last executing test programs: 4m18.337807617s ago: executing program 0 (id=2430): socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "02"}], 0x18}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000880)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x33, 0xff, @dev={0xfe, 0x80, '\x00', 0x31}, @local, [@routing={0x2f}], "13d87159da0a7f6b"}}}}}}}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, 0x0, 0xffffffffffffffb3}, 0x20) socket$rxrpc(0x21, 0x2, 0x2) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) (async) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "02"}], 0x18}, 0x0) (async) syz_emit_ethernet(0x76, &(0x7f0000000880)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x33, 0xff, @dev={0xfe, 0x80, '\x00', 0x31}, @local, [@routing={0x2f}], "13d87159da0a7f6b"}}}}}}}, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, 0x0, 0xffffffffffffffb3}, 0x20) (async) 4m18.238771265s ago: executing program 0 (id=2431): r0 = socket$netlink(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x4400) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) ioctl$FITHAW(r3, 0xc0045878) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3886}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 4m17.262269991s ago: executing program 0 (id=2437): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x1a}, 0x80) 4m17.135952393s ago: executing program 0 (id=2439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r5 = socket(0x1e, 0x4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x9, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80000001}, [@alu={0x7, 0x0, 0x3, 0x5, 0x3, 0xffffffffffffffff, 0xfffffffffffffff0}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @generic={0x9, 0x9, 0x3, 0x9, 0xce8}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9e5a8fd6}]}, &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)=[r3], 0x0, 0x10, 0x7}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r9, 0x708, 0xffffffff) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000000440)={0x0, 0xfd, 0x1, 0x0}) 4m15.843490927s ago: executing program 0 (id=2443): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x400c09, 0x8, 0x8002, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0x40806685, 0x0) 4m13.832330859s ago: executing program 0 (id=2453): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x151}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x2e4ca021, @loopback, 0x1}}, 0x0, 0x0, 0x31, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$KDDISABIO(r5, 0x4b37) sendfile(r0, r3, &(0x7f0000000040)=0x1ff, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e23, 0x4008a, @loopback, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYRES8], 0x28}, 0x20000010) 4m13.468681208s ago: executing program 32 (id=2453): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x151}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x2e4ca021, @loopback, 0x1}}, 0x0, 0x0, 0x31, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$KDDISABIO(r5, 0x4b37) sendfile(r0, r3, &(0x7f0000000040)=0x1ff, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e23, 0x4008a, @loopback, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYRES8], 0x28}, 0x20000010) 3m49.691661874s ago: executing program 3 (id=2591): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x3, &(0x7f0000000f80)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000180)={0x260, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x248, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_b, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @random=0x2, 0x1040, @val={0x0, 0x20, @random="5ba3db822b07a1c6ac159b2fbaaa631ca97dd9fa4e1f9ddfcb9b1c2981ddbb26"}, @void, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x6b, "ccff396922e15cae25aef7da02fcbfdfdcbfdb1f7f50f3765e50d2f313dae170d604445f1aa40580eb457c61f5ff5a6a0bc277b68baa4c9420a4621fd39d72837be063f927610c4e1b1bc20271c35aa001000000398a468e407d653243c60d2b68860d62aed527c8ada6bd"}, {0xdd, 0x76, "6b6f3c17950396eb8c709cd3d676c6300a0c381a951fd45bc3f65f0cc9298dbc972a0de3f29325d320c61fb8db027485430d8dfe931407edbcc4c9eacbe8288c6d51bf48b5a9625eac8ea03993dc0a592fd764360483ab4dc98d4e07bdb0484866c6b6b41d70191142ed091ca9626c5ec9e4549889e9"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x80, "0c8f613c6e46c88b8595b2cc97d1c524601d51fbdabfbbd9ad6862aac5450011800d535c32253756aa149cde7dca16d7991e300171e1ba1755f1c44c022d29e0f668956a6178d5298fb495af7e7cffed2c6f28b47ff8807db0c4673b7dd7a3a9d1d7ca849c26671e5bbd1fee5ff36180152627ee3566165701f8319fce104668"}, {0xdd, 0x6, 'K@AD T'}, {0xdd, 0x24, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915f5"}, {0xdd, 0x1d, "059d8cb3b1122c12ddecd25f84b3ee6bd2d013ca76a47d77f5c89e2f33"}, {0xdd, 0x21, "cf80b8f78e71a29e379db9d70c04e567fd24e2f058610a1ae5a500000000890442"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x260}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newtaction={0xb8, 0x30, 0x30b, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0xa4, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mirred={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x84, 0x8, 0xfffffffa, 0xffffffff}, 0x1, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xb8}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r5, 0x80000000, '\x00', r8, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) 3m49.594861984s ago: executing program 3 (id=2592): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) (fail_nth: 4) 3m48.387069519s ago: executing program 3 (id=2598): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x1, 0xc0400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000200000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 3m48.201766663s ago: executing program 3 (id=2600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m46.409916133s ago: executing program 3 (id=2604): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x11e, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) 3m44.163973786s ago: executing program 3 (id=2621): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}, 0x1, 0x0, 0x0, 0xf9612d57cd99e519}, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0x0, &(0x7f0000000040)='./file0\x00') 3m44.012844342s ago: executing program 33 (id=2621): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}, 0x1, 0x0, 0x0, 0xf9612d57cd99e519}, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0x0, &(0x7f0000000040)='./file0\x00') 3m26.68101585s ago: executing program 2 (id=2700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000300000008000000060000000000000009000000000000000400000000000000fc0000000000008003000000000000000000000000000000ffffff7f58000000040000000090000009000000", @ANYRES32=r4, @ANYBLOB="010000000400000000000000000200000c00000000000000000000002b000000f3"], 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20004894) 3m26.680709844s ago: executing program 2 (id=2701): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) inotify_init1(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) tee(r1, r0, 0x401, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xffffffff, @loopback, 0xc}, {0xa, 0x4e1e, 0x800000d, @local}, r2, 0x800}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) chdir(&(0x7f0000000140)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x4, 0x0) 3m26.623707461s ago: executing program 2 (id=2702): syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c41d02fffd01"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r2, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10) 3m24.502164856s ago: executing program 2 (id=2708): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m22.282424957s ago: executing program 2 (id=2716): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'gre0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x1, 0x80, 0x10, 0x2, {{0x20, 0x4, 0x1, 0xe, 0x80, 0x65, 0x0, 0xff, 0x4, 0x0, @empty, @rand_addr=0x64010101, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0xf0, 0x0, 0x0, [0xc, 0x1, 0x3, 0x6]}, @cipso={0x86, 0x17, 0x2, [{0x0, 0x11, "263c866e3ba7189f314a1d29d76a2b"}]}, @timestamp_prespec={0x44, 0x14, 0xbd, 0x3, 0x2, [{@private=0xa010100, 0x9ae}, {@private=0xa010102, 0x3}]}, @lsrr={0x83, 0x23, 0x54, [@remote, @rand_addr=0x64010101, @multicast2, @private=0xa010100, @broadcast, @rand_addr=0x64010101, @multicast2, @multicast2]}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'gre0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x1, 0x80, 0x10, 0x2, {{0x20, 0x4, 0x1, 0xe, 0x80, 0x65, 0x0, 0xff, 0x4, 0x0, @empty, @rand_addr=0x64010101, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0xf0, 0x0, 0x0, [0xc, 0x1, 0x3, 0x6]}, @cipso={0x86, 0x17, 0x2, [{0x0, 0x11, "263c866e3ba7189f314a1d29d76a2b"}]}, @timestamp_prespec={0x44, 0x14, 0xbd, 0x3, 0x2, [{@private=0xa010100, 0x9ae}, {@private=0xa010102, 0x3}]}, @lsrr={0x83, 0x23, 0x54, [@remote, @rand_addr=0x64010101, @multicast2, @private=0xa010100, @broadcast, @rand_addr=0x64010101, @multicast2, @multicast2]}, @ra={0x94, 0x4}]}}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x2000000000000216, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) r2 = socket$kcm(0x2, 0xa, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000000d40)={{0x12, 0x1, 0x110, 0x23, 0x6b, 0x25, 0x10, 0x681, 0x10, 0x525e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x64, 0x99, 0x10, 0x70, "", [{{0x9, 0x4, 0x7c, 0x66, 0x1, 0xa, 0x65, 0x6d, 0xf2, [], [{{0x9, 0x5, 0x2, 0x0, 0x40, 0x3, 0x0, 0x6}}]}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) (async) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x7f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008011}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x7f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008011}, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r11, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44010) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0x1415, 0x103, 0x70bd29}, 0x10}}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m18.766184479s ago: executing program 2 (id=2724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4044) (fail_nth: 4) 3m18.331202861s ago: executing program 34 (id=2724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4044) (fail_nth: 4) 2m48.427905855s ago: executing program 7 (id=2839): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m45.233693533s ago: executing program 7 (id=2847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ff8, 0x0, 0x0, 0x10, 0xd, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc964e3e2874df2cfc06c89f3d9e234b305d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a4b8aed1ef800", "715200601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0x100, 0xa]}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @private=0xa010100}], 0x30) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x2, 0x1, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m43.804348051s ago: executing program 7 (id=2849): ioprio_set$pid(0x3, 0xffffffffffffffff, 0x0) 2m40.857570496s ago: executing program 7 (id=2856): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m39.808860952s ago: executing program 7 (id=2860): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x2a, 0xd) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x4, 0x6, 0x3, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x17b) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200800, 0xfff, 0x0, 0xb, 0xfffffffd}) r1 = memfd_create(&(0x7f00000001c0)='\x00', 0x5) fchown(r1, 0x0, 0xee00) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='id_', 0x3) 2m38.040416381s ago: executing program 7 (id=2863): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000200000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 2m37.844438058s ago: executing program 35 (id=2863): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000200000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 2m37.710163251s ago: executing program 5 (id=2866): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x80000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c2c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000002140)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c392a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bc1c2745f5f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0xecc, 0xfffffffd, 0x14e, {0x0, 0x4, 0x0, 0x1, 0xd1, 0x2, 0x6, 0x2, 0x4, 0x1000, 0x0, r2, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r0, 0x3, r2, &(0x7f0000000100)={0x7fffffffffffffff, 0x7f, 0x0, 0x7, 0x3, 0x10000, 0x9, 0x0, 0x3}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r6, 0xffffffffffffffff, 0x0) 2m37.567723456s ago: executing program 5 (id=2867): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$rtc(0xffffff9c, &(0x7f0000001ec0), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000280)={0x40000007, 0x80007, 0xa, 0x2000015, 0x10000c, 0x8, 0x5, 0xac}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x5) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) 2m37.482957483s ago: executing program 5 (id=2868): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x10180, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000080)={0x91, 0xc0000000}, 0xc) tee(r1, r0, 0x9, 0x8) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x80000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x1, 0xa) fchdir(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000013da0000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2f, 0xe, 0x0, &(0x7f0000000140)="9cb9f7d812b13ef44635943922e0", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r6, 0x2007ffb) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x34}]}, 0x10) fcntl$notify(r7, 0x402, 0x8000003d) fcntl$setsig(r7, 0xa, 0x21) syz_clone3(&(0x7f0000000000)={0x8000000, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m37.352081045s ago: executing program 5 (id=2870): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m37.222782853s ago: executing program 5 (id=2872): mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sndctrl(0x0, 0xc290, 0x40) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="8580f83288e1aaaaaaaaaa1c08004515001c0067000002021181907c64010100"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300), 0x12) openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x0, 0x0) 2m36.683662307s ago: executing program 5 (id=2876): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) io_uring_enter(0xffffffffffffffff, 0x76c9, 0x7db3, 0x80, &(0x7f0000000040)={[0x822d]}, 0x8) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0xbf) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl(r2, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") rt_sigtimedwait(&(0x7f0000000200)={[0x1]}, &(0x7f0000000240), &(0x7f00000002c0), 0x8) write(r2, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000", 0x28) ioctl(r2, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e010000380100000100"/42) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x3b, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2m36.384083441s ago: executing program 36 (id=2876): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) io_uring_enter(0xffffffffffffffff, 0x76c9, 0x7db3, 0x80, &(0x7f0000000040)={[0x822d]}, 0x8) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0xbf) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl(r2, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") rt_sigtimedwait(&(0x7f0000000200)={[0x1]}, &(0x7f0000000240), &(0x7f00000002c0), 0x8) write(r2, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000", 0x28) ioctl(r2, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e010000380100000100"/42) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x3b, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 16.429736832s ago: executing program 4 (id=3300): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x24, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="23000000d56aaf82a3000000ffff000005", @ANYRESDEC=0x0], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r4}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000b03a70e413460a8ef738c15bf2935efb8c8e12c4c854ff9d318f8d1ad2ec86f0992df9c99b23457fc6247d758cd7084fe7d81ead46a618a71e0d276f92c3fa7e1d7390a4968128f780840a92e59821e38c45f1361008edb5943cecd72b0c77582f510a2ad110", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000b7040000000000008500000034000000950000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r3, r6, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r2}, 0x20) write(r2, &(0x7f0000000700)='h', 0x1) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x2, r1}, 0x38) 11.915715916s ago: executing program 4 (id=3309): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x1, &(0x7f00000003c0)={0x4, 0x100008b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000440)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000300)="549d7fd64475b7695f2c1821cb356cfe32ebf097a2d444f2e36c66b5e1ec25b2599305b8f8c7cc2d4247e443b0e9c3d9f1ae5dda8989a8b90f798bc43eb7b5e3662f37", 0x43) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902"], 0x0) write(r0, &(0x7f0000000180)="b4", 0x1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x161142) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdir(0x0, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r2, &(0x7f0000000540), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000280)='hostfs\x00', 0x1000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='1\x00', 0x1) openat(r3, &(0x7f00000001c0)='./proc/sys/net/ipv6/conf/default/forwarding\x00', 0x20500, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) syz_emit_ethernet(0x50, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6001044a001a3afffe880000000000000000000000000001fe8000000000000000000000000000aac800907800000000fe8000000000000000000000000000bb0200"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000380)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x0) 11.201389908s ago: executing program 1 (id=3314): r0 = socket(0x23, 0x80805, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x89e0, 0x0) 11.012239493s ago: executing program 1 (id=3315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x1402, 0x4, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}}, 0x40050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d40)=ANY=[@ANYBLOB="380100001a000100feffffff0001f8ffffffffffff0000fc010000000000000000000002000000000107174337139f34ffb7b13a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d532000000fe880000000000000000000000000001fe000000000000009201000000000010a39b000000000000edcb0000000000001c25080000000000050000000000000002000000000000000400000000000000ff0100000000000000000000000000002100000000000000fefffffffffffffffefffffffd030000000000007e0000000535000002000100200000000000000048000100686d6163287368613235362d617678322900"/240], 0x138}}, 0x844) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r2, 0xc138fd06, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@gettaction={0xbc, 0x32, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffffb}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24040080}, 0x40008c4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000300)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000020a010100000000000000000a0000060c00044000000000000000010900010073797a30000000000c00044000000000000000040c000440000000000000000120000000160a01040000000000000000070000040900010073797a31000000001c000000120a010400000000000000000700000208000340"], 0x42c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000440)) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 9.851704293s ago: executing program 1 (id=3319): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@overlay={0x9, 0x2, 0x4, 0x8, 0x413, {}, {0x4, 0x0, 0x81, 0xf6, 0x28, 0x1, "7a89c908"}, 0x101, 0x3, {}, 0x2}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r3, &(0x7f0000004400)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, 0x7fffffff, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x4, 0xf9, 0xfa, 0x80000000, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x20, 0xf, 0xffff213b}}) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}, {{&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="cf8becac7a5d48615119bbc3cb958575176e1596f423b1406dfd91e992eef7160ca844c08f5e8c4546d281", 0x2b}, {&(0x7f00000002c0)="6b6efb1b17370659ee7df14145e3fd5413590aecd92762d6b34ddc5188ba1f2a05313f78a4864ecc4f05735de2a84bdbd2e6f500229dfa8bcf52a589679963c00230416ef8e21f8907e4cf29c785ed434af084bc8309883c37fde100a21ff27f97c9d55f2a5dc64239001f48be34b7ce47f5bfa4aa9b77f1949b0358b81f573bab5a791ea6cd083e2a93b5939d72e9e627d3c80754925e7558ab083560e3b7b64978fc4c6e5c8cbbc0d13281e5d29da20b30ce0baa98d27ec5276d116a8b53818aa3e295554920949fd736a3fb56", 0xce}], 0x2, &(0x7f0000000680)=[@ip_retopts={{0x120, 0x0, 0x7, {[@cipso={0x86, 0x11, 0x2, [{0x7, 0x6, "2e63acb9"}, {0x1, 0x3, "8d"}, {0x7, 0x2}]}, @end, @lsrr={0x83, 0x1b, 0x1d, [@local, @broadcast, @local, @loopback, @private=0xa010102, @loopback]}, @timestamp={0x44, 0x14, 0x77, 0x0, 0x2, [0x5, 0x6, 0x8000, 0x10000]}, @timestamp_prespec={0x44, 0x44, 0x63, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@local, 0xffff0cf2}, {@multicast1, 0x5b}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x80000000}, {@multicast2, 0x4}, {@multicast1, 0x8}, {@private=0xa010100, 0x9}, {@remote, 0xa}]}, @ssrr={0x89, 0x7, 0x47, [@loopback]}, @cipso={0x86, 0x5f, 0x3, [{0x7, 0xd, "4792f283062c1c45b151ea"}, {0x6, 0x8, "4966f1b4009b"}, {0x1, 0xd, "4574266f80a09b9ba7cf81"}, {0x2, 0x12, "db5ca103e2f581304969fc460f8c87ab"}, {0x6, 0x7, "6d14265c12"}, {0x2, 0x9, "be43745b6d97e6"}, {0x5, 0xc, "9e39ac367c7909ba9780"}, {0x2, 0x9, "699ae293b74fbe"}]}, @lsrr={0x83, 0x1f, 0x2b, [@remote, @rand_addr=0x64010102, @empty, @broadcast, @multicast2, @local, @rand_addr=0x64010100]}, @noop, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010102, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010102, @remote}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x70, 0x3, 0x5, [{@local, 0x8}, {@rand_addr=0x64010102, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}]}, @ssrr={0x89, 0x1f, 0x0, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @loopback, @multicast2, @rand_addr=0x64010102]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}], 0x1c8}}, {{&(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000900), 0x0, &(0x7f0000000940)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffca62}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}}}], 0x68}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000009c0)="9b2aafe23c693a52b48f817b20253063e27f62cda873baeb4565c8f5a6aad615c69b7c158bb1ae69cbd54e74ea2a2ef7", 0x30}], 0x1, &(0x7f0000000a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast2, @private=0xa010101}}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @multicast2}}}], 0x58}}, {{&(0x7f0000000ac0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000b00)="0e2843325b9957d82c3304db91db73984e5f0cdded8a550fd8d763d2d8a8d5e3acb0", 0x22}, {&(0x7f0000000b40)="c8742ef546a752a6c093d1df7f11fbe510362db8270e11c3776e7f0812ef5a50a37d61c0ca767a6e2587013847ee61f325cb242dca8378aadd262f34d5ad8c2a463145c270434f50f9129c4fb50e7beffa3e611ddc67070526a6ba0e98aceb0850b93bef1ca851a3154322554822ccf29dd960c78b0995e8f6df8167ba4c24a16ff86ddfd52ce73a1f94d818caca4cfb8ab083bc01f5100f67289fb54799b4bfa5d8e0bc1565c97f2f51569be70e9cdab0c751d8b21fede2a87c638f1a5c9d97e09055de59fe5ef39881088724ffc0b2964c6d231a10054cbdf10e85b2f8a6925f2118d3870c8e0f", 0xe8}, {&(0x7f0000000c40)="3f7adef8d3f68b5c8194bbd6bbfc27dafa9142290b01daf799fad05b565e615ec29976e25f310375c0960869cb41e9e2b36191ffacc6ec8a961abc7e33cfe220f4eddf93f97ed1d8e8d3b4e814cb6b9e810b5aef709f45fd3a61d23cffdd5f86a9f481e011946b43545da8154755d35355163f7b2840a3108d3c496110beb4417db4eed13eea70dd795d645e20a3a3b9f4505af26429f3b3a5f088a14c810540cbc1b8e7290db8c52c", 0xa9}], 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000000000000000000000010000002900000000000000000000000000000000000000070000004400af53ffffffff000000080000000000000000000000000000000002000000070000000000000000000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="e0000000000000000000000000070000004400e400000000000000000800000080000006920000000600000009000000010100000000000000000000000000000000000000010000000500"/92]}}], 0x5, 0x2000c000) 8.68890893s ago: executing program 1 (id=3321): syz_ublk_setup_io_uring(0x7a80, &(0x7f0000000240)={0x0, 0x5d82, 0x20, 0x3, 0x24e}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x80) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xba01fffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000000c0)={0x3c, @empty, 0x4e24, 0x1, 'wrr\x00', 0x2, 0x6, 0x7}, 0x2c) getpeername(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_open_dev$hiddev(0x0, 0x0, 0x880) ioctl$HIDIOCGUCODE(r5, 0xc018480d, &(0x7f0000000080)={0x83, 0x2, 0x8, 0xe, 0x5, 0x2}) syz_emit_ethernet(0x5e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaa6dde655713786dd60ff00f500130600fe8000000000000000000000000000aafe8000000000000000000000000000aa00014e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0c200009078fffd1ef44c62e8e0bc7e340500"/28], 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.880191108s ago: executing program 4 (id=3323): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x1f, 0x0) 7.822324278s ago: executing program 4 (id=3324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000300)={0x0, &(0x7f0000000380)}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$inet6(0xa, 0x3, 0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000240)={0x6, 0x0, 0x6}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28008000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a01010000000400000000000000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100b7ab0b599f3a231dc160000000a301cf7ff060a010400000000000000000a0000010900010073797a3100000000040004800900020073797a3200000000140200001100200000000000000000b13a5d7e612765f15cf8edc31b79fe71cfa9b43286de36afe6ab18e02ee081e6d9d585b075307b5d"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r5}) syz_open_dev$evdev(&(0x7f0000000900), 0x1, 0x20000) r7 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x0) write$evdev(r7, &(0x7f0000000000)=[{{0x0, 0xea60}, 0x0, 0x1, 0x2}], 0xfe72) ioctl$EVIOCSCLOCKID(r7, 0x400445a0, &(0x7f0000000440)=0x1) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r5, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) 7.396935302s ago: executing program 8 (id=3327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYRES16=r0, @ANYRESOCT, @ANYRESDEC=r2, @ANYRES64=r0, @ANYRES32=r0], 0x6c}, 0x1, 0x0, 0x0, 0x20040001}, 0x20008905) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000780)) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000380)={0x14, &(0x7f00000000c0)={0x0, 0x2, 0x24, {0x24, 0xd, "5c88f1c1bb436640bfbcfcfe3f57fdd3bb12070ef00a5fa4517140593a0dede0c652"}}, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003920000b7fca8f24b85d1403df0fa19eb7b7a4af764719a886eb4f38d5a46b806a60c77023947db2f4da1fbed7b8adca509c19539e193e0b55205a29fdb17f7c453ff8821da280eeb38d8284a8ef1741d8a4cb88140c78b68d85db134fa89a6da7b05701ae6c0ca4a4df8bc70b30be12adb03b975b914614d953806629b2831b18c2a9b38c7dca8668327752713a88a32"]}, &(0x7f0000000640)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="200c65000000a13d00aed3d9ca00e797d04b3381a1fb1298c8f3ac5c87e6d7962f1fd9786cf7ff0e43b29e5a712fc5ca15708577e1d775fe79f1724c84caf632e3c7aecb4830bf28f237576c2eaa9e9e050bf8a9e69d4b7e0600000004000000d7fc360000000000000000"], &(0x7f0000000480)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000580)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f00000005c0)={0x40, 0xa0, 0x4, 0x2}, &(0x7f0000000600)={0xc0, 0xa2, 0x2f, "bea3bb8ee0063e4ecf556e2abdab6117bc62aef001ac01a51eca3df6e91a0d5e96b6c537b0a9cf017e350b1679e116"}}) write(r4, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x25c9d9925f7d742) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) openat$tun(0xffffffffffffff9c, 0x0, 0x470243, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r7, &(0x7f0000000380)=ANY=[], 0x4000) close(r7) 6.62142987s ago: executing program 9 (id=3328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RLERRORu(r1, &(0x7f0000000c40)=ANY=[@ANYRES32=r1, @ANYRES32=r2], 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) 6.476035491s ago: executing program 1 (id=3329): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="3587"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 6.456558649s ago: executing program 9 (id=3331): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r1 = dup(r0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="140005"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008801) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) kexec_load(0x1, 0x0, 0x0, 0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x14) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x7, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x4, 0x8, 0x0, 0x6, 0x40000002, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x3, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x0, 0xb, 0x401, 0x3, 0x7, 0x8da8, 0x2, 0x2, 0x2, 0x8000004, 0xe, 0x4, 0x3, 0x6, 0x4, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8000004, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x1ff, 0x1, 0x297, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x5, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0x894d, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfffb, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x9, 0xe8b, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x11, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x10000, 0x4, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x2005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x2003, 0xa, 0x88, 0x2, 0xffff8b7f, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x8002, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7, 0x800) unshare(0x28000600) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f00000001c0)={0x0, 0x0, 0x401}) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000280)={{0xeb4, 0x8005}, {0xeb4, 0x8009}, 0x10000004, 0x7}) syz_io_uring_setup(0x2fac, &(0x7f0000000100)={0x0, 0x8c44, 0x800, 0x2, 0x120}, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240)) socket$inet(0x2, 0x4000000000000001, 0x100) 5.259279669s ago: executing program 9 (id=3332): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c00)=@newqdisc={0x38, 0x24, 0x601, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xa, 0x1}}]}, 0x38}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rseq(0xfffffffffffffffe, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="170000001500010025bd7000fedbdf250a784100", @ANYRES32=0x0, @ANYBLOB="1400"/20], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000000) r4 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f0000000040)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(r4, &(0x7f0000000080)='mountinfo\x00') sendto$inet6(r3, &(0x7f00000003c0)="a687", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x5, 0xffff, @empty, 0x9}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000940)={{{@in, @in6=@private1}}, {{@in6}, 0x0, @in6=@private1}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='bic', 0x3) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0xf, 0x80000, r3}) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1e000000090000004e250f1f0008000000040000", @ANYRES32=r6, @ANYBLOB="70000000000000000000000000000000000000002d66f930b6f692d388580ebce841ba6b239ac78d6f477dc94aa622", @ANYRES32=r1, @ANYRES32, @ANYBLOB="0200000000000000040000000f00"/28], 0x50) syz_usb_connect$uac3(0x2, 0xc3, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002000000ff351211824000010203010902b10003010280ff080b01000120300d0904000000010130000a24010322000f0000000c240b0202070000000e09000c240b0402ffffff7f0207000904010004010230000904010101010230000d2402010901000cd67e8d06270924020102010302040905010900027f07100a2525010000800208000904020000010230000904020101010230000a24020206000104047b0b24020180020308cffb1009058209100081ee070a252571ba0000070800"], &(0x7f00000008c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x7, 0xfd, 0x1, 0xff, 0x4}, 0x4e, &(0x7f0000000500)={0x5, 0xf, 0x4e, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1d, 0x11000, 0xffff, [0xf0, 0x3f3f, 0xffff30, 0xf0, 0xff3f30]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0x4, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x1, 0xf000, 0x0, [0xc000, 0x30, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xf, 0x0, 0x6095}, @ptm_cap={0x3}]}, 0x5, [{0xc2, &(0x7f00000005c0)=@string={0xc2, 0x3, "71f9f30c2c12e1368eba08e2956382baa5f4609ff55c497fd4436b0c1701d943b98307e2d3236939b52628fa450a38c013ebca7d67e524dc15b0ca1104c945910e416d8538d0e9c76d0f5cb19367a6503d0f0be2ce8545d48a5b95a471e67996ffefd6018ee54febaa55e4056cdf03bd7c3d478f935b5faa7bc15d1cb922c35ccd02f33aef02cb7b967b68cab3a4c210ed45a4c7a5e459b683f9403902d40a5b126d18ca088bd5a06297ef75c70932e44cc35c2caefb9439b95444e322f325f2"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x810}}, {0x6b, &(0x7f0000000700)=@string={0x6b, 0x3, "7a322ac3c6e691a3a750698fab4dbb3ba89ca3e4dd02082f139133fff931c6d808696ffe500408bf66983771d4a73d8b72b51ba2a9a547412e47d9923ef89ed7dad79c3c4a97d32831b591e9a700514295f67f0e057c4e5d1a2f40b3c30b4f920b08d4e35ebe11fe0c"}}, {0xae, &(0x7f00000007c0)=@string={0xae, 0x3, "648450b25d4d478c5ac3f0d51ded5cab7bbb990d14d068b181e12950936857b1fe0c2113d3673518de48e36b0576dbf9483826cfdea2ce4ff52c05a968a0aa5bca40a606ae01461e08e463809e282352b0fa907ebaa33e8d3a213a450660ca0c34043f3b48ce9dd9ff2457dbef0b1cb9a64e1e21470d085bcd1f7d91052862f6906d43bc9ddf08b0499c848d528298f51bea17f9be2ca6b0b35c84b3a29f20104404dc0bfd0878f86072a434"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x2809}}]}) io_uring_enter(r3, 0xb04, 0xda89, 0xc0, &(0x7f0000000040), 0x8) shutdown(r2, 0x1) 5.155761034s ago: executing program 4 (id=3333): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x1, &(0x7f00000003c0)={0x4, 0x100008b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000440)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000300)="549d7fd64475b7695f2c1821cb356cfe32ebf097a2d444f2e36c66b5e1ec25b2599305b8f8c7cc2d4247e443b0e9c3d9f1ae5dda8989a8b90f798bc43eb7b5e3662f37", 0x43) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902"], 0x0) write(r0, &(0x7f0000000180)="b4", 0x1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x161142) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdir(0x0, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r2, &(0x7f0000000540), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000280)='hostfs\x00', 0x1000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='1\x00', 0x1) openat(r3, &(0x7f00000001c0)='./proc/sys/net/ipv6/conf/default/forwarding\x00', 0x20500, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) syz_emit_ethernet(0x50, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6001044a001a3afffe880000000000000000000000000001fe8000000000000000000000000000aac800907800000000fe8000000000000000000000000000bb0200"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000380)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x0) 5.13277948s ago: executing program 6 (id=3334): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x1f, 0x0) 4.965059547s ago: executing program 6 (id=3335): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'gretap0\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x700, 0x8, 0x6, 0x1000, {{0x21, 0x4, 0x2, 0x7, 0x84, 0x64, 0x0, 0x20, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @local, {[@noop, @timestamp_prespec={0x44, 0x14, 0x77, 0x3, 0xf, [{@local, 0x5}, {@multicast1, 0xafe7}]}, @noop, @timestamp_prespec={0x44, 0x44, 0x8c, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x5}, {@multicast2, 0xfffffff8}, {@local, 0x1d9d}, {@private=0xa010102, 0x80}, {@local, 0x2}, {@loopback}, {@multicast1, 0xa263}, {@multicast2, 0x1ba}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x7f, 0x4]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x54, 0x10, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x4411, 0xa004}, [@IFLA_GROUP={0x8, 0x1b, 0x1}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg1\x00'}, @IFLA_LINK={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x200200d4}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000080)='X', 0x1}], 0x1) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002780), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f00000027c0)={0x14, r5, 0xf1f, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4080) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000400)={0xffffffffffffffff}) connect$pppl2tp(r6, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @multicast1}, 0x0, 0x0, 0x0, 0x1}}, 0x2e) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_sqe_flags_required={0x3, 0x8}], 0x1) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="b4aac8b6e73dd856d2862fdb84070184f58159658d8630924d42192279040954a4373d682a3a28ab8469b3965fb4b404c20d353e7f110ba6ea342883085a36747996c1bf451af1942459fecd922dd3f2f0ade336fe9b643777b1b3d7ca5e678a127b864f3b9a447cf06b5aa4529498b3d49f743ffc8f19371928582f9e1ab74d84ab7b61aa5d5cde729524f7245e7c6b279e8e1ac4411ce3c00d9cd3e9ad20"]) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setns(0xc9, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') sendmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r8 = syz_open_dev$swradio(&(0x7f0000000500), 0x0, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r8, 0xc0845658, &(0x7f0000000540)={0x0, @bt={0x0, 0x7, 0x0, 0x1, 0x8000, 0x200, 0x6, 0x6, 0xb8, 0x8, 0x3, 0x85f, 0x8, 0xd, 0x4, 0x30, {0x8d98, 0xe}, 0x1, 0x4}}) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r10 = syz_ublk_setup_io_uring(0x8e8, &(0x7f00000001c0)={0x0, 0xaca, 0x1, 0x0, 0x291}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b0001000000000904"], 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r10, 0x11, &(0x7f0000000300)="3410289375fba5e9d35e9463c1e516ec2d4fc9eb82e4eaa8df573267aabf5c91d3a245d071e0421446637c61c1ac92434114db4a29bc917bc89b0341b6acbd274b4d7fbc476c2e1a67c03e203e7c626abcff605868d1fa8d6f742897c950a9cc48cfaa69a3639fd2bf20c4aac049a9efc9ace8cbe1691c6b06f2bf088e9b006db7dc90567427a5990cf93dde5d8ca56d1f1344a5cc4c91c67d3740ce9cb942e6980ab4dd38e3a325842718b5bdb69d95d66a127a", 0xb4) ioctl$EVIOCSABS3F(r9, 0x401845ff, &(0x7f0000000000)={0x0, 0x8a, 0x1, 0xa01, 0x0, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r10, 0x7, &(0x7f00000003c0), 0x1) 4.811891064s ago: executing program 8 (id=3336): io_uring_setup(0x178e, &(0x7f0000000400)={0x0, 0xcd80, 0x200, 0x3, 0x2bb}) socket$netlink(0x10, 0x3, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x101a02, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(0x0, 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./security\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./security/tomoyo/domain_policy\x00', 0x80001, 0x101) write$FUSE_DIRENT(r2, &(0x7f0000002240)={0x38, 0x0, 0x0, [{0x2, 0xf, 0xa, 0x8000000, '/dev/fuse\x00'}]}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x8000000000000001, 0x80, 0x0, 0x800, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffeff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 4.705152637s ago: executing program 8 (id=3337): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000580)={0x35c, 0x21, 0x800, 0x70bd28, 0x25dfdbfd, {0x1a}, [@typed={0xe6, 0x1f, 0x0, 0x0, @binary="bb04e42cb9caea6caeae4804fa7881cb572d7ea51d2754d3966c508a732d3bbc3ca80b6d8a2e05470a132ea5cf504e33104b8ff1472fb01e2747f2fd85560860b400db3412bc5d832bebc060966054b41977a1fc8efa26eca0cc2e87db94c4584f4a696b0f06d3fc472e18a87f469366b51438e0873640fa0b503f5f05d0a7171f3dc31d413907b9eb3a35b4ef669e889ab6bd460e594fa0f2d6f60c4e375a6cf85f5c268588c7ad97ae0483c7457dca45162ced758ccf0d62ed097bbcdfeed6cc27b515c89b992678142684bd28b2928437f25aefc60570196bcf316c35dffd3dd1"}, @nested={0xf2, 0x2b, 0x0, 0x1, [@generic="60e386d57dab72cd5ba25401925a3c033f72b1f9b04a257ad1bb282ee5981f2d955bcf7c5078833cba388884342f380cb8c17881e8797d0b9b49d04fc306ca8fce0911a779fd9f4c6012db945a3c007d25e503fb402154251b9278b7c50ff0011e4f4b194e483d8588f5e811b9d9b5be7b4822de2359ad4f6cfd8aaa7ecd2ed64f26888cbeb05fac93a3cd8afbd4", @generic="8a9005f3ae5b6dd657473cd4c26533b942d678982c1d32979646064e4cf6993a11c93cb64f97e7e13c9d831cbf08634e1d8ef5cd3542d0b57126af23fc818e3a8cd7538443bbe6d42dbda8eba1a84ade8d8f34e4cf8a4282b3b98fda09688352", @generic]}, @generic="7992b8c888a1abd06dec89757cb867a9f67892023a104fcf425f8c639dac290285e020e9eebf056547efa41a69b1c4c8dfb37b2fa2b7f08200f9014c7f1e56e182e0f8598e5a3d97ed40441dde259fbf72c0535243cd860dd0b6a790f78a4cdaff553403fcb32207169d690c6d1877891d6f98576a4b6a522333fcf789dcd7a7c925bcf41c1a28ac53e034487b9437", @generic="88ebbcfa8acae9152c811bdc82dd42697eaec631727b383e0569b0b51d617d5833ba31b1e42ca8353dba424646b7677e3645474e5b4dc52dcc57147b7af0c2c13378600de631141e7d506184dec5720a5e1943fc8b1e200cc3beb6f6ed11cc14034c061fda466da03b3046c28d436e067db4d29b89bf598c8f60", @generic="42b5bc7a0b74c6bbdfd6793cc641832a2ad6e71d8f22667783c7d098b579c9da43a55b04b695f9407d5daeabd8d28df0e496e2dc724afd9a58164d6eb2ad3907fb235b77bf94460dc410d2af7fc9c9568b621beb6cd0caf8aa33637dde449786"]}, 0x35c}, 0x1, 0x0, 0x0, 0x84}, 0x84) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002fbd7000000000001400000018000180140002006e657464657673696d30000000000004000004000300000008001500f1ffff8005001800010000007e758356c7670f49e1c372b97e3318f3f42166a60024a3268ca5d6586289470e1f5cf733d69c9686909ca98eb21ee5b3744a0669940b5416eb268382653b4f3b3a67a6081bb2b888de4ad9a9ee03e4a11641e3703b01e933158b4d619a64985edadcbb14331ac99152b78f66d06cb17d0587be12deda1753929b22e0d3e17d3c8250edeafca7ace5c1822f7851bbff8656aa960000000000000000"], 0x44}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0xf30f, 0x2002) close(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000b8c8ce494d55fa0000000000000009c33bac42982f910a3f5c8f85305c7691a577714a36f1074c406dce2ee245e48392ffe65dae0938e9f3eb5a2a4d774773c0a9de28e865bc3b93fdd1b037c21249000b47c50d877669325d831075b23d0cae05db69e6dd734ae33da8f8f90782474e39acd53b7803a02559f7fc22a8225b83e35b12fa7d64b44827dae6f1278f1cb073cd13bd26a636569e2797e52929d89639048216ea06fe40d43cf3b27792edfc0ef0ed007f3842abf15bdc7eb5abd3f9f486a41a09d7ae5d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 3.842192474s ago: executing program 6 (id=3338): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) socket$inet(0x2, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000380), 0x10) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0x200, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 3.683690426s ago: executing program 8 (id=3339): mount(0x0, 0x0, 0x0, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000002c0)={0x0, 0x4, 0x2, 0xd3, r2}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)="0006aa6df274080de58c48", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r6 = dup2(r5, r5) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) read$char_usb(r6, &(0x7f00000000c0)=""/192, 0xc0) syz_clone3(&(0x7f0000000480)={0x104000, &(0x7f0000000080), &(0x7f00000000c0), 0x0, {0x37}, &(0x7f0000000180)=""/9, 0x9, &(0x7f0000000340)=""/193, &(0x7f0000000440)=[0x0], 0x1, {r6}}, 0x58) 2.892439837s ago: executing program 8 (id=3340): mount(0x0, 0x0, 0x0, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000002c0)={0x0, 0x4, 0x2, 0xd3, r2}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)="0006aa6df274080de58c48", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r6 = dup2(r5, r5) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) read$char_usb(r6, &(0x7f00000000c0)=""/192, 0xc0) syz_clone3(&(0x7f0000000480)={0x104000, &(0x7f0000000080), &(0x7f00000000c0), 0x0, {0x37}, &(0x7f0000000180)=""/9, 0x9, &(0x7f0000000340)=""/193, &(0x7f0000000440)=[0x0], 0x1, {r6}}, 0x58) 2.484217066s ago: executing program 6 (id=3341): r0 = syz_clone(0x11, 0x0, 0x5a, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) r1 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000600), 0x80800, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) write$cgroup_int(r2, &(0x7f0000000100), 0x12) r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)=0x10) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, r1, &(0x7f00000006c0)={r2, r3, 0x4}) r4 = socket$inet(0x2, 0x2, 0x11) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x115c, @loopback}, 0x1, 0x0, 0x1}}, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x23, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x2, 0x0, 0x1b8, 0x2e0, 0xd0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) openat$vcsu(0xffffffffffffff9c, 0x0, 0x241, 0x0) mkdir(&(0x7f0000000580)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r7) r8 = socket(0x2, 0x2, 0x0) unshare(0x20400) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0) read(r9, &(0x7f0000000300), 0x1) read(r9, &(0x7f0000000400), 0x120) read(r9, &(0x7f0000000500), 0x1000) 2.237165757s ago: executing program 1 (id=3342): syz_open_dev$dri(0x0, 0x1, 0xc0400) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x195a420, &(0x7f0000000080)={[{@mode={'mode', 0x3d, 0x8}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.007501029s ago: executing program 4 (id=3343): r0 = userfaultfd(0x80001) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000002b40), 0x24, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4a4}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x8000) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000640)={0x2c, &(0x7f00000003c0)={0x0, 0x15, 0x70, "d548d454dfb7d3b9d08bd00e1213a1e434b6ea6faf5ca69e9fa416287af966402d0729d62f46691d8e6313a34ea70714a8d997f0e8a84d55476af01e6e905d5af357468dd2e0ad27c50f4064dd152d30ac9e8593ec646d0415afd24cea0eb3187c9f5bd82dc9bc7703ddf75bd6c43988"}, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg(r4, 0x0, 0x8000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r5, &(0x7f0000000700)="b068aa", 0x3) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x1b8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xff000000, 0xff000000, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x1, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x2, 0x2}) 1.943876195s ago: executing program 6 (id=3344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000080)={0x9, 0xd}) syz_io_uring_setup(0x264a, &(0x7f0000000240)={0x0, 0xc8ed, 0x40, 0xfffffffe, 0x266}, &(0x7f0000019140), &(0x7f00000002c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f0000000200)={0x2}, 0x1) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001c80)={0x0, [{0x1, 0x0, 0x80000005, 0x0}, {0x4, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x1, 0x3530, 0x8, &(0x7f0000000940)="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"}, {0x0, 0x0, 0xfffffffb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x4000001, 0x0}, {0x2, 0x0, 0x3ff, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x440, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x4, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x7, 0x0, 0x40000, 0x0}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x300}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) r5 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) syz_pidfd_open(r5, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8e, 0x0, 0x100000}, 0x20) 1.890762578s ago: executing program 9 (id=3345): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xa0, &(0x7f0000000200)=""/160, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_icmp(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008002000800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40090) 1.707367838s ago: executing program 9 (id=3346): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0xa, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x2}}, 0x0, 0x0, 0x8, 0x0, "52cd0fbec2a79c1f03cea70c0a6e181b815a31bd385a5e35bc93ccc1a3b24eb9a9af77f2be4c877cc0797d3aec2d63d42a379f3d9b6631e817d47c6ed975cd1b008bf1d41e888460385211096cf7c6df"}, 0xd8) syz_io_uring_setup(0x29d7, &(0x7f0000000480)={0x0, 0x8552, 0x10, 0x1, 0x1ab}, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x6889, 0x1f280, 0xfffffffd, 0x399}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000713000/0x3000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffff78}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00001001000000f0ffffff0400000034000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32, @ANYRES32, @ANYBLOB="0300000001000000040000000e"], 0x50) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000200)={0xfffffffffffff879, 0x10001}) io_uring_enter(r3, 0x8ae, 0xfbb9, 0xbf, 0x0, 0x60) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xe) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r4 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f00000009c0)={{0x80000000, 0x0, 0x4, [0xc, 0x1]}, {0x80000000, 0x0, 0x3, [0x101, 0x7fffffff]}, 0x0, [0x3, 0x4]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$inet6(r7, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f00000086c0)=[{&(0x7f0000006240)="c1346f2d260685eb57d897465edd4823", 0x10}, {&(0x7f00000062c0)="2977c9c80000000000", 0x9}, {&(0x7f0000006300)="5c711d9c51a0", 0x6}], 0x3}}], 0x1, 0x44051) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100e2cc7000fbdbdf251000000008003b000300000008000600", @ANYRES32=r0, @ANYBLOB="080003007e2fec8ef91ee3d211f781c97798b514d1321556640cb1736f6f00eda7d23d49dd5e4e9e19cf6c2cf67113fd110f986e71c85aaab57f9930bd037009ae03b616786883a82c9839ad2f", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) 1.026279895s ago: executing program 8 (id=3347): io_uring_setup(0x178e, &(0x7f0000000400)={0x0, 0xcd80, 0x200, 0x3, 0x2bb}) socket$netlink(0x10, 0x3, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x101a02, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(0x0, 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./security\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./security/tomoyo/domain_policy\x00', 0x80001, 0x101) write$FUSE_DIRENT(r2, &(0x7f0000002240)={0x38, 0x0, 0x0, [{0x2, 0xf, 0xa, 0x8000000, '/dev/fuse\x00'}]}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x8000000000000001, 0x80, 0x0, 0x800, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffeff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 230.292063ms ago: executing program 6 (id=3348): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'gretap0\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x700, 0x8, 0x6, 0x1000, {{0x21, 0x4, 0x2, 0x7, 0x84, 0x64, 0x0, 0x20, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @local, {[@noop, @timestamp_prespec={0x44, 0x14, 0x77, 0x3, 0xf, [{@local, 0x5}, {@multicast1, 0xafe7}]}, @noop, @timestamp_prespec={0x44, 0x44, 0x8c, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x5}, {@multicast2, 0xfffffff8}, {@local, 0x1d9d}, {@private=0xa010102, 0x80}, {@local, 0x2}, {@loopback}, {@multicast1, 0xa263}, {@multicast2, 0x1ba}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x7f, 0x4]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x54, 0x10, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x4411, 0xa004}, [@IFLA_GROUP={0x8, 0x1b, 0x1}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg1\x00'}, @IFLA_LINK={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x200200d4}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000080)='X', 0x1}], 0x1) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002780), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f00000027c0)={0x14, r5, 0xf1f, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4080) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000400)={0xffffffffffffffff}) connect$pppl2tp(r6, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @multicast1}, 0x0, 0x0, 0x0, 0x1}}, 0x2e) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_sqe_flags_required={0x3, 0x8}], 0x1) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="b4aac8b6e73dd856d2862fdb84070184f58159658d8630924d42192279040954a4373d682a3a28ab8469b3965fb4b404c20d353e7f110ba6ea342883085a36747996c1bf451af1942459fecd922dd3f2f0ade336fe9b643777b1b3d7ca5e678a127b864f3b9a447cf06b5aa4529498b3d49f743ffc8f19371928582f9e1ab74d84ab7b61aa5d5cde729524f7245e7c6b279e8e1ac4411ce3c00d9cd3e9ad20"]) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setns(0xc9, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') sendmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r8 = syz_open_dev$swradio(&(0x7f0000000500), 0x0, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r8, 0xc0845658, &(0x7f0000000540)={0x0, @bt={0x0, 0x7, 0x0, 0x1, 0x8000, 0x200, 0x6, 0x6, 0xb8, 0x8, 0x3, 0x85f, 0x8, 0xd, 0x4, 0x30, {0x8d98, 0xe}, 0x1, 0x4}}) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r10 = syz_ublk_setup_io_uring(0x8e8, &(0x7f00000001c0)={0x0, 0xaca, 0x1, 0x0, 0x291}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b0001000000000904"], 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r10, 0x11, &(0x7f0000000300)="3410289375fba5e9d35e9463c1e516ec2d4fc9eb82e4eaa8df573267aabf5c91d3a245d071e0421446637c61c1ac92434114db4a29bc917bc89b0341b6acbd274b4d7fbc476c2e1a67c03e203e7c626abcff605868d1fa8d6f742897c950a9cc48cfaa69a3639fd2bf20c4aac049a9efc9ace8cbe1691c6b06f2bf088e9b006db7dc90567427a5990cf93dde5d8ca56d1f1344a5cc4c91c67d3740ce9cb942e6980ab4dd38e3a325842718b5bdb69d95d66a127a", 0xb4) ioctl$EVIOCSABS3F(r9, 0x401845ff, &(0x7f0000000000)={0x0, 0x8a, 0x1, 0xa01, 0x0, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r10, 0x7, &(0x7f00000003c0), 0x1) 0s ago: executing program 9 (id=3349): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) kernel console output (not intermixed with test programs): mode [ 721.834735][T15578] veth1_macvtap: entered promiscuous mode [ 721.868055][ T5259] 8021q: adding VLAN 0 to HW filter on device eth15 [ 721.884618][T15578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.909893][T15578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.996727][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.025648][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.056084][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.080017][ T5727] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 722.103313][T12425] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.174306][ T3291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.204313][ T3291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.247075][ T5727] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 722.271697][ T5727] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 722.296182][ T5727] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 722.314626][ T5727] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 722.336306][ T5727] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 722.360783][ T5727] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 722.393404][ T5727] usb 9-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 722.395282][T12425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.405063][ T5727] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 722.417310][T12425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.445048][ T5727] usb 9-1: Product: syz [ 722.457634][ T29] audit: type=1400 audit(1786230858.421:1051): avc: denied { write } for pid=15940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.484871][ T5727] usb 9-1: Manufacturer: syz [ 722.502159][T15936] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 722.518103][T15936] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 722.527606][T15936] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 722.535361][T15936] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 722.542782][T15936] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 722.550469][T15936] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 722.560441][T15954] FAULT_INJECTION: forcing a failure. [ 722.560441][T15954] name failslab, interval 1, probability 0, space 0, times 0 [ 722.562845][ T5727] usb 9-1: USB2VGA dongle found at address 2 [ 722.602963][ T5727] usb 9-1: Allocated 8 output buffers [ 722.628089][ T5727] usb 9-1: Failed to early initialize device [ 722.632292][T15954] CPU: 0 UID: 0 PID: 15954 Comm: syz.4.2930 Tainted: G L syzkaller #0 PREEMPT(full) [ 722.632322][T15954] Tainted: [L]=SOFTLOCKUP [ 722.632327][T15954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 722.632337][T15954] Call Trace: [ 722.632343][T15954] [ 722.632349][T15954] dump_stack_lvl+0x100/0x190 [ 722.632374][T15954] should_fail_ex.cold+0x5/0xa [ 722.632395][T15954] should_failslab+0xc2/0x120 [ 722.632417][T15954] __kmalloc_cache_noprof+0x91/0x6c0 [ 722.632443][T15954] ? get_sg_table.isra.0+0x4d/0x170 [ 722.632469][T15954] get_sg_table.isra.0+0x4d/0x170 [ 722.632489][T15954] ? dma_buf_begin_cpu_access+0x89/0x1e0 [ 722.632507][T15954] begin_cpu_udmabuf+0x191/0x270 [ 722.632528][T15954] ? __pfx_begin_cpu_udmabuf+0x10/0x10 [ 722.632550][T15954] dma_buf_begin_cpu_access+0xfe/0x1e0 [ 722.632567][T15954] ? _copy_from_user+0x59/0xd0 [ 722.632589][T15954] dma_buf_ioctl+0x6e5/0x8a0 [ 722.632608][T15954] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 722.632624][T15954] ? __fget_files+0x215/0x3d0 [ 722.632641][T15954] ? hook_file_ioctl_common+0x140/0x440 [ 722.632665][T15954] ? selinux_file_ioctl+0x13b/0x290 [ 722.632687][T15954] ? selinux_file_ioctl+0xb6/0x290 [ 722.632711][T15954] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 722.632729][T15954] __x64_sys_ioctl+0x18e/0x210 [ 722.632753][T15954] do_syscall_64+0x115/0x870 [ 722.632773][T15954] ? clear_bhb_loop+0x70/0xc0 [ 722.632793][T15954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.632809][T15954] RIP: 0033:0x7fa20219e0d9 [ 722.632822][T15954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.632837][T15954] RSP: 002b:00007fa203135028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 722.632854][T15954] RAX: ffffffffffffffda RBX: 00007fa202425fa0 RCX: 00007fa20219e0d9 [ 722.632865][T15954] RDX: 0000200000000080 RSI: 0000000040086200 RDI: 0000000000000005 [ 722.632874][T15954] RBP: 00007fa203135090 R08: 0000000000000000 R09: 0000000000000000 [ 722.632884][T15954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.632893][T15954] R13: 00007fa202426038 R14: 00007fa202425fa0 R15: 00007fff7f485998 [ 722.632914][T15954] [ 723.019018][ T29] audit: type=1400 audit(1786230858.948:1052): avc: denied { write } for pid=15955 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.607548][T14001] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 723.789742][ T5785] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 723.885796][T14001] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 723.938512][T14001] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 723.938949][ T5259] 8021q: adding VLAN 0 to HW filter on device eth16 [ 723.973457][T14001] usb 5-1: config 0 interface 0 has no altsetting 0 [ 723.983585][ T5785] usb 10-1: config 0 has no interfaces? [ 723.992869][ T5785] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 724.019066][ T5785] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.033297][T14001] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 724.049197][T14001] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 724.061295][T14001] usb 5-1: Product: syz [ 724.068751][ T5785] usb 10-1: config 0 descriptor?? [ 724.094763][T14001] usb 5-1: Manufacturer: syz [ 724.099417][T14001] usb 5-1: SerialNumber: syz [ 724.137414][T14001] usb 5-1: config 0 descriptor?? [ 724.145972][ T4915] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 724.165698][ T4915] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 724.183644][T15961] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 724.211285][ T4915] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 724.237654][ T4915] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 724.249171][ T4915] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 724.260282][T14001] usb 5-1: selecting invalid altsetting 0 [ 724.630786][T14001] usb 5-1: USB disconnect, device number 26 [ 724.649638][T15961] usb 5-1: cannot submit urb 0, error -19: no device [ 724.716143][ T5691] usb 10-1: USB disconnect, device number 2 [ 725.036765][T14001] usb 9-1: USB disconnect, device number 2 [ 725.148460][T15970] netdevsim0 speed is unknown, defaulting to 1000 [ 725.202686][ T29] audit: type=1400 audit(1786230860.960:1053): avc: denied { read } for pid=15989 comm="syz.8.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 725.845127][T16008] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2938'. [ 726.326170][ T5691] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 726.361293][T15970] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.382763][T15970] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.390230][T15970] bridge_slave_0: entered allmulticast mode [ 726.400060][T15970] bridge_slave_0: entered promiscuous mode [ 726.409841][T15970] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.417441][T15970] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.432742][T15970] bridge_slave_1: entered allmulticast mode [ 726.440178][T15970] bridge_slave_1: entered promiscuous mode [ 726.500439][ T4915] Bluetooth: hci4: command tx timeout [ 726.513345][T15970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.526453][T15970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.545339][ T5691] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.563621][ T29] audit: type=1400 audit(1786230862.216:1054): avc: denied { write } for pid=16013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.595025][T15970] team0: Port device team_slave_0 added [ 726.617641][ T5691] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 726.631362][T15970] team0: Port device team_slave_1 added [ 726.641151][ T5691] usb 5-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 727.229600][T16034] vivid-003: ================= START STATUS ================= [ 727.237461][T16034] vivid-003: Radio HW Seek Mode: Bounded [ 727.243232][T16034] vivid-003: Radio Programmable HW Seek: false [ 727.249635][T16034] vivid-003: RDS Rx I/O Mode: Block I/O [ 727.255320][T16034] vivid-003: Generate RBDS Instead of RDS: false [ 727.261921][T16034] vivid-003: RDS Reception: true [ 727.266946][T16034] vivid-003: RDS Program Type: 0 inactive [ 727.272813][T16034] vivid-003: RDS PS Name: inactive [ 727.278114][T16034] vivid-003: RDS Radio Text: inactive [ 727.284869][T16034] vivid-003: RDS Traffic Announcement: false inactive [ 727.291918][T16034] vivid-003: RDS Traffic Program: false inactive [ 727.298369][T16034] vivid-003: RDS Music: false inactive [ 727.304043][T16034] vivid-003: ================== END STATUS ================== [ 727.654914][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.739352][ T29] audit: type=1400 audit(1786230863.305:1055): avc: denied { write } for pid=16036 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 727.810554][T15970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.830706][T15970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.889404][T15970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.926993][T14611] usb 5-1: USB disconnect, device number 27 [ 727.944333][T15970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.961729][T15970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.023734][T15970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.366018][T15970] hsr_slave_0: entered promiscuous mode [ 728.372530][T15970] hsr_slave_1: entered promiscuous mode [ 728.378796][T15970] debugfs: 'hsr0' already exists in 'hsr' [ 728.384575][T15970] Cannot create hsr debugfs directory [ 728.432126][T16046] netdevsim0 speed is unknown, defaulting to 1000 [ 728.754361][ T4915] Bluetooth: hci4: command tx timeout [ 728.765471][T12903] tipc: Subscription rejected, illegal request [ 728.888119][ T29] audit: type=1400 audit(1786230864.367:1056): avc: denied { write } for pid=16044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.023317][ T5727] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 729.098696][ T29] audit: type=1400 audit(1786230864.551:1057): avc: denied { write } for pid=16065 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.211016][ T5727] usb 5-1: config 0 has no interfaces? [ 729.218721][ T5727] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 729.238726][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.263823][ T5727] usb 5-1: config 0 descriptor?? [ 730.096041][T16092] overlayfs: failed to resolve './file0': -2 [ 730.685070][ T5706] usb 5-1: USB disconnect, device number 28 [ 731.291805][T16101] vivid-003: ================= START STATUS ================= [ 731.299669][T16101] vivid-003: Radio HW Seek Mode: Bounded [ 731.305401][T16101] vivid-003: Radio Programmable HW Seek: false [ 731.311756][T16101] vivid-003: RDS Rx I/O Mode: Block I/O [ 731.317397][T16101] vivid-003: Generate RBDS Instead of RDS: false [ 731.326380][T16101] vivid-003: RDS Reception: true [ 731.331571][T16101] vivid-003: RDS Program Type: 0 inactive [ 731.337388][T16101] vivid-003: RDS PS Name: inactive [ 731.342844][T16101] vivid-003: RDS Radio Text: inactive [ 731.348502][T16101] vivid-003: RDS Traffic Announcement: false inactive [ 731.357635][T16101] vivid-003: RDS Traffic Program: false inactive [ 731.364318][T16101] vivid-003: RDS Music: false inactive [ 731.369881][T16101] vivid-003: ================== END STATUS ================== [ 731.693885][ T4915] Bluetooth: hci4: command tx timeout [ 731.795660][ T29] audit: type=1400 audit(1786230867.044:1058): avc: denied { write } for pid=16073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.796474][T16103] device-mapper: ioctl: populate_table: no targets specified [ 731.986634][ T29] audit: type=1400 audit(1786230867.229:1059): avc: denied { write } for pid=16107 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.612525][T15970] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 732.634632][T15970] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 732.655371][T15970] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 732.693212][T15970] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.718321][T15970] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 732.726821][ T29] audit: type=1400 audit(1786230867.903:1060): avc: denied { write } for pid=16112 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.762133][T15970] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 732.838658][ T29] audit: type=1400 audit(1786230867.976:1061): avc: denied { write } for pid=16135 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.902951][T15970] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 732.923350][T15970] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 733.509405][T15970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.546702][T15970] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.572089][T15166] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.579117][ T29] audit: type=1400 audit(1786230868.697:1062): avc: denied { listen } for pid=16154 comm="syz.6.2961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 733.579256][T15166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.630625][T16155] macsec1: entered promiscuous mode [ 733.641593][T16155] virt_wifi0: entered promiscuous mode [ 733.649936][T15163] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.657111][T15163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.731330][T16155] binder: Unknown parameter 'fowner<00000000000000060929' [ 733.731897][ T29] audit: type=1400 audit(1786230868.835:1063): avc: denied { mounton } for pid=16154 comm="syz.6.2961" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 733.783455][ T29] audit: type=1400 audit(1786230868.872:1064): avc: denied { read } for pid=16154 comm="syz.6.2961" path="socket:[55884]" dev="sockfs" ino=55884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 734.530768][T16171] vivid-003: ================= START STATUS ================= [ 734.540488][T16171] vivid-003: Radio HW Seek Mode: Bounded [ 734.546263][T16171] vivid-003: Radio Programmable HW Seek: false [ 734.552642][T16171] vivid-003: RDS Rx I/O Mode: Block I/O [ 734.558432][T16171] vivid-003: Generate RBDS Instead of RDS: false [ 734.564841][T16171] vivid-003: RDS Reception: true [ 734.569978][T16171] vivid-003: RDS Program Type: 0 inactive [ 734.575907][T16171] vivid-003: RDS PS Name: inactive [ 734.581300][T16171] vivid-003: RDS Radio Text: inactive [ 734.586893][T16171] vivid-003: RDS Traffic Announcement: false inactive [ 734.593871][T16171] vivid-003: RDS Traffic Program: false inactive [ 734.600302][T16171] vivid-003: RDS Music: false inactive [ 734.605947][T16171] vivid-003: ================== END STATUS ================== [ 734.932015][ T5727] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 734.940400][ T4915] Bluetooth: hci4: command tx timeout [ 735.099926][ T5727] usb 5-1: device descriptor read/64, error -71 [ 735.327520][T15970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.370217][T15970] veth0_vlan: entered promiscuous mode [ 735.383101][ T5727] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 735.392184][T15970] veth1_vlan: entered promiscuous mode [ 735.437679][T15970] veth0_macvtap: entered promiscuous mode [ 735.460417][T15970] veth1_macvtap: entered promiscuous mode [ 735.484987][T15970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.500451][T15970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.648884][ T5727] usb 5-1: device descriptor read/64, error -71 [ 735.699115][T15178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.749932][T15178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.807122][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.893822][ T3291] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.953366][ T5727] usb usb5-port1: attempt power cycle [ 736.006713][ T12] tipc: Subscription rejected, illegal request [ 736.054152][T15178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.073025][T15178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.142161][ T3291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.151256][ T3291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.294038][T14002] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 736.367385][ T5727] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 736.583348][ T29] audit: type=1400 audit(1786230871.466:1065): avc: denied { mounton } for pid=15970 comm="syz-executor" path="/root/syzkaller.kgVuJT/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 736.626719][ T5727] usb 5-1: device descriptor read/8, error -71 [ 736.654104][T14002] usb 10-1: config 0 has no interfaces? [ 736.671597][T14002] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 736.701756][T14002] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.718718][T14002] usb 10-1: config 0 descriptor?? [ 736.720664][T16194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2933'. [ 736.919927][T14610] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 736.955995][ T5727] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 736.985217][ T5727] usb 5-1: device descriptor read/8, error -71 [ 737.542793][ T5727] usb usb5-port1: unable to enumerate USB device [ 737.556795][T14610] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 737.578611][T14610] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 737.587155][T14610] usb 9-1: Product: syz [ 737.598972][T14610] usb 9-1: SerialNumber: syz [ 737.610393][T14610] usb 9-1: config 0 descriptor?? [ 737.750439][T16211] FAULT_INJECTION: forcing a failure. [ 737.750439][T16211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 737.785180][T16211] CPU: 0 UID: 0 PID: 16211 Comm: syz.4.2973 Tainted: G L syzkaller #0 PREEMPT(full) [ 737.785212][T16211] Tainted: [L]=SOFTLOCKUP [ 737.785219][T16211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 737.785231][T16211] Call Trace: [ 737.785239][T16211] [ 737.785247][T16211] dump_stack_lvl+0x100/0x190 [ 737.785276][T16211] should_fail_ex.cold+0x5/0xa [ 737.785299][T16211] strncpy_from_user+0x3b/0x2d0 [ 737.785327][T16211] do_getname+0x78/0x390 [ 737.785354][T16211] __x64_sys_linkat+0xe0/0x150 [ 737.785378][T16211] do_syscall_64+0x115/0x870 [ 737.785402][T16211] ? clear_bhb_loop+0x70/0xc0 [ 737.785425][T16211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.785444][T16211] RIP: 0033:0x7fa20219e0d9 [ 737.785459][T16211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.785477][T16211] RSP: 002b:00007fa203114028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 737.785495][T16211] RAX: ffffffffffffffda RBX: 00007fa202426090 RCX: 00007fa20219e0d9 [ 737.785507][T16211] RDX: ffffffffffffff9c RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 737.785518][T16211] RBP: 00007fa203114090 R08: 0000000000001000 R09: 0000000000000000 [ 737.785529][T16211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.785539][T16211] R13: 00007fa202426128 R14: 00007fa202426090 R15: 00007fff7f485998 [ 737.785563][T16211] [ 737.988583][ T5803] usb 10-1: USB disconnect, device number 3 [ 738.012775][T14610] usb 9-1: USB disconnect, device number 3 [ 738.272104][T16221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2975'. [ 738.305722][T16221] bond0: entered promiscuous mode [ 738.311645][T16221] bond_slave_0: entered promiscuous mode [ 738.318887][T16221] bond_slave_1: entered promiscuous mode [ 738.334199][T16221] bond0: left promiscuous mode [ 738.340138][T16221] bond_slave_0: left promiscuous mode [ 738.346522][T16221] bond_slave_1: left promiscuous mode [ 738.711759][T16233] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2978'. [ 738.844275][ T29] audit: type=1400 audit(1786230873.553:1066): avc: denied { accept } for pid=16239 comm="syz.6.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 738.883447][ T5706] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 738.939923][ T29] audit: type=1400 audit(1786230873.553:1067): avc: denied { write } for pid=16223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.073938][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2981'. [ 739.089599][ T5706] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 739.115743][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.154714][ T5706] usb 5-1: Product: syz [ 739.175394][ T5706] usb 5-1: Manufacturer: syz [ 739.193617][ T5706] usb 5-1: SerialNumber: syz [ 739.211396][ T29] audit: type=1400 audit(1786230873.894:1068): avc: denied { write } for pid=16247 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.275627][ T5726] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 739.309810][T16255] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2984'. [ 739.369608][T16255] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 739.416595][T16255] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2984'. [ 739.454388][T14001] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 739.753233][T14001] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 739.774376][T14001] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 740.121198][ T42] usb 5-1: USB disconnect, device number 33 [ 740.475853][T16278] fuse: Bad value for 'fd' [ 740.756647][ T5726] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 740.861945][ T5726] ath9k_htc: Failed to initialize the device [ 741.021652][ T42] usb 5-1: ath9k_htc: USB layer deinitialized [ 741.122203][ T29] audit: type=1400 audit(1786230875.648:1069): avc: denied { write } for pid=16261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.364873][ T29] audit: type=1400 audit(1786230875.888:1070): avc: denied { write } for pid=16285 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.441545][ T29] audit: type=1400 audit(1786230875.944:1071): avc: denied { ioctl } for pid=16288 comm="syz.9.2989" path="/13/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 741.482250][T12903] tipc: Subscription rejected, illegal request [ 741.617067][ T29] audit: type=1400 audit(1786230876.119:1072): avc: denied { connect } for pid=16298 comm="syz.9.2992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 741.739979][ T5726] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 741.885242][T16313] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2995'. [ 741.901928][T16313] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 741.928245][T16313] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2995'. [ 741.942379][ T5726] usb 9-1: config 0 has no interfaces? [ 741.953025][ T5726] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 741.991196][ T5726] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.020798][ T29] audit: type=1400 audit(1786230876.488:1073): avc: denied { write } for pid=16297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.053422][ T5726] usb 9-1: config 0 descriptor?? [ 742.347254][ T29] audit: type=1400 audit(1786230876.765:1074): avc: denied { write } for pid=16323 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.685881][T14001] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 742.695275][T14001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.703376][T14001] usb 2-1: Product: 镀퇹妢캔寘㯌盯鎚关훔å°á«¿á™·ìŒí™Ží„·ï»ë›°ê„šç³‰ä‰˜åŠ¸ê¦µé™ºä¸¦â­œé†§îƒè®µë…ˆîž´ [ 742.790255][T14001] usb 2-1: Manufacturer:  [ 742.800231][T14001] usb 2-1: can't set config #1, error -71 [ 742.822499][T14001] usb 2-1: USB disconnect, device number 22 [ 742.863547][ T29] audit: type=1400 audit(1786230877.255:1075): avc: denied { remount } for pid=16324 comm="syz.4.2998" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 743.095871][T14001] usb 9-1: USB disconnect, device number 4 [ 744.014756][ T5726] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 744.707846][ T5726] usb 10-1: Using ep0 maxpacket: 32 [ 744.719933][ T5726] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 744.735962][ T5726] usb 10-1: config 0 has no interface number 0 [ 744.747675][ T5726] usb 10-1: config 0 interface 184 has no altsetting 0 [ 744.754807][ T29] audit: type=1400 audit(1786230879.009:1076): avc: denied { read } for pid=16357 comm="syz.4.3004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 744.756947][ T5726] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 744.785078][T16355] overlayfs: failed to resolve './file0': -2 [ 744.791218][ T5726] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.799429][ T5726] usb 10-1: Product: syz [ 744.803690][ T5726] usb 10-1: Manufacturer: syz [ 744.808785][ T5726] usb 10-1: SerialNumber: syz [ 744.828428][ T5726] usb 10-1: config 0 descriptor?? [ 744.910121][ T29] audit: type=1400 audit(1786230879.156:1077): avc: denied { write } for pid=16337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 745.101501][ T5726] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 745.120242][ T29] audit: type=1400 audit(1786230879.350:1078): avc: denied { write } for pid=16363 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 745.131103][ T5726] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 745.203690][T16368] netlink: 'syz.8.3005': attribute type 1 has an invalid length. [ 745.255802][ T5726] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 745.274257][T16368] netlink: 220 bytes leftover after parsing attributes in process `syz.8.3005'. [ 745.354884][ T5726] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 745.394006][T16373] FAULT_INJECTION: forcing a failure. [ 745.394006][T16373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.414495][ T5726] usb 10-1: USB disconnect, device number 4 [ 745.426850][T16368] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3005'. [ 745.449785][T16373] CPU: 0 UID: 0 PID: 16373 Comm: syz.4.3007 Tainted: G L syzkaller #0 PREEMPT(full) [ 745.449810][T16373] Tainted: [L]=SOFTLOCKUP [ 745.449817][T16373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 745.449825][T16373] Call Trace: [ 745.449831][T16373] [ 745.449838][T16373] dump_stack_lvl+0x100/0x190 [ 745.449868][T16373] should_fail_ex.cold+0x5/0xa [ 745.449891][T16373] _copy_from_iter+0x1f4/0x1690 [ 745.449920][T16373] ? __pfx__copy_from_iter+0x10/0x10 [ 745.449957][T16373] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 745.449989][T16373] copy_page_from_iter+0x238/0x300 [ 745.450016][T16373] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 745.450043][T16373] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 745.450060][T16373] ? unwind_get_return_address+0x59/0xa0 [ 745.450079][T16373] ? arch_stack_walk+0xa6/0xf0 [ 745.450108][T16373] ? _kstrtoull+0x13c/0x1f0 [ 745.450123][T16373] ? __pfx__kstrtoull+0x10/0x10 [ 745.450142][T16373] tun_get_user+0x16d6/0x3c20 [ 745.450166][T16373] ? __pfx_tun_get_user+0x10/0x10 [ 745.450184][T16373] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 745.450213][T16373] ? find_held_lock+0x2b/0x80 [ 745.450228][T16373] ? tun_get+0x191/0x370 [ 745.450241][T16373] ? tun_get+0x191/0x370 [ 745.450261][T16373] tun_chr_write_iter+0xdc/0x200 [ 745.450281][T16373] vfs_write+0x6ac/0x1050 [ 745.450299][T16373] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 745.450317][T16373] ? __pfx_vfs_write+0x10/0x10 [ 745.450330][T16373] ? find_held_lock+0x2b/0x80 [ 745.450356][T16373] ksys_write+0x12a/0x250 [ 745.450372][T16373] ? __pfx_ksys_write+0x10/0x10 [ 745.450392][T16373] do_syscall_64+0x115/0x870 [ 745.450416][T16373] ? clear_bhb_loop+0x70/0xc0 [ 745.450438][T16373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.450454][T16373] RIP: 0033:0x7fa20215e90e [ 745.450469][T16373] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 745.450483][T16373] RSP: 002b:00007fa203134fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 745.450502][T16373] RAX: ffffffffffffffda RBX: 00007fa2031356c0 RCX: 00007fa20215e90e [ 745.450512][T16373] RDX: 000000000000003a RSI: 0000200000000080 RDI: 00000000000000c8 [ 745.450521][T16373] RBP: 00007fa203135090 R08: 0000000000000000 R09: 0000000000000000 [ 745.450530][T16373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.450539][T16373] R13: 00007fa202426038 R14: 00007fa202425fa0 R15: 00007fff7f485998 [ 745.450561][T16373] [ 745.917678][T16375] FAULT_INJECTION: forcing a failure. [ 745.917678][T16375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.023566][T16375] CPU: 0 UID: 0 PID: 16375 Comm: syz.4.3008 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.023597][T16375] Tainted: [L]=SOFTLOCKUP [ 746.023603][T16375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 746.023613][T16375] Call Trace: [ 746.023620][T16375] [ 746.023627][T16375] dump_stack_lvl+0x100/0x190 [ 746.023656][T16375] should_fail_ex.cold+0x5/0xa [ 746.023680][T16375] _copy_to_user+0x32/0xd0 [ 746.023709][T16375] simple_read_from_buffer+0xcb/0x170 [ 746.023732][T16375] proc_fail_nth_read+0x1af/0x230 [ 746.023763][T16375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 746.023794][T16375] ? rw_verify_area+0xce/0x6d0 [ 746.023820][T16375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 746.023849][T16375] vfs_read+0x1e4/0xb40 [ 746.023880][T16375] ? __pfx_vfs_read+0x10/0x10 [ 746.023907][T16375] ? __fget_files+0x215/0x3d0 [ 746.023932][T16375] ? __fget_files+0x21f/0x3d0 [ 746.023965][T16375] ksys_read+0x12a/0x250 [ 746.023982][T16375] ? __pfx_ksys_read+0x10/0x10 [ 746.024007][T16375] do_syscall_64+0x115/0x870 [ 746.024031][T16375] ? clear_bhb_loop+0x70/0xc0 [ 746.024054][T16375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.024073][T16375] RIP: 0033:0x7fa20215e90e [ 746.024089][T16375] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 746.024105][T16375] RSP: 002b:00007fa203134fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 746.024124][T16375] RAX: ffffffffffffffda RBX: 00007fa2031356c0 RCX: 00007fa20215e90e [ 746.024135][T16375] RDX: 000000000000000f RSI: 00007fa2031350a0 RDI: 0000000000000008 [ 746.024147][T16375] RBP: 00007fa203135090 R08: 0000000000000000 R09: 0000000000000000 [ 746.024158][T16375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.024169][T16375] R13: 00007fa202426038 R14: 00007fa202425fa0 R15: 00007fff7f485998 [ 746.024195][T16375] [ 746.507618][T16386] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3009'. [ 746.549265][T16386] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 746.581330][T16386] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3009'. [ 746.882954][T16394] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3012'. [ 747.316607][T12903] tipc: Subscription rejected, illegal request [ 748.293949][T14001] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 748.479438][T14001] usb 10-1: config 0 has no interfaces? [ 748.509932][T14001] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 748.527187][T14001] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.666370][T14001] usb 10-1: config 0 descriptor?? [ 750.466006][ T5706] usb 10-1: USB disconnect, device number 5 [ 750.655085][T14002] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 750.882208][T14002] usb 9-1: Using ep0 maxpacket: 8 [ 750.889205][T14002] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 750.909875][T14002] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 750.938953][T14002] usb 9-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 750.959222][T16440] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3025'. [ 750.959943][T14002] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 750.989071][T14002] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 751.006584][T14002] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 751.016229][T16440] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 751.021313][T16441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3025'. [ 751.050332][T14002] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 751.068599][T14002] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.307751][T14002] usb 9-1: GET_CAPABILITIES returned 0 [ 751.319109][T14002] usbtmc 9-1:16.0: can't read capabilities [ 751.525427][T16429] FAULT_INJECTION: forcing a failure. [ 751.525427][T16429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.768680][T16452] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3028'. [ 751.800327][T16452] bond0: entered promiscuous mode [ 751.805705][T16452] bond_slave_0: entered promiscuous mode [ 751.812108][T16452] bond_slave_1: entered promiscuous mode [ 752.104187][T16429] CPU: 0 UID: 0 PID: 16429 Comm: syz.8.3023 Tainted: G L syzkaller #0 PREEMPT(full) [ 752.104218][T16429] Tainted: [L]=SOFTLOCKUP [ 752.104225][T16429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 752.104235][T16429] Call Trace: [ 752.104241][T16429] [ 752.104249][T16429] dump_stack_lvl+0x100/0x190 [ 752.104275][T16429] should_fail_ex.cold+0x5/0xa [ 752.104298][T16429] _copy_to_user+0x32/0xd0 [ 752.104324][T16429] simple_read_from_buffer+0xcb/0x170 [ 752.104346][T16429] proc_fail_nth_read+0x1af/0x230 [ 752.104377][T16429] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 752.104408][T16429] ? rw_verify_area+0xce/0x6d0 [ 752.104435][T16429] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 752.104465][T16429] vfs_read+0x1e4/0xb40 [ 752.104503][T16429] ? __pfx_vfs_read+0x10/0x10 [ 752.104531][T16429] ? __fget_files+0x215/0x3d0 [ 752.104557][T16429] ? __fget_files+0x21f/0x3d0 [ 752.104583][T16429] ksys_read+0x12a/0x250 [ 752.104599][T16429] ? __pfx_ksys_read+0x10/0x10 [ 752.104623][T16429] do_syscall_64+0x115/0x870 [ 752.104647][T16429] ? clear_bhb_loop+0x70/0xc0 [ 752.104670][T16429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.104689][T16429] RIP: 0033:0x7f9c24b5e90e [ 752.104705][T16429] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 752.104724][T16429] RSP: 002b:00007f9c25a2dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 752.104742][T16429] RAX: ffffffffffffffda RBX: 00007f9c25a2e6c0 RCX: 00007f9c24b5e90e [ 752.104754][T16429] RDX: 000000000000000f RSI: 00007f9c25a2e0a0 RDI: 0000000000000005 [ 752.104765][T16429] RBP: 00007f9c25a2e090 R08: 0000000000000000 R09: 0000000000000000 [ 752.104777][T16429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.104787][T16429] R13: 00007f9c24e26038 R14: 00007f9c24e25fa0 R15: 00007ffff1e1b718 [ 752.104813][T16429] [ 752.644176][T16452] bond0: left promiscuous mode [ 752.649299][T16452] bond_slave_0: left promiscuous mode [ 752.654868][T16452] bond_slave_1: left promiscuous mode [ 752.702647][T14611] usb 9-1: USB disconnect, device number 5 [ 754.769066][T16476] veth1_to_bond: entered allmulticast mode [ 754.971369][ T5785] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 755.176890][T12903] bridge_slave_1: left allmulticast mode [ 755.177154][ T5785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.209354][T12903] bridge_slave_1: left promiscuous mode [ 755.226070][ T5785] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 755.256362][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.272232][T12903] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.290932][ T5785] usb 2-1: config 0 descriptor?? [ 755.605248][ T5785] usbhid 2-1:0.0: can't add hid device: -71 [ 755.638113][ T5785] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 755.664325][ T5785] usb 2-1: USB disconnect, device number 23 [ 756.108718][T12903] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 756.222590][ T5785] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 756.272261][T12903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.339389][T12903] bond_slave_0: left allmulticast mode [ 756.399216][ T5785] usb 2-1: device descriptor read/64, error -71 [ 756.420357][T12903] bond0 (unregistering): Released all slaves [ 756.495513][T12903] bond1 (unregistering): Released all slaves [ 756.555763][T16453] veth1_to_bond: left allmulticast mode [ 756.588806][T15167] tipc: Subscription rejected, illegal request [ 756.688866][ T5785] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 756.796013][T16486] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3037'. [ 756.829611][T16486] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 756.871377][T16493] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3039'. [ 756.894922][T12903] tipc: Left network mode [ 756.900943][T16486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3037'. [ 756.902921][ T29] audit: type=1400 audit(1786230890.198:1079): avc: denied { ioctl } for pid=16491 comm="syz.9.3039" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 756.940816][ T5785] usb 2-1: device descriptor read/64, error -71 [ 757.078121][ T5785] usb usb2-port1: attempt power cycle [ 757.576254][ T5785] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 757.633968][ T5785] usb 2-1: device descriptor read/8, error -71 [ 757.695794][T14002] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 757.733536][T16505] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3042'. [ 758.032024][T16505] bond0: entered promiscuous mode [ 758.037214][T16505] bond_slave_0: entered promiscuous mode [ 758.039643][ T5785] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 758.050720][T16505] bond_slave_1: entered promiscuous mode [ 758.082707][T16505] bond0: left promiscuous mode [ 758.087691][T16505] bond_slave_0: left promiscuous mode [ 758.093311][T16505] bond_slave_1: left promiscuous mode [ 758.821453][T14002] usb 5-1: Using ep0 maxpacket: 32 [ 758.844547][T14002] usb 5-1: unable to get BOS descriptor or descriptor too short [ 759.037928][ T5785] usb 2-1: device descriptor read/8, error -71 [ 759.044761][T14002] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 759.058043][T14002] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 759.070677][T14002] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 759.083763][T14002] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.101668][T14002] usb 5-1: Product: syz [ 759.114155][T14002] usb 5-1: Manufacturer: syz [ 759.118796][T14002] usb 5-1: SerialNumber: syz [ 759.166032][T16497] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 759.176031][ T5785] usb usb2-port1: unable to enumerate USB device [ 759.424079][T12903] hsr_slave_0: left promiscuous mode [ 759.442233][T16497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.454247][T12903] hsr_slave_1: left promiscuous mode [ 759.460171][T12903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.474770][T12903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.487885][T16497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.883111][T16524] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3050'. [ 759.902809][T16524] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 760.037628][T12903] team0 (unregistering): Port device team_slave_1 removed [ 760.078482][T12903] team0 (unregistering): Port device team_slave_0 removed [ 760.269174][ T29] audit: type=1326 audit(1786230893.337:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16529 comm="syz.1.3051" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0f7b9e0d9 code=0x0 [ 760.584511][T15167] tipc: Subscription rejected, illegal request [ 760.609693][ T29] audit: type=1400 audit(1786230893.651:1081): avc: denied { getopt } for pid=16529 comm="syz.1.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 760.677231][T16524] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3050'. [ 760.736831][T14002] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 760.771788][T14002] usb 5-1: MIDIStreaming interface descriptor not found [ 760.858477][ T5706] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 761.017830][T14002] usb 5-1: USB disconnect, device number 34 [ 761.625171][ T5706] usb 10-1: config 0 has no interfaces? [ 762.301794][ T5706] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 762.302209][ T5785] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 762.311536][ T5706] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.329940][ T5706] usb 10-1: config 0 descriptor?? [ 762.755591][T16560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3058'. [ 762.787164][T16560] bond0: entered promiscuous mode [ 762.792344][T16560] bond_slave_0: entered promiscuous mode [ 762.799051][T16560] bond_slave_1: entered promiscuous mode [ 762.822201][ T5785] usb 9-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 763.143781][T16560] bond0: left promiscuous mode [ 763.148876][T16560] bond_slave_0: left promiscuous mode [ 763.154597][T16560] bond_slave_1: left promiscuous mode [ 763.164738][ T5785] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.194754][ T5785] usb 9-1: config 0 descriptor?? [ 763.593141][ T5706] usb 10-1: USB disconnect, device number 6 [ 763.687643][ T5785] smartjoyplus 0003:0B43:0003.0003: ignoring exceeding usage max [ 763.725718][ T5785] smartjoyplus 0003:0B43:0003.0003: hidraw0: USB HID v0.81 Device [HID 0b43:0003] on usb-dummy_hcd.8-1/input0 [ 763.750331][ T5785] smartjoyplus 0003:0B43:0003.0003: no output reports found [ 763.879032][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3060'. [ 763.905759][ T5785] usb 9-1: USB disconnect, device number 6 [ 763.912743][ T5726] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 763.920894][ T983] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 763.953680][T16572] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.3060'. [ 763.981596][T16572] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3060'. [ 764.086438][ T5726] usb 5-1: Using ep0 maxpacket: 16 [ 764.100091][ T5726] usb 5-1: unable to get BOS descriptor or descriptor too short [ 764.109255][ T983] usb 2-1: Using ep0 maxpacket: 8 [ 764.118389][ T5726] usb 5-1: config 9 has an invalid interface number: 57 but max is 0 [ 764.135515][ T5726] usb 5-1: config 9 has no interface number 0 [ 764.143416][ T983] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 764.151964][ T983] usb 2-1: config 179 has no interface number 0 [ 764.152217][ T5726] usb 5-1: config 9 interface 57 has no altsetting 0 [ 764.159713][ T983] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 764.169005][T16574] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3064'. [ 764.190444][T16574] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 764.191384][ T983] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 764.201833][ T5726] usb 5-1: string descriptor 0 read error: -22 [ 764.211108][ T983] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 764.220298][ T5726] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 764.243356][T16574] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3064'. [ 764.243675][ T983] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 764.263452][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.285276][ T983] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 764.298943][ T983] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 764.320127][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.337791][T16566] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 764.437324][T12903] IPVS: stop unused estimator thread 0... [ 764.874707][ T29] audit: type=1400 audit(1786230897.584:1082): avc: denied { getopt } for pid=16586 comm="syz.6.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 766.066612][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 766.073383][ T5726] video4linux radio48: keene_cmd_main failed (-110) [ 766.088768][ T5726] radio-keene 5-1:9.57: V4L2 device registered as radio48 [ 766.257436][T16568] binder_alloc: 16567: binder_alloc_buf, no vma [ 766.308660][ T983] usb 5-1: USB disconnect, device number 35 [ 766.545003][T16566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.594971][T16566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.791627][T16596] overlayfs: failed to resolve './file0': -2 [ 767.302290][T16600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3072'. [ 768.081172][T16608] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3075'. [ 768.108579][T16608] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 768.130347][ T29] audit: type=1807 audit(1786230900.593:1083): action=measure res=1 [ 768.144296][T16611] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3075'. [ 768.166959][T16609] ima: policy update completed [ 768.175096][ T29] audit: type=1802 audit(1786230900.630:1084): pid=16609 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.6.3076" res=1 errno=0 [ 768.291888][ T983] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 768.312599][ T29] audit: type=1800 audit(1786230900.741:1085): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15344 res=0 errno=0 [ 768.353599][ T29] audit: type=1800 audit(1786230900.778:1086): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15344 res=0 errno=0 [ 768.469217][T16616] FAULT_INJECTION: forcing a failure. [ 768.469217][T16616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.517119][ T983] usb 10-1: not running at top speed; connect to a high speed hub [ 768.559810][ T983] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 768.600832][ T983] usb 10-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 768.625117][ T983] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.640925][T16617] netdevsim0 speed is unknown, defaulting to 1000 [ 768.651882][ T983] usb 10-1: Product: syz [ 768.660099][ T983] usb 10-1: Manufacturer: syz [ 768.678102][ T983] usb 10-1: SerialNumber: syz [ 768.704081][ T983] oti6858 10-1:1.0: oti6858 converter detected [ 768.745136][T16616] CPU: 1 UID: 0 PID: 16616 Comm: syz.1.3078 Tainted: G L syzkaller #0 PREEMPT(full) [ 768.745160][T16616] Tainted: [L]=SOFTLOCKUP [ 768.745166][T16616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 768.745176][T16616] Call Trace: [ 768.745182][T16616] [ 768.745189][T16616] dump_stack_lvl+0x100/0x190 [ 768.745215][T16616] should_fail_ex.cold+0x5/0xa [ 768.745236][T16616] _copy_from_user+0x2e/0xd0 [ 768.745262][T16616] snd_rawmidi_ioctl+0x430/0x7a0 [ 768.745282][T16616] ? __pfx_snd_rawmidi_ioctl+0x10/0x10 [ 768.745306][T16616] ? selinux_file_ioctl+0xb6/0x290 [ 768.745334][T16616] ? __pfx_snd_rawmidi_ioctl+0x10/0x10 [ 768.745356][T16616] __x64_sys_ioctl+0x18e/0x210 [ 768.745386][T16616] do_syscall_64+0x115/0x870 [ 768.745411][T16616] ? clear_bhb_loop+0x70/0xc0 [ 768.745434][T16616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.745452][T16616] RIP: 0033:0x7ff0f7b9e0d9 [ 768.745469][T16616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.745486][T16616] RSP: 002b:00007ff0f89ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 768.745504][T16616] RAX: ffffffffffffffda RBX: 00007ff0f7e25fa0 RCX: 00007ff0f7b9e0d9 [ 768.745516][T16616] RDX: 0000200000000040 RSI: 00000000c0305710 RDI: 0000000000000003 [ 768.745527][T16616] RBP: 00007ff0f89ca090 R08: 0000000000000000 R09: 0000000000000000 [ 768.745538][T16616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.745548][T16616] R13: 00007ff0f7e26038 R14: 00007ff0f7e25fa0 R15: 00007fffdd65f4f8 [ 768.745572][T16616] [ 768.982141][ T29] audit: type=1800 audit(1786230901.175:1087): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250445 res=0 errno=0 [ 769.156152][ T983] usb 10-1: oti6858 converter now attached to ttyUSB0 [ 769.161753][ T29] audit: type=1800 audit(1786230901.406:1088): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15344 res=0 errno=0 [ 769.314216][ T29] audit: type=1800 audit(1786230901.627:1089): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=250478 res=0 errno=0 [ 769.399770][ T29] audit: type=1800 audit(1786230901.646:1090): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=250452 res=0 errno=0 [ 769.459310][T16628] ubi0: attaching mtd0 [ 770.078375][T16631] vivid-001: ================= START STATUS ================= [ 770.086102][T16631] vivid-001: Radio HW Seek Mode: Bounded [ 770.092627][T16631] vivid-001: Radio Programmable HW Seek: false [ 770.098927][T16631] vivid-001: RDS Rx I/O Mode: Block I/O [ 770.104584][T16631] vivid-001: Generate RBDS Instead of RDS: false [ 770.111138][T16631] vivid-001: RDS Reception: true [ 770.116147][T16631] vivid-001: RDS Program Type: 0 inactive [ 770.122000][T16631] vivid-001: RDS PS Name: inactive [ 770.127233][T16631] vivid-001: RDS Radio Text: inactive [ 770.132853][T16631] vivid-001: RDS Traffic Announcement: false inactive [ 770.139658][T16631] vivid-001: RDS Traffic Program: false inactive [ 770.148124][T16631] vivid-001: RDS Music: false inactive [ 770.153792][T16631] vivid-001: ================== END STATUS ================== [ 770.785074][ T29] audit: type=1800 audit(1786230901.646:1091): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=250453 res=0 errno=0 [ 770.918490][ T29] audit: type=1800 audit(1786230901.646:1092): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=250475 res=0 errno=0 [ 771.057901][ T29] audit: type=1800 audit(1786230901.655:1093): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=250476 res=0 errno=0 [ 771.164585][ T29] audit: type=1800 audit(1786230901.683:1094): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=250454 res=0 errno=0 [ 771.198586][T16628] ubi0: scanning is finished [ 771.264115][T16628] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 771.265597][ T29] audit: type=1800 audit(1786230901.683:1095): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=250477 res=0 errno=0 [ 771.402909][ T29] audit: type=1800 audit(1786230901.747:1096): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16205 res=0 errno=0 [ 771.533505][ T29] audit: type=1800 audit(1786230901.766:1097): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250498 res=0 errno=0 [ 771.633656][ T29] audit: type=1800 audit(1786230901.821:1098): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16205 res=0 errno=0 [ 771.743381][ T29] audit: type=1800 audit(1786230903.077:1099): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250675 res=0 errno=0 [ 771.848392][T16628] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 771.906091][T16638] overlayfs: failed to resolve './file0': -2 [ 771.917594][ T29] audit: type=1800 audit(1786230903.095:1100): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250689 res=0 errno=0 [ 772.434093][ T5726] usb 2-1: USB disconnect, device number 28 [ 772.434155][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 772.448963][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 772.931206][T16648] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3084'. [ 772.955022][T16648] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3084'. [ 773.052909][T16648] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 773.097002][ T5726] usb 10-1: USB disconnect, device number 7 [ 773.372238][ T5726] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 773.484924][T16653] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3085'. [ 773.813121][ T5606] Bluetooth: hci3: command 0x0406 tx timeout [ 773.853086][ T5726] oti6858 10-1:1.0: device disconnected [ 774.688317][T16668] ieee802154 phy1 wpan1: encryption failed: -22 [ 775.366733][T16676] vivid-001: ================= START STATUS ================= [ 775.374641][T16676] vivid-001: Radio HW Seek Mode: Bounded [ 775.380383][T16676] vivid-001: Radio Programmable HW Seek: false [ 775.386684][T16676] vivid-001: RDS Rx I/O Mode: Block I/O [ 775.392337][T16676] vivid-001: Generate RBDS Instead of RDS: false [ 775.398875][T16676] vivid-001: RDS Reception: true [ 775.403904][T16676] vivid-001: RDS Program Type: 0 inactive [ 775.409825][T16676] vivid-001: RDS PS Name: inactive [ 775.415158][T16676] vivid-001: RDS Radio Text: inactive [ 775.420823][T16676] vivid-001: RDS Traffic Announcement: false inactive [ 775.427798][T16676] vivid-001: RDS Traffic Program: false inactive [ 775.434234][T16676] vivid-001: RDS Music: false inactive [ 775.439834][T16676] vivid-001: ================== END STATUS ================== [ 777.485939][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 777.485954][ T29] audit: type=1400 audit(1786230909.234:1126): avc: denied { watch_mount } for pid=16694 comm="syz.1.3099" path="/22" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 777.690423][ T29] audit: type=1400 audit(1786230909.262:1127): avc: denied { watch watch_reads } for pid=16694 comm="syz.1.3099" path="/22" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 777.715470][ T29] audit: type=1800 audit(1786230909.299:1128): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16328 res=0 errno=0 [ 777.822561][T16703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3100'. [ 777.854591][T16703] bond0: entered promiscuous mode [ 777.859678][T16703] bond_slave_0: entered promiscuous mode [ 777.866225][T16703] bond_slave_1: entered promiscuous mode [ 777.881258][ T29] audit: type=1400 audit(1786230909.539:1129): avc: denied { read } for pid=16697 comm="syz.4.3100" path="/40/nfsd/nfsv4leasetime" dev="nfsd" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 778.158595][T16703] bond0: left promiscuous mode [ 778.163427][T16703] bond_slave_0: left promiscuous mode [ 778.169919][T16703] bond_slave_1: left promiscuous mode [ 778.547010][ T29] audit: type=1800 audit(1786230910.204:1130): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16205 res=0 errno=0 [ 779.503458][T16696] overlayfs: failed to resolve './file0': -2 [ 779.712744][ T29] audit: type=1800 audit(1786230911.265:1131): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16205 res=0 errno=0 [ 779.780261][ T29] audit: type=1800 audit(1786230911.321:1132): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=32177 res=0 errno=0 [ 779.916301][ T29] audit: type=1800 audit(1786230911.321:1133): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=32200 res=0 errno=0 [ 780.009451][ T5803] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 780.183617][ T5803] usb 9-1: Using ep0 maxpacket: 32 [ 780.202551][ T5803] usb 9-1: config 2 has an invalid interface number: 88 but max is 0 [ 780.224600][ T5803] usb 9-1: config 2 has no interface number 0 [ 780.250054][ T5803] usb 9-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 780.274886][ T5803] usb 9-1: config 2 interface 88 has no altsetting 0 [ 780.292312][ T5803] usb 9-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 780.312292][ T5803] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 780.322031][ T5803] usb 9-1: Product: syz [ 780.328429][T16727] xt_hashlimit: size too large, truncated to 1048576 [ 780.349392][ T5803] usb 9-1: Manufacturer: syz [ 780.372483][ T5803] usb 9-1: SerialNumber: syz [ 780.412652][ T29] audit: type=1800 audit(1786230911.930:1134): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=254638 res=0 errno=0 [ 780.446579][T16719] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 780.509879][ T29] audit: type=1800 audit(1786230911.930:1135): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=254670 res=0 errno=0 [ 781.643766][T16719] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 781.997803][T16743] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3113'. [ 782.023649][T16743] bond0: entered promiscuous mode [ 782.028737][T16743] bond_slave_0: entered promiscuous mode [ 782.035748][T16743] bond_slave_1: entered promiscuous mode [ 782.664791][T16743] bond0: left promiscuous mode [ 782.669653][T16743] bond_slave_0: left promiscuous mode [ 782.675397][T16743] bond_slave_1: left promiscuous mode [ 782.688622][T16719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.735448][T16719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.406019][T16747] vivid-003: ================= START STATUS ================= [ 783.413923][T16747] vivid-003: Radio HW Seek Mode: Bounded [ 783.419730][T16747] vivid-003: Radio Programmable HW Seek: false [ 783.426092][T16747] vivid-003: RDS Rx I/O Mode: Block I/O [ 783.431951][T16747] vivid-003: Generate RBDS Instead of RDS: false [ 783.438453][T16747] vivid-003: RDS Reception: true [ 783.443735][T16747] vivid-003: RDS Program Type: 0 inactive [ 783.449804][T16747] vivid-003: RDS PS Name: inactive [ 783.458399][T16747] vivid-003: RDS Radio Text: inactive [ 783.464136][T16747] vivid-003: RDS Traffic Announcement: false inactive [ 783.471139][T16747] vivid-003: RDS Traffic Program: false inactive [ 783.477741][T16747] vivid-003: RDS Music: false inactive [ 783.483410][T16747] vivid-003: ================== END STATUS ================== [ 784.016150][T16752] FAULT_INJECTION: forcing a failure. [ 784.016150][T16752] name failslab, interval 1, probability 0, space 0, times 0 [ 784.037255][T16752] CPU: 1 UID: 0 PID: 16752 Comm: syz.9.3115 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.037286][T16752] Tainted: [L]=SOFTLOCKUP [ 784.037292][T16752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 784.037303][T16752] Call Trace: [ 784.037309][T16752] [ 784.037316][T16752] dump_stack_lvl+0x100/0x190 [ 784.037344][T16752] should_fail_ex.cold+0x5/0xa [ 784.037367][T16752] should_failslab+0xc2/0x120 [ 784.037391][T16752] kmem_cache_alloc_noprof+0x91/0x6a0 [ 784.037413][T16752] ? trace_kmem_cache_alloc+0xdd/0x100 [ 784.037437][T16752] ? security_file_alloc+0x34/0x2c0 [ 784.037458][T16752] security_file_alloc+0x34/0x2c0 [ 784.037475][T16752] init_file+0x95/0x480 [ 784.037498][T16752] alloc_empty_file+0x79/0x1c0 [ 784.037521][T16752] alloc_file_pseudo+0x183/0x290 [ 784.037546][T16752] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 784.037566][T16752] ? inode_init_always_gfp+0xc98/0xfb0 [ 784.037589][T16752] sock_alloc_file+0x50/0x210 [ 784.037613][T16752] do_accept+0x242/0x530 [ 784.037632][T16752] ? do_raw_spin_lock+0x128/0x260 [ 784.037657][T16752] ? __pfx_do_accept+0x10/0x10 [ 784.037689][T16752] __sys_accept4+0x108/0x200 [ 784.037716][T16752] ? __pfx___sys_accept4+0x10/0x10 [ 784.037732][T16752] ? ksys_write+0x1ac/0x250 [ 784.037747][T16752] ? __pfx_ksys_write+0x10/0x10 [ 784.037768][T16752] __x64_sys_accept+0x74/0xb0 [ 784.037786][T16752] ? lockdep_hardirqs_on+0x78/0x100 [ 784.037808][T16752] do_syscall_64+0x115/0x870 [ 784.037829][T16752] ? clear_bhb_loop+0x70/0xc0 [ 784.037848][T16752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.037865][T16752] RIP: 0033:0x7fac1a59e0d9 [ 784.037881][T16752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.037899][T16752] RSP: 002b:00007fac1b3bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 784.037916][T16752] RAX: ffffffffffffffda RBX: 00007fac1a825fa0 RCX: 00007fac1a59e0d9 [ 784.037928][T16752] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 784.037937][T16752] RBP: 00007fac1b3bb090 R08: 0000000000000000 R09: 0000000000000000 [ 784.037946][T16752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.037956][T16752] R13: 00007fac1a826038 R14: 00007fac1a825fa0 R15: 00007ffe4b690e88 [ 784.037979][T16752] [ 785.064477][ T5803] asix 9-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 785.076843][ T5803] asix 9-1:2.88: probe with driver asix failed with error -71 [ 785.106215][ T5803] usb 9-1: USB disconnect, device number 7 [ 785.292289][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 785.292305][ T29] audit: type=1800 audit(1786230916.435:1144): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16205 res=0 errno=0 [ 786.354033][ T29] audit: type=1800 audit(1786230917.414:1145): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16205 res=0 errno=0 [ 787.515973][ T29] audit: type=1800 audit(1786230918.494:1146): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16205 res=0 errno=0 [ 787.560007][T16783] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 788.519982][ T29] audit: type=1800 audit(1786230919.417:1147): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16205 res=0 errno=0 [ 788.645421][ T29] audit: type=1800 audit(1786230919.537:1148): pid=16789 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3128" name="freeze_filesystems" dev="sysfs" ino=1420 res=0 errno=0 [ 790.341693][T16798] netlink: 'syz.9.3131': attribute type 1 has an invalid length. [ 790.428744][T16798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 790.572210][T16800] bond1: (slave veth3): Enslaving as an active interface with a down link [ 790.650781][T16800] bond1: (slave dummy0): making interface the new active one [ 790.662250][T16787] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3599605440 (3599605440 ns) > initial count (3285526220 ns). Using initial count to start timer. [ 790.699439][T16800] dummy0: entered promiscuous mode [ 790.749019][T16800] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 790.855675][T16802] bond1 (unregistering): (slave veth3): Releasing active interface [ 790.903922][T16802] bond1 (unregistering): (slave dummy0): Releasing active interface [ 790.956660][T16802] bond1 (unregistering): Released all slaves [ 791.124344][ T29] audit: type=1800 audit(1786230921.818:1149): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31977 res=0 errno=0 [ 791.187863][ T29] audit: type=1800 audit(1786230921.827:1150): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=32000 res=0 errno=0 [ 791.282100][ T29] audit: type=1800 audit(1786230921.965:1151): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16205 res=0 errno=0 [ 791.371904][ T5726] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 791.555763][ T5726] usb 5-1: Using ep0 maxpacket: 32 [ 791.612753][T16812] No source specified [ 792.005198][ T5726] usb 5-1: config 0 interface 0 has no altsetting 0 [ 792.028328][ T5726] usb 5-1: New USB device found, idVendor=1199, idProduct=9005, bcdDevice=c5.b6 [ 792.047595][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.066780][ T5726] usb 5-1: Product: syz [ 792.074826][ T5726] usb 5-1: Manufacturer: syz [ 792.084076][ T5726] usb 5-1: SerialNumber: syz [ 792.145536][ T29] audit: type=1800 audit(1786230922.750:1152): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255287 res=0 errno=0 [ 792.170389][ T5726] usb 5-1: config 0 descriptor?? [ 792.207024][ T29] audit: type=1800 audit(1786230922.768:1153): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=255319 res=0 errno=0 [ 792.253078][ T29] audit: type=1800 audit(1786230922.787:1154): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=255294 res=0 errno=0 [ 792.287320][ T29] audit: type=1800 audit(1786230922.787:1155): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=255295 res=0 errno=0 [ 792.423131][ T5726] usb 5-1: USB disconnect, device number 36 [ 792.436577][ T29] audit: type=1800 audit(1786230923.018:1156): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=255316 res=0 errno=0 [ 792.539917][ T29] audit: type=1800 audit(1786230923.018:1157): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=255317 res=0 errno=0 [ 792.629253][ T29] audit: type=1800 audit(1786230923.018:1158): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=255296 res=0 errno=0 [ 793.840508][T16827] netlink: 'syz.4.3138': attribute type 4 has an invalid length. [ 793.900451][T16829] fuse: Bad value for 'fd' [ 794.208723][T16836] FAULT_INJECTION: forcing a failure. [ 794.208723][T16836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.255605][T16836] CPU: 0 UID: 0 PID: 16836 Comm: syz.9.3140 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.255635][T16836] Tainted: [L]=SOFTLOCKUP [ 794.255641][T16836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 794.255650][T16836] Call Trace: [ 794.255656][T16836] [ 794.255663][T16836] dump_stack_lvl+0x100/0x190 [ 794.255694][T16836] should_fail_ex.cold+0x5/0xa [ 794.255714][T16836] _copy_to_user+0x32/0xd0 [ 794.255738][T16836] simple_read_from_buffer+0xcb/0x170 [ 794.255758][T16836] proc_fail_nth_read+0x1af/0x230 [ 794.255788][T16836] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 794.255818][T16836] ? rw_verify_area+0xce/0x6d0 [ 794.255843][T16836] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 794.255871][T16836] vfs_read+0x1e4/0xb40 [ 794.255902][T16836] ? __pfx_vfs_read+0x10/0x10 [ 794.255926][T16836] ? __fget_files+0x215/0x3d0 [ 794.255951][T16836] ? __fget_files+0x21f/0x3d0 [ 794.255973][T16836] ksys_read+0x12a/0x250 [ 794.255987][T16836] ? __pfx_ksys_read+0x10/0x10 [ 794.256007][T16836] do_syscall_64+0x115/0x870 [ 794.256026][T16836] ? clear_bhb_loop+0x70/0xc0 [ 794.256046][T16836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.256061][T16836] RIP: 0033:0x7fac1a55e90e [ 794.256076][T16836] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 794.256090][T16836] RSP: 002b:00007fac1b399fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 794.256113][T16836] RAX: ffffffffffffffda RBX: 00007fac1b39a6c0 RCX: 00007fac1a55e90e [ 794.256123][T16836] RDX: 000000000000000f RSI: 00007fac1b39a0a0 RDI: 0000000000000005 [ 794.256133][T16836] RBP: 00007fac1b39a090 R08: 0000000000000000 R09: 0000000000000000 [ 794.256142][T16836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.256152][T16836] R13: 00007fac1a826128 R14: 00007fac1a826090 R15: 00007ffe4b690e88 [ 794.256174][T16836] [ 794.690707][T16845] gadgetfs: bound to dummy_udc driver [ 795.520372][T14611] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 795.540566][ C0] gadgetfs: connected [ 795.557723][T14611] gadgetfs: disconnected [ 795.971081][T16858] device-mapper: ioctl: name not supplied when creating device [ 796.294602][T16867] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3151'. [ 796.376336][T16872] FAULT_INJECTION: forcing a failure. [ 796.376336][T16872] name failslab, interval 1, probability 0, space 0, times 0 [ 796.443758][T16872] CPU: 0 UID: 0 PID: 16872 Comm: syz.6.3153 Tainted: G L syzkaller #0 PREEMPT(full) [ 796.443778][T16872] Tainted: [L]=SOFTLOCKUP [ 796.443783][T16872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 796.443790][T16872] Call Trace: [ 796.443794][T16872] [ 796.443798][T16872] dump_stack_lvl+0x100/0x190 [ 796.443817][T16872] should_fail_ex.cold+0x5/0xa [ 796.443829][T16872] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 796.443848][T16872] should_failslab+0xc2/0x120 [ 796.443864][T16872] kmem_cache_alloc_noprof+0x91/0x6a0 [ 796.443878][T16872] ? skb_clone+0x190/0x400 [ 796.443894][T16872] skb_clone+0x190/0x400 [ 796.443908][T16872] netlink_deliver_tap+0xaed/0xcc0 [ 796.443929][T16872] netlink_unicast+0x62b/0x850 [ 796.443943][T16872] ? __pfx_netlink_unicast+0x10/0x10 [ 796.443958][T16872] netlink_sendmsg+0x8b0/0xda0 [ 796.443972][T16872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.443985][T16872] ? selinux_socket_sendmsg+0x198/0x2f0 [ 796.444004][T16872] ____sys_sendmsg+0xa4d/0xbe0 [ 796.444020][T16872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.444033][T16872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 796.444056][T16872] ___sys_sendmsg+0x190/0x1e0 [ 796.444067][T16872] ? __pfx____sys_sendmsg+0x10/0x10 [ 796.444077][T16872] ? __lock_acquire+0x49f/0x1a40 [ 796.444092][T16872] ? get_pid_task+0x106/0x250 [ 796.444117][T16872] __sys_sendmsg+0x160/0x210 [ 796.444131][T16872] ? __pfx___sys_sendmsg+0x10/0x10 [ 796.444152][T16872] do_syscall_64+0x115/0x870 [ 796.444168][T16872] ? clear_bhb_loop+0x70/0xc0 [ 796.444182][T16872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.444193][T16872] RIP: 0033:0x7fb1ec79e0d9 [ 796.444203][T16872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.444213][T16872] RSP: 002b:00007fb1ea9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 796.444224][T16872] RAX: ffffffffffffffda RBX: 00007fb1eca25fa0 RCX: 00007fb1ec79e0d9 [ 796.444231][T16872] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 796.444238][T16872] RBP: 00007fb1ea9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 796.444244][T16872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.444250][T16872] R13: 00007fb1eca26038 R14: 00007fb1eca25fa0 R15: 00007ffd5a2f9b88 [ 796.444264][T16872] [ 796.871711][T16878] loop6: detected capacity change from 0 to 1 [ 796.891710][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 796.891728][ T29] audit: type=1800 audit(1786230927.144:1237): pid=16875 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3155" name="in_ports" dev="configfs" ino=59631 res=0 errno=0 [ 796.923855][ T29] audit: type=1800 audit(1786230927.144:1238): pid=16875 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3155" name="out_ports" dev="configfs" ino=59632 res=0 errno=0 [ 796.923956][T16878] Dev loop6: unable to read RDB block 1 [ 796.959698][ T29] audit: type=1800 audit(1786230927.144:1239): pid=16875 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3155" name="UDC" dev="configfs" ino=59633 res=0 errno=0 [ 796.984645][T16878] loop6: unable to read partition table [ 797.006558][T16878] loop6: partition table beyond EOD, truncated [ 797.042406][ T29] audit: type=1800 audit(1786230927.246:1240): pid=16881 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3154" name="fscaps" dev="sysfs" ino=8 res=0 errno=0 [ 797.064712][T16878] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 797.680224][ T29] audit: type=1800 audit(1786230927.311:1241): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15959 res=0 errno=0 [ 797.810159][ T29] audit: type=1800 audit(1786230927.338:1242): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255546 res=0 errno=0 [ 797.885568][ T29] audit: type=1800 audit(1786230928.058:1243): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15959 res=0 errno=0 [ 797.991414][T16894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3160'. [ 798.010155][ T29] audit: type=1800 audit(1786230928.178:1244): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16205 res=0 errno=0 [ 798.045485][T16894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3160'. [ 798.139232][ T29] audit: type=1800 audit(1786230928.215:1245): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255559 res=0 errno=0 [ 798.163214][ T5803] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 798.176258][T16894] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3160'. [ 798.236344][ T29] audit: type=1800 audit(1786230928.225:1246): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255580 res=0 errno=0 [ 798.347791][ T5803] usb 9-1: device descriptor read/64, error -71 [ 798.533344][T16909] fuse: Bad value for 'fd' [ 798.566811][T16875] configfs-gadget.g1 gadget.0: HOST MAC 8e:3c:84:d0:2f:76 [ 798.612675][T16875] configfs-gadget.g1 gadget.0: MAC ca:35:43:b7:c8:21 [ 798.656450][ T5803] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 799.095202][T16918] overlayfs: failed to resolve './file0': -2 [ 799.562187][ T5803] usb 9-1: device descriptor read/64, error -71 [ 799.604533][ T5706] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 800.068536][T16923] tipc: Started in network mode [ 800.084596][T16923] tipc: Node identity 1000001, cluster identity 4369 [ 800.099890][T16923] tipc: Node number set to 16777217 [ 800.106166][T16923] tipc: Cannot configure node identity twice [ 800.114935][T16923] tipc: Enabling of bearer rejected, failed to enable media [ 800.124131][ T5803] usb usb9-port1: attempt power cycle [ 800.167928][ T5706] usb 1-1: Dual-Role OTG device on HNP port [ 800.181406][ T5706] usb 1-1: New USB device found, idVendor=1234, idProduct=0000, bcdDevice= 7.02 [ 800.194342][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.214397][ C0] configfs-gadget.g1 gadget.0: Using interface 3 [ 800.230997][ T5706] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 800.257506][T16923] bond1: entered promiscuous mode [ 800.297009][T14610] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 800.359457][T16923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 800.488032][T14610] usb 5-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 800.527172][ T5803] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 800.551647][T14610] usb 5-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 800.565324][T14610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.582090][T14610] usb 5-1: Product: syz [ 800.586415][ T5803] usb 9-1: device descriptor read/8, error -71 [ 800.614200][T14610] usb 5-1: Manufacturer: syz [ 800.631954][T14610] usb 5-1: SerialNumber: syz [ 800.674555][ T5706] cdc_eem 1-1:1.2 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, ae:25:fa:5d:59:19 [ 800.769460][ T5706] usblp 1-1:1.3: usblp0: USB Bidirectional printer dev 22 if 3 alt 0 proto 2 vid 0x1234 pid 0x0000 [ 800.863119][ T5803] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 801.587647][T14610] scsi host1: uas [ 801.592622][ T5803] usb 9-1: device descriptor read/8, error -71 [ 801.670440][ T3291] scsi 1:0:0:0: tag#24 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 801.680490][ T3291] scsi 1:0:0:0: tag#24 CDB: Inquiry 12 00 00 00 24 00 [ 801.691975][T14610] usb 5-1: USB disconnect, device number 37 [ 801.737562][ T5803] usb usb9-port1: unable to enumerate USB device [ 802.225909][T16963] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3172'. [ 802.521162][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 802.521179][ T29] audit: type=1400 audit(1786230932.342:1310): avc: denied { write } for pid=16953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 802.687525][ T29] audit: type=1800 audit(1786230932.499:1311): pid=16977 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.3175" name="new_device" dev="sysfs" ino=24854 res=0 errno=0 [ 802.750650][ T29] audit: type=1400 audit(1786230932.536:1312): avc: denied { write } for pid=16978 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.014313][ T29] audit: type=1800 audit(1786230932.794:1313): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=256885 res=0 errno=0 [ 803.069406][T16968] netdevsim0 speed is unknown, defaulting to 1000 [ 803.813372][ T29] audit: type=1800 audit(1786230933.533:1314): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16205 res=0 errno=0 [ 803.880092][ T29] audit: type=1800 audit(1786230933.588:1315): pid=16984 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.3175" name="new_device" dev="sysfs" ino=24854 res=0 errno=0 [ 804.163129][ T29] audit: type=1800 audit(1786230933.856:1316): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16205 res=0 errno=0 [ 804.315215][ T29] audit: type=1800 audit(1786230933.976:1317): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16205 res=0 errno=0 [ 804.470286][ T29] audit: type=1800 audit(1786230934.142:1318): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16205 res=0 errno=0 [ 804.699872][ T29] audit: type=1400 audit(1786230934.336:1319): avc: denied { write } for pid=16995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.735245][T17011] nfs: Bad value for 'mountport' [ 804.815300][ T3291] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.320041][T17025] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3177'. [ 805.422481][T17031] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3184'. [ 806.210442][T17057] overlayfs: failed to resolve './file0': -2 [ 808.109867][T14610] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 808.270420][T17080] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3194'. [ 808.710102][T14610] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.751192][T14610] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 808.757932][T17091] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3198'. [ 808.812642][T14610] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 808.838198][ T29] kauditd_printk_skb: 1701 callbacks suppressed [ 808.838213][ T29] audit: type=1400 audit(1786230938.177:3021): avc: denied { write } for pid=17064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 808.993991][ T29] audit: type=1800 audit(1786230938.315:3022): pid=17095 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.3199" name="pm_print_times" dev="sysfs" ino=1416 res=0 errno=0 [ 809.036810][T14610] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 809.098462][T14610] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 809.202420][T14610] usb 9-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 809.249931][T14610] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.275653][T14610] usb 9-1: Product: syz [ 809.304016][T14610] usb 9-1: Manufacturer: syz [ 809.335258][ T29] audit: type=1400 audit(1786230938.638:3023): avc: denied { write } for pid=17100 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 809.358677][T14610] usb 9-1: SerialNumber: syz [ 809.564841][T14610] usb 9-1: config 0 descriptor?? [ 809.589875][ T29] audit: type=1800 audit(1786230938.869:3024): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=260912 res=0 errno=0 [ 810.019904][T17072] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 810.027515][ T29] audit: type=1800 audit(1786230938.897:3025): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=260944 res=0 errno=0 [ 810.067397][T17109] sch_tbf: peakrate 9002274071266264692 is lower than or equals to rate 14180566848366662437 ! [ 810.106684][ T29] audit: type=1800 audit(1786230938.906:3026): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=260919 res=0 errno=0 [ 810.222611][ T29] audit: type=1800 audit(1786230939.266:3027): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=260920 res=0 errno=0 [ 810.394969][T14610] rc_core: IR keymap rc-xbox-dvd not found [ 810.441531][T14610] Registered IR keymap rc-empty [ 810.477032][T14610] rc rc0: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 810.601169][T14610] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input10 [ 810.659847][ T29] audit: type=1800 audit(1786230939.848:3028): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=261149 res=0 errno=0 [ 810.923559][ T29] audit: type=1800 audit(1786230940.097:3029): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=260941 res=0 errno=0 [ 810.974144][T17137] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3210'. [ 811.048882][T14610] usb 9-1: USB disconnect, device number 12 [ 811.052716][ T29] audit: type=1800 audit(1786230940.097:3030): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=260942 res=0 errno=0 [ 811.054965][ C0] xbox_remote 9-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 812.115908][T17149] fuse: Bad value for 'fd' [ 813.484244][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3221'. [ 813.833886][T17184] xt_hashlimit: size too large, truncated to 1048576 [ 814.352837][T14610] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 814.587080][T14610] usb 5-1: device descriptor read/64, error -71 [ 814.713940][T17194] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3224'. [ 814.890435][T14610] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 814.973152][T17200] FAULT_INJECTION: forcing a failure. [ 814.973152][T17200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.030199][T17200] CPU: 0 UID: 0 PID: 17200 Comm: syz.1.3225 Tainted: G L syzkaller #0 PREEMPT(full) [ 815.030230][T17200] Tainted: [L]=SOFTLOCKUP [ 815.030235][T17200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 815.030244][T17200] Call Trace: [ 815.030250][T17200] [ 815.030257][T17200] dump_stack_lvl+0x100/0x190 [ 815.030285][T17200] should_fail_ex.cold+0x5/0xa [ 815.030309][T17200] _copy_to_user+0x32/0xd0 [ 815.030336][T17200] simple_read_from_buffer+0xcb/0x170 [ 815.030358][T17200] proc_fail_nth_read+0x1af/0x230 [ 815.030389][T17200] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 815.030420][T17200] ? rw_verify_area+0xce/0x6d0 [ 815.030447][T17200] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 815.030476][T17200] vfs_read+0x1e4/0xb40 [ 815.030505][T17200] ? __pfx_vfs_read+0x10/0x10 [ 815.030531][T17200] ? __fget_files+0x215/0x3d0 [ 815.030558][T17200] ? __fget_files+0x21f/0x3d0 [ 815.030585][T17200] ksys_read+0x12a/0x250 [ 815.030602][T17200] ? __pfx_ksys_read+0x10/0x10 [ 815.030626][T17200] do_syscall_64+0x115/0x870 [ 815.030650][T17200] ? clear_bhb_loop+0x70/0xc0 [ 815.030669][T17200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.030687][T17200] RIP: 0033:0x7ff0f7b5e90e [ 815.030701][T17200] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 815.030718][T17200] RSP: 002b:00007ff0f89c9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 815.030735][T17200] RAX: ffffffffffffffda RBX: 00007ff0f89ca6c0 RCX: 00007ff0f7b5e90e [ 815.030747][T17200] RDX: 000000000000000f RSI: 00007ff0f89ca0a0 RDI: 0000000000000003 [ 815.030758][T17200] RBP: 00007ff0f89ca090 R08: 0000000000000000 R09: 0000000000000000 [ 815.030769][T17200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.030780][T17200] R13: 00007ff0f7e26038 R14: 00007ff0f7e25fa0 R15: 00007fffdd65f4f8 [ 815.030805][T17200] [ 815.348907][T14610] usb 5-1: device descriptor read/64, error -71 [ 815.472798][T14610] usb usb5-port1: attempt power cycle [ 815.726720][T17214] fuse: Bad value for 'fd' [ 816.087757][T14610] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 816.123544][T14610] usb 5-1: device descriptor read/8, error -71 [ 816.447435][T14610] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 816.496253][T14610] usb 5-1: device descriptor read/8, error -71 [ 816.668831][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 816.668848][ T29] audit: type=1400 audit(1786230945.405:3054): avc: denied { accept } for pid=17220 comm="syz.9.3231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 817.082935][T14610] usb usb5-port1: unable to enumerate USB device [ 817.237045][ T29] audit: type=1800 audit(1786230945.922:3055): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16205 res=0 errno=0 [ 818.328932][T17237] overlayfs: failed to resolve './file0': -2 [ 819.556874][T17236] overlayfs: failed to resolve './file0': -2 [ 820.177774][T17248] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 820.186366][T17248] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 820.194812][T17248] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 820.329468][T14610] IPVS: starting estimator thread 0... [ 820.457457][T17251] IPVS: using max 83 ests per chain, 199200 per kthread [ 820.469907][ T29] audit: type=1800 audit(1786230948.895:3056): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16205 res=0 errno=0 [ 821.581009][ T29] audit: type=1800 audit(1786230949.938:3057): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16205 res=0 errno=0 [ 822.582817][T17274] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3236'. [ 822.665621][T17275] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3242'. [ 822.689127][T17275] bond0: entered promiscuous mode [ 822.694250][T17275] bond_slave_0: entered promiscuous mode [ 822.700637][T17275] bond_slave_1: entered promiscuous mode [ 823.136282][T17275] bond0: left promiscuous mode [ 823.141183][T17275] bond_slave_0: left promiscuous mode [ 823.146885][T17275] bond_slave_1: left promiscuous mode [ 823.194693][T17279] fuse: Bad value for 'fd' [ 823.317016][T17284] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3243'. [ 823.388658][ T29] audit: type=1800 audit(1786230951.600:3058): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16205 res=0 errno=0 [ 824.266710][ T29] audit: type=1800 audit(1786230952.412:3059): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16205 res=0 errno=0 [ 825.298448][T17302] overlayfs: failed to resolve './file0': -2 [ 826.661834][ T983] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 826.942714][T17324] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3255'. [ 826.968296][T17324] bond0: entered promiscuous mode [ 826.973373][T17324] bond_slave_0: entered promiscuous mode [ 826.979632][T17324] bond_slave_1: entered promiscuous mode [ 827.420075][ T983] usb 5-1: Using ep0 maxpacket: 16 [ 827.439373][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.451832][T17324] bond0: left promiscuous mode [ 827.457041][T17324] bond_slave_0: left promiscuous mode [ 827.462714][T17324] bond_slave_1: left promiscuous mode [ 827.487146][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.527043][ T983] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 827.573111][ T983] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 827.668753][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.719690][ T983] usb 5-1: config 0 descriptor?? [ 827.730022][ T29] audit: type=1800 audit(1786230955.607:3060): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=261606 res=0 errno=0 [ 827.763394][ T983] usb 5-1: can't set config #0, error -71 [ 827.785582][ T983] usb 5-1: USB disconnect, device number 42 [ 827.839397][ T29] audit: type=1800 audit(1786230955.644:3061): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=261635 res=0 errno=0 [ 827.922954][T14611] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 827.982360][ T29] audit: type=1800 audit(1786230955.708:3062): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=261613 res=0 errno=0 [ 828.084671][ T29] audit: type=1400 audit(1786230955.911:3063): avc: denied { write } for pid=17305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 828.345030][T14611] usb 9-1: Using ep0 maxpacket: 8 [ 828.435635][T14611] usb 9-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 828.473344][ T29] audit: type=1400 audit(1786230956.308:3064): avc: denied { write } for pid=17333 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 828.477052][T14611] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.571442][T14611] usb 9-1: Product: syz [ 828.603397][T14611] usb 9-1: Manufacturer: syz [ 828.646695][T14611] usb 9-1: SerialNumber: syz [ 828.672920][T14611] usb 9-1: config 0 descriptor?? [ 828.691329][ T29] audit: type=1800 audit(1786230956.502:3065): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=261673 res=0 errno=0 [ 829.449095][T17345] vivid-003: ================= START STATUS ================= [ 829.456888][T17345] vivid-003: Radio HW Seek Mode: Bounded [ 829.463139][T17345] vivid-003: Radio Programmable HW Seek: false [ 829.469600][T17345] vivid-003: RDS Rx I/O Mode: Block I/O [ 829.475195][T17345] vivid-003: Generate RBDS Instead of RDS: false [ 829.481717][T17345] vivid-003: RDS Reception: true [ 829.487876][T17345] vivid-003: RDS Program Type: 0 inactive [ 829.494532][T17345] vivid-003: RDS PS Name: inactive [ 829.499822][T17345] vivid-003: RDS Radio Text: inactive [ 829.505430][T17345] vivid-003: RDS Traffic Announcement: false inactive [ 829.512343][T17345] vivid-003: RDS Traffic Program: false inactive [ 829.518754][T17345] vivid-003: RDS Music: false inactive [ 829.524431][T17345] vivid-003: ================== END STATUS ================== [ 830.075604][ T5606] Bluetooth: hci5: command 0x0406 tx timeout [ 830.124464][ T29] audit: type=1800 audit(1786230956.567:3066): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=261705 res=0 errno=0 [ 830.196739][ T29] audit: type=1800 audit(1786230956.567:3067): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=261680 res=0 errno=0 [ 830.264321][ T29] audit: type=1800 audit(1786230956.567:3068): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=261681 res=0 errno=0 [ 830.495723][T17351] No such timeout policy "syz1" [ 830.509417][ T29] audit: type=1400 audit(1786230958.182:3069): avc: denied { getopt } for pid=17350 comm="syz.9.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 830.527987][T17355] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 831.167396][ T29] audit: type=1400 audit(1786230958.782:3070): avc: denied { write } for pid=17347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.293852][ T29] audit: type=1400 audit(1786230959.826:3071): avc: denied { write } for pid=17370 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.585913][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 832.634987][T17376] device-mapper: ioctl: name not supplied when creating device [ 833.917983][T17388] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3253'. [ 833.942616][T17386] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 834.243903][T17398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3261'. [ 834.336107][T17399] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3261'. [ 834.609142][ T29] audit: type=1400 audit(1786230961.967:3072): avc: denied { write } for pid=17381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 834.692380][T17410] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17410 comm=syz.6.3275 [ 834.748572][T17411] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17411 comm=syz.4.3274 [ 835.611645][ T29] audit: type=1400 audit(1786230962.891:3073): avc: denied { write } for pid=17418 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 835.634161][T14611] usb 9-1: can't set config #0, error -110 [ 835.694436][T14002] usb 9-1: USB disconnect, device number 13 [ 835.704845][ T29] audit: type=1800 audit(1786230962.937:3074): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=261702 res=0 errno=0 [ 835.877331][ T29] audit: type=1800 audit(1786230962.937:3075): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=261703 res=0 errno=0 [ 835.994141][ T29] audit: type=1800 audit(1786230962.937:3076): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=261682 res=0 errno=0 [ 836.819464][T17416] netdevsim0 speed is unknown, defaulting to 1000 [ 836.848577][ T29] audit: type=1800 audit(1786230962.946:3077): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=261704 res=0 errno=0 [ 836.879171][T17427] /dev/nullb0: Can't open blockdev [ 836.881287][ T29] audit: type=1400 audit(1786230963.205:3078): avc: denied { write } for pid=17422 comm="syz.4.3278" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 837.417780][ T29] audit: type=1800 audit(1786230964.552:3079): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16205 res=0 errno=0 [ 837.940361][T17449] kernel read not supported for file /policy (pid: 17449 comm: syz.8.3282) [ 837.957906][ T29] audit: type=1800 audit(1786230965.051:3080): pid=17449 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3282" name="policy" dev="selinuxfs" ino=20 res=0 errno=0 [ 838.292298][ T29] audit: type=1400 audit(1786230965.356:3081): avc: denied { write } for pid=17428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 838.666222][ T29] audit: type=1400 audit(1786230965.706:3082): avc: denied { write } for pid=17454 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 838.862309][T17445] /dev/nullb0: Can't lookup blockdev [ 839.151342][T17450] Bluetooth: hci0: command tx timeout [ 840.424506][T17478] dummy_hcd dummy_hcd.0: remove, state 1 [ 840.455175][T17450] Bluetooth: hci1: command 0x0406 tx timeout [ 840.490478][T17478] usb usb1: USB disconnect, device number 1 [ 840.529116][ T48] tipc: Subscription rejected, illegal request [ 840.607022][T17478] usb 1-1: USB disconnect, device number 22 [ 840.653195][T17485] netlink: 'syz.6.3287': attribute type 1 has an invalid length. [ 840.786696][T14611] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 841.645377][ T5606] Bluetooth: hci0: command 0x0406 tx timeout [ 841.673040][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 841.673057][ T29] audit: type=1400 audit(1786230968.485:3089): avc: denied { write } for pid=17494 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.799390][T14611] usb 9-1: config 0 has no interfaces? [ 841.842769][T14611] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 841.904591][T14611] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.941370][T17485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 841.961933][ T29] audit: type=1800 audit(1786230968.753:3090): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=265975 res=0 errno=0 [ 841.989028][ T5706] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 841.992363][ T29] audit: type=1800 audit(1786230968.781:3091): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=266004 res=0 errno=0 [ 842.029838][ T29] audit: type=1800 audit(1786230968.781:3092): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=265982 res=0 errno=0 [ 842.052146][ T29] audit: type=1800 audit(1786230968.781:3093): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=265983 res=0 errno=0 [ 842.057976][T14611] usb 9-1: config 0 descriptor?? [ 842.107494][ T29] audit: type=1800 audit(1786230968.781:3094): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=265984 res=0 errno=0 [ 842.179010][T17492] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 842.196366][ T5706] usb 5-1: Using ep0 maxpacket: 16 [ 842.226131][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 842.274165][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 842.326669][ T5706] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 842.349894][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.390423][ T5706] usb 5-1: Product: syz [ 842.414628][ T5706] usb 5-1: Manufacturer: syz [ 842.430904][ T5706] usb 5-1: SerialNumber: syz [ 842.506790][ T5706] usb 5-1: config 0 descriptor?? [ 842.520483][ T29] audit: type=1800 audit(1786230969.261:3095): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=266054 res=0 errno=0 [ 842.576827][ T5706] hub 5-1:0.0: bad descriptor, ignoring hub [ 842.618533][ T29] audit: type=1800 audit(1786230969.270:3096): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=266086 res=0 errno=0 [ 842.642462][ T5706] hub 5-1:0.0: probe with driver hub failed with error -5 [ 842.727671][ T29] audit: type=1800 audit(1786230969.270:3097): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=266061 res=0 errno=0 [ 842.803151][ T29] audit: type=1800 audit(1786230969.270:3098): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=266062 res=0 errno=0 [ 843.026485][T17522] netlink: 'syz.1.3295': attribute type 10 has an invalid length. [ 843.180263][ T5706] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 843.367659][T17527] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3295'. [ 844.315401][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 844.317823][T17478] cdc_eem 1-1:1.2 usb1: unregister 'cdc_eem' usb-dummy_hcd.0-1, CDC EEM Device [ 844.365999][ T5706] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 844.453168][ T5803] usb 9-1: USB disconnect, device number 14 [ 844.482425][ T5706] usb 5-1: USB disconnect, device number 43 [ 844.538815][T17522] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 844.593312][T16215] udevd[16215]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 844.709580][T17522] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 845.774519][T17527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.818730][T17527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.845277][ T5706] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 845.861473][T17527] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 845.913068][T17527] bond0 (unregistering): Released all slaves [ 846.021635][ T5706] usb 5-1: not running at top speed; connect to a high speed hub [ 846.063095][ T5706] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 846.103558][ T5706] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 846.143257][ T5706] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 846.188869][ T5706] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 846.212325][ T5706] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 846.248464][ T5706] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 846.289718][ T5706] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 846.324060][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.348876][ T5706] usb 5-1: Product: syz [ 846.362401][ T5706] usb 5-1: Manufacturer: syz [ 846.390268][ T5706] usb 5-1: SerialNumber: syz [ 846.412918][T17540] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 846.464487][T17540] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 846.483318][T17540] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 846.506748][T17540] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 846.656729][T17540] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 846.947866][T17550] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3298'. [ 846.949701][ T5706] usb 5-1: USB2VGA dongle found at address 44 [ 846.985169][ T5706] usb 5-1: Allocated 8 output buffers [ 846.990655][ T5706] usb 5-1: Not attached to USB 2.0 hub, deferring init [ 847.162299][T17561] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3303'. [ 847.206670][T17478] usblp0: removed [ 847.250796][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 847.250812][ T29] audit: type=1400 audit(1786230973.637:3117): avc: denied { write } for pid=17545 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 847.440288][ T983] usb 5-1: USB disconnect, device number 44 [ 847.473792][ T29] audit: type=1800 audit(1786230973.849:3118): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16205 res=0 errno=0 [ 847.545583][T17478] dummy_hcd dummy_hcd.0: stopped [ 847.568521][T17478] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 847.576366][ T29] audit: type=1400 audit(1786230973.904:3119): avc: denied { write } for pid=17565 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 847.580495][T17566] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3304'. [ 847.629483][T17566] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.636901][T17566] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.853652][ T29] audit: type=1800 audit(1786230975.114:3120): pid=17576 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3304" name="hibernate_compression_threads" dev="sysfs" ino=1440 res=0 errno=0 [ 848.886226][T17578] xt_hashlimit: size too large, truncated to 1048576 [ 848.920164][ T29] audit: type=1800 audit(1786230975.178:3121): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26802 res=0 errno=0 [ 848.987512][T17581] device-mapper: ioctl: name not supplied when creating device [ 849.144855][T15167] tipc: Subscription rejected, illegal request [ 849.241051][T17598] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3310'. [ 849.287194][T17598] ip_tables: iptables: counters copy to user failed while replacing table [ 849.410773][T14611] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 849.469535][ T29] audit: type=1400 audit(1786230975.686:3122): avc: denied { write } for pid=17579 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.594572][ T29] audit: type=1400 audit(1786230975.806:3123): avc: denied { write } for pid=17617 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.647278][T14611] usb 5-1: config 0 has no interfaces? [ 849.662094][T14611] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 849.688865][T17613] netdevsim0 speed is unknown, defaulting to 1000 [ 849.703975][ T29] audit: type=1400 audit(1786230975.899:3124): avc: denied { mount } for pid=17602 comm="syz.9.3311" name="/" dev="pstore" ino=561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 849.704602][T14611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.788978][T14611] usb 5-1: config 0 descriptor?? [ 849.797053][ T29] audit: type=1400 audit(1786230975.963:3125): avc: denied { search } for pid=17618 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.860646][ T29] audit: type=1400 audit(1786230975.963:3126): avc: denied { search } for pid=17618 comm="rm" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.029289][T17626] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3315'. [ 851.365586][T17648] fuse: Bad value for 'fd' [ 851.897255][T14002] usb 5-1: USB disconnect, device number 45 [ 852.275211][T17663] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3320'. [ 852.706637][T17674] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3322'. [ 853.168117][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 853.168133][ T29] audit: type=1400 audit(1786230979.102:3142): avc: denied { write } for pid=17673 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 853.247149][ T29] audit: type=1800 audit(1786230979.167:3143): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3317" name="pm_print_times" dev="sysfs" ino=1416 res=0 errno=0 [ 853.422870][ T29] audit: type=1400 audit(1786230979.213:3144): avc: denied { create } for pid=17682 comm="syz.9.3325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 853.461134][T17686] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 854.619001][T17693] ALSA: mixer_oss: invalid OSS volume '' [ 854.625440][T17693] ALSA: mixer_oss: invalid OSS volume '' [ 854.794454][T17705] fuse: Bad value for 'fd' [ 855.876904][T17710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17710 comm=syz.9.3332 [ 855.926280][ T29] audit: type=1326 audit(1786230981.641:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17709 comm="syz.9.3332" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac1a59e0d9 code=0x0 [ 855.995143][ T29] audit: type=1400 audit(1786230981.706:3146): avc: denied { connect } for pid=17714 comm="syz.4.3333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 856.035605][T15178] tipc: Subscription rejected, illegal request [ 856.177162][ T29] audit: type=1800 audit(1786230981.872:3147): pid=17724 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3336" name="pm_print_times" dev="sysfs" ino=1416 res=0 errno=0 [ 856.298230][T14611] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 856.444691][ T29] audit: type=1400 audit(1786230982.121:3148): avc: denied { write } for pid=17697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.552660][T17733] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3337'. [ 856.919662][T14611] usb 5-1: config 0 has no interfaces? [ 856.935188][T14611] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 856.962723][T14611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.999799][ T29] audit: type=1800 audit(1786230982.638:3149): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=270581 res=0 errno=0 [ 857.034182][T14611] usb 5-1: config 0 descriptor?? [ 857.052125][ T29] audit: type=1800 audit(1786230982.638:3150): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=270610 res=0 errno=0 [ 857.106645][ T29] audit: type=1800 audit(1786230982.647:3151): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=270588 res=0 errno=0 [ 858.005348][ T5606] Bluetooth: hci4: command 0x0406 tx timeout [ 858.101394][T17738] syz_tun: entered allmulticast mode [ 858.273770][T17736] syz_tun: left allmulticast mode [ 858.343854][T14001] usb 5-1: USB disconnect, device number 46 [ 858.659425][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 858.659440][ T29] audit: type=1400 audit(1786230984.161:3156): avc: denied { write } for pid=17761 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 859.019237][T17767] netdevsim0 speed is unknown, defaulting to 1000 [ 859.900363][T14611] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 860.680430][T14611] usb 5-1: Using ep0 maxpacket: 32 [ 860.697070][T14611] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 860.726351][T14611] usb 5-1: config 0 has no interface number 0 [ 860.736100][ T29] audit: type=1400 audit(1786230986.072:3157): avc: denied { write } for pid=17766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 860.780370][T14611] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 860.835519][T14611] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 860.851368][ T29] audit: type=1400 audit(1786230986.174:3158): avc: denied { write } for pid=17793 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 860.878696][T14611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.912823][T14611] usb 5-1: Product: syz [ 860.920101][T14611] usb 5-1: Manufacturer: syz [ 860.943116][T14611] usb 5-1: SerialNumber: syz [ 860.973802][ T29] audit: type=1800 audit(1786230986.303:3159): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=273517 res=0 errno=0 [ 861.008159][T14611] usb 5-1: config 0 descriptor?? [ 861.028228][T17772] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 861.074596][ T29] audit: type=1800 audit(1786230986.303:3160): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=273549 res=0 errno=0 [ 861.089408][T17195] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 861.109449][T17195] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 861.117864][T17195] CPU: 1 UID: 101 PID: 17195 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) [ 861.128605][T17195] Tainted: [L]=SOFTLOCKUP [ 861.132912][T17195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 861.142948][T17195] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 861.148136][T17195] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 7b 02 3b fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 861.167727][T17195] RSP: 0018:ffffc9000e90f300 EFLAGS: 00010206 [ 861.173773][T17195] RAX: dffffc0000000000 RBX: ffff88807c365710 RCX: ffffffff87cf61ef [ 861.181725][T17195] RDX: 000000000000000c RSI: ffffffff87cf6265 RDI: 0000000000000060 [ 861.189674][T17195] RBP: ffff888027508248 R08: 0000000000000005 R09: 0000000000000005 [ 861.197627][T17195] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888027508c00 [ 861.205577][T17195] R13: ffff88807c365700 R14: ffff888027508240 R15: 0000000000000000 [ 861.213527][T17195] FS: 00007f2b24685780(0000) GS:ffff888123eec000(0000) knlGS:0000000000000000 [ 861.222440][T17195] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 861.229012][T17195] CR2: 00007f2b24874480 CR3: 0000000073774000 CR4: 00000000003526f0 [ 861.236966][T17195] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 861.244914][T17195] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 861.252953][T17195] Call Trace: [ 861.256212][T17195] [ 861.259124][T17195] usb_ep_queue+0xfa/0x3c0 [ 861.263537][T17195] eth_start_xmit+0x684/0x1390 [ 861.268286][T17195] dev_hard_start_xmit+0x121/0x760 [ 861.273379][T17195] sch_direct_xmit+0x1b2/0xc70 [ 861.278140][T17195] ? lock_acquire+0x1b9/0x370 [ 861.282805][T17195] ? __pfx_sch_direct_xmit+0x10/0x10 [ 861.288080][T17195] ? do_raw_spin_lock+0x1c0/0x260 [ 861.293097][T17195] __dev_queue_xmit+0x27ac/0x4970 [ 861.298115][T17195] ? find_held_lock+0x2b/0x80 [ 861.302777][T17195] ? __might_fault+0xc5/0x140 [ 861.307434][T17195] ? __pfx___dev_queue_xmit+0x10/0x10 [ 861.312805][T17195] ? __pfx__copy_from_iter+0x10/0x10 [ 861.318081][T17195] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 861.323526][T17195] ? packet_parse_headers+0x5ab/0x810 [ 861.328893][T17195] ? packet_parse_headers+0x5b7/0x810 [ 861.334248][T17195] ? packet_parse_headers+0x2b4/0x810 [ 861.339600][T17195] ? __pfx_packet_parse_headers+0x10/0x10 [ 861.345304][T17195] packet_xmit+0x243/0x310 [ 861.349721][T17195] packet_sendmsg+0x3081/0x4eb0 [ 861.354597][T17195] ? sock_has_perm+0x25a/0x2f0 [ 861.359342][T17195] ? __pfx_sock_has_perm+0x10/0x10 [ 861.364437][T17195] ? __pfx_packet_sendmsg+0x10/0x10 [ 861.369632][T17195] ? selinux_socket_sendmsg+0x198/0x2f0 [ 861.375214][T17195] sock_write_iter+0x53a/0x5b0 [ 861.379966][T17195] ? __pfx_packet_sendmsg+0x10/0x10 [ 861.385148][T17195] ? __pfx_sock_write_iter+0x10/0x10 [ 861.390423][T17195] ? __pfx___file_has_perm+0x10/0x10 [ 861.395699][T17195] do_iter_readv_writev+0x6f7/0x930 [ 861.400890][T17195] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 861.406596][T17195] ? selinux_file_permission+0x8f/0x6d0 [ 861.412130][T17195] ? bpf_lsm_file_permission+0x9/0x10 [ 861.417503][T17195] ? security_file_permission+0x76/0x210 [ 861.423231][T17195] ? rw_verify_area+0xce/0x6d0 [ 861.427991][T17195] vfs_writev+0x360/0xdd0 [ 861.432318][T17195] ? __pfx_vfs_writev+0x10/0x10 [ 861.437163][T17195] ? rw_verify_area+0xce/0x6d0 [ 861.441917][T17195] ? __pfx_sock_read_iter+0x10/0x10 [ 861.447164][T17195] ? do_writev+0x28a/0x340 [ 861.451565][T17195] do_writev+0x28a/0x340 [ 861.455803][T17195] ? __pfx_do_writev+0x10/0x10 [ 861.460558][T17195] do_syscall_64+0x115/0x870 [ 861.465135][T17195] ? clear_bhb_loop+0x70/0xc0 [ 861.469792][T17195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.475668][T17195] RIP: 0033:0x7f2b2470f407 [ 861.480065][T17195] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 861.499651][T17195] RSP: 002b:00007ffc3369a300 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 861.508044][T17195] RAX: ffffffffffffffda RBX: 00007f2b24685780 RCX: 00007f2b2470f407 [ 861.515994][T17195] RDX: 0000000000000002 RSI: 00007ffc3369a360 RDI: 0000000000000003 [ 861.523941][T17195] RBP: 0000000000000188 R08: 0000000000000000 R09: 0000000000000000 [ 861.531989][T17195] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc3369a3a0 [ 861.539941][T17195] R13: 0000563b343e2b40 R14: 00007ffc3369a3f0 R15: 00007ffc336aa5c0 [ 861.547917][T17195] [ 861.550927][T17195] Modules linked in: [ 861.554898][T17195] ---[ end trace 0000000000000000 ]--- [ 861.560353][T17195] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 861.565566][T17195] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 7b 02 3b fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 861.585203][T17195] RSP: 0018:ffffc9000e90f300 EFLAGS: 00010206 [ 861.591263][T17195] RAX: dffffc0000000000 RBX: ffff88807c365710 RCX: ffffffff87cf61ef [ 861.599243][T17195] RDX: 000000000000000c RSI: ffffffff87cf6265 RDI: 0000000000000060 [ 861.607367][T17195] RBP: ffff888027508248 R08: 0000000000000005 R09: 0000000000000005 [ 861.615342][T17195] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888027508c00 [ 861.623315][T17195] R13: ffff88807c365700 R14: ffff888027508240 R15: 0000000000000000 [ 861.631287][T17195] FS: 00007f2b24685780(0000) GS:ffff888123eec000(0000) knlGS:0000000000000000 [ 861.640213][T17195] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 861.646775][T17195] CR2: 00007f2b24874480 CR3: 0000000073774000 CR4: 00000000003526f0 [ 861.654749][T17195] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 861.662731][T17195] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 861.670706][T17195] Kernel panic - not syncing: Fatal exception in interrupt [ 861.678144][T17195] Kernel Offset: disabled [ 861.682446][T17195] Rebooting in 86400 seconds..