 0xffffffffffffffff, 0x0) 953.451148ms ago: executing program 2 (id=2159): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000682000/0x1000)=nil, 0x1000}}) madvise(&(0x7f00008c9000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_open_dev$evdev(0x0, 0x9, 0x4000) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000380)={0x5, 0x0, &(0x7f0000000340)}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000600)=ANY=[]) 0s ago: executing program 4 (id=2160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x80840, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) r3 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x1, 0x0) mkdirat(r1, &(0x7f00000001c0)='./file0\x00', 0x109) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x20008030) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): pen_root+0x1c6/0x3f0 [ 955.421782][T12900] ? __pfx_file_open_root+0x10/0x10 [ 955.421792][T12900] ? _raw_spin_unlock+0x28/0x50 [ 955.421815][T12900] do_handle_open+0xb4a/0xf20 [ 955.421827][T12900] ? __pfx_do_handle_open+0x10/0x10 [ 955.421841][T12900] ? ksys_write+0x1ac/0x250 [ 955.421851][T12900] ? __pfx_ksys_write+0x10/0x10 [ 955.421865][T12900] ? do_syscall_64+0x123/0x790 [ 955.421877][T12900] do_syscall_64+0x123/0x790 [ 955.421891][T12900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.421903][T12900] RIP: 0033:0x7fc5b759e159 [ 955.421914][T12900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.421925][T12900] RSP: 002b:00007fc5b83e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 955.421936][T12900] RAX: ffffffffffffffda RBX: 00007fc5b7825fa0 RCX: 00007fc5b759e159 [ 955.421944][T12900] RDX: 000000000000003f RSI: 0000200000000300 RDI: 0000000000000004 [ 955.421951][T12900] RBP: 00007fc5b83e8090 R08: 0000000000000000 R09: 0000000000000000 [ 955.421958][T12900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.421965][T12900] R13: 00007fc5b7826038 R14: 00007fc5b7825fa0 R15: 00007fff7a4bd518 [ 955.421980][T12900] [ 955.873277][ T5614] Bluetooth: hci5: command tx timeout [ 955.899858][ T31] audit: type=1400 audit(1788056880.513:767): avc: denied { nlmsg_read } for pid=12903 comm="syz.4.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 955.950625][T12905] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12905 comm=syz.4.1800 [ 955.950650][T12905] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12905 comm=syz.4.1800 [ 956.251893][ T3404] bridge_slave_1: left allmulticast mode [ 956.251934][ T3404] bridge_slave_1: left promiscuous mode [ 956.253260][ T3404] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.292300][ T3404] bridge_slave_0: left allmulticast mode [ 956.304474][ T3404] bridge_slave_0: left promiscuous mode [ 956.317908][ T3404] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.989085][ T5614] Bluetooth: hci5: command tx timeout [ 958.994661][T12929] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1804'. [ 959.209969][ T31] audit: type=1400 audit(1788056883.813:768): avc: denied { write } for pid=12914 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.439136][T12859] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.439197][T12859] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.439276][T12859] bridge_slave_0: entered allmulticast mode [ 959.465429][T12859] bridge_slave_0: entered promiscuous mode [ 959.477369][ T31] audit: type=1400 audit(1788056884.053:769): avc: denied { write } for pid=12936 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.500703][T12859] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.503188][T12859] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.503267][T12859] bridge_slave_1: entered allmulticast mode [ 959.529137][T12859] bridge_slave_1: entered promiscuous mode [ 959.750170][T12859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.767950][T12859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.024191][ T31] audit: type=1400 audit(1788056884.643:770): avc: denied { read write } for pid=12945 comm="syz.3.1809" name="sg0" dev="devtmpfs" ino=902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 960.051610][ T31] audit: type=1400 audit(1788056884.673:771): avc: denied { open } for pid=12945 comm="syz.3.1809" path="/dev/sg0" dev="devtmpfs" ino=902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 960.993011][ T31] audit: type=1400 audit(1788056885.613:772): avc: denied { ioctl } for pid=12945 comm="syz.3.1809" path="/dev/sg0" dev="devtmpfs" ino=902 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 961.177036][ T5268] 8021q: adding VLAN 0 to HW filter on device eth1 [ 961.199093][T12859] team0: Port device team_slave_0 added [ 961.486522][T12859] team0: Port device team_slave_1 added [ 962.304155][T12859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.304173][T12859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.304195][T12859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.360042][T12859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.360061][T12859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.360082][T12859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.340716][ T31] audit: type=1400 audit(1788056887.953:773): avc: denied { bind } for pid=12953 comm="syz.3.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 963.340760][ T31] audit: type=1400 audit(1788056887.953:774): avc: denied { listen } for pid=12953 comm="syz.3.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 963.340793][ T31] audit: type=1400 audit(1788056887.953:775): avc: denied { write } for pid=12953 comm="syz.3.1811" path="socket:[37176]" dev="sockfs" ino=37176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 963.340818][ T31] audit: type=1400 audit(1788056887.953:776): avc: denied { accept } for pid=12953 comm="syz.3.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 964.291194][T12859] hsr_slave_0: entered promiscuous mode [ 964.301091][T12859] hsr_slave_1: entered promiscuous mode [ 964.324323][T12859] debugfs: 'hsr0' already exists in 'hsr' [ 964.332351][T12859] Cannot create hsr debugfs directory [ 964.605889][ T31] audit: type=1400 audit(1788056889.223:777): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 964.727164][ T31] audit: type=1400 audit(1788056889.343:778): avc: denied { create } for pid=12962 comm="syz.3.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 965.507236][ T31] audit: type=1400 audit(1788056890.123:779): avc: denied { write } for pid=12969 comm="syz.2.1814" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 965.507286][ T31] audit: type=1400 audit(1788056890.123:780): avc: denied { watch watch_reads } for pid=12969 comm="syz.2.1814" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 965.643440][T12963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1812'. [ 965.803658][ T31] audit: type=1400 audit(1788056890.423:781): avc: denied { getopt } for pid=12976 comm="syz.0.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 965.917743][ T31] audit: type=1400 audit(1788056890.533:782): avc: denied { write } for pid=12957 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 965.963105][ T3404] hsr_slave_0: left promiscuous mode [ 965.970585][ T31] audit: type=1400 audit(1788056890.583:783): avc: denied { watch_reads } for pid=12976 comm="syz.0.1802" path="/368" dev="tmpfs" ino=2073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 966.002204][ T3404] hsr_slave_1: left promiscuous mode [ 966.003106][ T3404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 966.003133][ T3404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 966.029601][ T3404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 966.029625][ T3404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 966.199948][ T3404] veth1_macvtap: left promiscuous mode [ 966.200002][ T3404] veth0_macvtap: left promiscuous mode [ 966.269418][ T31] audit: type=1400 audit(1788056890.883:784): avc: denied { write } for pid=12982 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 966.322951][T11676] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 966.462866][T11676] usb 4-1: device descriptor read/64, error -71 [ 966.703656][T11676] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 966.832917][T11676] usb 4-1: device descriptor read/64, error -71 [ 966.896964][ T3404] team0 (unregistering): Port device team_slave_1 removed [ 966.915832][ T3404] team0 (unregistering): Port device team_slave_0 removed [ 966.943514][T11676] usb usb4-port1: attempt power cycle [ 967.058491][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2 [ 967.213638][ T2299] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 967.287544][T11676] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 967.307957][T11676] usb 4-1: device descriptor read/8, error -71 [ 967.364385][ T2299] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 967.377727][ T2299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 967.377760][ T2299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 967.377784][ T2299] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 967.377810][ T2299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.432258][ T2299] usb 3-1: config 0 descriptor?? [ 967.897695][ T31] audit: type=1400 audit(1788056892.513:785): avc: denied { read write } for pid=13009 comm="syz.3.1819" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 967.897736][ T31] audit: type=1400 audit(1788056892.513:786): avc: denied { open } for pid=13009 comm="syz.3.1819" path="/359/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 967.951284][ T2299] playstation 0003:054C:09CC.0004: unknown main item tag 0x0 [ 967.951323][ T2299] playstation 0003:054C:09CC.0004: unknown main item tag 0x0 [ 967.951347][ T2299] playstation 0003:054C:09CC.0004: unknown main item tag 0x0 [ 967.951365][ T2299] playstation 0003:054C:09CC.0004: unknown main item tag 0x0 [ 967.951382][ T2299] playstation 0003:054C:09CC.0004: unknown main item tag 0x0 [ 967.951398][ T2299] playstation 0003:054C:09CC.0004: unknown main item tag 0x0 [ 968.008979][ T31] audit: type=1400 audit(1788056892.623:787): avc: denied { mount } for pid=13009 comm="syz.3.1819" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 968.054059][ T2299] playstation 0003:054C:09CC.0004: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.2-1/input0 [ 968.087623][ T31] audit: type=1400 audit(1788056892.703:788): avc: denied { ioctl } for pid=13009 comm="syz.3.1819" path="/359/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 968.118370][T12859] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 968.146011][T12859] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 968.153989][T12859] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 968.167623][T13011] nfs4: Unknown parameter 'syz' [ 968.186861][T12859] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 968.219521][T12859] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 968.270153][ T2299] playstation 0003:054C:09CC.0004: Failed to retrieve feature with reportID 18: -71 [ 968.270188][ T2299] playstation 0003:054C:09CC.0004: Failed to retrieve DualShock4 pairing info: -71 [ 968.270224][ T2299] playstation 0003:054C:09CC.0004: Failed to get MAC address from DualShock4 [ 968.270239][ T2299] playstation 0003:054C:09CC.0004: Failed to create dualshock4. [ 968.311625][T12859] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 968.321430][T12859] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 968.361968][T12859] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 968.420712][ T2299] playstation 0003:054C:09CC.0004: probe with driver playstation failed with error -71 [ 968.466723][ T2299] usb 3-1: USB disconnect, device number 41 [ 969.728381][T12859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.795141][T12859] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.539758][ T1899] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.539827][ T1899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.559960][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.560024][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 970.772098][ T5268] 8021q: adding VLAN 0 to HW filter on device eth3 [ 971.885420][T13053] fuse: Bad value for 'fd' [ 974.125377][T13066] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1829'. [ 974.530883][T13076] bridge_slave_0: left allmulticast mode [ 974.539222][T13076] bridge_slave_0: left promiscuous mode [ 974.549765][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 974.549795][ T31] audit: type=1400 audit(1788056899.163:795): avc: denied { write } for pid=13044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 974.596392][T13076] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.629506][T13076] bridge_slave_1: left allmulticast mode [ 974.640281][T13076] bridge_slave_1: left promiscuous mode [ 974.652107][T13076] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.706954][T13076] team0: Port device team_slave_0 removed [ 974.737360][ T31] audit: type=1400 audit(1788056899.353:796): avc: denied { setopt } for pid=13082 comm="syz.4.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 974.771536][T13076] team0: Port device team_slave_1 removed [ 974.772134][T13076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 974.772163][T13076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 974.804396][T13076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 974.815599][T13076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 974.828494][T13076] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 974.851550][ T31] audit: type=1400 audit(1788056899.463:797): avc: denied { setopt } for pid=13082 comm="syz.4.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 974.893423][ T31] audit: type=1400 audit(1788056899.503:798): avc: denied { connect } for pid=13082 comm="syz.4.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 974.945146][T13079] team0: Port device xfrm0 added [ 974.968218][T13083] tipc: Started in network mode [ 974.968252][T13083] tipc: Node identity 46d996123554, cluster identity 4711 [ 974.968419][T13083] tipc: Enabled bearer , priority 0 [ 974.996298][ T31] audit: type=1400 audit(1788056899.613:799): avc: denied { read } for pid=13082 comm="syz.4.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 975.021785][T12859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.088313][ T31] audit: type=1400 audit(1788056899.703:800): avc: denied { write } for pid=13086 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 976.107049][ T9] tipc: Node number set to 1938658834 [ 976.154879][ T31] audit: type=1400 audit(1788056900.763:801): avc: denied { connect } for pid=13082 comm="syz.4.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 976.290057][ T5268] 8021q: adding VLAN 0 to HW filter on device eth4 [ 976.405997][ T31] audit: type=1400 audit(1788056901.023:802): avc: denied { append } for pid=13096 comm="syz.3.1834" name="sg0" dev="devtmpfs" ino=902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 976.557842][ T31] audit: type=1400 audit(1788056901.173:803): avc: denied { create } for pid=13096 comm="syz.3.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 977.793628][T13113] gretap1: entered promiscuous mode [ 977.840746][T12859] veth0_vlan: entered promiscuous mode [ 977.857389][T12859] veth1_vlan: entered promiscuous mode [ 977.938056][T12859] veth0_macvtap: entered promiscuous mode [ 977.949885][T12859] veth1_macvtap: entered promiscuous mode [ 977.975573][T12859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.991782][T12859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.005005][ T5711] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 978.088758][ T1899] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.088946][ T1899] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.088977][ T1899] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.088998][ T1899] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.140685][ T31] audit: type=1400 audit(1788056902.753:804): avc: denied { write } for pid=13123 comm="syz.3.1837" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 978.175760][T13124] binder: 13123:13124 ioctl c0306201 0 returned -14 [ 978.183661][ T5711] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 978.194072][ T5711] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 978.194097][ T5711] usb 3-1: config 127 has no interface number 0 [ 978.194127][ T5711] usb 3-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 978.226036][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 978.226061][ T5711] usb 3-1: Product: syz [ 978.226077][ T5711] usb 3-1: Manufacturer: syz [ 978.226087][ T5711] usb 3-1: SerialNumber: syz [ 978.252533][T13124] binder: 13123:13124 ioctl c0306201 0 returned -14 [ 978.261686][T13124] FAULT_INJECTION: forcing a failure. [ 978.261686][T13124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 978.261721][T13124] CPU: 0 UID: 0 PID: 13124 Comm: syz.3.1837 Tainted: G L syzkaller #0 PREEMPT(full) [ 978.261738][T13124] Tainted: [L]=SOFTLOCKUP [ 978.261742][T13124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 978.261749][T13124] Call Trace: [ 978.261753][T13124] [ 978.261758][T13124] dump_stack_lvl+0x100/0x190 [ 978.261780][T13124] should_fail_ex.cold+0x5/0xa [ 978.261797][T13124] _copy_from_user+0x2e/0xd0 [ 978.261815][T13124] binder_ioctl+0x4cb/0x74a0 [ 978.261831][T13124] ? tomoyo_path_number_perm+0x188/0x580 [ 978.261852][T13124] ? __pfx_binder_ioctl+0x10/0x10 [ 978.261865][T13124] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 978.261879][T13124] ? do_vfs_ioctl+0x226/0x13e0 [ 978.261897][T13124] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 978.261913][T13124] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 978.261932][T13124] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 978.261952][T13124] ? __fget_files+0x34/0x3d0 [ 978.261971][T13124] ? selinux_file_ioctl+0x13b/0x290 [ 978.261987][T13124] ? selinux_file_ioctl+0xb6/0x290 [ 978.262005][T13124] ? __pfx_binder_ioctl+0x10/0x10 [ 978.262016][T13124] __x64_sys_ioctl+0x18e/0x210 [ 978.262034][T13124] do_syscall_64+0x123/0x790 [ 978.262048][T13124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.262060][T13124] RIP: 0033:0x7fdd6799e159 [ 978.262070][T13124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.262081][T13124] RSP: 002b:00007fdd68798028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 978.262093][T13124] RAX: ffffffffffffffda RBX: 00007fdd67c25fa0 RCX: 00007fdd6799e159 [ 978.262100][T13124] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 0000000000000003 [ 978.262107][T13124] RBP: 00007fdd68798090 R08: 0000000000000000 R09: 0000000000000000 [ 978.262115][T13124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.262122][T13124] R13: 00007fdd67c26038 R14: 00007fdd67c25fa0 R15: 00007ffc3d38b2d8 [ 978.262137][T13124] [ 978.262152][T13124] binder: 13123:13124 ioctl c0306201 200000000480 returned -14 [ 978.263357][T13117] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 978.586786][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.586808][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.636522][T13127] fuse: Bad value for 'fd' [ 978.660359][ T1899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.660379][ T1899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.063903][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'. [ 979.086505][T13134] bond0 (unregistering): Released all slaves [ 980.284819][T13144] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1786'. [ 980.321329][ T5711] asix 3-1:127.57: probe with driver asix failed with error -71 [ 980.355099][ T5711] usb 3-1: USB disconnect, device number 42 [ 980.384607][T13144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.433400][T13144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.514342][T13144] bond0 (unregistering): Released all slaves [ 981.600538][T13152] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 982.330387][T13160] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1845'. [ 982.330419][T13160] netlink: 'syz.5.1845': attribute type 6 has an invalid length. [ 982.330437][T13160] netlink: 'syz.5.1845': attribute type 5 has an invalid length. [ 982.330446][T13160] netlink: 'syz.5.1845': attribute type 4 has an invalid length. [ 982.398408][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 982.398444][ T31] audit: type=1400 audit(1788056907.013:828): avc: denied { create } for pid=13156 comm="syz.5.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 982.608357][T13135] null_blk: disk nullb1 created [ 982.920723][ T31] audit: type=1400 audit(1788056907.533:829): avc: denied { create } for pid=13172 comm="syz.3.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 983.352543][ T5711] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 983.514183][ T5711] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 983.530792][ T5711] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 983.530816][ T5711] usb 4-1: config 1 has no interface number 0 [ 983.568922][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.568945][ T5711] usb 4-1: Product: syz [ 983.568961][ T5711] usb 4-1: Manufacturer: syz [ 983.568971][ T5711] usb 4-1: SerialNumber: syz [ 983.641058][ T5711] usb 4-1: cannot find UAC_HEADER [ 984.021107][ T5711] snd-usb-audio 4-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 984.039566][T13178] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 984.107498][T13178] CPU: 0 UID: 0 PID: 13178 Comm: syz.3.1852 Tainted: G L syzkaller #0 PREEMPT(full) [ 984.107522][T13178] Tainted: [L]=SOFTLOCKUP [ 984.107526][T13178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 984.107535][T13178] Call Trace: [ 984.107540][T13178] [ 984.107545][T13178] dump_stack_lvl+0x100/0x190 [ 984.107574][T13178] sysfs_warn_dup.cold+0x1c/0x28 [ 984.107594][T13178] sysfs_create_dir_ns+0x24b/0x2b0 [ 984.107611][T13178] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 984.107624][T13178] ? find_held_lock+0x2b/0x80 [ 984.107641][T13178] ? kobject_add_internal+0x25f/0x930 [ 984.107658][T13178] ? kobject_add_internal+0x25f/0x930 [ 984.107675][T13178] ? class_dir_child_ns_type+0xd/0x60 [ 984.107691][T13178] kobject_add_internal+0x2c8/0x930 [ 984.107711][T13178] kobject_add+0x16a/0x1e0 [ 984.107727][T13178] ? __pfx_kobject_add+0x10/0x10 [ 984.107744][T13178] ? get_device_parent+0x1b3/0x4c0 [ 984.107757][T13178] ? kobject_put+0xb9/0x640 [ 984.107777][T13178] device_add+0x294/0x1970 [ 984.107790][T13178] ? lockdep_init_map_type+0x5c/0x250 [ 984.107806][T13178] ? __pfx_device_add+0x10/0x10 [ 984.107818][T13178] ? lockdep_init_map_type+0x5c/0x250 [ 984.107831][T13178] ? __init_waitqueue_head+0xca/0x150 [ 984.107849][T13178] tty_register_device_attr+0x388/0x7f0 [ 984.107868][T13178] ? lockdep_init_map_type+0x5c/0x250 [ 984.107881][T13178] ? __pfx_tty_register_device_attr+0x10/0x10 [ 984.107904][T13178] ? tty_port_init+0x156/0x1c0 [ 984.107918][T13178] gsm_activate_mux+0x155/0x2a0 [ 984.107931][T13178] gsmld_ioctl+0xbbc/0x15c0 [ 984.107947][T13178] ? kasan_quarantine_put+0x104/0x240 [ 984.107960][T13178] ? __pfx_gsmld_ioctl+0x10/0x10 [ 984.107985][T13178] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 984.107998][T13178] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 984.108016][T13178] ? __pfx_gsmld_ioctl+0x10/0x10 [ 984.108029][T13178] tty_ioctl+0x11b4/0x1640 [ 984.108041][T13178] ? __pfx_tty_ioctl+0x10/0x10 [ 984.108050][T13178] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 984.108072][T13178] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 984.108092][T13178] ? __fget_files+0x34/0x3d0 [ 984.108112][T13178] ? selinux_file_ioctl+0x13b/0x290 [ 984.108129][T13178] ? selinux_file_ioctl+0xb6/0x290 [ 984.108148][T13178] ? __pfx_tty_ioctl+0x10/0x10 [ 984.108160][T13178] __x64_sys_ioctl+0x18e/0x210 [ 984.108179][T13178] do_syscall_64+0x123/0x790 [ 984.108194][T13178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.108207][T13178] RIP: 0033:0x7fdd6799e159 [ 984.108218][T13178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.108230][T13178] RSP: 002b:00007fdd65bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 984.108243][T13178] RAX: ffffffffffffffda RBX: 00007fdd67c26090 RCX: 00007fdd6799e159 [ 984.108251][T13178] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 984.108259][T13178] RBP: 00007fdd67a35024 R08: 0000000000000000 R09: 0000000000000000 [ 984.108267][T13178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 984.108274][T13178] R13: 00007fdd67c26128 R14: 00007fdd67c26090 R15: 00007ffc3d38b2d8 [ 984.108290][T13178] [ 985.422952][T13178] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 985.488270][T10166] udevd[10166]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 985.741138][ T31] audit: type=1400 audit(1788056910.353:830): avc: denied { create } for pid=13201 comm="syz.0.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 985.778527][ T5711] usb 4-1: USB disconnect, device number 58 [ 986.906269][ T31] audit: type=1400 audit(1788056911.523:831): avc: denied { write } for pid=13216 comm="syz.5.1863" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 986.948050][ T31] audit: type=1400 audit(1788056911.563:832): avc: denied { connect } for pid=13203 comm="syz.2.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 986.981244][T13204] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1860'. [ 987.190952][T13224] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1865'. [ 987.554866][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.554910][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 987.600741][T13239] FAULT_INJECTION: forcing a failure. [ 987.600741][T13239] name failslab, interval 1, probability 0, space 0, times 0 [ 987.615034][T13239] CPU: 0 UID: 0 PID: 13239 Comm: syz.3.1867 Tainted: G L syzkaller #0 PREEMPT(full) [ 987.615053][T13239] Tainted: [L]=SOFTLOCKUP [ 987.615057][T13239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 987.615064][T13239] Call Trace: [ 987.615068][T13239] [ 987.615073][T13239] dump_stack_lvl+0x100/0x190 [ 987.615094][T13239] should_fail_ex.cold+0x5/0xa [ 987.615111][T13239] should_failslab+0xc2/0x120 [ 987.615126][T13239] __kmalloc_cache_noprof+0x91/0x6d0 [ 987.615143][T13239] ? percpu_ref_init+0xec/0x3f0 [ 987.615159][T13239] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 987.615177][T13239] percpu_ref_init+0xec/0x3f0 [ 987.615192][T13239] io_uring_setup.cold+0x2be/0x1cde [ 987.615209][T13239] ? lock_acquire+0x1d1/0x380 [ 987.615221][T13239] ? avc_has_perm_noaudit+0x56/0x3b0 [ 987.615235][T13239] ? __pfx_io_uring_setup+0x10/0x10 [ 987.615246][T13239] ? find_held_lock+0x2b/0x80 [ 987.615260][T13239] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 987.615273][T13239] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 987.615296][T13239] ? ksys_write+0x1ac/0x250 [ 987.615306][T13239] ? __pfx_ksys_write+0x10/0x10 [ 987.615320][T13239] __x64_sys_io_uring_setup+0xc2/0x170 [ 987.615332][T13239] do_syscall_64+0x123/0x790 [ 987.615347][T13239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.615358][T13239] RIP: 0033:0x7fdd6799e159 [ 987.615368][T13239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.615379][T13239] RSP: 002b:00007fdd68797ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 987.615391][T13239] RAX: ffffffffffffffda RBX: 0000200000001088 RCX: 00007fdd6799e159 [ 987.615399][T13239] RDX: 0000200000001108 RSI: 0000200000001088 RDI: 00000000000003c9 [ 987.615407][T13239] RBP: 0000200000001080 R08: 0000000000000000 R09: 0000000000000000 [ 987.615414][T13239] R10: 0000200000001110 R11: 0000000000000206 R12: 0000200000001108 [ 987.615421][T13239] R13: 0000200000001110 R14: 00007fdd68797fd8 R15: 0000000000000000 [ 987.615436][T13239] [ 988.245774][T13259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1868'. [ 988.294549][ T31] audit: type=1400 audit(1788056912.913:833): avc: denied { write } for pid=13222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 988.571509][ T31] audit: type=1400 audit(1788056913.183:834): avc: denied { write } for pid=13272 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 988.732903][ T5711] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 988.884135][ T5711] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 988.897689][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 988.897716][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.897745][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.933728][ T5711] usb 4-1: config 0 descriptor?? [ 989.237550][T13271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.237799][T13271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.257768][T13290] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1862'. [ 989.299668][T13271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.308430][T13271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.383058][T13271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 989.615364][T13300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 989.870906][ T31] audit: type=1400 audit(1788056914.483:835): avc: denied { connect } for pid=13307 comm="syz.4.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 990.016525][ T31] audit: type=1400 audit(1788056914.633:836): avc: denied { bind } for pid=13305 comm="syz.5.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 990.046869][ T31] audit: type=1400 audit(1788056914.663:837): avc: denied { setopt } for pid=13305 comm="syz.5.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 990.075863][ T31] audit: type=1400 audit(1788056914.693:838): avc: denied { accept } for pid=13305 comm="syz.5.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 990.098965][ T31] audit: type=1400 audit(1788056914.713:839): avc: denied { write } for pid=13305 comm="syz.5.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 990.130608][ T31] audit: type=1400 audit(1788056914.743:840): avc: denied { read } for pid=13305 comm="syz.5.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 990.162597][T13315] netlink: 'syz.2.1876': attribute type 1 has an invalid length. [ 990.171670][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1876'. [ 990.999871][ T31] audit: type=1400 audit(1788056915.613:841): avc: denied { write } for pid=13287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 991.128460][T13321] netlink: 'syz.2.1876': attribute type 3 has an invalid length. [ 991.197847][ T31] audit: type=1400 audit(1788056915.813:842): avc: denied { read } for pid=13313 comm="syz.2.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 991.384700][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 991.542488][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 991.548108][ T9] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 991.561488][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 991.572898][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 991.572941][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 49, changing to 9 [ 991.572959][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25209, setting to 1024 [ 991.628050][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.628072][ T9] usb 3-1: Product: syz [ 991.628088][ T9] usb 3-1: Manufacturer: syz [ 991.628098][ T9] usb 3-1: SerialNumber: syz [ 991.658634][ T9] usb 3-1: config 0 descriptor?? [ 991.674973][ T9] radioshark 3-1:0.0: Invalid radioSHARK device [ 991.674996][ T9] radioshark 3-1:0.0: probe with driver radioshark failed with error -22 [ 991.788256][ T5711] usbhid 4-1:0.0: can't add hid device: -71 [ 991.788335][ T5711] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 991.817649][ T5711] usb 4-1: USB disconnect, device number 59 [ 991.901006][ T9] usb 3-1: USB disconnect, device number 43 [ 993.520821][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 993.520846][ T31] audit: type=1400 audit(1788056918.133:845): avc: denied { write } for pid=13334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 993.825238][ T31] audit: type=1400 audit(1788056918.443:846): avc: denied { nlmsg_write } for pid=13374 comm="syz.4.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 993.853404][T13376] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1878'. [ 993.853433][T13376] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1878'. [ 994.925108][ T31] audit: type=1400 audit(1788056919.543:847): avc: denied { write } for pid=13380 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 996.004839][T13393] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1890'. [ 997.165526][ T31] audit: type=1400 audit(1788056921.783:848): avc: denied { ioctl } for pid=13404 comm="syz.5.1894" path="socket:[39416]" dev="sockfs" ino=39416 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 999.181358][T13425] gretap1: left promiscuous mode [ 999.385869][T13406] veth0_macvtap: left promiscuous mode [ 999.406778][T13406] macvtap0: entered allmulticast mode [ 999.691847][ T31] audit: type=1400 audit(1788056924.303:849): avc: denied { write } for pid=13402 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 999.969163][ T31] audit: type=1400 audit(1788056924.583:850): avc: denied { write } for pid=13443 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1000.754952][T13455] overlayfs: failed to clone upperpath [ 1002.884192][T13468] CIFS: Attempting to mount //127.0.0.1/share [ 1002.884708][T13468] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1002.884744][T13468] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1003.128004][T13474] FAULT_INJECTION: forcing a failure. [ 1003.128004][T13474] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.128035][T13474] CPU: 0 UID: 0 PID: 13474 Comm: syz.2.1898 Tainted: G L syzkaller #0 PREEMPT(full) [ 1003.128052][T13474] Tainted: [L]=SOFTLOCKUP [ 1003.128056][T13474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1003.128063][T13474] Call Trace: [ 1003.128067][T13474] [ 1003.128072][T13474] dump_stack_lvl+0x100/0x190 [ 1003.128093][T13474] should_fail_ex.cold+0x5/0xa [ 1003.128110][T13474] should_failslab+0xc2/0x120 [ 1003.128124][T13474] __kmalloc_noprof+0xfc/0x840 [ 1003.128135][T13474] ? __pfx_dynamic_dname+0x10/0x10 [ 1003.128146][T13474] ? tomoyo_encode2+0xfb/0x3c0 [ 1003.128161][T13474] tomoyo_encode2+0xfb/0x3c0 [ 1003.128174][T13474] tomoyo_encode+0x29/0x50 [ 1003.128185][T13474] tomoyo_realpath_from_path+0x18c/0x690 [ 1003.128200][T13474] tomoyo_path_number_perm+0x23c/0x580 [ 1003.128216][T13474] ? tomoyo_path_number_perm+0x22e/0x580 [ 1003.128233][T13474] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1003.128255][T13474] ? __lock_acquire+0x4c5/0x1ec0 [ 1003.128275][T13474] ? __fget_files+0x34/0x3d0 [ 1003.128288][T13474] ? find_held_lock+0x2b/0x80 [ 1003.128302][T13474] ? hook_file_ioctl_common+0x140/0x440 [ 1003.128319][T13474] ? __fget_files+0x21f/0x3d0 [ 1003.128334][T13474] security_file_ioctl+0xd3/0x230 [ 1003.128352][T13474] __x64_sys_ioctl+0xb7/0x210 [ 1003.128371][T13474] do_syscall_64+0x123/0x790 [ 1003.128386][T13474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.128398][T13474] RIP: 0033:0x7fc5b759e159 [ 1003.128408][T13474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.128418][T13474] RSP: 002b:00007fc5b83e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1003.128430][T13474] RAX: ffffffffffffffda RBX: 00007fc5b7825fa0 RCX: 00007fc5b759e159 [ 1003.128438][T13474] RDX: 0000200000003240 RSI: 00000000000089ea RDI: 0000000000000004 [ 1003.128444][T13474] RBP: 00007fc5b83e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.128451][T13474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.128458][T13474] R13: 00007fc5b7826038 R14: 00007fc5b7825fa0 R15: 00007fff7a4bd518 [ 1003.128474][T13474] [ 1003.128494][T13474] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1003.128623][ T31] audit: type=1400 audit(1788056927.743:851): avc: denied { ioctl } for pid=13473 comm="syz.2.1898" path="socket:[39590]" dev="sockfs" ino=39590 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1003.657966][T13478] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1003.784662][T13478] dvmrp0: entered allmulticast mode [ 1004.903815][ T5711] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1004.914479][T12577] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1005.062676][ T5711] usb 4-1: Using ep0 maxpacket: 32 [ 1005.071112][ T5711] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1005.082835][ T5711] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1005.082857][ T5711] usb 4-1: config 0 has no interface number 0 [ 1005.082886][ T5711] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1005.082903][ T5711] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1005.082918][ T5711] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1005.128853][T12577] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1005.141143][T12577] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.141169][T12577] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1005.141198][T12577] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.177431][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.177455][ T5711] usb 4-1: Product: syz [ 1005.177471][ T5711] usb 4-1: Manufacturer: syz [ 1005.177481][ T5711] usb 4-1: SerialNumber: syz [ 1005.191124][ T5711] usb 4-1: config 0 descriptor?? [ 1005.211227][ T31] audit: type=1400 audit(1788056929.823:852): avc: denied { write } for pid=13479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1005.257329][T12577] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1005.500655][ T31] audit: type=1400 audit(1788056930.113:853): avc: denied { write } for pid=13503 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1005.726958][ T5711] appletouch 4-1:0.85: Failed to read mode from device. [ 1005.727075][ T5711] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 1005.762760][ T5711] usb 4-1: USB disconnect, device number 60 [ 1006.145901][ T31] audit: type=1400 audit(1788056930.763:854): avc: denied { read write } for pid=13490 comm="syz.0.1916" name="idmouse0" dev="devtmpfs" ino=3549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1006.170811][ T31] audit: type=1400 audit(1788056930.793:855): avc: denied { read write open } for pid=13490 comm="syz.0.1916" path="/dev/idmouse0" dev="devtmpfs" ino=3549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1006.427532][ T31] audit: type=1400 audit(1788056931.043:856): avc: denied { append } for pid=13531 comm="syz.3.1920" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1006.483503][ T5711] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1006.518786][ T31] audit: type=1400 audit(1788056931.133:857): avc: denied { write } for pid=13518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1006.635177][ T5711] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1006.645901][ T5711] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.645925][ T5711] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1006.645954][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.052840][ T5711] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1007.145862][ T31] audit: type=1400 audit(1788056931.763:858): avc: denied { write } for pid=13544 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1007.253118][ T5711] usb 1-1: USB disconnect, device number 42 [ 1007.267521][ T5711] idmouse 1-1:1.0: disconnected [ 1007.463869][ T31] audit: type=1400 audit(1788056932.083:859): avc: denied { create } for pid=13535 comm="syz.3.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1007.726728][ T31] audit: type=1400 audit(1788056932.343:860): avc: denied { connect } for pid=13535 comm="syz.3.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1007.756891][ T31] audit: type=1400 audit(1788056932.373:861): avc: denied { firmware_load } for pid=13535 comm="syz.3.1922" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1008.612034][T13564] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1925'. [ 1008.846325][T13538] syz.3.1922 (13538) used greatest stack depth: 19896 bytes left [ 1009.154170][ T2299] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1009.318393][ T2299] usb 6-1: Using ep0 maxpacket: 16 [ 1009.328045][ T2299] usb 6-1: New USB device found, idVendor=0b05, idProduct=171d, bcdDevice=1a.45 [ 1009.339731][ T2299] usb 6-1: config 203 has an invalid interface number: 202 but max is 0 [ 1009.339753][ T2299] usb 6-1: config 203 has no interface number 0 [ 1009.339771][ T2299] usb 6-1: config 203 interface 202 has no altsetting 0 [ 1009.376446][ T2299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.376469][ T2299] usb 6-1: Product: syz [ 1009.376485][ T2299] usb 6-1: Manufacturer: syz [ 1009.376495][ T2299] usb 6-1: SerialNumber: syz [ 1010.479994][T13598] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1932'. [ 1010.527082][T13577] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1927'. [ 1010.699452][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 1010.699477][ T31] audit: type=1400 audit(1788056935.313:866): avc: denied { create } for pid=13576 comm="syz.5.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1010.739320][T13577] syzkaller0: entered promiscuous mode [ 1010.739341][T13577] syzkaller0: entered allmulticast mode [ 1010.740161][ T31] audit: type=1400 audit(1788056935.353:867): avc: denied { ioctl } for pid=13576 comm="syz.5.1927" path="socket:[39868]" dev="sockfs" ino=39868 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1010.803857][ T5711] usb 3-1: USB disconnect, device number 44 [ 1010.822503][ T5711] idmouse 3-1:1.0: disconnected [ 1011.207057][ T2299] usb 6-1: USB disconnect, device number 2 [ 1011.380611][ T31] audit: type=1400 audit(1788056935.993:868): avc: denied { write } for pid=13596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1011.471854][ T31] audit: type=1400 audit(1788056936.083:869): avc: denied { write } for pid=13616 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1011.780413][ T31] audit: type=1400 audit(1788056936.393:870): avc: denied { write } for pid=13618 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1011.852053][ T31] audit: type=1400 audit(1788056936.463:871): avc: denied { write } for pid=13629 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.697970][ T31] audit: type=1400 audit(1788056957.313:872): avc: denied { create } for pid=13631 comm="syz.2.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1032.731097][ T31] audit: type=1400 audit(1788056957.343:873): avc: denied { write } for pid=13631 comm="syz.2.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1033.126940][T13654] FAULT_INJECTION: forcing a failure. [ 1033.126940][T13654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.126973][T13654] CPU: 0 UID: 0 PID: 13654 Comm: syz.2.1940 Tainted: G L syzkaller #0 PREEMPT(full) [ 1033.126994][T13654] Tainted: [L]=SOFTLOCKUP [ 1033.126998][T13654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1033.127005][T13654] Call Trace: [ 1033.127010][T13654] [ 1033.127014][T13654] dump_stack_lvl+0x100/0x190 [ 1033.127035][T13654] should_fail_ex.cold+0x5/0xa [ 1033.127052][T13654] _copy_from_user+0x2e/0xd0 [ 1033.127070][T13654] ____sys_sendmsg+0x1d1/0xbe0 [ 1033.127086][T13654] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1033.127103][T13654] ? lock_acquire+0x1d1/0x380 [ 1033.127114][T13654] ? get_pid_task+0x2a/0x250 [ 1033.127131][T13654] ___sys_sendmsg+0x190/0x1e0 [ 1033.127146][T13654] ? __pfx____sys_sendmsg+0x10/0x10 [ 1033.127160][T13654] ? get_pid_task+0x106/0x250 [ 1033.127180][T13654] ? find_held_lock+0x2b/0x80 [ 1033.127205][T13654] __sys_sendmsg+0x160/0x210 [ 1033.127223][T13654] ? __pfx___sys_sendmsg+0x10/0x10 [ 1033.127248][T13654] do_syscall_64+0x123/0x790 [ 1033.127263][T13654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.127275][T13654] RIP: 0033:0x7fc5b759e159 [ 1033.127285][T13654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.127296][T13654] RSP: 002b:00007fc5b83e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1033.127308][T13654] RAX: ffffffffffffffda RBX: 00007fc5b7825fa0 RCX: 00007fc5b759e159 [ 1033.127315][T13654] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1033.127322][T13654] RBP: 00007fc5b83e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.127329][T13654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.127336][T13654] R13: 00007fc5b7826038 R14: 00007fc5b7825fa0 R15: 00007fff7a4bd518 [ 1033.127351][T13654] [ 1034.059854][ T31] audit: type=1400 audit(1788056958.673:874): avc: denied { append } for pid=13672 comm="syz.2.1947" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1034.890579][T13676] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1946'. [ 1038.399580][ T31] audit: type=1400 audit(1788056963.013:875): avc: denied { write } for pid=13685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1039.283621][T13726] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1959'. [ 1039.597111][ T31] audit: type=1400 audit(1788056964.213:876): avc: denied { write } for pid=13735 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1039.786309][ T5711] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1039.943421][ T5711] usb 4-1: Using ep0 maxpacket: 16 [ 1039.952121][ T5711] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1039.962726][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.962751][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.962773][ T5711] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1039.962797][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.012767][ T5711] usb 4-1: config 0 descriptor?? [ 1040.078877][T13755] FAULT_INJECTION: forcing a failure. [ 1040.078877][T13755] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.079557][T13755] CPU: 0 UID: 0 PID: 13755 Comm: syz.5.1965 Tainted: G L syzkaller #0 PREEMPT(full) [ 1040.079575][T13755] Tainted: [L]=SOFTLOCKUP [ 1040.079580][T13755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1040.079587][T13755] Call Trace: [ 1040.079592][T13755] [ 1040.079597][T13755] dump_stack_lvl+0x100/0x190 [ 1040.079618][T13755] should_fail_ex.cold+0x5/0xa [ 1040.079636][T13755] should_failslab+0xc2/0x120 [ 1040.079651][T13755] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1040.079663][T13755] ? __alloc_skb+0x5b7/0x710 [ 1040.079679][T13755] ? __alloc_skb+0x140/0x710 [ 1040.079698][T13755] __alloc_skb+0x140/0x710 [ 1040.079713][T13755] ? __alloc_skb+0x5b7/0x710 [ 1040.079728][T13755] ? __pfx___alloc_skb+0x10/0x10 [ 1040.079744][T13755] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1040.079761][T13755] ? sock_has_perm+0x25a/0x2f0 [ 1040.079777][T13755] ? __pfx_sock_has_perm+0x10/0x10 [ 1040.079798][T13755] netlink_alloc_large_skb+0x69/0x150 [ 1040.079816][T13755] netlink_sendmsg+0x680/0xda0 [ 1040.079835][T13755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1040.079852][T13755] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1040.079871][T13755] ____sys_sendmsg+0xa4d/0xbe0 [ 1040.079884][T13755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1040.079901][T13755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1040.079918][T13755] ? lock_acquire+0x1d1/0x380 [ 1040.079929][T13755] ? get_pid_task+0x2a/0x250 [ 1040.079946][T13755] ___sys_sendmsg+0x190/0x1e0 [ 1040.079961][T13755] ? __pfx____sys_sendmsg+0x10/0x10 [ 1040.079975][T13755] ? get_pid_task+0x106/0x250 [ 1040.079995][T13755] ? find_held_lock+0x2b/0x80 [ 1040.080020][T13755] __sys_sendmsg+0x160/0x210 [ 1040.080037][T13755] ? __pfx___sys_sendmsg+0x10/0x10 [ 1040.080063][T13755] do_syscall_64+0x123/0x790 [ 1040.080078][T13755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.080090][T13755] RIP: 0033:0x7fd8b439e159 [ 1040.080101][T13755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.080112][T13755] RSP: 002b:00007fd8b51c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1040.080124][T13755] RAX: ffffffffffffffda RBX: 00007fd8b4625fa0 RCX: 00007fd8b439e159 [ 1040.080131][T13755] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1040.080138][T13755] RBP: 00007fd8b51c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.080146][T13755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.080152][T13755] R13: 00007fd8b4626038 R14: 00007fd8b4625fa0 R15: 00007ffd5055e068 [ 1040.080168][T13755] [ 1040.675814][ T5711] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input101 [ 1040.826552][T13738] netlink: 'syz.3.1964': attribute type 2 has an invalid length. [ 1040.844525][T13738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.871151][T13738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.885509][ T5711] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1040.943424][T12577] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 1040.943783][ T1214] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1040.967724][ T31] audit: type=1400 audit(1788056965.583:877): avc: denied { write } for pid=13748 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1041.147384][T12577] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1041.167243][T12577] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1041.167269][T12577] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1041.167290][T12577] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1041.167310][T12577] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1041.167347][T12577] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1041.167362][T12577] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1041.323665][ T1214] usb 6-1: device descriptor read/64, error -71 [ 1041.421294][T12577] usb 3-1: string descriptor 0 read error: -22 [ 1041.421510][T12577] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.459884][T12577] usb 3-1: config 0 descriptor?? [ 1041.473028][T13766] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1041.498789][T12577] hub 3-1:0.0: bad descriptor, ignoring hub [ 1041.504864][T12577] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1041.552089][T12577] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input102 [ 1041.573819][ T1214] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1041.668159][ T31] audit: type=1400 audit(1788056966.283:878): avc: denied { ioctl } for pid=13730 comm="syz.0.1961" path="socket:[40283]" dev="sockfs" ino=40283 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1041.713173][ T1214] usb 6-1: device descriptor read/64, error -71 [ 1041.829936][ T1214] usb usb6-port1: attempt power cycle [ 1041.904402][ T2299] usb 4-1: reset high-speed USB device number 61 using dummy_hcd [ 1042.337298][ T1214] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1042.363620][ T1214] usb 6-1: device descriptor read/8, error -71 [ 1042.396937][ T31] audit: type=1400 audit(1788056967.013:879): avc: denied { write } for pid=13798 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1042.653047][ T1214] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1042.674449][ T1214] usb 6-1: device descriptor read/8, error -71 [ 1042.782765][ T1214] usb usb6-port1: unable to enumerate USB device [ 1044.031576][ T1214] usb 3-1: USB disconnect, device number 45 [ 1044.080975][ T5711] usb 4-1: USB disconnect, device number 61 [ 1044.333924][T13826] FAULT_INJECTION: forcing a failure. [ 1044.333924][T13826] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.333958][T13826] CPU: 0 UID: 0 PID: 13826 Comm: syz.5.1977 Tainted: G L syzkaller #0 PREEMPT(full) [ 1044.333975][T13826] Tainted: [L]=SOFTLOCKUP [ 1044.333980][T13826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1044.333987][T13826] Call Trace: [ 1044.333991][T13826] [ 1044.333996][T13826] dump_stack_lvl+0x100/0x190 [ 1044.334018][T13826] should_fail_ex.cold+0x5/0xa [ 1044.334034][T13826] should_failslab+0xc2/0x120 [ 1044.334048][T13826] __kmalloc_noprof+0xfc/0x840 [ 1044.334061][T13826] ? tomoyo_encode2+0xfb/0x3c0 [ 1044.334075][T13826] tomoyo_encode2+0xfb/0x3c0 [ 1044.334089][T13826] tomoyo_encode+0x29/0x50 [ 1044.334100][T13826] tomoyo_realpath_from_path+0x18c/0x690 [ 1044.334115][T13826] tomoyo_path_number_perm+0x23c/0x580 [ 1044.334131][T13826] ? tomoyo_path_number_perm+0x22e/0x580 [ 1044.334148][T13826] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1044.334170][T13826] ? __lock_acquire+0x4c5/0x1ec0 [ 1044.334189][T13826] ? __fget_files+0x34/0x3d0 [ 1044.334202][T13826] ? find_held_lock+0x2b/0x80 [ 1044.334217][T13826] ? hook_file_ioctl_common+0x140/0x440 [ 1044.334234][T13826] ? __fget_files+0x21f/0x3d0 [ 1044.334249][T13826] security_file_ioctl+0xd3/0x230 [ 1044.334275][T13826] __x64_sys_ioctl+0xb7/0x210 [ 1044.334294][T13826] do_syscall_64+0x123/0x790 [ 1044.334311][T13826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.334323][T13826] RIP: 0033:0x7fd8b439e159 [ 1044.334333][T13826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.334344][T13826] RSP: 002b:00007fd8b51c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1044.334356][T13826] RAX: ffffffffffffffda RBX: 00007fd8b4625fa0 RCX: 00007fd8b439e159 [ 1044.334364][T13826] RDX: 00002000000025c0 RSI: 00000000c0485661 RDI: 0000000000000003 [ 1044.334371][T13826] RBP: 00007fd8b51c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.334378][T13826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1044.334385][T13826] R13: 00007fd8b4626038 R14: 00007fd8b4625fa0 R15: 00007ffd5055e068 [ 1044.334401][T13826] [ 1044.334432][T13826] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1045.962617][ T5711] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1046.143227][ T5711] usb 4-1: Using ep0 maxpacket: 16 [ 1046.150907][ T5711] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1046.163183][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1046.175269][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.175292][ T5711] usb 4-1: Product: syz [ 1046.175308][ T5711] usb 4-1: Manufacturer: syz [ 1046.175318][ T5711] usb 4-1: SerialNumber: syz [ 1046.205340][ T5711] usb 4-1: config 0 descriptor?? [ 1046.219242][ T5711] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1046.234858][ T5711] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1046.454939][ T31] audit: type=1400 audit(1788056971.073:880): avc: denied { create } for pid=13837 comm="syz.3.1981" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1046.493349][ T5711] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1046.698272][ T5711] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1046.698343][ T5711] em28xx 4-1:0.0: board has no eeprom [ 1046.915674][T13869] 9pnet_fd: Insufficient options for proto=fd [ 1046.920192][T13869] syzkaller0: entered promiscuous mode [ 1046.920221][T13869] syzkaller0: entered allmulticast mode [ 1047.014933][ T5711] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1047.014963][ T5711] em28xx 4-1:0.0: dvb set to bulk mode. [ 1047.039374][ T5711] usb 4-1: USB disconnect, device number 62 [ 1047.040182][ T5711] em28xx 4-1:0.0: Disconnecting em28xx [ 1047.075850][ T9] em28xx 4-1:0.0: Binding DVB extension [ 1048.092059][ T1214] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1048.282594][ T1214] usb 6-1: Using ep0 maxpacket: 32 [ 1048.311761][ T1214] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1048.328719][ T1214] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.328753][ T1214] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.328777][ T1214] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1048.328792][ T1214] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1048.328809][ T1214] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1048.328828][ T1214] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.461046][ T1214] usb 6-1: config 0 descriptor?? [ 1048.475730][ T9] em28xx 4-1:0.0: Registering input extension [ 1048.482091][ T5711] em28xx 4-1:0.0: Closing input extension [ 1048.565447][ T31] audit: type=1400 audit(1788056973.183:881): avc: denied { ioctl } for pid=13886 comm="syz.2.1989" path="socket:[40689]" dev="sockfs" ino=40689 ioctlcmd=0x5441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1049.501388][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1049.501420][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1049.562639][ T31] audit: type=1400 audit(1788056974.173:882): avc: denied { setopt } for pid=13886 comm="syz.2.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1049.687100][ T5711] em28xx: Freeing device [ 1049.828707][ T1214] corsair-cpro 0003:1B1C:0C10.0006: unknown main item tag 0x0 [ 1049.836508][ T1214] corsair-cpro 0003:1B1C:0C10.0006: unknown main item tag 0x0 [ 1049.836526][ T1214] corsair-cpro 0003:1B1C:0C10.0006: unknown main item tag 0x0 [ 1049.836542][ T1214] corsair-cpro 0003:1B1C:0C10.0006: unknown main item tag 0x0 [ 1049.836558][ T1214] corsair-cpro 0003:1B1C:0C10.0006: unknown main item tag 0x0 [ 1049.878969][ T1214] corsair-cpro 0003:1B1C:0C10.0006: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 1049.964602][ T1214] corsair-cpro 0003:1B1C:0C10.0006: probe with driver corsair-cpro failed with error -38 [ 1050.091865][T13873] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1050.210325][T13873] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1986'. [ 1050.404485][ T31] audit: type=1400 audit(1788056975.023:883): avc: denied { read } for pid=13916 comm="syz.3.1996" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1050.404532][ T31] audit: type=1400 audit(1788056975.023:884): avc: denied { open } for pid=13916 comm="syz.3.1996" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1051.017876][ T31] audit: type=1400 audit(1788056975.633:885): avc: denied { write } for pid=13916 comm="syz.3.1996" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1051.121636][ T31] audit: type=1400 audit(1788056975.733:886): avc: denied { ioctl } for pid=13916 comm="syz.3.1996" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1051.433646][ T31] audit: type=1400 audit(1788056976.053:887): avc: denied { read } for pid=13945 comm="syz.0.1999" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1051.458570][ T31] audit: type=1400 audit(1788056976.073:888): avc: denied { open } for pid=13945 comm="syz.0.1999" path="/dev/usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1051.501535][ T31] audit: type=1400 audit(1788056976.113:889): avc: denied { ioctl } for pid=13945 comm="syz.0.1999" path="/dev/usbmon7" dev="devtmpfs" ino=736 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1051.617007][ T5711] usb 6-1: USB disconnect, device number 7 [ 1052.842294][ T5703] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1052.898603][T13963] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2005'. [ 1052.908467][ T5711] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 1052.920226][ T31] audit: type=1400 audit(1788056977.533:890): avc: denied { read } for pid=13965 comm="syz.4.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1053.068459][ T5703] usb 4-1: Using ep0 maxpacket: 8 [ 1053.078899][ T5703] usb 4-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.40 [ 1053.090194][ T5703] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1053.090221][ T5703] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1053.104206][ T5711] usb 6-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1053.125873][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.125929][ T5703] usb 4-1: Product: syz [ 1053.125946][ T5703] usb 4-1: Manufacturer: syz [ 1053.125956][ T5703] usb 4-1: SerialNumber: syz [ 1053.155479][ T5711] usb 6-1: string descriptor 0 read error: -22 [ 1053.155578][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.175815][ T5711] usb 6-1: config 0 descriptor?? [ 1053.201378][ T5711] usbtest 6-1:0.0: FX2 device [ 1053.206144][ T5711] usbtest 6-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 1053.234270][ T31] audit: type=1400 audit(1788056977.853:891): avc: denied { setopt } for pid=13969 comm="syz.2.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1053.343611][ T31] audit: type=1400 audit(1788056977.963:892): avc: denied { write } for pid=13965 comm="syz.4.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1053.375195][T13972] FAULT_INJECTION: forcing a failure. [ 1053.375195][T13972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1053.390587][T13972] CPU: 0 UID: 0 PID: 13972 Comm: syz.0.2009 Tainted: G L syzkaller #0 PREEMPT(full) [ 1053.390609][T13972] Tainted: [L]=SOFTLOCKUP [ 1053.390613][T13972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1053.390621][T13972] Call Trace: [ 1053.390626][T13972] [ 1053.390631][T13972] dump_stack_lvl+0x100/0x190 [ 1053.390653][T13972] should_fail_ex.cold+0x5/0xa [ 1053.390670][T13972] _copy_from_user+0x2e/0xd0 [ 1053.390688][T13972] __keyctl_dh_compute+0x1b6/0x10d0 [ 1053.390701][T13972] ? find_held_lock+0x2b/0x80 [ 1053.390717][T13972] ? get_pid_task+0xfc/0x250 [ 1053.390731][T13972] ? get_pid_task+0xfc/0x250 [ 1053.390746][T13972] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1053.390760][T13972] ? proc_fail_nth_write+0x9f/0x220 [ 1053.390778][T13972] ? lock_acquire+0x1d1/0x380 [ 1053.390789][T13972] ? __might_fault+0xc5/0x140 [ 1053.390814][T13972] keyctl_dh_compute+0xd9/0x140 [ 1053.390827][T13972] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 1053.390846][T13972] ? ksys_write+0x1ac/0x250 [ 1053.390856][T13972] ? __pfx_ksys_write+0x10/0x10 [ 1053.390869][T13972] __do_sys_keyctl+0x464/0x5a0 [ 1053.390886][T13972] do_syscall_64+0x123/0x790 [ 1053.390900][T13972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.390913][T13972] RIP: 0033:0x7f4a9dd9e159 [ 1053.390923][T13972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.390934][T13972] RSP: 002b:00007f4a9ecd4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1053.390946][T13972] RAX: ffffffffffffffda RBX: 00007f4a9e025fa0 RCX: 00007f4a9dd9e159 [ 1053.390954][T13972] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017 [ 1053.390961][T13972] RBP: 00007f4a9ecd4090 R08: 0000200000000180 R09: 0000000000000000 [ 1053.390968][T13972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.390975][T13972] R13: 00007f4a9e026038 R14: 00007f4a9e025fa0 R15: 00007fff9bc01438 [ 1053.390990][T13972] [ 1053.582242][ T2299] usb 6-1: USB disconnect, device number 8 [ 1053.647228][ T5703] usbhid 4-1:1.0: can't add hid device: -71 [ 1053.647296][ T5703] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1053.676744][ T5703] usb 4-1: USB disconnect, device number 63 [ 1053.753306][ T31] audit: type=1400 audit(1788056978.373:893): avc: denied { watch_reads } for pid=13969 comm="syz.2.2008" path="/412/file1" dev="tmpfs" ino=2321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1053.795721][ T31] audit: type=1400 audit(1788056978.413:894): avc: denied { bind } for pid=13969 comm="syz.2.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1053.899510][T13979] FAULT_INJECTION: forcing a failure. [ 1053.899510][T13979] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.914355][T13979] CPU: 0 UID: 0 PID: 13979 Comm: syz.2.2012 Tainted: G L syzkaller #0 PREEMPT(full) [ 1053.914375][T13979] Tainted: [L]=SOFTLOCKUP [ 1053.914379][T13979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1053.914387][T13979] Call Trace: [ 1053.914391][T13979] [ 1053.914396][T13979] dump_stack_lvl+0x100/0x190 [ 1053.914416][T13979] should_fail_ex.cold+0x5/0xa [ 1053.914437][T13979] should_failslab+0xc2/0x120 [ 1053.914451][T13979] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1053.914463][T13979] ? __alloc_skb+0x5b7/0x710 [ 1053.914480][T13979] ? __alloc_skb+0x140/0x710 [ 1053.914498][T13979] __alloc_skb+0x140/0x710 [ 1053.914513][T13979] ? __alloc_skb+0x5b7/0x710 [ 1053.914529][T13979] ? __pfx___alloc_skb+0x10/0x10 [ 1053.914549][T13979] netlink_alloc_large_skb+0x69/0x150 [ 1053.914568][T13979] netlink_sendmsg+0x680/0xda0 [ 1053.914586][T13979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1053.914604][T13979] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1053.914624][T13979] ____sys_sendmsg+0xa4d/0xbe0 [ 1053.914636][T13979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1053.914654][T13979] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1053.914671][T13979] ? lock_acquire+0x1d1/0x380 [ 1053.914683][T13979] ? get_pid_task+0x2a/0x250 [ 1053.914699][T13979] ___sys_sendmsg+0x190/0x1e0 [ 1053.914714][T13979] ? __pfx____sys_sendmsg+0x10/0x10 [ 1053.914728][T13979] ? get_pid_task+0x106/0x250 [ 1053.914748][T13979] ? find_held_lock+0x2b/0x80 [ 1053.914774][T13979] __sys_sendmsg+0x160/0x210 [ 1053.914791][T13979] ? __pfx___sys_sendmsg+0x10/0x10 [ 1053.914816][T13979] do_syscall_64+0x123/0x790 [ 1053.914832][T13979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.914844][T13979] RIP: 0033:0x7fc5b759e159 [ 1053.914854][T13979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.914865][T13979] RSP: 002b:00007fc5b83e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1053.914877][T13979] RAX: ffffffffffffffda RBX: 00007fc5b7825fa0 RCX: 00007fc5b759e159 [ 1053.914885][T13979] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1053.914892][T13979] RBP: 00007fc5b83e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.914899][T13979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.914906][T13979] R13: 00007fc5b7826038 R14: 00007fc5b7825fa0 R15: 00007fff7a4bd518 [ 1053.914921][T13979] [ 1054.175144][ T31] audit: type=1400 audit(1788056978.793:895): avc: denied { read } for pid=13973 comm="syz.0.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1054.538975][T13990] bridge_slave_0: left allmulticast mode [ 1054.546849][T13990] bridge_slave_0: left promiscuous mode [ 1054.554777][T13990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.579336][ T31] audit: type=1400 audit(1788056979.193:896): avc: denied { write } for pid=13991 comm="syz.3.2016" name="001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1054.611438][T13997] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2014'. [ 1054.622108][T13990] bridge_slave_1: left allmulticast mode [ 1054.631140][T13990] bridge_slave_1: left promiscuous mode [ 1054.639174][T13990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.648265][T13994] 9p: Bad value for 'rfdno' [ 1054.750284][T13990] team0: Port device team_slave_0 removed [ 1054.796774][T13990] team0: Port device team_slave_1 removed [ 1054.816428][T13990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.816456][T13990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.847313][T13990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.857939][T13990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.875484][ T31] audit: type=1400 audit(1788056979.493:897): avc: denied { read } for pid=13984 comm="syz.0.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1054.909766][T13990] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1055.052312][ T31] audit: type=1400 audit(1788056979.663:898): avc: denied { bind } for pid=14006 comm="syz.2.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1055.099711][T14011] CIFS: Attempting to mount //127.0.0.1/share [ 1055.344696][ T5703] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1055.442615][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1055.503889][ T5703] usb 4-1: Using ep0 maxpacket: 8 [ 1055.513632][ T5703] usb 4-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.40 [ 1055.524597][ T5703] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1055.537543][ T5703] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1055.548708][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.548736][ T5703] usb 4-1: Product: syz [ 1055.548747][ T5703] usb 4-1: Manufacturer: syz [ 1055.548758][ T5703] usb 4-1: SerialNumber: syz [ 1055.603723][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1055.610744][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1055.622067][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1055.622103][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1055.622123][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1055.622139][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1055.622175][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1055.622200][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.794674][T13883] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1055.794789][T13883] Bluetooth: hci2: Injecting HCI hardware error event [ 1055.796046][T13883] Bluetooth: hci2: hardware error 0x00 [ 1055.902289][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 1055.908218][ T9] usbtmc 3-1:16.0: can't read capabilities [ 1055.918984][ T5703] usbhid 4-1:1.0: can't add hid device: -71 [ 1055.919052][ T5703] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1055.920544][T14011] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1055.920572][T14011] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1055.957679][ T5703] usb 4-1: USB disconnect, device number 64 [ 1056.112843][ T2299] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1056.272547][ T2299] usb 6-1: Using ep0 maxpacket: 32 [ 1056.278186][ T2299] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1056.289145][ T2299] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.289180][ T2299] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 224, changing to 7 [ 1056.320338][ T2299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.320363][ T2299] usb 6-1: Product: syz [ 1056.320381][ T2299] usb 6-1: Manufacturer: syz [ 1056.320392][ T2299] usb 6-1: SerialNumber: syz [ 1056.366498][ T5601] ffs_data_put(): freeing [ 1056.410462][ T5711] usb 3-1: USB disconnect, device number 46 [ 1057.106565][T14054] CIFS: Attempting to mount //127.0.0.1/share [ 1057.872886][T13883] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1058.000307][T14054] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1058.000344][T14054] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1058.236719][ T5602] ffs_data_put(): freeing [ 1058.338119][T14074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2040'. [ 1059.620788][ T2299] snd-ua101 6-1:1.1: invalid format type [ 1059.648942][ T2299] snd-ua101 6-1:1.0: invalid num_altsetting [ 1059.717519][ T2299] usb 6-1: USB disconnect, device number 9 [ 1059.902188][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 1059.902214][ T31] audit: type=1400 audit(1788056984.513:907): avc: denied { listen } for pid=14084 comm="syz.2.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1059.902242][ T31] audit: type=1400 audit(1788056984.513:908): avc: denied { accept } for pid=14084 comm="syz.2.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1060.043596][T14086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2044'. [ 1060.121151][T14092] syz.0.2046 (14092): attempted to duplicate a private mapping with mremap. This is not supported. [ 1060.207828][ T31] audit: type=1400 audit(1788056984.823:909): avc: denied { read write } for pid=14089 comm="syz.3.2036" name="cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 1060.207872][ T31] audit: type=1400 audit(1788056984.823:910): avc: denied { open } for pid=14089 comm="syz.3.2036" path="/399/dev/cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 1060.291638][T14086] hsr_slave_1 (unregistering): left promiscuous mode [ 1060.316139][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2036'. [ 1060.477843][ T5602] ffs_data_put(): freeing [ 1060.496404][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1060.533726][ T5703] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1060.663599][ T9] usb 1-1: New USB device found, idVendor=19d2, idProduct=1092, bcdDevice=17.06 [ 1060.679655][ T9] usb 1-1: config 0 has an invalid interface number: 158 but max is 2 [ 1060.679673][ T9] usb 1-1: config 0 has an invalid interface number: 158 but max is 2 [ 1060.679685][ T9] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1060.679699][ T9] usb 1-1: config 0 has an invalid interface number: 136 but max is 2 [ 1060.679712][ T9] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 1060.679724][ T9] usb 1-1: config 0 has no interface number 0 [ 1060.679733][ T9] usb 1-1: config 0 has no interface number 1 [ 1060.679759][ T9] usb 1-1: config 0 interface 158 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 1060.679773][ T9] usb 1-1: Duplicate descriptor for config 0 interface 158 altsetting 0, skipping [ 1060.679791][ T9] usb 1-1: config 0 interface 136 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1060.679803][ T9] usb 1-1: config 0 interface 136 altsetting 1 endpoint 0x7 has invalid maxpacket 1600, setting to 1024 [ 1060.679818][ T9] usb 1-1: config 0 interface 136 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1060.679832][ T9] usb 1-1: config 0 interface 136 altsetting 1 endpoint 0xA has invalid maxpacket 96, setting to 64 [ 1060.679846][ T9] usb 1-1: config 0 interface 136 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 1060.679859][ T9] usb 1-1: config 0 interface 136 altsetting 1 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1060.679873][ T9] usb 1-1: config 0 interface 136 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 1060.679886][ T9] usb 1-1: config 0 interface 136 altsetting 1 bulk endpoint 0xC has invalid maxpacket 64 [ 1060.679901][ T9] usb 1-1: config 0 interface 136 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1060.679912][ T9] usb 1-1: config 0 interface 136 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1060.679925][ T9] usb 1-1: config 0 interface 136 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1060.679936][ T9] usb 1-1: config 0 interface 136 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 1060.679948][ T9] usb 1-1: config 0 interface 136 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 1060.679960][ T9] usb 1-1: config 0 interface 136 has no altsetting 0 [ 1060.758730][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.758748][ T9] usb 1-1: Product: 囍賹䋍劐陗谑⥴蠁즰㢓ผ윔蓾叹쁑郘䙏怴产千㱏ꐦ昔ᚐ痡閊죪ᾢ滖篭䡞⩅锓彪ᆙ㋞픭ˇⅇ릧譮톋鷨熊匵枹캫캐Ꭲꢢ칵솿씉ꇆ쒐鯓筩᳆댧蕄ƴ睹連䧋賜譒ꂈ쮃鈶Ð컗ⳍꅆㄿ䈩፷欄﷉근 [ 1060.758767][ T9] usb 1-1: Manufacturer: ఊ [ 1060.758776][ T9] usb 1-1: SerialNumber: ఌ [ 1060.827906][ T9] usb 1-1: config 0 descriptor?? [ 1060.863465][ T5703] usb 6-1: Using ep0 maxpacket: 32 [ 1060.864508][T14092] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1060.866065][ T5703] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1060.866920][ T5703] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1060.866934][ T5703] usb 6-1: config 0 has no interface number 0 [ 1061.043059][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.043092][ T5703] usb 6-1: Product: syz [ 1061.043101][ T5703] usb 6-1: Manufacturer: syz [ 1061.043109][ T5703] usb 6-1: SerialNumber: syz [ 1061.557182][ T5703] usb 6-1: config 0 descriptor?? [ 1061.968347][T14092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.968658][T14092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.035348][ T9] option 1-1:0.158: GSM modem (1-port) converter detected [ 1062.087035][ T9] usb 1-1: USB disconnect, device number 43 [ 1062.106068][ T9] option 1-1:0.158: device disconnected [ 1062.207546][T14110] team0: Port device xfrm0 removed [ 1062.219590][T14110] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1062.239075][T10073] tipc: Resetting bearer [ 1063.371153][T14110] team0: Port device xfrm0 added [ 1063.411350][T14110] tipc: Enabling of bearer rejected, already enabled [ 1063.547611][ T5703] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1063.547643][ T5703] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1063.573760][ T5703] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1063.573892][ T5703] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1063.606397][ T5703] usb 6-1: USB disconnect, device number 10 [ 1063.924822][ T31] audit: type=1400 audit(1788056988.533:911): avc: denied { mounton } for pid=14130 comm="syz.0.2060" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1063.951172][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1064.053893][ T31] audit: type=1400 audit(1788056988.673:912): avc: denied { read } for pid=14134 comm="syz.3.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1064.081394][ T31] audit: type=1400 audit(1788056988.693:913): avc: denied { mount } for pid=14130 comm="syz.0.2060" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1064.123180][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1064.133230][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1064.133262][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.133279][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1064.133305][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.178718][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1064.178742][ T9] usb 3-1: Product: syz [ 1064.178759][ T9] usb 3-1: Manufacturer: syz [ 1064.209612][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 1064.217271][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 1064.232782][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1064.232892][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 1064.519914][ T31] audit: type=1400 audit(1788056989.123:914): avc: denied { read write } for pid=14121 comm="syz.2.2057" name="cdc-wdm0" dev="devtmpfs" ino=3615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1064.519970][ T31] audit: type=1400 audit(1788056989.123:915): avc: denied { open } for pid=14121 comm="syz.2.2057" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1064.603221][ T31] audit: type=1400 audit(1788056989.223:916): avc: denied { ioctl } for pid=14121 comm="syz.2.2057" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3615 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1064.833163][ T2299] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1064.852176][ T1214] usb 3-1: USB disconnect, device number 47 [ 1065.101066][ T2299] usb 4-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 1065.291105][ T2299] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1065.291136][ T2299] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1065.291158][ T2299] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1065.291181][ T2299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.654080][T14144] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1066.106578][T14025] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1066.115758][T14025] Bluetooth: hci4: unexpected event 0x20 length: 0 < 7 [ 1066.319466][ T2299] usb 4-1: USB disconnect, device number 65 [ 1066.331392][T13883] Bluetooth: hci4: Reading Intel version command failed (-71) [ 1066.758545][T14173] trusted_key: encrypted_key: insufficient parameters specified [ 1066.783413][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 1066.783436][ T31] audit: type=1400 audit(1788056991.403:918): avc: denied { create } for pid=14171 comm="syz.2.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1067.055580][T14188] FAULT_INJECTION: forcing a failure. [ 1067.055580][T14188] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.089534][T14188] CPU: 0 UID: 0 PID: 14188 Comm: syz.2.2076 Tainted: G L syzkaller #0 PREEMPT(full) [ 1067.089556][T14188] Tainted: [L]=SOFTLOCKUP [ 1067.089561][T14188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1067.089568][T14188] Call Trace: [ 1067.089572][T14188] [ 1067.089577][T14188] dump_stack_lvl+0x100/0x190 [ 1067.089599][T14188] should_fail_ex.cold+0x5/0xa [ 1067.089615][T14188] should_failslab+0xc2/0x120 [ 1067.089629][T14188] __kmalloc_noprof+0xfc/0x840 [ 1067.089642][T14188] ? tomoyo_encode2+0xfb/0x3c0 [ 1067.089656][T14188] tomoyo_encode2+0xfb/0x3c0 [ 1067.089670][T14188] tomoyo_encode+0x29/0x50 [ 1067.089681][T14188] tomoyo_realpath_from_path+0x18c/0x690 [ 1067.089697][T14188] tomoyo_path_number_perm+0x23c/0x580 [ 1067.089713][T14188] ? tomoyo_path_number_perm+0x22e/0x580 [ 1067.089730][T14188] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1067.089752][T14188] ? __lock_acquire+0x4c5/0x1ec0 [ 1067.089771][T14188] ? __fget_files+0x34/0x3d0 [ 1067.089785][T14188] ? find_held_lock+0x2b/0x80 [ 1067.089800][T14188] ? hook_file_ioctl_common+0x140/0x440 [ 1067.089817][T14188] ? __fget_files+0x21f/0x3d0 [ 1067.089832][T14188] security_file_ioctl+0xd3/0x230 [ 1067.089850][T14188] __x64_sys_ioctl+0xb7/0x210 [ 1067.089869][T14188] do_syscall_64+0x123/0x790 [ 1067.089885][T14188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.089898][T14188] RIP: 0033:0x7fc5b759e159 [ 1067.089909][T14188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.089920][T14188] RSP: 002b:00007fc5b83c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1067.089932][T14188] RAX: ffffffffffffffda RBX: 00007fc5b7826090 RCX: 00007fc5b759e159 [ 1067.089940][T14188] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000005 [ 1067.089947][T14188] RBP: 00007fc5b83c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.089954][T14188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.089961][T14188] R13: 00007fc5b7826128 R14: 00007fc5b7826090 R15: 00007fff7a4bd518 [ 1067.089976][T14188] [ 1067.101785][T14188] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1067.675649][T14197] FAULT_INJECTION: forcing a failure. [ 1067.675649][T14197] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.675683][T14197] CPU: 0 UID: 0 PID: 14197 Comm: syz.0.2077 Tainted: G L syzkaller #0 PREEMPT(full) [ 1067.675701][T14197] Tainted: [L]=SOFTLOCKUP [ 1067.675705][T14197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1067.675712][T14197] Call Trace: [ 1067.675716][T14197] [ 1067.675721][T14197] dump_stack_lvl+0x100/0x190 [ 1067.675742][T14197] should_fail_ex.cold+0x5/0xa [ 1067.675759][T14197] should_failslab+0xc2/0x120 [ 1067.675774][T14197] __kmalloc_noprof+0xfc/0x840 [ 1067.675785][T14197] ? __pfx_dynamic_dname+0x10/0x10 [ 1067.675797][T14197] ? tomoyo_encode2+0xfb/0x3c0 [ 1067.675811][T14197] tomoyo_encode2+0xfb/0x3c0 [ 1067.675824][T14197] tomoyo_encode+0x29/0x50 [ 1067.675835][T14197] tomoyo_realpath_from_path+0x18c/0x690 [ 1067.675850][T14197] tomoyo_path_number_perm+0x23c/0x580 [ 1067.675866][T14197] ? tomoyo_path_number_perm+0x22e/0x580 [ 1067.675883][T14197] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1067.675905][T14197] ? __lock_acquire+0x4c5/0x1ec0 [ 1067.675925][T14197] ? __fget_files+0x34/0x3d0 [ 1067.675945][T14197] ? find_held_lock+0x2b/0x80 [ 1067.675960][T14197] ? hook_file_ioctl_common+0x140/0x440 [ 1067.675977][T14197] ? __fget_files+0x21f/0x3d0 [ 1067.675993][T14197] security_file_ioctl+0xd3/0x230 [ 1067.676011][T14197] __x64_sys_ioctl+0xb7/0x210 [ 1067.676030][T14197] do_syscall_64+0x123/0x790 [ 1067.676045][T14197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.676059][T14197] RIP: 0033:0x7f4a9dd9e159 [ 1067.676069][T14197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.676080][T14197] RSP: 002b:00007f4a9ecb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1067.676091][T14197] RAX: ffffffffffffffda RBX: 00007f4a9e026090 RCX: 00007f4a9dd9e159 [ 1067.676099][T14197] RDX: 0000200000000440 RSI: 000000004008ae90 RDI: 0000000000000005 [ 1067.676106][T14197] RBP: 00007f4a9ecb3090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.676114][T14197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.676120][T14197] R13: 00007f4a9e026128 R14: 00007f4a9e026090 R15: 00007fff9bc01438 [ 1067.676136][T14197] [ 1068.812248][T14197] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1069.859457][T14210] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2080'. [ 1070.335581][ T31] audit: type=1400 audit(1788056994.953:919): avc: denied { write } for pid=14186 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1070.362722][ T1214] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1070.493469][ T1214] usb 1-1: device descriptor read/64, error -71 [ 1070.558749][ T31] audit: type=1400 audit(1788056995.173:920): avc: denied { write } for pid=14233 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1070.733384][ T1214] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1071.084963][ T1214] usb 1-1: device descriptor read/64, error -71 [ 1071.259767][ T1214] usb usb1-port1: attempt power cycle [ 1071.690801][T14242] fuse: fd is not a fuse device [ 1071.732584][ T1214] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1071.757619][ T1214] usb 1-1: device descriptor read/8, error -71 [ 1072.005933][ T1214] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1072.094394][ T2299] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 1072.134907][ T1214] usb 1-1: device descriptor read/8, error -71 [ 1072.316199][ T1214] usb usb1-port1: unable to enumerate USB device [ 1072.708511][ T2299] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1072.756588][ T2299] usb 4-1: not running at top speed; connect to a high speed hub [ 1072.781845][ T2299] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 1072.978796][ T2299] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.989040][ T2299] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1073.007098][ T2299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.015266][ T2299] usb 4-1: Product: syz [ 1073.015277][ T2299] usb 4-1: Manufacturer: syz [ 1073.015286][ T2299] usb 4-1: SerialNumber: syz [ 1073.449497][ T2299] usb 4-1: USB disconnect, device number 66 [ 1073.560475][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2093'. [ 1073.865607][T14268] bridge0: port 1(syzkaller0) entered blocking state [ 1073.865666][T14268] bridge0: port 1(syzkaller0) entered disabled state [ 1073.865777][T14268] syzkaller0: entered allmulticast mode [ 1073.929055][T14268] syzkaller0: left allmulticast mode [ 1073.965104][ T31] audit: type=1400 audit(1788056998.583:921): avc: denied { write } for pid=14252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1074.061452][T14300] FAULT_INJECTION: forcing a failure. [ 1074.061452][T14300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1074.075885][T14300] CPU: 0 UID: 0 PID: 14300 Comm: syz.2.2095 Tainted: G L syzkaller #0 PREEMPT(full) [ 1074.075904][T14300] Tainted: [L]=SOFTLOCKUP [ 1074.075908][T14300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1074.075916][T14300] Call Trace: [ 1074.075920][T14300] [ 1074.075925][T14300] dump_stack_lvl+0x100/0x190 [ 1074.075947][T14300] should_fail_ex.cold+0x5/0xa [ 1074.075963][T14300] _copy_from_user+0x2e/0xd0 [ 1074.075981][T14300] do_sys_poll+0x345/0xe90 [ 1074.075993][T14300] ? is_bpf_text_address+0x8a/0x1a0 [ 1074.076011][T14300] ? is_bpf_text_address+0x94/0x1a0 [ 1074.076026][T14300] ? __pfx_do_sys_poll+0x10/0x10 [ 1074.076037][T14300] ? unwind_get_return_address+0x59/0xa0 [ 1074.076053][T14300] ? arch_stack_walk+0xa6/0xf0 [ 1074.076079][T14300] ? lock_acquire+0x1d1/0x380 [ 1074.076090][T14300] ? __might_fault+0xc5/0x140 [ 1074.076133][T14300] ? _copy_from_user+0x59/0xd0 [ 1074.076149][T14300] ? set_user_sigmask+0x1e1/0x270 [ 1074.076167][T14300] ? __pfx_set_user_sigmask+0x10/0x10 [ 1074.076184][T14300] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1074.076206][T14300] __x64_sys_ppoll+0x2b5/0x350 [ 1074.076221][T14300] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1074.076232][T14300] ? ksys_write+0x1ac/0x250 [ 1074.076243][T14300] ? __pfx_ksys_write+0x10/0x10 [ 1074.076257][T14300] do_syscall_64+0x123/0x790 [ 1074.076273][T14300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.076286][T14300] RIP: 0033:0x7fc5b759e159 [ 1074.076296][T14300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.076307][T14300] RSP: 002b:00007fc5b83e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1074.076319][T14300] RAX: ffffffffffffffda RBX: 00007fc5b7825fa0 RCX: 00007fc5b759e159 [ 1074.076327][T14300] RDX: 0000200000000300 RSI: 0000000000000001 RDI: 00002000000000c0 [ 1074.076334][T14300] RBP: 00007fc5b83e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.076342][T14300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1074.076349][T14300] R13: 00007fc5b7826038 R14: 00007fc5b7825fa0 R15: 00007fff7a4bd518 [ 1074.076364][T14300] [ 1074.279868][T14301] FAULT_INJECTION: forcing a failure. [ 1074.279868][T14301] name failslab, interval 1, probability 0, space 0, times 0 [ 1074.279889][T14301] CPU: 0 UID: 0 PID: 14301 Comm: syz.5.2094 Tainted: G L syzkaller #0 PREEMPT(full) [ 1074.279905][T14301] Tainted: [L]=SOFTLOCKUP [ 1074.279910][T14301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1074.279917][T14301] Call Trace: [ 1074.279921][T14301] [ 1074.279926][T14301] dump_stack_lvl+0x100/0x190 [ 1074.279946][T14301] should_fail_ex.cold+0x5/0xa [ 1074.279967][T14301] should_failslab+0xc2/0x120 [ 1074.279980][T14301] __kmalloc_noprof+0xfc/0x840 [ 1074.279995][T14301] ? __pfx_dynamic_dname+0x10/0x10 [ 1074.280006][T14301] ? tomoyo_encode2+0xfb/0x3c0 [ 1074.280021][T14301] tomoyo_encode2+0xfb/0x3c0 [ 1074.280034][T14301] tomoyo_encode+0x29/0x50 [ 1074.280045][T14301] tomoyo_realpath_from_path+0x18c/0x690 [ 1074.280060][T14301] tomoyo_path_number_perm+0x23c/0x580 [ 1074.280077][T14301] ? tomoyo_path_number_perm+0x22e/0x580 [ 1074.280094][T14301] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1074.280116][T14301] ? __lock_acquire+0x4c5/0x1ec0 [ 1074.280135][T14301] ? __fget_files+0x34/0x3d0 [ 1074.280148][T14301] ? find_held_lock+0x2b/0x80 [ 1074.280163][T14301] ? hook_file_ioctl_common+0x140/0x440 [ 1074.280182][T14301] ? __fget_files+0x21f/0x3d0 [ 1074.280208][T14301] security_file_ioctl+0xd3/0x230 [ 1074.280226][T14301] __x64_sys_ioctl+0xb7/0x210 [ 1074.280245][T14301] do_syscall_64+0x123/0x790 [ 1074.280259][T14301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.280271][T14301] RIP: 0033:0x7fd8b439e159 [ 1074.280284][T14301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.280295][T14301] RSP: 002b:00007fd8b51a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1074.280307][T14301] RAX: ffffffffffffffda RBX: 00007fd8b4626090 RCX: 00007fd8b439e159 [ 1074.280315][T14301] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1074.280321][T14301] RBP: 00007fd8b51a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.280328][T14301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1074.280335][T14301] R13: 00007fd8b4626128 R14: 00007fd8b4626090 R15: 00007ffd5055e068 [ 1074.280354][T14301] [ 1074.588524][T14301] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1074.760769][ T31] audit: type=1400 audit(1788056999.373:922): avc: denied { write } for pid=14304 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1075.971964][T14313] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2098'. [ 1077.816603][T14322] gretap1: left promiscuous mode [ 1078.130555][ T31] audit: type=1326 audit(1788057002.743:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.2105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b759e159 code=0x7ffc0000 [ 1078.162402][ T31] audit: type=1326 audit(1788057002.773:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.2105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b759e159 code=0x7ffc0000 [ 1078.210946][ T31] audit: type=1326 audit(1788057002.823:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.2105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b759e159 code=0x7ffc0000 [ 1078.210987][ T31] audit: type=1326 audit(1788057002.823:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.2105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b759e159 code=0x7ffc0000 [ 1078.271596][ T31] audit: type=1326 audit(1788057002.893:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.2105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc5b759e159 code=0x7ffc0000 [ 1078.271639][ T31] audit: type=1326 audit(1788057002.893:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.2105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b759e159 code=0x7ffc0000 [ 1078.271672][ T31] audit: type=1326 audit(1788057002.893:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.2105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b759e159 code=0x7ffc0000 [ 1078.365018][ T31] audit: type=1326 audit(1788057002.983:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.2105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b759e159 code=0x7ffc0000 [ 1078.758675][T14356] netlink: 'syz.5.2110': attribute type 16 has an invalid length. [ 1078.758698][T14356] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2110'. [ 1079.066434][ T31] kauditd_printk_skb: 57 callbacks suppressed [ 1079.066460][ T31] audit: type=1326 audit(1788057003.683:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.2105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b759e159 code=0x7ffc0000 [ 1079.105330][ T31] audit: type=1326 audit(1788057003.723:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.2105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b759e159 code=0x7ffc0000 [ 1079.241877][ T31] audit: type=1326 audit(1788057003.853:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.2105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b759e159 code=0x7ffc0000 [ 1079.279418][ T31] audit: type=1326 audit(1788057003.893:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.2105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b759e159 code=0x7ffc0000 [ 1079.307940][ T31] audit: type=1326 audit(1788057003.923:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.2105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fc5b759e159 code=0x7ffc0000 [ 1079.334867][T11676] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1079.344185][ T31] audit: type=1326 audit(1788057003.963:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.2105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b759e159 code=0x7ffc0000 [ 1079.371270][ T31] audit: type=1326 audit(1788057003.993:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.2105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b759e159 code=0x7ffc0000 [ 1079.406043][ T31] audit: type=1326 audit(1788057004.023:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.2105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5b759e159 code=0x7ffc0000 [ 1079.434049][ T31] audit: type=1326 audit(1788057004.053:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.2105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b759e159 code=0x7ffc0000 [ 1079.434081][ T31] audit: type=1326 audit(1788057004.053:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.2105" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b759e159 code=0x7ffc0000 [ 1079.516965][T11676] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1079.517001][T11676] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1079.534876][T11676] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 1079.543194][T11676] usb 1-1: config 63 has an invalid descriptor of length 32, skipping remainder of the config [ 1079.543210][T11676] usb 1-1: config 63 has no interface number 0 [ 1079.543228][T11676] usb 1-1: config 63 interface 66 has no altsetting 0 [ 1079.585085][T11676] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.585111][T11676] usb 1-1: Product: syz [ 1079.585128][T11676] usb 1-1: Manufacturer: syz [ 1079.585139][T11676] usb 1-1: SerialNumber: syz [ 1080.051885][T14373] trusted_key: encrypted_key: insufficient parameters specified [ 1080.256535][ T2299] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 1081.214368][T14381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.313483][T11676] uvcvideo 1-1:63.66: probe with driver uvcvideo failed with error -22 [ 1081.323757][ T2299] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1081.390211][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1081.403502][ T2299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1081.403528][ T2299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 138, setting to 64 [ 1081.403559][ T2299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.430168][T11676] usb 1-1: USB disconnect, device number 48 [ 1081.449941][ T2299] usb 4-1: config 0 descriptor?? [ 1081.459971][T14372] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1081.593468][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1081.600272][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1081.609730][ T9] usb 6-1: New USB device found, idVendor=097b, idProduct=61f6, bcdDevice=d4.9a [ 1081.621825][ T9] usb 6-1: config 10 has an invalid interface number: 91 but max is 0 [ 1081.630100][ T9] usb 6-1: config 10 has no interface number 0 [ 1081.630121][ T9] usb 6-1: config 10 interface 91 has no altsetting 0 [ 1081.647032][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.647054][ T9] usb 6-1: Product: syz [ 1081.647069][ T9] usb 6-1: Manufacturer: syz [ 1081.647080][ T9] usb 6-1: SerialNumber: syz [ 1082.768037][ T2299] ath6kl: Failed to submit usb control message: -110 [ 1082.768076][ T2299] ath6kl: unable to send the bmi data to the device: -110 [ 1082.768111][ T2299] ath6kl: Unable to send get target info: -110 [ 1082.783035][ T2299] ath6kl: Failed to init ath6kl core: -110 [ 1082.783713][ T2299] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1082.852027][ T9] uvcvideo 6-1:10.91: probe with driver uvcvideo failed with error -22 [ 1082.864385][ T9] usb 6-1: USB disconnect, device number 11 [ 1083.094013][T14404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2123'. [ 1083.130848][T14404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2123'. [ 1084.196854][T14412] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2125'. [ 1084.292680][ T5703] usb 4-1: USB disconnect, device number 67 [ 1084.587690][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 1084.587717][ T31] audit: type=1400 audit(1788057009.203:1017): avc: denied { connect } for pid=14416 comm="syz.3.2126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1084.751761][T14425] trusted_key: encrypted_key: insufficient parameters specified [ 1084.797621][ T31] audit: type=1400 audit(1788057009.413:1018): avc: denied { ioctl } for pid=14423 comm="syz.5.2128" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1085.013436][ T5703] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1085.062552][T11676] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1085.175035][ T5703] usb 4-1: not running at top speed; connect to a high speed hub [ 1085.182970][ T5703] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=a2.76 [ 1085.196563][ T5703] usb 4-1: config 5 has an invalid interface number: 32 but max is 0 [ 1085.196586][ T5703] usb 4-1: config 5 has no interface number 0 [ 1085.196610][ T5703] usb 4-1: config 5 interface 32 has no altsetting 0 [ 1085.213523][T11676] usb 6-1: Using ep0 maxpacket: 32 [ 1085.226770][T11676] usb 6-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 1085.237271][T11676] usb 6-1: config 0 has an invalid interface number: 153 but max is 0 [ 1085.237292][T11676] usb 6-1: config 0 has no interface number 0 [ 1085.246305][T11676] usb 6-1: config 0 interface 153 has no altsetting 0 [ 1085.260863][ T5703] usb 4-1: language id specifier not provided by device, defaulting to English [ 1085.335708][T11676] usb 6-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 1085.344416][T11676] usb 6-1: Product: syz [ 1085.344440][T11676] usb 6-1: Manufacturer: syz [ 1085.344450][T11676] usb 6-1: SerialNumber: syz [ 1085.369164][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.369190][ T5703] usb 4-1: Product: syz [ 1085.369208][ T5703] usb 4-1: SerialNumber: syz [ 1085.395757][T11676] usb 6-1: config 0 descriptor?? [ 1085.530643][ T31] audit: type=1400 audit(1788057010.143:1019): avc: denied { write } for pid=14435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1085.656036][ T5703] usb 4-1: USB disconnect, device number 68 [ 1085.672028][T11676] hub 6-1:0.153: bad descriptor, ignoring hub [ 1085.681656][T11676] hub 6-1:0.153: probe with driver hub failed with error -5 [ 1085.690083][T11676] sierra 6-1:0.153: Sierra USB modem converter detected [ 1085.735463][T11676] usb 6-1: USB disconnect, device number 12 [ 1085.735907][T11676] sierra 6-1:0.153: device disconnected [ 1085.818631][ T31] audit: type=1400 audit(1788057010.433:1020): avc: denied { write } for pid=14451 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1085.914411][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1086.075498][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1086.087212][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1086.087238][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1086.087257][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1086.087282][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1086.087299][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1086.149651][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1086.149679][ T9] usb 3-1: Product: syz [ 1086.149696][ T9] usb 3-1: Manufacturer: syz [ 1086.180606][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 1086.190331][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 1086.201202][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1086.208954][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 1086.487096][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1086.487193][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1086.487371][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1086.487385][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1086.487553][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1086.487565][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1086.487731][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1086.487743][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1086.487908][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1086.487920][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1086.494670][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1086.494684][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1086.494857][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1086.494869][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1086.495031][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1086.495043][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1086.495208][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1086.495219][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1086.495386][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1086.495398][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1086.524893][ T9] usb 3-1: USB disconnect, device number 48 [ 1086.525009][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1086.735336][ T31] audit: type=1400 audit(1788057011.353:1021): avc: denied { cmd } for pid=14472 comm="iou-wrk-14473" path="socket:[43088]" dev="sockfs" ino=43088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1086.868986][T14492] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1087.021267][ T31] audit: type=1400 audit(1788057011.633:1022): avc: denied { cmd } for pid=14472 comm="syz.3.2138" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 1087.050169][ T31] audit: type=1400 audit(1788057011.663:1023): avc: denied { write } for pid=14458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1087.132831][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1087.232841][ T31] audit: type=1400 audit(1788057011.853:1024): avc: denied { write } for pid=14501 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1087.283241][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1087.295892][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1087.295931][ T9] usb 6-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 1087.317511][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 1087.339863][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.339890][ T9] usb 6-1: Product: syz [ 1087.339907][ T9] usb 6-1: Manufacturer: syz [ 1087.339918][ T9] usb 6-1: SerialNumber: syz [ 1087.681499][ T9] usb 6-1: Fast Track Pro switching to config #2 [ 1088.495571][ T9] usb 6-1: USB disconnect, device number 13 [ 1089.933049][T14531] netlink: 'syz.5.2144': attribute type 1 has an invalid length. [ 1090.285783][T11676] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1090.453294][T11676] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1090.464723][T11676] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.464745][T11676] usb 6-1: Product: syz [ 1090.464762][T11676] usb 6-1: Manufacturer: syz [ 1090.464772][T11676] usb 6-1: SerialNumber: syz [ 1090.490137][T11676] usb 6-1: config 0 descriptor?? [ 1090.911385][T14025] Bluetooth: hci4: urb ffff888034f7b600 submission failed (2) [ 1091.470631][T14531] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2144'. [ 1092.402167][ T9] usb 6-1: USB disconnect, device number 14 [ 1093.649910][T14568] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2152'. [ 1093.828872][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1094.521264][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1094.715015][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.715051][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1094.715089][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.749939][ T9] usb 4-1: config 0 descriptor?? [ 1095.320375][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1095.874060][T14599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2159'. [ 1095.952542][ T2299] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 1096.493819][ T2299] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1096.582485][T11676] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1096.590103][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 1096.610263][ T2299] usb 1-1: not running at top speed; connect to a high speed hub [ 1096.610282][ T2299] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 1096.732491][T11676] usb 3-1: device descriptor read/64, error -32 [ 1096.967548][ T2299] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.967573][ T2299] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1096.992801][ T2299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.992823][ T2299] usb 1-1: Product: syz [ 1096.992838][ T2299] usb 1-1: Manufacturer: syz [ 1096.992849][ T2299] usb 1-1: SerialNumber: syz [ 1097.024077][T11676] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1097.117341][T14570] lo speed is unknown, defaulting to 1000 [ 1097.117397][T14570] lo speed is unknown, defaulting to 1000 [ 1097.118309][T14570] lo speed is unknown, defaulting to 1000 [ 1097.118928][T14570] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1097.118951][T14570] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1097.118976][T14570] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1097.120747][T14570] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1097.128192][T14570] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1097.140847][T14570] lo speed is unknown, defaulting to 1000 [ 1097.142469][T14570] lo speed is unknown, defaulting to 1000 [ 1097.143377][T14570] lo speed is unknown, defaulting to 1000 [ 1097.144231][T14570] lo speed is unknown, defaulting to 1000 [ 1097.145120][T14570] lo speed is unknown, defaulting to 1000 [ 1097.212542][T11676] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1097.242035][T11676] usb 3-1: config 0 has no interfaces? [ 1097.242054][T11676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.250796][T11676] usb 3-1: config 0 descriptor?? [ 1097.361305][T14570] smc: removing ib device syz0 [ 1097.380966][T14570] smbdirect: ib_dev[syz0] removed [ 1097.977283][T14570] ------------[ cut here ]------------ [ 1097.977294][T14570] !xa_empty(&pool->xa) [ 1097.977302][T14570] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.3.2154/14570 [ 1098.003234][T14570] Modules linked in: [ 1098.007119][T14570] CPU: 0 UID: 0 PID: 14570 Comm: syz.3.2154 Tainted: G L syzkaller #0 PREEMPT(full) [ 1098.018048][T14570] Tainted: [L]=SOFTLOCKUP [ 1098.022354][T14570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1098.032938][T14570] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 1098.038382][T14570] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 96 ca 18 f9 5b e9 40 49 df 02 e8 8b ca 18 f9 90 <0f> 0b 90 e8 82 ca 18 f9 5b c3 cc cc cc cc e8 67 dc 8b f9 eb d0 0f [ 1098.058463][T14570] RSP: 0018:ffffc900035df190 EFLAGS: 00010246 [ 1098.064526][T14570] RAX: 0000000000080000 RBX: ffff8880387f53d8 RCX: ffffc9000e0b1000 [ 1098.072517][T14570] RDX: 0000000000080000 RSI: ffffffff88f31ca5 RDI: ffff8880387f5458 [ 1098.080474][T14570] RBP: ffffffff88f17440 R08: 0000000000000005 R09: 0000000000000001 [ 1098.088676][T14570] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880387f46d0 [ 1098.096673][T14570] R13: ffff8880387f3fe0 R14: ffff8880387f3fe0 R15: ffff8880387f5138 [ 1098.104659][T14570] FS: 00007fdd687986c0(0000) GS:ffff888123b64000(0000) knlGS:0000000000000000 [ 1098.113636][T14570] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1098.120209][T14570] CR2: 00007fa09f220130 CR3: 000000007d89a000 CR4: 00000000003526f0 [ 1098.128194][T14570] Call Trace: [ 1098.131457][T14570] [ 1098.134392][T14570] rxe_dealloc+0x25/0xc0 [ 1098.138621][T14570] ib_dealloc_device+0x49/0x230 [ 1098.143496][T14570] __ib_unregister_device+0x396/0x480 [ 1098.148862][T14570] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 1098.154948][T14570] ib_unregister_device_and_put+0x5a/0x80 [ 1098.160661][T14570] nldev_dellink+0x308/0x440 [ 1098.165258][T14570] ? __pfx_nldev_dellink+0x10/0x10 [ 1098.170400][T14570] ? rcu_is_watching+0x13/0xc0 [ 1098.175177][T14570] ? cap_capable+0x107/0x430 [ 1098.179763][T14570] ? bpf_lsm_capable+0x9/0x10 [ 1098.184450][T14570] ? security_capable+0x80/0x260 [ 1098.189376][T14570] ? ns_capable+0xd2/0xf0 [ 1098.193738][T14570] ? __pfx_nldev_dellink+0x10/0x10 [ 1098.198855][T14570] rdma_nl_rcv_msg+0x392/0x6f0 [ 1098.203663][T14570] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1098.208942][T14570] ? __lock_acquire+0x4c5/0x1ec0 [ 1098.213884][T14570] ? __netlink_lookup+0xa9/0x900 [ 1098.218821][T14570] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 1098.225255][T14570] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1098.232185][T14570] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1098.237483][T14570] netlink_unicast+0x585/0x850 [ 1098.242241][T14570] ? __pfx_netlink_unicast+0x10/0x10 [ 1098.247539][T14570] ? __pfx_sock_has_perm+0x10/0x10 [ 1098.252934][T14570] netlink_sendmsg+0x8b0/0xda0 [ 1098.257693][T14570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1098.263024][T14570] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1098.268568][T14570] ____sys_sendmsg+0xa4d/0xbe0 [ 1098.273338][T14570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1098.278616][T14570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1098.283910][T14570] ___sys_sendmsg+0x190/0x1e0 [ 1098.288577][T14570] ? __pfx____sys_sendmsg+0x10/0x10 [ 1098.293793][T14570] ? futex_wait+0x11e/0x370 [ 1098.298295][T14570] ? find_held_lock+0x2b/0x80 [ 1098.302995][T14570] __sys_sendmsg+0x160/0x210 [ 1098.307587][T14570] ? __pfx___sys_sendmsg+0x10/0x10 [ 1098.312728][T14570] do_syscall_64+0x123/0x790 [ 1098.317308][T14570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.323210][T14570] RIP: 0033:0x7fdd6799e159 [ 1098.327613][T14570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.347237][T14570] RSP: 002b:00007fdd68798028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1098.356029][T14570] RAX: ffffffffffffffda RBX: 00007fdd67c25fa0 RCX: 00007fdd6799e159 [ 1098.364021][T14570] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000d [ 1098.371996][T14570] RBP: 00007fdd67a35024 R08: 0000000000000000 R09: 0000000000000000 [ 1098.380010][T14570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1098.387995][T14570] R13: 00007fdd67c26038 R14: 00007fdd67c25fa0 R15: 00007ffc3d38b2d8 [ 1098.395967][T14570] [ 1098.398971][T14570] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1098.406224][T14570] CPU: 0 UID: 0 PID: 14570 Comm: syz.3.2154 Tainted: G L syzkaller #0 PREEMPT(full) [ 1098.417126][T14570] Tainted: [L]=SOFTLOCKUP [ 1098.421423][T14570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1098.431456][T14570] Call Trace: [ 1098.434708][T14570] [ 1098.437613][T14570] dump_stack_lvl+0x100/0x190 [ 1098.442269][T14570] vpanic+0x553/0x970 [ 1098.446222][T14570] ? __pfx_vpanic+0x10/0x10 [ 1098.450747][T14570] panic+0xd1/0xe0 [ 1098.454446][T14570] ? __pfx_panic+0x10/0x10 [ 1098.458844][T14570] check_panic_on_warn.cold+0x19/0x34 [ 1098.464191][T14570] ? rxe_pool_cleanup+0x46/0x60 [ 1098.469012][T14570] __warn.cold+0x191/0x318 [ 1098.473402][T14570] __report_bug+0x30f/0x440 [ 1098.477875][T14570] ? rxe_pool_cleanup+0x46/0x60 [ 1098.482700][T14570] ? __pfx___report_bug+0x10/0x10 [ 1098.487697][T14570] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1098.493481][T14570] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1098.499266][T14570] ? __flush_workqueue+0x426/0x1200 [ 1098.504441][T14570] ? rxe_pool_cleanup+0x46/0x60 [ 1098.509264][T14570] report_bug+0xb3/0x220 [ 1098.513477][T14570] ? rxe_pool_cleanup+0x46/0x60 [ 1098.518299][T14570] handle_bug+0x16a/0x2a0 [ 1098.522604][T14570] exc_invalid_op+0x17/0x50 [ 1098.527084][T14570] asm_exc_invalid_op+0x1a/0x20 [ 1098.531904][T14570] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 1098.537334][T14570] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 96 ca 18 f9 5b e9 40 49 df 02 e8 8b ca 18 f9 90 <0f> 0b 90 e8 82 ca 18 f9 5b c3 cc cc cc cc e8 67 dc 8b f9 eb d0 0f [ 1098.556909][T14570] RSP: 0018:ffffc900035df190 EFLAGS: 00010246 [ 1098.562945][T14570] RAX: 0000000000080000 RBX: ffff8880387f53d8 RCX: ffffc9000e0b1000 [ 1098.570887][T14570] RDX: 0000000000080000 RSI: ffffffff88f31ca5 RDI: ffff8880387f5458 [ 1098.578826][T14570] RBP: ffffffff88f17440 R08: 0000000000000005 R09: 0000000000000001 [ 1098.586767][T14570] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880387f46d0 [ 1098.594711][T14570] R13: ffff8880387f3fe0 R14: ffff8880387f3fe0 R15: ffff8880387f5138 [ 1098.602653][T14570] ? __pfx_rxe_dealloc+0x10/0x10 [ 1098.607590][T14570] ? rxe_pool_cleanup+0x45/0x60 [ 1098.612415][T14570] rxe_dealloc+0x25/0xc0 [ 1098.616627][T14570] ib_dealloc_device+0x49/0x230 [ 1098.621454][T14570] __ib_unregister_device+0x396/0x480 [ 1098.626802][T14570] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 1098.632585][T14570] ib_unregister_device_and_put+0x5a/0x80 [ 1098.638295][T14570] nldev_dellink+0x308/0x440 [ 1098.642863][T14570] ? __pfx_nldev_dellink+0x10/0x10 [ 1098.647991][T14570] ? rcu_is_watching+0x13/0xc0 [ 1098.652730][T14570] ? cap_capable+0x107/0x430 [ 1098.657299][T14570] ? bpf_lsm_capable+0x9/0x10 [ 1098.661953][T14570] ? security_capable+0x80/0x260 [ 1098.666867][T14570] ? ns_capable+0xd2/0xf0 [ 1098.671168][T14570] ? __pfx_nldev_dellink+0x10/0x10 [ 1098.676255][T14570] rdma_nl_rcv_msg+0x392/0x6f0 [ 1098.680998][T14570] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1098.686261][T14570] ? __lock_acquire+0x4c5/0x1ec0 [ 1098.691172][T14570] ? __netlink_lookup+0xa9/0x900 [ 1098.696086][T14570] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 1098.702480][T14570] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1098.709396][T14570] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1098.714658][T14570] netlink_unicast+0x585/0x850 [ 1098.719464][T14570] ? __pfx_netlink_unicast+0x10/0x10 [ 1098.724728][T14570] ? __pfx_sock_has_perm+0x10/0x10 [ 1098.729820][T14570] netlink_sendmsg+0x8b0/0xda0 [ 1098.734561][T14570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1098.739822][T14570] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1098.745345][T14570] ____sys_sendmsg+0xa4d/0xbe0 [ 1098.750082][T14570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1098.755344][T14570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1098.760611][T14570] ___sys_sendmsg+0x190/0x1e0 [ 1098.765280][T14570] ? __pfx____sys_sendmsg+0x10/0x10 [ 1098.770455][T14570] ? futex_wait+0x11e/0x370 [ 1098.774946][T14570] ? find_held_lock+0x2b/0x80 [ 1098.779610][T14570] __sys_sendmsg+0x160/0x210 [ 1098.784179][T14570] ? __pfx___sys_sendmsg+0x10/0x10 [ 1098.789275][T14570] do_syscall_64+0x123/0x790 [ 1098.793841][T14570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.799707][T14570] RIP: 0033:0x7fdd6799e159 [ 1098.804096][T14570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.823673][T14570] RSP: 002b:00007fdd68798028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1098.832062][T14570] RAX: ffffffffffffffda RBX: 00007fdd67c25fa0 RCX: 00007fdd6799e159 [ 1098.840004][T14570] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000d [ 1098.847947][T14570] RBP: 00007fdd67a35024 R08: 0000000000000000 R09: 0000000000000000 [ 1098.855888][T14570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1098.863828][T14570] R13: 00007fdd67c26038 R14: 00007fdd67c25fa0 R15: 00007ffc3d38b2d8 [ 1098.871782][T14570] [ 1098.874828][T14570] Kernel Offset: disabled [ 1098.879128][T14570] Rebooting in 86400 seconds..