last executing test programs: 14m38.860067505s ago: executing program 32 (id=271): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a}}, 0x20}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000200)={'bond0\x00', @ifru_names='tunl0\x00'}) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2717, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0dac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000340), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x10) sendmsg$can_bcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) socketpair(0x18, 0x0, 0x2, &(0x7f0000000440)) sendmsg$can_bcm(r5, 0x0, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x10, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x901b, 0x8181}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40008c4}, 0x20044854) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xf400}, 0x90) sendmsg$nl_route(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYBLOB="41040000015001001800128008000100677470000c00028008000100", @ANYRES32=r7], 0x40}}, 0x0) close(0x4) 9m20.419916283s ago: executing program 33 (id=992): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x88400) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000080)=0xa9a5) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') fchdir(r3) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume', 0x161a82, 0x149) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) read$FUSE(0xffffffffffffffff, &(0x7f0000000ac0)={0x2020}, 0x2020) (async) sendfile(r4, r4, 0x0, 0xb) (async) r5 = socket$pppoe(0x18, 0x1, 0x0) getpeername(r5, 0x0, 0x0) r6 = syz_io_uring_setup(0xf05, &(0x7f0000000100)={0x0, 0x5962, 0x10000, 0x402, 0x51}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000400)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00'}) (async) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0x7, &(0x7f00000004c0)=0xb) (async) r10 = getpgrp(0x0) sched_setaffinity(r10, 0x8, &(0x7f0000000280)=0x5) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f00000002c0)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcd949000) 9m16.234695074s ago: executing program 2 (id=1035): openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x0) mount(&(0x7f0000000500)=@filename='./dev/sda1\x00', &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580)='ext4\x00', 0x8416, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000740)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) 9m15.877556328s ago: executing program 2 (id=1036): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) pivot_root(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000440)='./cgroup\x00') read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000019580)=0x7) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setns(0xc9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000195c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000019600)={0x0, 0x0, &(0x7f0000019640)={&(0x7f0000019680)={0x14, r5, 0x309, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000196c0)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xff, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000040000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 9m13.967932398s ago: executing program 2 (id=1041): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a}}, 0x20}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000200)={'bond0\x00', @ifru_names='tunl0\x00'}) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2717, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0dac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x10) sendmsg$can_bcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) socketpair(0x18, 0x0, 0x2, &(0x7f0000000440)) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x10, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x901b, 0x8181}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40008c4}, 0x20044854) 9m13.436734968s ago: executing program 2 (id=1044): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000018c0)={@fallback=r0, r0, 0x2f}, 0x20) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000001900), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001940)={@cgroup=r0, r1, 0x2f, 0x8, 0x4, @void, @value=r0}, 0x20) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 9m11.336513947s ago: executing program 2 (id=1051): setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) write(r0, &(0x7f0000000100)='27', 0x2) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) (async) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x0) (async) getpid() (async) syz_pidfd_open(r2, 0x0) (async) setns(r3, 0x24020000) (async) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 9m10.698969901s ago: executing program 2 (id=1052): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e80)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000fc0)=ANY=[@ANYBLOB="6105044b0302000c0406"], 0x1a) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, &(0x7f00000003c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000000680)='dummy_udc.0\n', 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'ip6gre0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x3, 0x4, 0x0, @mcast1, @remote, 0xa8, 0x8000, 0x10000, 0xf}}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x6, &(0x7f00000002c0)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x92}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}, @generic={0x8, 0x7, 0x5, 0x80, 0x80}, @generic={0x5c, 0x6, 0x8, 0x7, 0x8}], &(0x7f0000000ac0)='GPL\x00', 0x92cd, 0x2d, &(0x7f0000000b00)=""/45, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x9, 0xffffffff}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000b80)=[0xffffffffffffffff], &(0x7f0000000bc0)=[{0x0, 0x5, 0x9, 0x4}, {0x2, 0x3, 0x4c, 0x4}, {0x3, 0x2, 0xd, 0x2}, {0x4, 0x2, 0x0, 0x1}, {0x3, 0x1, 0xc, 0xb}, {0x4, 0x2, 0x8, 0x4}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xc4f69b58485fe8f8, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="182a0000", @ANYRES32=r5, @ANYBLOB="00000000070000008523fcff080000001f64300004000000b708000000c811ffff7b82f0ff00000000bfa10000000000f807338ce45db849010000f8ffffffbfa4000000000000b702000008000000182300"/106, @ANYRES32=r6, @ANYBLOB="ffff000000000000a80500000800000085000000a50000001869000029000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009306500001000000"], &(0x7f0000000840)='syzkaller\x00', 0x3, 0xc7, &(0x7f0000000880)=""/199, 0x41000, 0x1, '\x00', r8, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r9, 0x5, 0x0, &(0x7f0000000d00)=[{0x1, 0x4, 0x2, 0x6}, {0x3, 0x1, 0x3, 0xb}, {0x0, 0x4, 0x8, 0xb}, {0x4, 0x5, 0xe, 0x8}, {0x4, 0x3, 0x10}], 0x10, 0x7}, 0x94) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) pipe2(&(0x7f0000000440)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000005c0)='./file0\x00') r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x42, 0x0) splice(r10, 0x0, r12, 0x0, 0x1, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "a3fc00", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x9, '\x00', @mcast1}}}}}}, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000080)=0x14) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xcc08e, 0x0) socket$kcm(0xa, 0x1, 0x0) 8m55.535064118s ago: executing program 34 (id=1052): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e80)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000fc0)=ANY=[@ANYBLOB="6105044b0302000c0406"], 0x1a) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, &(0x7f00000003c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000000680)='dummy_udc.0\n', 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'ip6gre0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x3, 0x4, 0x0, @mcast1, @remote, 0xa8, 0x8000, 0x10000, 0xf}}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x6, &(0x7f00000002c0)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x92}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}, @generic={0x8, 0x7, 0x5, 0x80, 0x80}, @generic={0x5c, 0x6, 0x8, 0x7, 0x8}], &(0x7f0000000ac0)='GPL\x00', 0x92cd, 0x2d, &(0x7f0000000b00)=""/45, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x9, 0xffffffff}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000b80)=[0xffffffffffffffff], &(0x7f0000000bc0)=[{0x0, 0x5, 0x9, 0x4}, {0x2, 0x3, 0x4c, 0x4}, {0x3, 0x2, 0xd, 0x2}, {0x4, 0x2, 0x0, 0x1}, {0x3, 0x1, 0xc, 0xb}, {0x4, 0x2, 0x8, 0x4}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xc4f69b58485fe8f8, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="182a0000", @ANYRES32=r5, @ANYBLOB="00000000070000008523fcff080000001f64300004000000b708000000c811ffff7b82f0ff00000000bfa10000000000f807338ce45db849010000f8ffffffbfa4000000000000b702000008000000182300"/106, @ANYRES32=r6, @ANYBLOB="ffff000000000000a80500000800000085000000a50000001869000029000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009306500001000000"], &(0x7f0000000840)='syzkaller\x00', 0x3, 0xc7, &(0x7f0000000880)=""/199, 0x41000, 0x1, '\x00', r8, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r9, 0x5, 0x0, &(0x7f0000000d00)=[{0x1, 0x4, 0x2, 0x6}, {0x3, 0x1, 0x3, 0xb}, {0x0, 0x4, 0x8, 0xb}, {0x4, 0x5, 0xe, 0x8}, {0x4, 0x3, 0x10}], 0x10, 0x7}, 0x94) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) pipe2(&(0x7f0000000440)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000005c0)='./file0\x00') r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x42, 0x0) splice(r10, 0x0, r12, 0x0, 0x1, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "a3fc00", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x9, '\x00', @mcast1}}}}}}, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000080)=0x14) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xcc08e, 0x0) socket$kcm(0xa, 0x1, 0x0) 6m49.258197436s ago: executing program 7 (id=1363): mount(0x0, 0x0, 0x0, 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x4a102) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x4844c1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x0, 0x10, &(0x7f0000000780), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000840)="b90103600033f0000000000081001fffffe100004000638877fbac141411e0000601be3e7d2a", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r0, &(0x7f0000000200)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./config\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') 6m46.57920635s ago: executing program 7 (id=1367): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0x8000, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x80, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x6, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x7, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x80, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)={0x80, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000340), 0x1010, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="746172676515193533493a353a623a532e316500a9a6c62bd511668dee69b47319b376957a68a60bbd55e7205b799639c6e5fabd8512453e0c7de5757844cbe1eac1cbcf13d8291e232a1ab21a0c61c08be747ccc4f503c1bf348e02bfee60134aa9ea077b6517"], 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r6 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r8, 0x89e3, &(0x7f0000000140)={0x65, 0x7, 0xa, 0xc, 0x800, 0x8100}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6m46.009815459s ago: executing program 7 (id=1368): prlimit64(0x0, 0x4, &(0x7f0000000140)={0x7, 0xcfa7}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x8001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1a000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) set_mempolicy(0x1, 0x0, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x87a, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000005c0)=0x400000b) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0xcc60d6846159e6de, &(0x7f00000001c0)=0x9, 0xffffffffffffff59) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="23000000d584000002000000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={&(0x7f0000000400), 0x0, 0x0, 0x0, 0x3, r6}, 0x38) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x31}], 0x1}}], 0x49, 0x20008000) socket$inet(0x2, 0x3, 0x2f) socketpair(0x1, 0x4, 0xd, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) prlimit64(0x0, 0x0, &(0x7f0000000480)={0x9, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000500)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) 6m36.363173844s ago: executing program 7 (id=1386): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_GS(0x1e, r1, &(0x7f0000000340), 0x1004) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(0xffffffffffffffff, 0x6f2d, 0x1d6000) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000400)={0x30, 0x5, 0x0, {0x0, 0x3, 0xfffffffffffffffc, 0x80}}, 0x30) socket$kcm(0x11, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000440)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{0x7ff, 0x40000001107e}]}) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./dev\x00', &(0x7f00000005c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000640)=@filename='./dev/sda1\x00', &(0x7f0000000680)='./mnt\x00', &(0x7f00000006c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000700)='./file0\x00') r4 = open(&(0x7f0000000780)='./bus\x00', 0x4c27e, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000007c0)={0x0, r4, 0x4, 0x9, 0x4, 0x7}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000740), 0x80042, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x8000, 0x6, 0x11001, 0x1}, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0182101, &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f00000004c0)='fd/3\x00') 6m35.315897349s ago: executing program 7 (id=1391): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x4000074) prlimit64(0x0, 0x3, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b40), 0xca341, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r3, 0x0, 0x0, 0x0}) getrandom(&(0x7f00000005c0)=""/286, 0xffffff9a, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x29) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r2, 0x3b8c, &(0x7f0000000380)={0x30, r4, 0x1, 0x0, 0x7, 0x9, 0x58, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f00000001c0)=[@cr4={0x1, 0x40002}], 0x1) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x103482) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b80)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000bc0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r8, 0x4c08, 0x591) r10 = fsopen(&(0x7f0000000300)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r11 = fsmount(r10, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x180) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r12, &(0x7f0000000580)='7', 0x1) unshare(0x62040200) syz_clone3(&(0x7f0000000440)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r11}}, 0x58) 6m33.147280942s ago: executing program 7 (id=1397): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000100)='7', 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0x1a7) syz_open_dev$cec(&(0x7f0000000440), 0xffffffffffffffff, 0x4ae60) syz_io_uring_setup(0xf00, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1, 0x80000ff}, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000940)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) sendmsg(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000a00)}], 0x3}, 0x40000c4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000a40)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000a80)=[@text64={0x40, &(0x7f0000000ac0)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000b40)={[0x100000000005, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x1000, 0x7, 0x8, 0x10009c2, 0xd, 0x0, 0xc, 0xb, 0x8000, 0xffffffffffffffff], 0x100000, 0xc2302}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000c00)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x5, 0xfffffff8, 0x0, 0xff, 0xff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000c40)={0x10200, 0x6, 0xffff1000, 0x2000, &(0x7f0000ff5000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000800)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r1, 0x695b, 0x192ed, 0x0, 0x0, 0x0) mount(&(0x7f0000000680)=@filename='./dev/sda1\x00', &(0x7f00000006c0)='./mnt\x00', &(0x7f0000000700)='ext4\x00', 0x40, 0x0) r8 = open$dir(&(0x7f0000000740)='./mnt\x00', 0x0, 0x2) renameat2(r8, &(0x7f0000000780)='./mnt\x00', r8, &(0x7f00000007c0)='./dev\x00', 0x2) 6m17.21596832s ago: executing program 35 (id=1397): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000100)='7', 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0x1a7) syz_open_dev$cec(&(0x7f0000000440), 0xffffffffffffffff, 0x4ae60) syz_io_uring_setup(0xf00, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1, 0x80000ff}, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000940)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) sendmsg(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000a00)}], 0x3}, 0x40000c4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000a40)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000a80)=[@text64={0x40, &(0x7f0000000ac0)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000b40)={[0x100000000005, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x1000, 0x7, 0x8, 0x10009c2, 0xd, 0x0, 0xc, 0xb, 0x8000, 0xffffffffffffffff], 0x100000, 0xc2302}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000c00)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x5, 0xfffffff8, 0x0, 0xff, 0xff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000c40)={0x10200, 0x6, 0xffff1000, 0x2000, &(0x7f0000ff5000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000800)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r1, 0x695b, 0x192ed, 0x0, 0x0, 0x0) mount(&(0x7f0000000680)=@filename='./dev/sda1\x00', &(0x7f00000006c0)='./mnt\x00', &(0x7f0000000700)='ext4\x00', 0x40, 0x0) r8 = open$dir(&(0x7f0000000740)='./mnt\x00', 0x0, 0x2) renameat2(r8, &(0x7f0000000780)='./mnt\x00', r8, &(0x7f00000007c0)='./dev\x00', 0x2) 5m18.601589845s ago: executing program 0 (id=1575): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000100400200006000000aa0b000500000000013f9f4131f2f6ba39b80149618688330716a0aad92f8001dad4e8129f84", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0xa7c, r0}, 0x38) signalfd4(r0, &(0x7f00000000c0)={[0x3ff]}, 0x8, 0x80000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f00000001c0)={'wlan0\x00', @random="7cf1e97c9e4f"}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000900)={0x3, 0x0, &(0x7f0000000940)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020e00022e0000002cbd7040fcdbdf25020007"], 0x170}, 0x1, 0x7}, 0x0) 5m16.808264758s ago: executing program 0 (id=1584): unshare(0x22020600) 5m15.198491906s ago: executing program 0 (id=1587): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10022, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1, 0x1}, 0x6) r1 = add_key$user(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000003c0)={r1, r2, r1}, &(0x7f0000000400)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x20042, 0x0) add_key$user(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000500)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket(0x24, 0x6, 0xfffffffb) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x2008, @dev={0xfe, 0x80, '\x00', 0x3}}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r8, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r8, 0x1) splice(r8, 0x0, r7, 0x0, 0x406f413, 0x0) 5m14.831889248s ago: executing program 0 (id=1592): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f24090202000000", @ANYRES16], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r1) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) r2 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x36, 0x30, 0x39, 0x37, 0x30, 0x64, 0x66, 0x36, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000a80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$keyring(&(0x7f0000000b00), &(0x7f0000000b40)={'syz', 0x3}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000b80), &(0x7f0000000bc0)={'fscrypt:', @desc2}, &(0x7f0000000c00)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000c80), &(0x7f0000000cc0)={'fscrypt:', @auto=[0x66, 0x31, 0x30, 0x30, 0x38, 0x30, 0x30, 0x64, 0x30, 0x66, 0x49b9b7e4dbfa7a3a, 0x36, 0x34, 0x30, 0x30, 0x63]}, &(0x7f0000000d00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000d80), &(0x7f0000000dc0)={'fscrypt:', @auto=[0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000e00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000e80), &(0x7f0000000ec0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x35, 0x30, 0x30, 0x35]}, &(0x7f0000000f00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000f80), &(0x7f0000000fc0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000001000)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x34}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000001180), &(0x7f00000011c0)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x33, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000001200)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1f}, 0x48, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) close(0xffffffffffffffff) 5m10.596176098s ago: executing program 0 (id=1606): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='sysfs\x00', 0x1214040, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x22, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_a, @initial, @initial, {0x0, 0x75e}, "", @value={0x6, 0x1, 0x1, 0x1, 0x6}, @value=@ver_80211n={0x0, 0x9, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f0000000640)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000680)='./file0\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000007c0), 0x200, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000800)=0xe) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000840)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0xa880, 0x97) getdents64(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0x80000, 0x0) getdents64(r6, 0x0, 0x500) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = open$dir(&(0x7f0000000900)='./dev/ttyUSB0\x00', 0x24000, 0x4) r9 = syz_open_procfs(0x0, &(0x7f0000000980)='net/rpc\x00') r10 = openat(r9, &(0x7f00000009c0)='auth.unix.ip/channel\x00', 0x2, 0x0) close(r10) openat(r8, &(0x7f0000000940)='\x00', 0x50800, 0x0) r11 = add_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000340)) keyctl$KEYCTL_WATCH_KEY(0x20, r11, r0, 0x0) mount(0x0, &(0x7f00000004c0)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000540)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) syz_usb_connect$uac3(0x2, 0x12b, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0xccd, 0x13, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x119, 0x3, 0x1, 0x4, 0x80, 0x5, {0x8, 0xb, 0x1, 0x1, 0x1, 0x20, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x58, 0x3}, [@mixer_unit={0x8, 0x24, 0x5, 0x1, 0x0, "9a5b31"}, @source_unit={0xc, 0x24, 0xb, 0x90, 0x0, 0x2, 0xfe, 0x3}, @mixer_unit={0x9, 0x24, 0x5, 0x3, 0x4, "63181d47"}, @processing_unit={0x1d, 0x24, 0x9, 0x4, 0x3, [0x2, 0x0, 0x2, 0x0, 0x3, 0x1]}, @input_terminal={0x14, 0x24, 0x2, 0x4, 0x403, 0x2, 0xfc, 0x8001, 0x6, 0x100, 0x7, 0x6e}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0x6, 0x1d, "ca3c"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x219c, 0x7, 0x4, 0x8}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0x7, 0x1, 'gw', "d59e"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xc3, 0x5, 0x0, 0x8, 0x80}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x81, 0x81, {0xa, 0x25, 0x25, 0xfffffff7, 0xa, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x7, 0xf, 0x4}, @as_header={0x17, 0x24, 0x1, 0x6, 0xdb9, 0xa, 0x0, 0x10, 0x5, 0x8, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x40, 0x7, 0x2, 0xb}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3c, 0x27c, 0xd}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0x9c, 0x1, {0xa, 0x25, 0x25, 0xd19, 0xd1, 0x4}}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x2, 0x0, 0xf, 0x40, 0x6}, 0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="050f32000307100208af100f1c100a06c400000011f0992f09000000ff00003f0000ff000000076000000a10030208000b731ea97433f61e9b1bc882e0f2c4576cd62fff37c84556847ec93d7ad8eec5b4f0f650a2236dc2a76217ba4e2134a5cd957177e534b862bd4169"]}) 5m9.17666097s ago: executing program 0 (id=1612): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a}}, 0x20}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000200)={'bond0\x00', @ifru_names='tunl0\x00'}) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2717, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x7, 0x18, 0x0, 0x0, @binary="0dac0f"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000340), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x10) sendmsg$can_bcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) socketpair(0x18, 0x0, 0x2, &(0x7f0000000440)) sendmsg$can_bcm(r5, 0x0, 0x40000) sendmsg$nl_route(r3, 0x0, 0x20044854) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xf400}, 0x90) sendmsg$nl_route(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYBLOB="41040000015001001800128008000100677470000c00028008000100", @ANYRES32], 0x40}}, 0x0) close(0x4) 4m53.986916975s ago: executing program 36 (id=1612): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a}}, 0x20}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000200)={'bond0\x00', @ifru_names='tunl0\x00'}) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2717, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x7, 0x18, 0x0, 0x0, @binary="0dac0f"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000340), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x10) sendmsg$can_bcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) socketpair(0x18, 0x0, 0x2, &(0x7f0000000440)) sendmsg$can_bcm(r5, 0x0, 0x40000) sendmsg$nl_route(r3, 0x0, 0x20044854) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xf400}, 0x90) sendmsg$nl_route(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYBLOB="41040000015001001800128008000100677470000c00028008000100", @ANYRES32], 0x40}}, 0x0) close(0x4) 2m46.259033514s ago: executing program 1 (id=1933): r0 = fsopen(&(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='j\x95\'\x8aC\x16\xca\\', &(0x7f00000001c0)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x01\x00\x00\xf7\xff\x1e\x10\xff\xff2', &(0x7f00000002c0)='%F*.\x00\x00\x00\x00\x00\xb8\xcc[\xdet\xa1\x9a\xacg\xb0\xd0K?U\x02\xf6^\xda\b|\xc5,\xa0v2\xb4\x10\xda\xd8E\x8b\xc7\a?\x02\xfb\xa0\x93\xa3\xc23;M\x1a\xa1\xec\x05T$\x17q\x9a\x97\xb6\xe7*\xc0\xdb\xc8\xf1\x90Q\xb3\xef\xa3o|\x0e\xae\xf3\x17\x88\x00\xb2\xbcC\xb2;U/\x9cAf\x98\xb7\x17\x82\xff\xd6\'%\xf1p\x95Y\xe1\'\x94\xf3kB\xa1\xd6\x96\xdd.H\xb30\xc5\xb7\x172^i\xc7\x14@q\xe4W\xbd\xe2Z\a\xf3W\x8c1\xa6n\xcb\xd3\xb44vU\x93\xa9\xd7\x03\xae\x83\np4\xf1@p\xc6\xea\xc0,F\xf8\f\xe4\xa9\x8es\x03k\xa74\x13\x94\v\x06`\x87\xfc\x9eY\xa1Z1\xbevz\x83\xe4\x88g\xd8\xcb\x95i\x1c\x8bx\t\x81\xf1&\xd9\x10\xf8\x959\x94\x1f\x9ft-V9\x9d`\x01\xad\x87\xa9\xe7\x9a\xab\xd1B&\x83@\xf7w%\xf7\xe6\xe88\xd3\xad\x12\nt\xc1\xf0\xac\xcf\xb6E-\x14\xb4', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00\xdf\xdbKA\xb6+7\xe1\xb0@\x10\x00\xfdb\x9f\x91\xd5\x056\xc9\xb2S/\xdfX\xed\x8fG\xba\xd3<\xf9Q\x92\xdb\xc5&\x8b\xb1p>.\x1aV\xc5\xce\xfa\xf1Q\x1f\xccb\xc33\xbd\xb3\xf2h-o\xe1\xfb\x7f\xadT\x16zp\xa6\x1d\x97\xbc`\x82`j\x0f\x9a\xf6\xe1\bS\x17H\x16Q\x88\xed\xa5\xd0\xe7Y\x9d\xe0\xb8\xd7\x95\xdbf|\r\x00'/118, &(0x7f0000000900)='(!\xefh.(\\-\x02\x00h\xbb\xfby\x00\xc9 bE\x10\x18\xf9\x06\xf8\xb2\xc9\xcc\xf3\x1cy\x8d\xae\xa1?\x05\xc7bw\x828\xfem\xf5\xe4\xf4\tW5\b\x8e\xad\xb0\xee@\xab\xb7\xb2r\x12z4\xb6\xfe\xb3\xea\x11R\xd2\x9d~\x11\xe7\x05|\xbd\xba\x10{\xfb\xacS\x10\xae\x7fr\xf4aG!x\xcc*\x98\xbau\x9c\xf1\xf7\xecPV\xd9\xf8\xf8\xc2\xdc\xaf\xb8\xaa6\xadk\xd0\x9d\xd1\x82\xf2\x18\x83\'\xab\xa3~J\x14^A\x8f,C\xcf\xe0f<\xbc\xe1jP B\x83\xe0v\x8a\xd8\x04\xb4<\xfe/\xd8\xc3Q@W\x95\x05\xdd\b\x18N\xaa\xee\x9a\x1a\xa9\xff\xfd\xbc%\xee\x9c=N\x89\xd7b\xfe{\x04\xcf_>\xbc<\x03\xb32\xb7*P\x0e\xfc\xeaN\x9a\xf5\x05^\xb6Y\xff\xc6\xaa*\xbbC\x05;\xc2\xf5\xef}\t\xab\xd6\xd9\xa5\xc1\x18\xe5e\x9a\x1d|\xfei\xdc\xc4\xd8\x10\xae\x06H\x91b8D\x044\xd9/\tE\x97\xf4\xda\rl\x87\xe1N\x1d\xce\x16%\x13I\a-\x1c\x81\x9c\x83:\xd8\x91\xaa\xf2Y\xd0\x8e\xb6\x88\xed\xe3\xf0\f\x80r?\xb3\xc3|:b\xbe\xf0\x90\xf8\xac:awX\xb0\xb1\xb5,\\\xd7J\xf8\\7\xf2i\xa3\b\xa5h5\x81\xb6\xb1\xbc\xce\x12\xd7\xaa5\xf6\x01\xd6\x83\xaf;@\xf5\x93\x9fTd\x1c\xe6\xb6\x11p\x189\xbe\\\x8a\xab\x9e+G\x84\xfe\xbe0\xd5B\xe0:\x7f\xa2\xed\xf4&ImS\x16\xfc\x90\x12\xae`\x03\x8e\x10d\x17\xa9\x9bR\xbdU\xa3T\x17\xd9\xafjX\x91\xa9*\x96)R\xcc@\xfd\xa1\xb0i\x1b\xaah\xaa\xce\x99\xaa\xc2\xfc\xfawx\x8e\xb0\xc2I\xc5-\xe7D\xeb:!l\xef/gn\x8eS\xcb\x15\xe2RI1\\CW\xccG\xfb\x9d2p\xe5\xabi0k\x14b`\xcf\x89\xcc\xac\xdc\n\xdbt\x13\x0fB\xa6\xd6\x0fS\xb3\xba4\xeaQ\xc4*$\xa3\x03={\xd4\x81V\x91\t\xccTC\xd4\xbd\x9a\xec^\xbe\xf2\xc7\x10\xa4\x15\xa2\x05[\xff!\xc8\xbe', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000b00)='\xe6\xdf\xf4\x89\b,\xcd\x9dP\x9e\xd7\xe3/\xd2=#\xc8\xb7\x98\f\x87\xcf\x00\x00\x00\x00\x00\x00\x00\x9a\x8e\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000b40)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff}) r4 = syz_ublk_setup_io_uring(0x22, &(0x7f00000002c0)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000640)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, 0x0) connect$unix(r3, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000200)='270', 0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f00000005c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000780)='.\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="00089d8f94"], &(0x7f0000000800), 0x400) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f0000000600)=[{r9, 0x4060}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000240)={0x101, 0x9, 0x401, 0xa, 0x9, "0869a99e7cc954afaa4db8ab08320c5cf77d68"}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2m25.870290042s ago: executing program 37 (id=1949): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) timerfd_create(0x5, 0x800) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000004c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x1}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rseq(0x0, 0x0, 0x0, 0x0) sync() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000180000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], 0x0, 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000980)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x9, 0x2, 0xc56c}, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) connect$inet(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000080)={0x0, 0x970, 0x1f480, 0x2, 0x325}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r4 = syz_ublk_setup_io_uring(0x22, &(0x7f00000002c0)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000640)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, 0x0) connect$unix(r3, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000200)='270', 0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f00000005c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000780)='.\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="00089d8f94"], &(0x7f0000000800), 0x400) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f0000000600)=[{r9, 0x4060}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000240)={0x101, 0x9, 0x401, 0xa, 0x9, "0869a99e7cc954afaa4db8ab08320c5cf77d68"}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1m35.702086588s ago: executing program 9 (id=2121): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r2, 0x409, 0xc) fcntl$addseals(r2, 0x409, 0x9) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = semget$private(0x0, 0x4000000009, 0x42a) semop(r5, &(0x7f0000000080)=[{0x1, 0x103, 0x3800}, {0x4, 0xd}, {0x1, 0x7fff, 0x400}], 0x3) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) write$nci(r0, &(0x7f0000000240)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, r6, 0x1, 0x70bd27, 0x25dfdb7d, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c004}, 0x4000000) write$nci(r0, &(0x7f0000000380)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) 1m29.841405351s ago: executing program 9 (id=2127): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0x8000, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x80, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x6, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x7, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x80, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)={0x80, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000340), 0x1010, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="746172676515193533493a353a623a532e316500a9a6c62bd511668dee69b47319b376957a68a60bbd55e7205b799639c6e5fabd8512453e0c7de5757844cbe1eac1cbcf13d8291e232a1ab21a0c61c08be747ccc4f503c1bf348e02bfee60134aa9ea077b65175f"], 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r6 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r8, 0x89e3, &(0x7f0000000140)={0x65, 0x7, 0xa, 0xc, 0x800, 0x8100}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m29.441428564s ago: executing program 9 (id=2129): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000ac0)='27', 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000b00)=@nat={'nat\x00', 0x19, 0xfffff9, 0x90, [0x2000000000c0, 0x0, 0x0, 0x2000000000f0, 0x200000000460], 0x0, 0x0, &(0x7f0000000b80)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x108) (fail_nth: 1) 1m29.007831739s ago: executing program 9 (id=2130): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000200025a726bd7000fddbdf250a0000cdff0000010200010008000600000000000c000c00e5"], 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000000904000012070103000905010200000000000905820200"], 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 1m26.307195691s ago: executing program 9 (id=2137): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000700)='./file1\x00', 0x2000775) write$binfmt_elf64(r0, 0x0, 0x78) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x1, 0x143182) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000500)="94f067c1c39ada28ac0179f524413e88287b277793b396a67caaaebedd82df1eab2e046e93003b5dc15c0c20c2b434ac3f551f0001000000000000000000baccc2b67efc0300004b4a3609c4f8f633e12854a6b82a6923bcc37cba3cd1ad3a00b4532f8ab659aacd79ef084a8c6eb92cefe58cf9a3e5287c1e00edd140aeddb0c4ba7cc7765e3da280841a31d2cc0176cfad", 0x92}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r3, &(0x7f0000000070)="4c0000adde675b2e200930d5e242", 0xe) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x20, r4, 0x7f, 0x1) ptrace$cont(0x20, r4, 0x9, 0x9) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x200) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b31d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de603000000e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000003c0)="febaa7a03b2495659e6f85ca17b3334d1fddccedc0e51457e4dff9f781c818eefe336a93fd7dea040bf1b1c968382ba10693a48879d3752cb68cb18c9ad682d5fab56aad44ce5311", 0x48) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x4040001) 1m26.115089321s ago: executing program 9 (id=2139): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44895}, 0xc000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000480)={0x2, 0x6, {0x0}, {}, 0x400000000098, 0x47}) r5 = getpgrp(r4) sched_setaffinity(r5, 0x8, &(0x7f00000004c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r8, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r7, 0x47, &(0x7f0000019580)=0x7) mkdir(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) syz_open_dev$loop(&(0x7f00000195c0), 0x275d, 0xa8182) memfd_create(0x0, 0x1) 1m10.362747341s ago: executing program 38 (id=2139): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44895}, 0xc000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000480)={0x2, 0x6, {0x0}, {}, 0x400000000098, 0x47}) r5 = getpgrp(r4) sched_setaffinity(r5, 0x8, &(0x7f00000004c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r8, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r7, 0x47, &(0x7f0000019580)=0x7) mkdir(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) syz_open_dev$loop(&(0x7f00000195c0), 0x275d, 0xa8182) memfd_create(0x0, 0x1) 20.859040761s ago: executing program 8 (id=2302): r0 = memfd_create(&(0x7f0000000740)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\x84\xf72 \xd1\xcb}Ky\xa5\x9bx&\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7', 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0009"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) fchmod(r0, 0x184) 20.663831548s ago: executing program 8 (id=2304): r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x40042, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x101402, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x2000}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x400006f5e, 0x3f3c42) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000005) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000480)='cramfs\x00', 0x4418, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000900)={&(0x7f00002e6000/0x2000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000921000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000280)="204c1a97c4be53e32248720ea71ca507d7523c5b4c7424459dbf8e82cd5607cfe07bc301debf0ce19862acd4d733751e89f13f4ee9bcdd44bd3c73acaaee3e669c97bf4fae8603d215b81fe733ab67acf1551568f25ed9498d1673acf30259c9d0bdaf5755830446892f15bd77379a314993b61a960dcfeddf21fef7ba", 0x7d, r2}, 0x68) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64=r1], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1fd) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x40140, 0x0) r3 = openat(r0, &(0x7f0000000780)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x4) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc0bc5310, &(0x7f0000000840)={0x18, 0xffffffff, 0x0, 'queue1\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000740)={'dvmrp1\x00', 0x10}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000180)=ANY=[@ANYBLOB="9c00000003abe109dc9e3971fa25d5510000400000bf0000aaf45aa9c58adbda041a93ff000000000900ad0f7072696f0000000018000200034e0b0c82c100"/82], 0x9c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x7}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f00005cb000/0x4000)=nil, 0x4000}, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f00000006c0)='3', 0x4e) socket$inet(0x2, 0x1, 0x0) 17.096524586s ago: executing program 3 (id=2307): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x4047c000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) io_uring_setup(0x7191, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000180)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)='\bj', 0x2}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000800)='dummy0\x00', 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000840)={0x6, {{0x2, 0x4e20, @loopback}}}, 0x88) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, 0x800, 0x6, 0xffff1891, 0x0, 0xb23be0fbe66397b6, 0x9, 0x1b}, 0x9c) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r7, &(0x7f00000016c0)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x47, &(0x7f000001a6c0)=0x7) openat$dir(0xffffffffffffff9c, &(0x7f000001a740)='./file0\x00', 0x40, 0x16f) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x90) execve(&(0x7f000001a780)='./file0\x00', 0x0, &(0x7f000001a7c0)={[], 0xf8}) mkdirat(0xffffffffffffff9c, &(0x7f000001a800)='./file0\x00', 0x0) ptrace$setopts(0x4200, r6, 0x2, 0x20) socket$l2tp6(0xa, 0x2, 0x73) 17.030859853s ago: executing program 5 (id=2308): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d24a598fb18f32a412bff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="400572000000a72f03b93ebada60244028f6ccfa055da77c30aa88757509a23e5cb32f860cd4407c2635a28b5fb27d9b9ea7f52c2599154776a2d1931d83fd8c6d426e76b4753065e7a4128d6d7e7a755e1fdd3ef7c493ce55197cea3c04e04bcb7e76661db3dd27f43e436df912ddb88ab3a53914ce502fafc0d3671e501ca871a666d258c3596245dee22c5bbd1398702512bb5f8038ce4f10d4f3307030534100"/174], 0x0, 0x0}) syz_usb_ep_write(r1, 0x81, 0xffffffffffffffac, &(0x7f0000000240)="9001000000000000") r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) 17.003710187s ago: executing program 8 (id=2310): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x10005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x400000000000041, 0x0) syz_open_procfs$userns(r0, &(0x7f0000000280)) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x121602, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000480)=@tipc=@id={0x1e, 0x3, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x220}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000540)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) capset(&(0x7f0000000580)={0x19980330}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0x7, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000340)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0xe0) r5 = openat(0xffffffffffffff9c, 0x0, 0x42000, 0x0) close(r5) setpriority(0x0, r0, 0x6) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000240)='0x0104', 0x3b) close(r6) mkdirat(r6, &(0x7f0000000100)='./file0\x00', 0x1c4) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1c0) 14.987325016s ago: executing program 4 (id=2315): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000) 14.40095785s ago: executing program 3 (id=2316): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000340)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast1}, 0xc) 14.204137969s ago: executing program 4 (id=2317): getpgid(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() prlimit64(0x0, 0xe, &(0x7f000000a900)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f000000a940)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f000000a980)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() openat$dir(0xffffffffffffff9c, &(0x7f000000a9c0)='./file0\x00', 0x10040, 0x70) sched_setscheduler(r1, 0x2, &(0x7f000000aa00)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f000000aa40), 0x0, 0x0) read$msr(r3, &(0x7f000000aa80)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000023a80)=0x80000000000003) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000023ac0), 0x28100, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000023b00)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000023b40)=0x16) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000023b80)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000023bc0)={0x1, 0x0, 0x6, r6, 0x1}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000023c00)={0x0, 0x0, 0x4b, r6, 0x3}, 0xc) sendmsg$netlink(r7, &(0x7f0000023c40)={0x0, 0x0, &(0x7f0000023c80)=[{&(0x7f0000023cc0)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e6"], 0x20}], 0x1}, 0x0) 13.287828224s ago: executing program 5 (id=2318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendfile(r0, r0, 0x0, 0x100) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="997425bd7000ffdbdf25150000004c0001800d0001007564703a73797a3200", @ANYBLOB='vY\\f'], 0x60}, 0x1, 0x0, 0x0, 0x4000804}, 0x2400c000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x9, 0x40, 0x1000}, &(0x7f00000000c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x5c, r5, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x9c, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x3b}}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg1\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vcan0\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6d, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) 13.205896935s ago: executing program 4 (id=2319): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x44f, 0xb324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x22, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r2 = syz_io_uring_setup(0xf08, &(0x7f0000000500)={0x0, 0x2d85, 0x40000, 0x3, 0x800000c3}, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) r6 = socket$inet6(0xa, 0x80000, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x14e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) syz_io_uring_submit(r3, r4, r5, &(0x7f0000001980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000080)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\x99\xe4r\xd8\x98\x00\xff\xf5\x95\xd2q#\x00\x00\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xf2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) pwrite64(r7, 0x0, 0x0, 0x2) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) 13.043095677s ago: executing program 5 (id=2320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sec\x00', &(0x7f0000000180)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)="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", 0x2ba) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/142}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x4, 0xd}, {}, {0x3, 0x3}}}, 0x24}}, 0x40004) 11.739753237s ago: executing program 6 (id=2322): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x76, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@nop, @nop, @mss={0x2, 0x4}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @md5sig={0x13, 0xfffffffffffffe8f, "2b58ea71e70b7ec40843c97fb62cd171"}]}}}}}}}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x1002}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c657230"], 0x3c}}, 0x24040014) write(r2, &(0x7f00000009c0)="ffffffffffff0011223344554305", 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20040100}, 0x20008011) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000540)=[0x0, 0x6, 0x7, 0x2, 0x65df, 0x6, 0x8]) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/devices/0000:00:00.0/power/control\x00', 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) write(r5, &(0x7f0000000500)='on', 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000340)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x7, 0x6, 0x0, 0x0, 0x7, 0xd9, 0xff, 0x2, 0x9, 0x4, 0x0, 0xda, 0xc, 0x401, 0x18, 0x4, {0xfff, 0x7f}, 0xfc, 0x9}}) 10.212090998s ago: executing program 4 (id=2323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x2000, &(0x7f0000af9000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x14) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="2e0f785c7f06660fc7b503000000b9ec0200000f320f300f784e0026660fc7b69edf0000b8010000000f01c1ea53000000be00660f303e0fc75fab"}], 0x0, 0x9, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000001440)=@vmx={0x0, 0x0, 0x2080, {0x26000, 0xdddd1000, {}, 0x0, 0x5}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f3874000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000001a49000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b6e6f1b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"}}) socket$nl_route(0x10, 0x3, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r4, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000002c0), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000300), 0x10106, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000380)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r7, &(0x7f00000003c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000400)='bbr', 0x3) recvfrom$inet(r7, &(0x7f0000000440)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 9.071538099s ago: executing program 4 (id=2324): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x40, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)) r6 = socket$netlink(0x10, 0x3, 0x13) r7 = socket(0x25, 0x1, 0x1000000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122354a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x24040080) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000030428bd7800fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c00000000000008000500", @ANYRES32=r8, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r10, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000010000108fdffff010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b000000000014001a80100002800c00018008001d0001"], 0x3c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000680)) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) clock_getres(0xfffffffffffffff4, 0x0) setgid(0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r12, &(0x7f00000006c0)=[{&(0x7f0000000780)="503bfde51b257f40b3392d504fe4", 0xe}, {&(0x7f00000007c0)="2edca94a4b3fa20071786a24a92319a5b07d268ce0270f9c3f7727c3a46c8208cc34bddc46d7b5c88247af1ac8d809f548d63649fdd97eb9", 0x38}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001a00), 0x400, 0x0) r13 = landlock_create_ruleset(&(0x7f0000001a40)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r13, 0xe) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) syz_emit_vhci(&(0x7f0000001c40)=ANY=[@ANYBLOB="040e05003e20"], 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 7.798736645s ago: executing program 5 (id=2325): syz_io_uring_setup(0xec6, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000780)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) getuid() r3 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) read$msr(r3, &(0x7f0000000940)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019940)=0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000019c00)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000019c80)=@new_dev={0x2, 0xff2, 0x0, 0x0, 0x1000, 0xffffffff, r2, 0x0, 0x39}}}, &(0x7f0000019cc0)) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r6 = gettid() r7 = syz_open_procfs(r6, &(0x7f0000000200)='timers\x00') exit(0xffff) syz_fuse_handle_req(r7, &(0x7f000001a080)="1fe5d707df36ec3bc8c36d0ab3f2f580ef26bfbd08293a33615f98a434aa610e145da3b4bed128f7e6c960c841a43978b2e6e08fdbbe9357eabffb3a7c409b4a01c1f9a7f3a63f9ad3ff19610984f58116f1e36087e4720644131128c2a328db4434ba6b1b47e474e52e8d733178a4d037a9c9f30514aa9b1c4c35fd11aa8c48147ee01c7aedab414565dae44a708cf4bd428e87a3a185e677195ae0b43b9e42c62d1ba20f962c901c9faf27be056b71a08d5d88981b980747b1238b8944891b26a682966a4e00197d42c0f3f192c2a81ba279a8b8a3e2c7f744546c7884a87e8e63bc6bac6e95f004afca1b92bd1abc1df855043ec7002119866f05866d5aecc736ff24ce69359455a77b470df6a3b8a6303f07c28eb973c2c1800c4650f2b05e005eec5bdea08b60ecb7d94a54788a809c0e5fab27f5515061d86eabfc432e0fd94e3d6d4ee90da432feb0d6da45987410747c34556d05092407f45ef7b4cb20bc371a2fafcec862be67728e4dbf8ee36cec402128cbd9e49025d7c446ed5bde5a57838a5f3641483f797d60933869c5580aca326bcfe6ad2d3a0f164433dcdbe7f87b646ea5bf3f12cec12a7124bdc102dcb0b9d5e0f15b8b8c163f96825744b08ac32d9935d77981e4b56953af59b6af240a81a5e7460c41be9e5ef71e5b0420cbadcff0f1555da3dde6c15ad904fb892c9766b01fedde53ac9e8f548a7d93f739868b54e98220021b8f3ded3fc2835822377dabf90d35416bc3b90a486e0d0408e72ad5d430dc4e44a0a4c08801c44b042f6698f40cb771f57946bf676d4d5ecafd72fbff5418dd7094895f4c20fa02be41e76f687e35ed5327af72e3657d4b1754b2219135c9772fbbe75377a3f2e0793f436ae22f28fb629c1def5cd4eb8720ab11491fb2a24559667bfebe9f42beea32411db62100447af6bdfcdd392bbf00fe707206a2e5c78f44930cc649cdbf488060d675ead3503b9064524d68f17b6ef7f89e4ac51fe9febd8fed7f3f1d169f9309d7345123af7ff560f59bc4d896cc9ff72de72cace626090febecdb9e93a76e4f55d6686eb88492215f9c9f31162b3c2d92413c8c8d7b6ba3fbc62b0bf17fd1a1245c3133438da4d4c609666805ef8d867dc4774ff6345d567bb2631187acc18b0c9ccb7431bbbd254c3f176481b6b09dfc88f9bc818d8736617b8465a36309c4731d19da88e3f702e34c1357fa268dab1c03bd25b034611e532a8a96bc52dae26c9453f64983750bd904d6a451ccd51ee3f5431cdfd5acf1967adc70fae7ccd3079a70137bb30463be2dcd7990fc58812a2b5a53fff450d00394514a9f3b3454de770fc7edbbed3b48d7e70605d9772f2e9fd7a83bc3c9dd23e031d5debc8f20c3782e5644c0c3037d485d99759929f240187c919d2ce089985f611ce261fe0bc713945ae6f63d4e42c7c80cddf514167b3c79ae04461d5da20dc7e5120e839dc719a4bb0125520bdc96b5ad6bd6fbd6b317f9f7f88320c0158d0f70336ec4d1b80e95925475d7b784dc347bb17c61fa6f52177c17ff503aa091181d60bde9664d691f1cdcc1de0f7b9e29ee5eaef53d1bf61820e541a6cf6c7932a338a52939ff9174ed6b66c2388e9ea47db0b79c71a23bea273694dbc821a881336d12f0acb411591c6b5903c73a3bf759c8d35cb34d840f3c64afdf27cf37d2e3c7e9a86048a627a3c3b369129d61f4ee55e5134086f6a8a240b3ebcac780451ce2125ec7d30ad8e1b939f7ccb8f58aced83f761a73afab3cc1c11c8b1c83a7da47a96119c10c93eadc67d28b211de1d270116af95be92a8949158c95870b176fe252dfe866b6ccde0151af0fd91005bf845cd3a286c6d633a8806570217c29be859f281f85320d59ec9447f856e12d079e1a9a70b7df18a47e4051754a2c4b83d088e5d0b2f3e439dcb49f8251cccd45afa1fa76f4c8d4c317a2edea00fb70cb13bbdf2981a99bece7eea70ed45c07b821fd1c782f33eecb691ecad3bf3a5f2f894d8311a25df90f7475ab4049d8591e2ff60cad2d41988f7de7de686b9e44bccde5ec363c317b1220b0c33621f5c57effcba7ce117c0845f7ee3dffcfef3cd65bea380a8a0a6cb47c4589901c945564ffd7557aa7a8b7c977331568c79fc25dd573af899526b40efaee8f951b18db28057203b419b55d63ed71b81c2a5d5135b0e82131e616d666d120fc929b6083479e812a87232a7faa01e28284ed96a02583fc8a2ae74789dab0f1ddfee5bba51cfe9e1cbabcb11296f24cf664dbb8e038ceb2aef456ae1c66e74508150c59382878e59e600c2ca2e980fa12419018b2df53333ec18f9984d6e86aadca80b6a9dba20e9193417aa0937008afbd9ce4cc3a26e5ced587c4c6434040d54faff4b611aceb47f264b9da100ec5b04bd161f5b9dc185d59164d5e75515cf65a07958da36bc223072d54526053c68030b05399fd232804a760856a73acb927cb9e736dec8ef85bdb457432a348570dab399dc7c277f0840a8b00c423227afb50a3bef98a303127fd0da56319beda155ecdeefba312aed24c5b415921165783567e1f4ba71ac429a8288fb91719bdebc312e17c6559fd48fd92fb0b38e4f9af3b7977647965f916fdd993834a9ccd7cfa828d96edc560b8ddc64f9ceffdc5d71781bd8a514939ab09dd8137657b74db902124c91a7b58cd0517d90aa33a2f09ec5296d8363b27d5c58766cc2d564ddacf46aa742e7bca2e16c54ed48d28b800069fc9eb6b55c15686b49f69448492b51f7bfb78869a92bbfae649f3b7c5ad4801179fa7a55bd68f5122eb1075173f46f7567860a05e4beba4b0c841394ffbd5558cb70cbbfb40a133da4f50d392768ce606fea3f7391209fd393e84a618f497578392bcf6b8839db14b2490420b00e366efe87bc66f1c68642e89b783c981103754926cfb6eba7de3c86386501054565246baf5a69253ceb4b29443355ca24d075767457c3daf77efa649c5836cfa6276da3cd53aed1583ac248ea17d382b6398125db59b5fc914d29324b38a61b6e20274d3f23b396a6a9220b4e70986780676f0a56c679ca5dff13096830c86bdb3f782f3bc5c32c551bd0c11407d1e344cc08aecc773cd9885eac8d8e5c6d91e1ddcbe7f01ba1d03b6ac34d006508a8da7c279b324f16c39f2c826883273b2d7efd81ac97efbd89a981eeaa6c1f9e0c509c7aeff5402aeefde2c1f515cb141feb8713959f233a1ca1628f7a193911467c63cdabc0f4fe280056db7144f926cc84069b9794c980f16dcb4ffa99ae19f025aebfb7c8be689932495b980e90b4a49b2c08aee908f247261de6933d7320a3720f5c6b3a7849fee2e1328e4378c8d6a4d87a41f2abc6cc1b903f06a6de7fe674a0535d4c6056b1513915288a760574e8a31860e01c84a32157013ec45cae1e40d6121c07b0dff63129321d9cb00c7713c19586c0ac664e4a271ed3ccf670635f82d6fe76c215649c32b508f5bdd4b9b2ece4d20d98dd385764b3a64c7e38cb1359f9949d04af3c90d942e6c3682c5651dc8e742ce9f493a3f0aa1312c6ca2bbc3416ff200ba23ae5f2084b7d31847bb954f71222ecfcddc06a37bf3de856a4204573a25c448f4f750cbc860e61823c98741385243aae19e7aebb7aacb143fb4c95808611ea76f9e67fe9f101fb220e510b0635c1cea317437d55efaba38061f9e3e7897a98cd0c5a53c2dba0669a9971d27f369aae096a8eb6752ac8b508024c1d1196115e23f0973052880ad78e8e2ce3aedb09b3622d479421a0a0c71e26885dec4f2096f82c816ded3993d551e3837531c17670e60ce17c527650f28a3157993819de84875dcd449bab2bf3c6168acd36944215937d9f6e8baf20d9408ae34412c03bc3856e8570970edef289a6fb4aa728c840ab55e5b2e481576bcfacbdc0e6d54a96a44282c6fa0253db32955b345342b4e3280756b6b31c535f24d947b1f3b3896fb6852c7ce7c60bab8a3871ec3d73cdfe14caba4859cceb171a5cb8c00f55c43b0e3d466a174e91d7deb2f8de422875cf74208bc52a56109ff7729aca8b0b85ecada0fa15726bbacfb36bf91d8976bca4a56e6ee9dddc04b1ad06fd4f8e403b98d619b16a37ba13ff718c08e7b4a65f924f91cbd72afc2614c7a43cdcab6799624c9466932c3031556ba942910cc55822de1e4a67f11abcc478c3f2dfe06c39c06fc8fe240a95ff19c92f19c1db3ab5a54092fdfc4b3289abda4ac6de1a72f4a8d6e4a6b4870615265e393e0ba4f2dcc076b6c586af5b5b8d00da7d0d66aee99846dc8f17d0714153d2d36e5357a781a0e4fe79919ab708c44e82282222ca14da47c44a1bcfb8da3808d7b62c94014c56980de9e02334444476ad926b80ca787d3aa593fd2f1d25076d7c3937442c4fc8dea22de08d2a055c039ae71fcd6224280a5a229410a797a51ba0c791ecade872ba7e0b31c4b0440163e3b17cbfd5bb3bf42a6b1b6fec4d86ee457b10c4b28ad9b2bdb87cd4d47b57face21897dc690d69c3601b5d83ce74823274f43126d264c899011bc82c7d3c1b7659d2a1a876e153f38720d339181475deaa662068b0a332afe8f734ed35af72c154c2b57fc88e9a5e7c34084461a083a073e65b9142666c61e78c86527dd235cd6972a4ad599c4ecf814b2c04320ad60945faecedd1fcf953848d19e3173cb952a6ca66d363c090ea233054cc6badeeac94f5ec674efb847e722d5baf0822ac2fc1bd8ecdfc4d1c52d8e70ef0226ddfb61e83994491b23c32068788e8678e4a42b3d101c8ec2e40b516927f2d10537f15ecf4a6272554c2f5110e5a073f6bc7e5362cb45661d9f07e6faf2f7d05bce39e5cfeee08dd3cff6ae62c4e85af357e397158a6698fd89170927dfbb76bc5a1ae39c63a1e39604f7280b3c1bf8cceecacde1ca4ea859d3ed83a594283d97973da0731690d72c13739e225fe948533e5e5b3a34a23213d04cec58b73d52c2dc83250d00d1b78ed87b71cefe3cba6ad1bc66e3d9cd5286730b2cb1a4f8a68d38dc9f67a3ffa30867e3375015cd7d07a9716364401af89d8f88935c43778d4b4cfaaeec47d122db8cac0cae8e47c6729519b1a759d1cb1db69cfeabb9ebc026d053f107c0cbc9904b889aa43ddc3a8f37b8686f4ed88dd161f0524838f9cfea5bb8127e94c7ae3fa7e284f303ef0ba543ca2980f214774cad10796cd09e8aabff94348006cc91bca5ace1c72e374c24d26bdc5150b968fb1e759aab91d20d5260c42cde69a6a651cc2b44f9b509c0d2bfe4f1f369d5c61b906f19bc2bd3a39de89f925fde78372b1451f8b57a446c3f0b7aef2d32fc5c03203deeb9823c26df3183d96bfee72d0bc69e05693d8ba8babdaab4be7ac7728e2b0e8d27972b24029e08fbb9f646f39f00031ce9347cdc6834ae79c9822b5db83790653493a75ec4658417c56acb152bc87e18069b26c284676246da44346a0c81647f5d32d461deac9c4817507e0821d3d515c700d1b8f373b6fb1b42a6559e8d339d4d7470fce7ffcc18173e2bf84d769a3923d66a7d9b7f7624b8ebcaf3b74e5a159a4fca99ea800d19784766f42f9494334f27d110b56efba00d7cd6916381d33b52a6206e1a10345405f599c48cce3ede032a185ae2068c014cfaf8699a6d2d946cec860f08c41eb44c55dc2b123af1700f6c9fda501c3bf26da53485d622fb4cfbbd4a903a78e14ade0db0d02bf9dea0a391ed2f8eb2d8a953d297e4b622dfc5d514a44802c5a13728506e5d87854319b9339ff812cd6bfac5f89ea0c78c83a8b101720463a5e511905a5957613bd5c2b52ddbfa8d22c0be5c77acdef578b4d6cf33ede9af179c6f47bbfbc33277f3336d99ed3f438b137021e4b2f47b2d0086cacfa76ef1c0131e9f0af5aecd71b493a31af18896695320582226c977d609e68c9b63b5ba862e627c8a0ea680534b08a3d2163d2ef431b4735a0274bacc833fed2af7f7f1096ff370c93666dcfc1c77692ee0af95c278a3a2ee736b267d1077170cf9f2b6aa190a96049928117ce210984bf82b52d2ed9fa660dd28d822a46e509de74bd9f440bc092a46f13b8304c27b22f97f72a645429b8776abee91847a3285af3f8042dfb7030a88e9b0d167c97aeee576f7e7c7a490fe2679ede6aeff359cd73de0a26fcbc93e3fb9b519854922f57db10fee9512548ca66c77af2a9f54e154ab3c110c3cbd33a4b8a5937e2e145aeca8a749cc4aea0f3e79fe41052ada98bdefdd4c86cd7678d852048e49e9cb379c1fa39039dca0ca58bde66de6f9275a79c5fe2a81289b13475291f5ee0071a36df82d2cdcf8a6b0e41b27e4d2983b7843e4e9cb4c5904e15234489fe24a30ced3eb6ba7f47b46172ec4e4109959fbda2bd8af61da9fd1ced6b0e1c0b6345d817a85622cced1f6510840766b928c5052e5d2bb6ffc65e71d54fcbd6c65f38621be9cbac5945e38dfcbaa730ebe67789b81138fa70a4b38255bf36a2d7f97a45ae081461c542ca1fb741346de65c4a600fdee4b06ac03fa7d2948b4ef66ae5bc577375a2ca4cd70fdc405ecb06670f66d95a829f1396310155cd266464fde313210d36e14ba600f45285adb75695332c892ef6e4880f49b486cb5ff315ace5e6a90d0ad39374cc61519afee8836fafb4d3c0fb588b1da270a11c9e9bc209c170354f6e8bee8dda047f24cdb56ccbd446f9d1d0fb98c14b4a27426932b28302218b7877ffd3b7e4dc7e5dd515926ad19e82dc5bb7ec693763bb5ec46a8a44c74ed62c232028232b208885e96eba742dfc147351b909f4b6c04f788a3b164366e669014d6fd146fbff9821fc9409c431e7e19afa61ac915176f46a8a68f861796594b26d6084aad39ab9082707a9496a49e4d972b6f16ea213b23859038ef0e10ae3c40c138a65264d795f16b694db73c4311412b9ae8ade7b7ef0f88e172d1a3ffdd085e7f43c4fa86b14b63fac07263d071a1264dcbcd6a883ed93c433ed432284f9ad725ed11e2c1c25aacae30806b35a871731d04f08af5decec963d159f068fe4bfe4a9b0656dd669969144b758d6bae9117f4eb960154f0a7e05974d10821083456dbf47623f31c72679845f2d8eff884c3f6cab1e72619ea5bab32e1d4a5f7c155f54b775ddf699c4a2d91db96eea350ecb33b2d45f96b1a4484fc18f64db96451e89945fc40102f7d76599faea24b79d023462951022ddaafab9add11e2598557aa860f2c46342ab93fd971f1b231fa88b0982c6c106c724336bef2182f13bfc3fa311d4b298b99f122b53f510680e7b0bd9e8d6fc9c4535dc15cc3d8faefcc16cfe9117db362520e3758eb7d35036caf58ba7bfa568a2b68e39264dd5451b7bd7a6a7dc8deab75a7a217e4d530168a917339e79f0c0a773a034c9c55d27cf29e27da75fe5efbbb8f3fe4c7c78611183d27bdbb1bb3afdcefa8e27ca79e4f1ca5c254faeb39bfdc2d49acb7999b00668ce7c09fce80b91ba3c256945d69b0a5ce0b3380d6f0c5f87282a62e3f10b5ad5a17cf72716fa8d3587ac9a8defbe59c0fc580db754846366111323088835ac91dedfd4de87076a34a95b68bb85629bb771b9183e146ef8f23c658a4b53fb815042e3e0c4ae2327ad35d7c5e6f548473fd1ae34a24f46ef36dea798eb35f642f4063359d1232b22f5b656923a5f11b57d4c51d5e76e1e99d93fa146b41f2aa85e6dfe50070b45c08e1945eef44b85be964f9f5f4179ad90aa5fd7a36f31aeb8d16d4648ba8ec644bbe86a028930170d7c347c5aebf250d65e077ca78df7723a88d76c5c22ded5e84acf20188c7948e6f8770fca841dcff13c7a02b465d193f655a719fcf731a02ec1f5c1deedfd925e79c7a09b35180db55b9e452b1d9f5eb33b2c2fbce76a5cf8f5c43dc96972d5ca3e7f52e265fe80901e7a3e047148d8cfd80fb6b923065e0268fe5e23a6180b7b1a51264113104e2ee3b80888f6ba0eaedb231dd78a9fb213b3a66b83d4aad011e0a5f959beb348e8ca86539133d12a5612728383943801eb3886a036fdc6cc3c617d9a921ed22522f95a50517c5f17aeb7b2afe7e60a4cc99492ec7265dab77f2306cef0146a4ef0538bb1640a186a2e499fd166204841d1c3164ff925616dabf7747e1afb53486557e73c6012f13f9318561c5357883786b373d3b9373bf433a7876884375803f6cbbf5ed8ecdcb013dc841fcf6fedc0857f75a04f89abec0fcefb4ef589e2e9fba8e2740f31ee663c75ad65198cf5c0805690670b89456f8795b8d38fa1d72614ebf411b942ca84599cb95b039da0fb4e8bada2087e5539a32cfd5e646dbe0420d603c9d8bd571e7449965a222a1fa2096a09224e5f92c56a8e8f5b2a4697ff3a3bdd094e74e004a6b25c9c2170b8417d6f7621e080f12aeb536b803bd7189b68fd4ba9a8bf32735d1a41527919253c59cc55c20bd6defbce2070cbeefb54023e05f91c37c6605b08c207e7939f3892fc262b519759525faafff7d373b5673877b06baf3a2e1ba361b12acd4f3e26753d1bad7977bf24a6bde06a2b04c1752111c555ba88d961e452a1a5d870907d18910f11ad5324729a46627be361481d7d6be5561810813863be7c154409835027a4e413e5fd4049fbe370f207510cdccc1e87d238f402fb7ff75f0215f66d77bf70e30c0d9e338ab07dd1ac84df216d9238c88e6207da114c8f4a45f956950dedc61697e2b6d64fb5983be932903b37d4fea7b0353feebd450097be4b4394a290f5ff79a672c14aaa4325043e0220f0485ff7ad7b922858c103fa0925a341361a04665c6f50c1cbae8daf4182668967532012d4ddb9c6e58dd6f23d48568dae67b5e5717df1e297723badbb60a547e7205d8279bc846884a8721c837a67acb65270fd51a1ac01fa5705df4cbdec2164496f986cfef5d6d6d25e6f8f51120e0e3eb6a3b1c81f6291e007587096eddbdf6d6c1dc075b86b8fa0e4e534e104a989ef4081344f3e71eee45a32fb2f405cccb67e8c2073f8ef7fdd14398d465eda446280925b8c6f30f62e267fc7874c4e716d8b2f42e5f97be39e8c01f07bf4cde2f211ad69deecb2c7211b8a993a83387e0896a88ba714a43d8c2b45a102be86fbb82b8e0ebbbe855d45dab96b4eed1bbab67be91133e93d45a347fd8108dca31c3ed40d9ab6f9e862fced01586e92624656f0072f342ca7e03ff7230a63ad852c70be2934223d4b8b501c654e678fed8de9a393eec0f1d2e63d249849ddd15d88658fd4a35a3c76936ffcdd9dbe527f471e4fbba7fa60de7458724632c5d7115ebe15c45a77d5d4d1a5f2cf3a7d4c66114c44afc0e88f80bd99a30e400435256ddb94976f57cf0aca399fdbb9a7976be1019fab306f7e5a15509685004a6e67d209d12b0697331c963cbd7e659107d4fc5527d54ce466d01548d0cc583817c967027c9cdd95096b162a0108e552c3114a4dd868c5795f2415859e30cfa2bed45f23eca98e89e75ea020fd1d4df30e9b531a40fdc603bdb90455a5dccf61bb64db2b9a88f6af6673edc275f381602a49355407626fa1910b35f14633fbae03a04f0c6d88e9e50b7c5c787be0569a9ee45a2a186e5f7411fb908ce7dbb091fb317d82e81d3a61813c7c2a6329d74cfec1a6e85d3d4f36839537966905034100889a4c84ab2bf7bb2c8d0108b3c9984f3e657fd0eaa2133dba61a8983017900bfbcec632b62cb2ca26f2f9465f6fe54b1d45ca5e0e54f3c053b33c56235620534dbd52fff14ddc7079b21a30e243ec6cd2b041a13d29fc6e0aeff4ac4dcf78a01613b2f9d99e6c46f7b11ca140624513f737d3203c129601980bfa0f35eae9fb4d008bce0cb804ea4e0970b899600ffe8a8addb00d1c8678673bb45a8a63abcd52fdd3ac9c8a3634b3e82bd46d631cb02cd1675bdd6df02b4a127ac4656e752e0c3c460170405b53582c507cdf6e7ee782a9e5b5f92ffd8a480887be1ce31421999d85b926291df96e416b4653299eadb6e8f96bfa50239ec7dfc327e432b4ef1a007af5f7f3481fe5912598c17396a346df8a53b3e0579e9b6b84251217761e7baf24a9050de05fc90a7e0de697a67e98e4725920761e84b1631792903c4042d383d49f0268916a54c3af1af4e1a8a09b6c0d0ea7ebaebbe5d2256062a81afecb90c606fcb5ffd03fafe2c4e7ca1cdeb1625862bac22ded0390542be145986b80d3cc6b8f94e1a0ccd2abd6c8dd8155dd4f9f37ff7c375f009e9ff6b9e4ce76d0945c09b6a54fa30ea4f832c01b6b80c9a825a9f980f00649fcb8f72da57be6172f4d043973775b41741383aab73287785a14afc7e99f8069deca814b822d5247a6968f4382175b2b6905a50b0ff2af74b4dd83802ae7d7fec3e64815b4e40288e1838262aab7968c8954b6a9455cfd246e07dc6499845454d6d859936f7736f3524d133d99ecd3fb13e6657badb55b78a6c79208791edbef56f259be7893d8fb1acd8f9382f85a01dcc64069dd3a01e9bce112ee39eb27a2ea2cb51e35e1313be8f0b9399fa6da48e7dad929fbf759644a61b0a810f3b932e74712dc78d617ad77950e8f6d8d53dffdd7b39ac690b6b04b31dac0835435540929ce2ce931cf132f4f9185dbedb1111ace823aa651a12712369933b21359920351450238bb81937ba1fe4865c6e8b7659df95a72b8731deb4f8a16cf7410673b84496d93b3808704282168cbd4ee89da9664e25a80b7dd2556a3abcafb7f97e0c49009b7dd45ad4861790eb65e9bbf299853ac316410d3f03d60f052d501a9074eba241f7369396b70771dc0eddd80a553b8c71257fae0d80746423b2434dc82d1034890ce4ff8fe60eebc25738c1c5a9c45825c254ac1f586c7dfb620bf3ac404ab721dcc550163b1d8053758d0b9c882ee29b4d82810c53ba49a903e4146cd0cecf09f19730988f366be896fbcc4b0f52ea982f66efc1fd1b584adf13eb7f68f68f0db09643985ea344251eda9f903241dafd58acd3b203df77c3397d283377a312a55a51c32ed18334f3283530974c838101f176de4ebde5cc07552ca790b917e3ef3dd3946e956df1ef86f40e312114d27efe890cf273b279d9f2bd48c29d15048b0d1514c392e0d49fb6d0a248f1384ab7437a6edd3f15afaffbca7977821c5f827177c4021f476d367ae1676bd8af87257a6ecc34e1a3761bd4056bb4b269e3af4659ea076674bc85a974f9ee227dc123b404304d682e018a4fc714f03a3b2f9675eae2b4477e872974dac498f7badf0cf1bf1c3084016718a8baca79121165ea0ebcb7b5ed8793e866439542c32889aa6fb921ad11bfbe0dc645e12b609b3a63d5bf289c9af65377d08f31b7e37f8452bddf3201a97d96d2e78909325b842529107c5b52cda7696220edfb95e10a42c22ae0966939ec14342ecb53b5186a4b0e636c4e47afa6dc94dc932c750bf2c45cfa98e8578c41762732ec4490ce03e3658befbc01fb8c0038a503cef5bab0bf79952f86483d361bf5d55000e75d515bc67f6cb228fd239c0c0e7740d35717b37b09b35678fab0a4548781552fa06f88c26d72df0ec6f830335abc93152af08f9baac42c3f61900", 0x2000, &(0x7f000001c080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xfe}, 0x20) mknod(0x0, 0x8001420, 0x0) setns(0xc9, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r8, 0x0, 0x81, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x48, 0x8, 0xffff, 0xf, 0x1, 0xffffffffffffffbd], 0x1, 0x0, 0x0, [{}]}, 0x88) 7.71867045s ago: executing program 3 (id=2326): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080), 0x6) getsockname(r1, 0x0, &(0x7f00000000c0)) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x20000851) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x83, &(0x7f00000005c0)={0x21, 0x0, 0x1, 0x1}, &(0x7f0000000600)=0x10) bind$inet(r3, &(0x7f0000000640)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000680)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0xfffffffffffffd6a) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, 0x0) bind$bt_hci(r5, &(0x7f0000000700)={0x1f, 0xffff, 0x3}, 0x1e) write(r5, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000780), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f00000007c0)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0xf}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044815}, 0x24044850) 6.731994872s ago: executing program 6 (id=2327): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl(r2, 0x4048aec9, &(0x7f0000000040)="050000") syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000340)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast1}, 0xc) 6.651033609s ago: executing program 5 (id=2328): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x26, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x5, 0x20, &(0x7f0000000540)=""/32, 0x40f00, 0x2e, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x2, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000600)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000640)=[{0x5, 0x4, 0x5, 0x3}, {0x3, 0x5, 0xb, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000001700)=""/135, 0x87}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000017c0)={0xffffffffffffffff, r0, 0x25, 0x0, @val=@tracing={r1, 0x7f}}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001800)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001940)='./proc\x00', &(0x7f0000001980)='proc\x00', 0x6048, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000019c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x100) write(r2, &(0x7f0000001a00)='3', 0x4e) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) kexec_load(0x2, 0x1, &(0x7f0000001a40)=[{0x0, 0x0, 0x0, 0x12000}], 0x0) r3 = socket$alg(0x26, 0x5, 0x0) kexec_load(0x8, 0x0, 0x0, 0x2a0000) syz_open_procfs(0x0, &(0x7f0000001b00)='fd/3\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) bind$alg(r3, &(0x7f0000001b40)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) file_getattr(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc, 0x46, 0x1000) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001bc0), 0x49f, 0x0, 0x0) 6.520700543s ago: executing program 8 (id=2329): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000380), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000440)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000030db3fb83ef0400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001000058000000400aaa4aaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x68}}, 0x20000880) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000029080)=0x2, 0x4) r4 = syz_open_dev$dvb_dvr(&(0x7f00000290c0), 0xc, 0x80) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000029100)={'\x00', 0x2, 0x0, 0x8000, 0x0, 0x9, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000029180)={0xfff, 0x80, {0x0}, {0x0}, 0x8, 0x6}) statx(0xffffffffffffff9c, &(0x7f00000291c0)='./file0\x00', 0x4000, 0x1f, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f000002a2c0)='./file0\x00', &(0x7f000002a300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f000002a380)={'veth0_macvtap\x00', 0x0}) r12 = socket(0x3, 0x5, 0xfffffffd) sendmsg$nl_route_sched(r12, &(0x7f000002a3c0)={0x0, 0x0, &(0x7f000002a400)={&(0x7f000002a440)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r12, &(0x7f000002a500)={0x0, 0x0, &(0x7f000002a540)={&(0x7f000002a580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffe0, 0xffff}, {0x9, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01864c1, &(0x7f000002a5c0)={0x0, 0x1, 0xffffffffffffffff}) r14 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f000002a600), 0x949400, 0x0) r15 = syz_open_dev$vcsn(&(0x7f000002a640), 0x8, 0x1) sendmmsg$unix(r1, &(0x7f000002a780)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000540)="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", 0xff}, {&(0x7f0000000a40)="8b7f05f851dca38d49ec9bb303d2ac38f9cccb13d09fe8fe55ae3d44fe94d9d1a360f6ce8715ac38fb12bf711ee2b8042c40a97574c0a28b7c084104952be9a71a28ea3e5de6fea2b02a264216872cd17fed23b216d9b371b08ad1ce3c349e7c2ffb9fc0113ee96b76a0f8b175389faa9e539c5f33ec54b3d51fa1d247fc71af47d1676d2250db342534aac363606f", 0x8f}, {&(0x7f00000006c0)="7b73397808ddd82f538e925be214cee979898a0b9f1abfe7a8597f71e8ce035a72bd110b7041a01f1395e705a56828671d821a13c23eb6569f013396454d9bbc0607edc3f8d77b0845f3f78411365e76bf21a9f3a2f3ab92a90b327ce80b0bee07ad411d69e4e524b151f1377648faf81acdd3f57927deed0ca02042222c633bc8defcb24a16bd01f7b7b077e693c7d6ed40fa0a56a2b1b0439d0362117b785312af4c9de7b4a43f51f9a114af982a134c635780f1a5ccd9036958a54f48b15f99585072e84474fbe4ec0bb6252129569ae0236552cd0c0dd390f42c", 0xdc}, {&(0x7f00000007c0)="531b87fb6dae78da", 0x8}, {&(0x7f0000000800)="4a498a5382fb545676f10043ae69034217fed34d5ddd01f1eafa6e78438d1b4dd261f138db294a7c14c416e77251ef990993824e84c97a5e3f6d056a184698e1edda5667800bf1a95e25a45971b0643f941927e90becdf4f08660ebaf1654ddfd16c05bab5ebed1fb9a01c568dc2f17265ea1cf8b0763e2eb0f28710312be0fd83f5946306f93c94dad37a9abe9409d8b5adc0295354f8d1529d386cd46df2832bcade087b71c961c40c8ac0", 0xac}, {&(0x7f00000008c0)="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", 0xfb}], 0x6, &(0x7f000000b740)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r2, r1, 0xffffffffffffffff, r2, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r6, r7}}}, @rights={{0x1c, 0x1, 0x1, [r0, r2, r1]}}], 0xe0, 0x4004801}}, {{&(0x7f000000b840)=@file={0xc6b006dac9bde190, './file0\x00'}, 0x6e, &(0x7f000000ba40)=[{&(0x7f000000b8c0)="bae0120eebed93d6307d35437bcbbbbc7e4cb7666b697162158e500b99de4c9298875fed70", 0x25}, {&(0x7f000000b900)="53aca99735c18a15ffba1b5fbb3fb66e062ea87be5fe7593119001aa15e49c9a6bb46eb0137129802edb21d9eaca33cd2b75892d42b9e971129f8f71dffe747a5603bb142500d183da747dd94ab52ee4bc309c5265b0529874fbd93aed2d1daea76c33640bd461b6e3be0a4ba5e90b3723ece02337f7587b6a351f19c623e875475c9429aced73507bc182c01bf4141ef071c9138e02e01cbe44dce63ade7cef2c90cd53d7b7e36ca935a856", 0xac}, {&(0x7f000000b9c0)="164650b8986e7935d9b8b47f441b125c498e3f432fe8493e1b695df0727fc7dbc89ba560d78857176a6966b96b90d9cdd1f9ec79bb224905dbd9349f2811abf75b6a1ae2709131e884e492cfa8a8fcec58733b77331ae843686cf127cff9d3cb286cef484a907d08", 0x68}], 0x3, &(0x7f0000029300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r1, r2, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0xa8, 0x20008850}}, {{&(0x7f00000293c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000298c0)=[{&(0x7f0000029440)="70fb2469350bd2ee0f6769fb8b205e9d0d4b64b1f502d7c72467f59e2592a91f4fa1ec03a73e128dbc0c5ada392994e91e3f9c734503d95328ae33de7eb0ee2957eebf1b357cd0f1241d25af3824fad33a32e3e0d26cd7722f992070d60ff73bd5f8612e37709f1d97ed160ba39bb167900c54fd7ae6457a0a23f7496798356ebdabb9cdc1466bd22b5c3a1ba8f6e30507e4530edac0f12e2d93620a8b31243fc79a6e4cb46a9c06af1161dc583859ce17c67660ed49bc6d16666d18a771f9ff7e42c86703776864a27b7fa82672c48b115707ab6301ac0d81c1d8600795fef6d87e280574fbe4906dfbcf1cdc3e242399cd069fb8525e64ec0cee", 0xfb}, {&(0x7f0000029540)="1b0cc210e8919840cdc429d39f7b44a4e3bb2f1e81f899837adecb81142ff3c42c6d2579dac17ff4a5f20e6e1a261bd5e528aaac6dcfe7207fee8703d716e1b920009013ce5fd7ae29c72577c597b244b813d3fb82c4d6b41d34ccf19fc984ebe0b4e9ea7fb6a73fb152490832264aa46c0ab49a8db4925a9979ed0fad", 0x7d}, {&(0x7f00000295c0)="61e2da1412b1eeeda1c23c7275ad88c5bf0a0d00a8947ac1e6e6f6ec21cf8e32c7e2f2f91cc5", 0x26}, {&(0x7f0000029600)="8d91137d8aa0b7fa792dc31049bf55c89bd68aede49ac44f05f80938827cafc8d1900239acc154e1d1c90929c0533a208bb068c619409b35493e942cb32dba3728e1430634976d24f21ab12295ce6d43aef6a1367ab5a32289ac2b4f9aaca7b1f249e6286a0f8fe3262887cf3a1c74068457c14118e2930a600a23b763d7e8ef73756e689bee932ea95e81625c", 0x8d}, {&(0x7f00000296c0)="e6e9b65720fda21940c00ba539b5e47e93bddc2f92aa36c95accb62e6bcedc19fa1fcb6d7dee2b3f290ff764b7cfa9a32d9c35ec2ae9e388edff4d9c74b87e07d6ba3ea758b9f3c3bbab", 0x4a}, {&(0x7f0000029740)="f3a5e8558547e9e600cd107f22768857b5c840ca707050f45e76ef17f9cd1cde104ab20a031c9c5af389050115d5d9ee310c26bd27", 0x35}, {&(0x7f0000029780)="9a98f2cf728ef247b95e725f88ec9591804b2ce0114c07b368c22ad3f5874ba045f6c29f7d83d7eb07be0c4ce7eb836f0f24a13c2d91a307741ee865bc434e9165bcadec8d88fed6ff6b73f2bf577e8eb20e72", 0x53}, {&(0x7f0000029800)="8b3de36915c858b6ffcfdb088e6168f0eed3b285d9a900d66a688aa71e1bb711cf1b64", 0x23}, {&(0x7f0000029840)="354ece6f31ed8a06278686d6577f64b7e1b9d2345e22c5b20dc6aa5e8c14486b9faccf7c0fc6428b6bb447c7ab9ca142cebe46b121d1e66e4791effe3b4a886eaeb065e0ef1550ad67d90e1c695e711644d464c22e9e1c6e671870845572936f585c5eca9f21cda092f0d55f06de8f66", 0x70}], 0x9}}, {{&(0x7f0000029980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000002a200)=[{&(0x7f0000029a00)="2145d33defec948b812ee35f70c65ad8cff707a2a769ff4284a252d85f6f35c3cdb8e12e06f423fef5a00a8466456a35d4660501d0a0261751aceda5023808bb12a1d60793364956d8bb01ac7a7839cdef486036dab09dd2bd2cc806497cad3c185302146a4388a508edab3ba5ca9263c124bdda576a92b0420dd2108a11c6f0ab04bff05cb0e4c4fcd59cacd6b43c8266dd55dfa4b84a1c55439a2d5a58173388d781ab72de5d6157053e079252c817de0cf2ec6a133aee633cb120f80410d729442c32f092fff4c7e62bbefddd174c53741dbeaf2fc936a9f0b3445bcc9cf5626548dfdc", 0xe5}, {&(0x7f0000029b00)="2669d405504b88ee0900697b9a57c15ca43c1fd8af32afb3f62e784099ba7633609c355b1cb5e8cdce04cdc13d3c8809440035b919af6eb392c2bac24e48073435298aa85da7581cc49bc860517c7d7ab3bd", 0x52}, {&(0x7f0000029b80)="d6965e944b551cfb9dbc04289c5ff8a81fd563ae9ba7d81c68103787e5e1bfd32dfd8c68873b2fa869a2e58b1c9e288f35123ebc647fe225b74a3c0eca177e302d1632a8b7e65c58da427db7011a1ef8769435ffcfa5fc1dee54eb381bbe01681902cde8228b426c2db6201bc1b68cecb2d7a6e5974abbfb956a9b44c01a0660485197f2e79a54555a010ea0e9165a20cf6e7862d16348e901621a594adb9cf34bac867e40ff24e636b59f8d29556a25149fd054852afaeca3236bdf3ab140a5fd1a05fecf43f4e64e9e880740dd62a76d7960d4c815e7882aa9746fab24a40acd1ac9bce4557b29174ba472a2724bfeee1330e131", 0xf5}, {&(0x7f0000029c80)="67b98c8aa8bdfa01ba0622bce56969f34252dc80924d47172bde9997acd5182e762eb097561bdff44b04", 0x2a}, {&(0x7f0000029cc0)="d996c5b0f491656b4551862e05cc846f2ae299a7ab2788def4fe97c5f9e0f69e9286d748b640dd194e7ec49b63eb99adb9b6fc7ef2932aa5a61d570131a6d7d6d6383267442da63ac7397aa2e7f216485965f20a00734de4c7ff099aefeffae7abb4ff843b7288f0fcc0d0f2ac12bbb0c2f1bfe70b431c72f9a06ce7c0197c22c2c0", 0x82}, {&(0x7f0000029d80)="5ef0f5f7b25030ce1264d31fa4dc30520be32857b0c33d4727a8d5309cd94a047a711d4244926d14f911f1bcad07213c01c4b961d666b744a2a501fa057a871e715b9a692281211a6d3edaa304aaf34df59525e6cd189ae376952910bba238bae0f55ead0e468aa90f23256103c0b49ef619a06bfc7ac6ded5c810ed6fd2a4aa8f4cccb23895dd18d3fa754417d34dba39929b245f00f4e1988f3e32792ba1dce151128752a6efe1be7bbffee30254c369febeee43545afaf836eec9b453b9831a2f8a9d4f3c", 0xc6}, {&(0x7f0000029e80)="427eaef3a1429ecc1288fa9a66772e5079527801ce94f08b90eb0c57351bd8ac537acad06c4ac1493ca06f2ceee72555caa20c1acc0165c3453691f216001dbfe8221edfae4db9fe79aef65fcc53fdb635ef168cd192516ecc99b544629ae32dbef2912c3243e5493b8c24a28ce40507e0ab4611080930ddebda1482a6d42fa7740949e407dca277bc36365d6d2da898ae3dfe893a6093db1fea8f0ce2b76b37fbc024fc5fc5a4991ba79f530b618fa7df661a47515e3ca637f702126af327b39dddf775997c19193a7171bc05b0a6d5b74ff06e2e1ff22cdb04e7224d1425c3", 0xe0}, {&(0x7f0000029f80)="5ce0e52d66890e0d890cac129ea4e428f225553144fb4c06056f33f391a40c07f82b82691a714b6a919b40230c621c1573a395d3043757da80c86c44b2bfa43511a87abc786a84eaa41d2ffcce4ae600a119228b9e638b1e33c852d2be0384590999bf949068eb", 0x67}, {&(0x7f000002a000)="47a7f595bf5b5047f27a5f3841e87102b44514ff8e550897d1069e529499bfde528ade156aa790b16db66e39374cf59439f7c1b7a29d06f9144d4c50e57b806a66eeacc936c942b2cd3b926db3e9878d3c400c6ccde1daba8c6b7604769a53492adf130d2c5dfe47633f15b75deb31c11f5aa0999c1421698e60015f99cd69c9af96cdb498e372fdb8ed74b3a493f3de1f1ee4af5a549a627c158851c2d2ffbd318bbbecd92a09959ac523c5371d5313b5bc36c305e7e9a6c44b4ae4674880cc4e09bca2917cd99cd512b6e72483ff6eb3131d82a734e8c15dcf669f5cb7da75aa04d4f1f21d60b3855b0d8bf2d79094feed77", 0xf3}, {&(0x7f000002a100)="03f5dd8c895d51cf738dc24b09adcd38acc21cdac41a063a90165727ea7344b2fc92e5bf8de732dc4ee93004bf66778f239d875d968a5feccfdbb6fede58e03b13db72b7f30ea9643bdcb98fc163c3bc6a075fd89283e1d792818726d7cee716788f6bcbb5416413b5db8bf276fb825ab36c0bfa3810b9bafded2d589d059e5990422cac7ba1dbff7815c6263a4cdfae1d2b996b4bdc731b743ef9560ad7fe7deb4fa030a9abea01012086b7cc22ade48efaf5573472e1cfb5b62869877c11d689cf3934e0ca648a28b4", 0xca}], 0xa, &(0x7f000002a680)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r9}}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r2]}}, @rights={{0x14, 0x1, 0x1, [r12]}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r13, r2, r14, r2]}}, @rights={{0x24, 0x1, 0x1, [r0, r2, r2, r15, r1]}}], 0xd0, 0x8000000}}], 0x4, 0x8081) r16 = socket(0x10, 0x3, 0x0) sendmmsg(r16, &(0x7f0000000200), 0x4000000000001f2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000500)=@gcm_256={{0x303}, "24747942338921a1", "d830ce0a000000000000a7173985202bbfb61b36f3678de8ea2d0d6616076243", "559edb33", "7c5cec21291a43fe"}, 0x38) 5.911641177s ago: executing program 6 (id=2330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x81010040) syz_usb_connect(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x1, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}]}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="589daae13ba3b6c4fa0acd94a01d25560f62e8b233301e2a69a819a31fce5e46991134f988aca65ae41b7ec82b13660f0689d961bc0080f3d7324cadd43021c56646981ea5646a2885f8ded225090384eb899751cb5c0e2e158ef61299b6b56d58127bd50d847613f72b6cce64192a8032a949fcdc1aa12a9bce6c7f1d5965d482d4b0fb2754186a0bb0b572a473e2c252395f5cf13925140bdf1757e8", 0x9d}, {&(0x7f00000003c0)}], 0x5) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f0000000400)='./sys\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/md0\x00', 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000540)=@buf) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000002780)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000027c0), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000002880)=ANY=[@ANYBLOB="b00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02fa0000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000029c0)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002a80)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) mkdir(&(0x7f0000002ac0)='./my_tracefs\x00', 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002b00)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000f6b000/0x3000)=nil, &(0x7f0000d1a000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b80)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002c40)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000002c80)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) syz_open_dev$tty1(0xc, 0x4, 0x1) 5.808126241s ago: executing program 3 (id=2331): r0 = socket(0xa, 0x3, 0xff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) 5.695068375s ago: executing program 8 (id=2332): syz_io_uring_setup(0x76ea, &(0x7f0000000000)={0x0, 0xc817, 0x90000, 0x0, 0x1a1}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) io_setup(0x8, &(0x7f0000000440)=0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f0000002080)='/sys/kernel/notes', 0x0, 0x1c7) io_submit(r3, 0x1, &(0x7f0000002b40)=[&(0x7f0000003bc0)={0x0, 0x0, 0x0, 0x0, 0x2000, r4, 0x0, 0x0, 0x801000}]) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000140)=@IORING_OP_NOP128={0x3f, 0x40, 0x0, 0xffffffffffffffff, 0x1, 0x7fffffff, 0x81, 0x22, 0x1, {0x5}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000008900)='fdinfo/3\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000004240), 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000004280)=0x15) ioctl(r6, 0x40204706, &(0x7f00000042c0)) read$FUSE(r5, &(0x7f0000008a40)={0x2020}, 0x2020) socket$key(0xf, 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000004180)={0x0, @bt={0x800, 0x6, 0x1, 0x0, 0x9, 0x2, 0x9, 0x4, 0x78, 0x0, 0x80000000, 0xfbc2, 0x8, 0x2, 0x2, 0x1, {0x2, 0x1}, 0x9, 0x7}}) socket$inet6(0xa, 0x3, 0xff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r7) prlimit64(0x0, 0xe, &(0x7f0000001bc0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001c00)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000043c0)=0x2) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000004400)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000004480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000004500), 0x318, 0x0) recvmmsg(r9, &(0x7f0000004540), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000004580)=0x2) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000045c0), 0x8000, 0x0) pidfd_send_signal(r12, 0x3b, &(0x7f0000004600)={0x20000030, 0x10, 0x6}, 0x0) connect$inet6(r11, &(0x7f0000004680)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) 5.587899202s ago: executing program 3 (id=2333): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r1 = syz_create_resource$futex(&(0x7f0000000340)=0x1) r2 = syz_create_resource$futex(&(0x7f0000000380)=0x1) futex(r1, 0xb, 0x1, 0x0, r2, 0x2) futex$unlock_wake_list32(r1, 0x601, 0x7, 0x0, &(0x7f00000003c0)=0x2, 0x346) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @auto=[0x38, 0x35, 0x61, 0x34, 0x62, 0x66, 0x33, 0x39, 0x66, 0x64, 0x35, 0x61, 0x32, 0x34, 0x34, 0x33]}, &(0x7f00000002c0)={0x0, "213a808d34abb2505fd43089b1c284db0664aa80465ee18983ab6c156f3560de2ad7835a54e4e67513414edfedf1a4933aba6a54a16cdf9ef0a3df17d6038df8", 0x11}, 0x48, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r4) r5 = dup(r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x2c, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60000}, 0x2040) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="2e1221b23bb601c493d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a100", 0x29}, {&(0x7f0000000180)="8bcceb216f624c06f5ff84087509020020", 0x11}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') 5.146833179s ago: executing program 4 (id=2334): syz_usb_connect(0x3, 0x24, &(0x7f0000000b00)={{0x12, 0x1, 0x201, 0x34, 0x66, 0xd4, 0x20, 0x921, 0x1000, 0xe7cf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x9, 0x10, 0x8, "", [{{0x9, 0x4, 0x40, 0x3, 0x0, 0x53, 0xf5, 0xdb, 0x39}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="500000001200070908bd7000fedbdf2521090b004e224e27fcffffff23090000000000000600000001040000070000000300000002000000", @ANYRES32=0x0, @ANYBLOB="0000010005200000310000000900000004000100"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000380)={0x980902, 0x6}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@private2, 0x300, 0x0, 0xff, 0x9, 0x0, 0x4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0xe, 0x0, &(0x7f0000000280)="5f3a2f830ad298b15b9dbcfbf6f1", 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000008c0)={0x0, 'veth1_macvtap\x00', {0x3}, 0x3}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000400)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x1}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x4000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x6, 0xef, 0x27, 0xd5, 0x2}, {0x1ff8, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x81, 0xfc, 0xb, 0x1, 0x19, 0x3}, {0xffffffff, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xf, 0x0, 0x3, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x3, 0x8, 0x3, 0x2, 0x9, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x9, 0x7, 0x3, 0x80, 0x68}, {0xffffffff, 0x8000}, {0xe9eb89d253be8b8b, 0x9}, 0x50000, 0x0, 0x0, 0x400408, 0x6, 0x8000, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000540)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x2008, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x40, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0x2}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x89, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x18}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdb}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x6, 0x26}, {0xcf, 0xfa, 0xd, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x7, 0x8, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x806) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r8, &(0x7f0000000940)={&(0x7f0000000980)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000a00)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) dup(r8) prlimit64(0x0, 0xe, &(0x7f0000000b80)={0x8, 0x400008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000bc0)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000c00)=0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c40)) 4.528967512s ago: executing program 3 (id=2335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sec\x00', &(0x7f0000000180)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)="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", 0x2ba) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/142}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x4, 0xd}, {}, {0x3, 0x3}}}, 0x24}}, 0x40004) 3.208285401s ago: executing program 5 (id=2336): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) io_setup(0x2007, &(0x7f0000000000)=0x0) r3 = eventfd2(0x9, 0x0) io_submit(r2, 0x2, &(0x7f0000000040)=[&(0x7f0000000080)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r3}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x3, r3, 0x0, 0x0, 0xe, 0x0, 0x0, r3}]) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) 3.037905215s ago: executing program 8 (id=2337): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000700)='./file1\x00', 0x2000775) write$binfmt_elf64(r0, 0x0, 0x78) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x1, 0x143182) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000500)}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r3, &(0x7f0000000070)="4c0000adde675b2e200930d5e242", 0xe) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x20, r4, 0x7f, 0x1) ptrace$cont(0x20, r4, 0x9, 0x9) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x200) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b31d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de603000000e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000003c0)="febaa7a03b2495659e6f85ca17b3334d1fddccedc0e51457e4dff9f781c818eefe336a93fd7dea040bf1b1c968382ba10693a48879d3752cb68cb18c9ad682d5fab56aad44ce5311", 0x48) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x4040001) 2.128792919s ago: executing program 6 (id=2338): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xf, &(0x7f0000001180)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000ce000000b70000000200000095"], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0xffff0000, 0xe, 0xf0, &(0x7f00000012c0)="ddff00001a748296f3d62a7200d7", 0x0, 0x20f000, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.007712462s ago: executing program 6 (id=2339): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000019400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000019440)='asymmetric\x00', 0x0, &(0x7f0000019500)="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", 0x1d8, r3) sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "add3f79e21516beba73438d5168a0754f6d0f6d1c7f04adc89c6223990973fbda59e477a600aca0c108601d8a16244ebf3d311d99db244b2f973dc671ac920f5", 0x21}, 0x48, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x2c, 0x2, @thr={&(0x7f0000019700)="b2f52884ac57ab56b9ac20efa40ee8b803568f665c5069b5dcef36cbe97470e6da97dc1cd40b9fcec76351c4d11151f367f4172ff1ebd94ab74df4ee29f2f47978af506e964cdbd9064df5ad7c62d06ec0e175cd9f86ce2e9ed06e78467bccdafedb9314e7781f94c7c94661ae9d11ad80", &(0x7f0000019780)}}, &(0x7f0000019480)) read$msr(r5, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019380)=0x7) statx(0xffffffffffffff9c, 0x0, 0x3fe, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000193c0), 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000033, r0, 0x0) pipe(&(0x7f00000194c0)) r6 = fsopen(&(0x7f0000000340)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) close(r6) 0s ago: executing program 6 (id=2340): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@zcopy_cookie={0x10, 0x114, 0xc, 0x42}], 0x10, 0x40080}, 0x400003f) kernel console output (not intermixed with test programs): [ 969.117671][T15298] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 969.117688][T15298] do_syscall_64+0x123/0x790 [ 969.117708][T15298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.117720][T15298] RIP: 0033:0x7faf58f9f559 [ 969.117731][T15298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.117741][T15298] RSP: 002b:00007faf571f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 969.117753][T15298] RAX: ffffffffffffffda RBX: 00007faf59225fa0 RCX: 00007faf58f9f559 [ 969.117760][T15298] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 969.117767][T15298] RBP: 00007faf59036b20 R08: 0000000000000000 R09: 0000000000000000 [ 969.117774][T15298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 969.117780][T15298] R13: 00007faf59226038 R14: 00007faf59225fa0 R15: 00007ffd01c66fe8 [ 969.117795][T15298] [ 969.117844][T15298] ERROR: Out of memory at tomoyo_realpath_from_path. [ 969.421126][T15282] FAULT_INJECTION: forcing a failure. [ 969.421126][T15282] name failslab, interval 1, probability 0, space 0, times 0 [ 969.421169][T15282] CPU: 1 UID: 0 PID: 15282 Comm: syz.8.2113 Tainted: G L syzkaller #0 PREEMPT(full) [ 969.421201][T15282] Tainted: [L]=SOFTLOCKUP [ 969.421209][T15282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 969.421221][T15282] Call Trace: [ 969.421228][T15282] [ 969.421235][T15282] dump_stack_lvl+0x100/0x190 [ 969.421269][T15282] should_fail_ex.cold+0x5/0xa [ 969.421298][T15282] should_failslab+0xc2/0x120 [ 969.421324][T15282] __kmalloc_noprof+0xfc/0x840 [ 969.421349][T15282] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 969.421382][T15282] kernfs_fop_write_iter+0x26a/0x5f0 [ 969.421412][T15282] vfs_write+0x6af/0x1050 [ 969.421437][T15282] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 969.421466][T15282] ? __pfx_vfs_write+0x10/0x10 [ 969.421488][T15282] ? find_held_lock+0x2b/0x80 [ 969.421535][T15282] ksys_write+0x12a/0x250 [ 969.421558][T15282] ? __pfx_ksys_write+0x10/0x10 [ 969.421582][T15282] ? trace_hardirqs_off+0x70/0x170 [ 969.421617][T15282] do_syscall_64+0x123/0x790 [ 969.421647][T15282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.421668][T15282] RIP: 0033:0x7fb99139f559 [ 969.421685][T15282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.421702][T15282] RSP: 002b:00007fb9922b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 969.421722][T15282] RAX: ffffffffffffffda RBX: 00007fb991625fa0 RCX: 00007fb99139f559 [ 969.421734][T15282] RDX: 0000000000000008 RSI: 00002000000004c0 RDI: 0000000000000007 [ 969.421746][T15282] RBP: 00007fb991436b20 R08: 0000000000000000 R09: 0000000000000000 [ 969.421758][T15282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 969.421769][T15282] R13: 00007fb991626038 R14: 00007fb991625fa0 R15: 00007ffff054c548 [ 969.421797][T15282] [ 969.559145][ T30] audit: type=1400 audit(1792548907.968:1324): avc: denied { write } for pid=15289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 970.166047][T11074] gs_usb 9-1:0.0: Couldn't get bit timing const for channel 0 (-ETIMEDOUT) [ 970.166393][T11074] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -110 [ 970.816751][ T30] audit: type=1400 audit(1792548909.278:1325): avc: denied { write } for pid=15306 comm="syz.3.2116" path="socket:[62057]" dev="sockfs" ino=62057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 971.414850][ T30] audit: type=1400 audit(1792548909.878:1326): avc: denied { write } for pid=15310 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 975.078465][ T30] audit: type=1400 audit(1792548913.538:1327): avc: denied { write } for pid=15324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 975.270671][ T30] audit: type=1400 audit(1792548913.738:1328): avc: denied { write } for pid=15345 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 975.639867][ T30] audit: type=1400 audit(1792548914.098:1329): avc: denied { setopt } for pid=15347 comm="syz.9.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 975.674094][ T30] audit: type=1400 audit(1792548914.138:1330): avc: denied { create } for pid=15348 comm="syz.3.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 977.998714][T15282] rxe_eth0 speed is unknown, defaulting to 1000 [ 978.149136][T15363] CIFS: VFS: UNC: missing share name [ 978.149160][T15363] CIFS: VFS: Malformed UNC in devname [ 978.598062][ T30] audit: type=1400 audit(1792548917.058:1331): avc: denied { bind } for pid=15362 comm="syz.4.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 978.614102][T15349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 979.331962][ T30] audit: type=1400 audit(1792548917.798:1332): avc: denied { read } for pid=15362 comm="syz.4.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 979.655042][T15282] lo speed is unknown, defaulting to 1000 [ 979.767910][T15368] syz.6.2125 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 979.768134][T15372] netlink: 'syz.9.2127': attribute type 12 has an invalid length. [ 979.884921][ C1] process 15369 (syz.3.2126) no longer affine to cpu1 [ 979.885010][ T22] process 15282 (syz.8.2113) no longer affine to cpu1 [ 979.885766][ T22] process 15371 (syz.9.2127) no longer affine to cpu1 [ 979.886453][ C1] process 13665 (syz-executor) no longer affine to cpu1 [ 979.941185][T15377] smpboot: CPU 1 is now offline [ 980.068407][T15382] FAULT_INJECTION: forcing a failure. [ 980.068407][T15382] name failslab, interval 1, probability 0, space 0, times 0 [ 980.068430][T15382] CPU: 0 UID: 0 PID: 15382 Comm: syz.9.2129 Tainted: G L syzkaller #0 PREEMPT(full) [ 980.068446][T15382] Tainted: [L]=SOFTLOCKUP [ 980.068450][T15382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 980.068457][T15382] Call Trace: [ 980.068461][T15382] [ 980.068466][T15382] dump_stack_lvl+0x100/0x190 [ 980.068487][T15382] should_fail_ex.cold+0x5/0xa [ 980.068504][T15382] should_failslab+0xc2/0x120 [ 980.068522][T15382] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 980.068538][T15382] ? __d_alloc+0x34/0xad0 [ 980.068551][T15382] __d_alloc+0x34/0xad0 [ 980.068563][T15382] __d_alloc_parallel+0x105/0x15e0 [ 980.068582][T15382] ? lock_acquire+0x1d1/0x380 [ 980.068595][T15382] ? lookup_slow+0x41/0x80 [ 980.068607][T15382] ? __pfx___d_alloc_parallel+0x10/0x10 [ 980.068622][T15382] ? __pfx___might_resched+0x10/0x10 [ 980.068636][T15382] ? find_held_lock+0x2b/0x80 [ 980.068655][T15382] ? down_read+0x13b/0x4c0 [ 980.068667][T15382] ? __pfx_down_read+0x10/0x10 [ 980.068680][T15382] __lookup_slow+0x98/0x320 [ 980.068693][T15382] lookup_slow+0x54/0x80 [ 980.068705][T15382] link_path_walk+0x1712/0x1cc0 [ 980.068725][T15382] path_openat+0x1ac/0x2430 [ 980.068744][T15382] ? __pfx_path_openat+0x10/0x10 [ 980.068772][T15382] do_file_open+0x20e/0x430 [ 980.068790][T15382] ? __pfx_do_file_open+0x10/0x10 [ 980.068811][T15382] ? __pfx_kfree_link+0x10/0x10 [ 980.068836][T15382] ? _raw_spin_unlock+0x28/0x50 [ 980.068851][T15382] ? alloc_fd+0x471/0x7a0 [ 980.068871][T15382] do_sys_openat2+0x163/0x1d0 [ 980.068883][T15382] ? __pfx_do_sys_openat2+0x10/0x10 [ 980.068895][T15382] ? put_timespec64+0xce/0x130 [ 980.068909][T15382] ? __pfx_put_timespec64+0x10/0x10 [ 980.068923][T15382] __x64_sys_openat+0x12d/0x210 [ 980.068934][T15382] ? __pfx___x64_sys_openat+0x10/0x10 [ 980.068946][T15382] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 980.068967][T15382] do_syscall_64+0x123/0x790 [ 980.068986][T15382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.069000][T15382] RIP: 0033:0x7faf58f5fd8e [ 980.069010][T15382] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 980.069021][T15382] RSP: 002b:00007faf571f5f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 980.069033][T15382] RAX: ffffffffffffffda RBX: 00007faf571f66c0 RCX: 00007faf58f5fd8e [ 980.069040][T15382] RDX: 0000000000000002 RSI: 00007faf5903641a RDI: ffffffffffffff9c [ 980.069047][T15382] RBP: 00007faf59036b20 R08: 0000000000000000 R09: 0000000000000000 [ 980.069054][T15382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.069061][T15382] R13: 00007faf59226038 R14: 00007faf59225fa0 R15: 00007ffd01c66fe8 [ 980.069076][T15382] [ 980.255624][T10965] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 980.484156][T10965] usb 5-1: not running at top speed; connect to a high speed hub [ 980.484177][T10965] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 980.484986][T10965] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 980.486182][T10965] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 980.486197][T10965] usb 5-1: Product: syz [ 980.486205][T10965] usb 5-1: Manufacturer: syz [ 980.559277][T10965] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 980.559313][T10965] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 980.712539][ T5800] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 980.729924][T10965] usb 9-1: USB disconnect, device number 23 [ 980.758316][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 980.758330][ T30] audit: type=1400 audit(1792548919.218:1333): avc: denied { accept } for pid=15378 comm="syz.4.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 980.758716][T15380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2128'. [ 980.814492][ T5812] usb 5-1: USB disconnect, device number 10 [ 981.520638][ T5800] usb 10-1: Using ep0 maxpacket: 32 [ 981.523015][ T5800] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 981.527096][ T5800] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 981.527115][ T5800] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 981.527126][ T5800] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 981.527150][ T5800] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 981.527163][ T5800] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 981.527176][ T5800] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 981.527189][ T5800] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 981.527202][ T5800] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 981.527223][ T5800] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.530133][ T5800] usb 10-1: config 0 descriptor?? [ 981.757679][ T5800] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 981.782852][ T5800] usb 10-1: USB disconnect, device number 12 [ 981.976695][ T5800] usblp0: removed [ 983.210376][T15400] busy [ 983.270968][T15400] netlink: 'syz.9.2137': attribute type 21 has an invalid length. [ 983.270985][T15400] netlink: 128 bytes leftover after parsing attributes in process `syz.9.2137'. [ 983.271014][T15400] netlink: 'syz.9.2137': attribute type 4 has an invalid length. [ 983.271022][T15400] netlink: 3 bytes leftover after parsing attributes in process `syz.9.2137'. [ 984.190263][ T30] audit: type=1400 audit(1792548922.628:1334): avc: denied { connect } for pid=15396 comm="syz.4.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 985.033262][T15409] netlink: 'syz.3.2140': attribute type 2 has an invalid length. [ 985.033276][T15409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2140'. [ 986.426935][ T30] audit: type=1326 audit(1792548924.888:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.8.2134" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fb9922bbcba code=0x7ffc0000 [ 986.428977][ T30] audit: type=1326 audit(1792548924.888:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.8.2134" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99139f559 code=0x7ffc0000 [ 986.429007][ T30] audit: type=1326 audit(1792548924.888:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.8.2134" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fb9922bbcba code=0x7ffc0000 [ 986.429028][ T30] audit: type=1326 audit(1792548924.888:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.8.2134" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb99139f559 code=0x7ffc0000 [ 986.429049][ T30] audit: type=1326 audit(1792548924.888:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.8.2134" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fb9922bbcba code=0x7ffc0000 [ 986.429069][ T30] audit: type=1326 audit(1792548924.888:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.8.2134" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99139f559 code=0x7ffc0000 [ 986.429090][ T30] audit: type=1326 audit(1792548924.888:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.8.2134" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99139f559 code=0x7ffc0000 [ 986.548944][T15419] FAULT_INJECTION: forcing a failure. [ 986.548944][T15419] name failslab, interval 1, probability 0, space 0, times 0 [ 986.548968][T15419] CPU: 0 UID: 0 PID: 15419 Comm: syz.8.2134 Tainted: G L syzkaller #0 PREEMPT(full) [ 986.548983][T15419] Tainted: [L]=SOFTLOCKUP [ 986.548987][T15419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 986.548994][T15419] Call Trace: [ 986.548999][T15419] [ 986.549003][T15419] dump_stack_lvl+0x100/0x190 [ 986.549025][T15419] should_fail_ex.cold+0x5/0xa [ 986.549041][T15419] should_failslab+0xc2/0x120 [ 986.549058][T15419] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 986.549075][T15419] ? proc_alloc_inode+0x25/0x200 [ 986.549089][T15419] ? __pfx_proc_alloc_inode+0x10/0x10 [ 986.549102][T15419] proc_alloc_inode+0x25/0x200 [ 986.549114][T15419] alloc_inode+0x68/0x250 [ 986.549128][T15419] new_inode+0x22/0x1c0 [ 986.549142][T15419] proc_pid_make_inode+0x22/0x160 [ 986.549156][T15419] proc_ns_dir_lookup+0x25b/0x390 [ 986.549170][T15419] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 986.549182][T15419] lookup_open+0xaff/0x1940 [ 986.549201][T15419] path_openat+0xe7a/0x2430 [ 986.549220][T15419] ? __pfx_path_openat+0x10/0x10 [ 986.549241][T15419] do_file_open+0x20e/0x430 [ 986.549258][T15419] ? __pfx_do_file_open+0x10/0x10 [ 986.549280][T15419] ? __pfx_kfree_link+0x10/0x10 [ 986.549299][T15419] ? _raw_spin_unlock+0x28/0x50 [ 986.549314][T15419] ? alloc_fd+0x471/0x7a0 [ 986.549335][T15419] do_sys_openat2+0x163/0x1d0 [ 986.549346][T15419] ? __pfx_do_sys_openat2+0x10/0x10 [ 986.549363][T15419] __x64_sys_openat+0x12d/0x210 [ 986.549374][T15419] ? __pfx___x64_sys_openat+0x10/0x10 [ 986.549384][T15419] ? ksys_write+0x1ac/0x250 [ 986.549398][T15419] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 986.549416][T15419] do_syscall_64+0x123/0x790 [ 986.549434][T15419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.549446][T15419] RIP: 0033:0x7fb99135fd8e [ 986.549455][T15419] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 986.549467][T15419] RSP: 002b:00007fb9922b3f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 986.549477][T15419] RAX: ffffffffffffffda RBX: 00007fb9922b46c0 RCX: 00007fb99135fd8e [ 986.549484][T15419] RDX: 0000000000000000 RSI: 00007fb99143624e RDI: ffffffffffffff9c [ 986.549491][T15419] RBP: 00007fb9922b4090 R08: 0000000000000000 R09: 0000000000000000 [ 986.549498][T15419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 986.549504][T15419] R13: 00007fb991626038 R14: 00007fb991625fa0 R15: 00007ffff054c548 [ 986.549519][T15419] [ 986.608282][ T30] audit: type=1326 audit(1792548925.018:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.8.2134" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fb9922bbcba code=0x7ffc0000 [ 986.608316][ T30] audit: type=1326 audit(1792548925.018:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.8.2134" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb99135fd8e code=0x7ffc0000 [ 986.608339][ T30] audit: type=1326 audit(1792548925.018:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.8.2134" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb99135fd8e code=0x7ffc0000 [ 987.667111][T15424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=15424 comm=syz.4.2142 [ 987.719259][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.719300][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 988.256521][T15438] cgroup_mt_check_v1: 55 callbacks suppressed [ 988.256538][T15438] xt_cgroup: no path or classid specified [ 989.249439][T15444] busy [ 989.282492][T15444] netlink: 'syz.3.2151': attribute type 21 has an invalid length. [ 989.282509][T15444] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2151'. [ 989.282539][T15444] netlink: 'syz.3.2151': attribute type 4 has an invalid length. [ 989.282547][T15444] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2151'. [ 989.407622][ T2615] block nbd3: Possible stuck request ffff888029560000: control (read@0,4096B). Runtime 90 seconds [ 989.447199][T15452] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 991.189099][T15464] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 992.050416][T10965] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 992.201252][T10965] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 992.202068][T10965] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 992.202084][T10965] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 992.202103][T10965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.503654][T15466] futex_wake_op: syz.3.2157 tries to shift op by 144; fix this program [ 993.183078][T10965] usb 4-1: USB disconnect, device number 63 [ 993.497711][T15477] netlink: 'syz.4.2162': attribute type 21 has an invalid length. [ 993.497749][T15477] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2162'. [ 993.497789][T15477] netlink: 'syz.4.2162': attribute type 4 has an invalid length. [ 993.497796][T15477] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2162'. [ 993.901978][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 993.901992][ T30] audit: type=1400 audit(1792548932.268:1380): avc: denied { audit_write } for pid=15486 comm="syz.4.2165" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 993.963807][ T30] audit: type=1400 audit(1792548932.324:1381): avc: denied { watch watch_reads } for pid=15486 comm="syz.4.2165" path="/" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 994.372569][T15494] bridge_slave_0: left allmulticast mode [ 994.372586][T15494] bridge_slave_0: left promiscuous mode [ 994.372683][T15494] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.419519][T15496] FAULT_INJECTION: forcing a failure. [ 994.419519][T15496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 994.419541][T15496] CPU: 0 UID: 0 PID: 15496 Comm: syz.4.2166 Tainted: G L syzkaller #0 PREEMPT(full) [ 994.419556][T15496] Tainted: [L]=SOFTLOCKUP [ 994.419561][T15496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 994.419568][T15496] Call Trace: [ 994.419572][T15496] [ 994.419577][T15496] dump_stack_lvl+0x100/0x190 [ 994.419597][T15496] should_fail_ex.cold+0x5/0xa [ 994.419619][T15496] _copy_to_user+0x32/0xd0 [ 994.419637][T15496] simple_read_from_buffer+0xcb/0x170 [ 994.419657][T15496] proc_fail_nth_read+0x1af/0x230 [ 994.419675][T15496] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 994.419694][T15496] ? rw_verify_area+0xce/0x6d0 [ 994.419706][T15496] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 994.419725][T15496] vfs_read+0x1e4/0xb40 [ 994.419739][T15496] ? lock_acquire+0x1d1/0x380 [ 994.419753][T15496] ? __fget_files+0x34/0x3d0 [ 994.419768][T15496] ? __pfx_vfs_read+0x10/0x10 [ 994.419781][T15496] ? find_held_lock+0x2b/0x80 [ 994.419798][T15496] ? __fget_files+0x215/0x3d0 [ 994.419817][T15496] ? __fget_files+0x21f/0x3d0 [ 994.419837][T15496] ksys_read+0x12a/0x250 [ 994.419851][T15496] ? __pfx_ksys_read+0x10/0x10 [ 994.419863][T15496] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 994.419880][T15496] do_syscall_64+0x123/0x790 [ 994.419899][T15496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.419911][T15496] RIP: 0033:0x7f27f875fd8e [ 994.419922][T15496] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 994.419932][T15496] RSP: 002b:00007f27f968dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 994.419944][T15496] RAX: ffffffffffffffda RBX: 00007f27f968e6c0 RCX: 00007f27f875fd8e [ 994.419951][T15496] RDX: 000000000000000f RSI: 00007f27f968e0a0 RDI: 000000000000000b [ 994.419958][T15496] RBP: 00007f27f968e090 R08: 0000000000000000 R09: 0000000000000000 [ 994.419964][T15496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 994.419971][T15496] R13: 00007f27f8a263f8 R14: 00007f27f8a26360 R15: 00007ffcefc62bb8 [ 994.419986][T15496] [ 994.700298][T15494] bridge_slave_1: left allmulticast mode [ 994.700316][T15494] bridge_slave_1: left promiscuous mode [ 994.700429][T15494] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.751006][T15494] bond0: (slave bond_slave_0): Releasing backup interface [ 994.811808][T15494] bond0: (slave bond_slave_1): Releasing backup interface [ 994.877346][T15494] team0: Port device team_slave_0 removed [ 994.905423][T15494] team0: Port device team_slave_1 removed [ 994.924493][T15494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 994.930975][T15494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.964172][T15494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 994.964189][T15494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.966186][T15494] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 995.116342][T15497] FAULT_INJECTION: forcing a failure. [ 995.116342][T15497] name failslab, interval 1, probability 0, space 0, times 0 [ 995.116390][T15497] CPU: 0 UID: 0 PID: 15497 Comm: syz.3.2164 Tainted: G L syzkaller #0 PREEMPT(full) [ 995.116408][T15497] Tainted: [L]=SOFTLOCKUP [ 995.116413][T15497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 995.116420][T15497] Call Trace: [ 995.116425][T15497] [ 995.116430][T15497] dump_stack_lvl+0x100/0x190 [ 995.116453][T15497] should_fail_ex.cold+0x5/0xa [ 995.116469][T15497] should_failslab+0xc2/0x120 [ 995.116489][T15497] __kmalloc_cache_noprof+0x91/0x6d0 [ 995.116501][T15497] ? do_raw_spin_lock+0x128/0x260 [ 995.116517][T15497] ? alloc_fdtable+0xbd/0x2d0 [ 995.116535][T15497] alloc_fdtable+0xbd/0x2d0 [ 995.116552][T15497] dup_fd+0xa1e/0xd90 [ 995.116568][T15497] ? copy_fs_struct+0x29b/0x340 [ 995.116585][T15497] ? do_raw_spin_unlock+0x145/0x1e0 [ 995.116607][T15497] unshare_fd+0xd6/0x140 [ 995.116624][T15497] ksys_unshare+0x3c7/0x980 [ 995.116638][T15497] ? __pfx_ksys_unshare+0x10/0x10 [ 995.116653][T15497] ? __x64_sys_clock_gettime+0x189/0x270 [ 995.116666][T15497] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 995.116683][T15497] __x64_sys_unshare+0x31/0x40 [ 995.116697][T15497] do_syscall_64+0x123/0x790 [ 995.116717][T15497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.116729][T15497] RIP: 0033:0x7f265179f559 [ 995.116739][T15497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.116749][T15497] RSP: 002b:00007f2652721028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 995.116761][T15497] RAX: ffffffffffffffda RBX: 00007f2651a26090 RCX: 00007f265179f559 [ 995.116768][T15497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 995.116775][T15497] RBP: 00007f2651836b20 R08: 0000000000000000 R09: 0000000000000000 [ 995.116782][T15497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 995.116788][T15497] R13: 00007f2651a26128 R14: 00007f2651a26090 R15: 00007ffc26b48128 [ 995.116802][T15497] [ 995.465151][T15506] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 995.465168][T15506] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 995.466318][T15506] vhci_hcd vhci_hcd.0: Device attached [ 995.470331][T15506] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 995.470348][T15506] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 995.470367][T15506] vhci_hcd vhci_hcd.0: Device attached [ 995.518581][T15506] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(8) [ 995.518598][T15506] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 995.518618][T15506] vhci_hcd vhci_hcd.0: Device attached [ 995.523665][T15506] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(10) [ 995.523682][T15506] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 995.523701][T15506] vhci_hcd vhci_hcd.0: Device attached [ 995.647782][T15506] snd_dummy snd_dummy.0: control 0:5:-2:syz0:245 is already present [ 995.776935][T15513] vhci_hcd: connection closed [ 995.777856][T15511] vhci_hcd: connection closed [ 995.777952][T15509] vhci_hcd: connection closed [ 995.778031][T15507] vhci_hcd: connection closed [ 995.806885][ T5812] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 995.811804][T15508] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 995.869715][ T5954] vhci_hcd vhci_hcd.6: stop threads [ 995.871075][ T5954] vhci_hcd vhci_hcd.6: release socket [ 995.900981][ T5954] vhci_hcd vhci_hcd.6: disconnect device [ 995.917922][ T5954] vhci_hcd vhci_hcd.6: stop threads [ 995.917939][ T5954] vhci_hcd vhci_hcd.6: release socket [ 995.917968][ T5954] vhci_hcd vhci_hcd.6: disconnect device [ 995.920054][ T5954] vhci_hcd vhci_hcd.6: stop threads [ 995.920066][ T5954] vhci_hcd vhci_hcd.6: release socket [ 995.955049][ T5954] vhci_hcd vhci_hcd.6: disconnect device [ 995.957940][ T5954] vhci_hcd vhci_hcd.6: stop threads [ 995.957955][ T5954] vhci_hcd vhci_hcd.6: release socket [ 995.957985][ T5954] vhci_hcd vhci_hcd.6: disconnect device [ 996.288298][T15530] trusted_key: encrypted_key: insufficient parameters specified [ 996.328448][T15530] dlm: plock device version mismatch: kernel (1.2.0), user (1.33554432.0) [ 996.348055][T15530] FAULT_INJECTION: forcing a failure. [ 996.348055][T15530] name fail_futex, interval 1, probability 0, space 0, times 0 [ 996.348081][T15530] CPU: 0 UID: 0 PID: 15530 Comm: syz.8.2169 Tainted: G L syzkaller #0 PREEMPT(full) [ 996.348101][T15530] Tainted: [L]=SOFTLOCKUP [ 996.348107][T15530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 996.348115][T15530] Call Trace: [ 996.348120][T15530] [ 996.348125][T15530] dump_stack_lvl+0x100/0x190 [ 996.348147][T15530] should_fail_ex.cold+0x5/0xa [ 996.348163][T15530] get_futex_key+0x1c9/0x13e0 [ 996.348184][T15530] ? __pfx_get_futex_key+0x10/0x10 [ 996.348199][T15530] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 996.348216][T15530] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 996.348234][T15530] futex_wait_setup+0x91/0x540 [ 996.348250][T15530] __futex_wait+0x19f/0x360 [ 996.348263][T15530] ? __pfx___futex_wait+0x10/0x10 [ 996.348275][T15530] ? __pfx_try_to_wake_up+0x10/0x10 [ 996.348290][T15530] ? futex_hash+0x311/0x400 [ 996.348309][T15530] ? __pfx_futex_wake_mark+0x10/0x10 [ 996.348323][T15530] ? find_held_lock+0x2b/0x80 [ 996.348340][T15530] ? futex_wake+0x4ea/0x5e0 [ 996.348357][T15530] futex_wait+0xe6/0x370 [ 996.348369][T15530] ? __pfx_futex_wait+0x10/0x10 [ 996.348384][T15530] ? __might_fault+0xc5/0x140 [ 996.348396][T15530] ? find_held_lock+0x2b/0x80 [ 996.348412][T15530] ? __might_fault+0xc5/0x140 [ 996.348425][T15530] do_futex+0x265/0x440 [ 996.348442][T15530] ? __pfx_do_futex+0x10/0x10 [ 996.348458][T15530] ? _copy_to_user+0xaf/0xd0 [ 996.348478][T15530] __x64_sys_futex+0x34f/0x4d0 [ 996.348497][T15530] ? __pfx___x64_sys_futex+0x10/0x10 [ 996.348514][T15530] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 996.348531][T15530] do_syscall_64+0x123/0x790 [ 996.348549][T15530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.348564][T15530] RIP: 0033:0x7fb99139f559 [ 996.348574][T15530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.348586][T15530] RSP: 002b:00007fb9922b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 996.348597][T15530] RAX: ffffffffffffffda RBX: 00007fb991625fa8 RCX: 00007fb99139f559 [ 996.348605][T15530] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb991625fa8 [ 996.348611][T15530] RBP: 00007fb991625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 996.348618][T15530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.348625][T15530] R13: 00007fb991626038 R14: 00007ffff054c460 R15: 00007ffff054c548 [ 996.348647][T15530] [ 996.723438][T15531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.744665][T15531] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.775902][T15531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.808783][T10965] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 996.862135][T15531] bridge_slave_0: left allmulticast mode [ 996.862155][T15531] bridge_slave_0: left promiscuous mode [ 996.864760][T15531] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.916329][T15531] bridge_slave_1: left allmulticast mode [ 996.916345][T15531] bridge_slave_1: left promiscuous mode [ 996.916436][T15531] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.958480][T15531] bond0: (slave bond_slave_0): Releasing backup interface [ 996.976576][T10965] usb 9-1: Using ep0 maxpacket: 32 [ 996.977399][T10965] usb 9-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=8e.2d [ 996.978830][T10965] usb 9-1: config 0 has an invalid interface number: 16 but max is 0 [ 996.978846][T10965] usb 9-1: config 0 has no interface number 0 [ 996.978865][T10965] usb 9-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 996.978879][T10965] usb 9-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 155 [ 997.038414][T10965] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.038432][T10965] usb 9-1: Product: syz [ 997.038441][T10965] usb 9-1: Manufacturer: syz [ 997.038474][T10965] usb 9-1: SerialNumber: syz [ 997.068476][T10965] usb 9-1: config 0 descriptor?? [ 997.068823][T15531] bond0: (slave bond_slave_1): Releasing backup interface [ 997.069152][T15532] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 997.069258][T15532] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 997.128239][T10965] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 997.159993][T15531] team0: Port device team_slave_0 removed [ 997.175475][ T30] audit: type=1400 audit(1792548935.317:1382): avc: denied { read } for pid=15539 comm="syz.4.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 997.227410][ T30] audit: type=1400 audit(1792548935.383:1383): avc: denied { shutdown } for pid=15539 comm="syz.4.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 997.279762][T15540] [U]  [ 997.279779][T15540] [U] K{‘ [ 997.279842][T15540] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 997.280153][T15540] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 997.280271][T15540] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 997.280751][T15540] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 997.283615][T15531] team0: Port device team_slave_1 removed [ 997.288443][T15531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 997.288492][T15531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 997.288500][T15531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.289803][T15540] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 997.289949][T15540] [U] ܾ˜4B`Ë—HÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 997.290081][T15540] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 997.290376][T15540] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`Ʀ\ [ 997.466244][T15540] [U] M¢XÎÂ"Ä{;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 997.466400][T15540] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 997.466450][T15540] [U] 22½“Æ©ÐÛ©X?0;3U± [ 997.501601][T15540] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 997.663505][T15540] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 997.663603][T15540] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 997.663660][T15540] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 997.663805][T15540] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 997.663820][T15540] [U] ¹ EC [ 997.663952][T15540] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 997.665343][T15539] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 997.671324][T15531] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 997.784639][ T5338] lo speed is unknown, defaulting to 1000 [ 997.824994][ T5338] syz2: Port: 1 Link ACTIVE [ 997.860371][T10965] usb 9-1: USB disconnect, device number 24 [ 997.975154][T13921] udevd[13921]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 998.119541][T15547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2172'. [ 998.657958][T10965] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 998.787223][ T5800] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 998.830711][T10965] usb 7-1: unable to get BOS descriptor or descriptor too short [ 998.831156][T10965] usb 7-1: not running at top speed; connect to a high speed hub [ 998.831172][T10965] usb 7-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 998.832000][T10965] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 998.836060][T10965] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.836075][T10965] usb 7-1: Product: syz [ 998.836085][T10965] usb 7-1: Manufacturer: syz [ 998.836112][T10965] usb 7-1: SerialNumber: syz [ 998.913210][T15550] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 998.964658][ T5338] usb 9-1: new low-speed USB device number 25 using dummy_hcd [ 998.979096][ T5800] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 998.979980][ T5800] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 998.980038][ T5800] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 998.981741][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.981755][ T5800] usb 4-1: Product: syz [ 998.981798][ T5800] usb 4-1: Manufacturer: syz [ 998.981807][ T5800] usb 4-1: SerialNumber: syz [ 998.985460][ T5800] rtl8150 4-1:1.0: couldn't find required endpoints [ 998.985611][ T5800] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 999.155626][ T5338] usb 9-1: unable to get BOS descriptor or descriptor too short [ 999.155654][ T5338] usb 9-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 999.179188][ T5338] usb 9-1: config 142 has an invalid interface number: 251 but max is 0 [ 999.179206][ T5338] usb 9-1: config 142 has no interface number 0 [ 999.179227][ T5338] usb 9-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 999.179241][ T5338] usb 9-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 999.179254][ T5338] usb 9-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 999.179266][ T5338] usb 9-1: config 142 interface 251 has no altsetting 0 [ 999.199238][T10965] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 999.257424][ T5338] usb 9-1: string descriptor 0 read error: -22 [ 999.257487][ T5338] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.263701][T15554] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 999.263756][T15554] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 999.300772][ T5338] cypress_m8 9-1:142.251: HID->COM RS232 Adapter converter detected [ 999.325055][ T5338] usb 9-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 999.357294][ T5338] usb 4-1: USB disconnect, device number 64 [ 1000.098399][T10965] usb 7-1: USB disconnect, device number 46 [ 1000.259650][T13934] udevd[13934]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1000.562890][T15554] cyphidcom ttyUSB0: cypress_serial_control - failed sending serial line settings - -32 [ 1000.562911][T15554] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 1000.563132][ C0] usb 9-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 1000.647793][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1000.651868][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1000.652566][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1000.653103][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1000.653398][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1000.834654][T15568] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2179'. [ 1000.864849][ T5338] usb 9-1: USB disconnect, device number 25 [ 1000.874215][ T1487] IPVS: starting estimator thread 0... [ 1000.889186][T15568] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2179'. [ 1000.903028][ T5338] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 1000.903297][ T5338] cypress_m8 9-1:142.251: device disconnected [ 1000.967637][T15570] IPVS: using max 22 ests per chain, 52800 per kthread [ 1001.106526][ T30] audit: type=1400 audit(1792548939.013:1384): avc: denied { setopt } for pid=15572 comm="syz.6.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1001.115293][T15402] syz_tun (unregistering): left allmulticast mode [ 1001.320057][ T5812] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1001.362472][ T5338] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1001.383336][ T30] audit: type=1326 audit(1792548939.265:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15578 comm="syz.6.2182" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7f84d7fa7cba code=0x0 [ 1001.421834][T15522] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.464269][T15580] FAULT_INJECTION: forcing a failure. [ 1001.464269][T15580] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.464293][T15580] CPU: 0 UID: 0 PID: 15580 Comm: syz.6.2182 Tainted: G L syzkaller #0 PREEMPT(full) [ 1001.464308][T15580] Tainted: [L]=SOFTLOCKUP [ 1001.464312][T15580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1001.464319][T15580] Call Trace: [ 1001.464323][T15580] [ 1001.464330][T15580] dump_stack_lvl+0x100/0x190 [ 1001.464352][T15580] should_fail_ex.cold+0x5/0xa [ 1001.464368][T15580] should_failslab+0xc2/0x120 [ 1001.464386][T15580] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1001.464403][T15580] ? __inet_hash_connect+0x6da/0x2000 [ 1001.464419][T15580] __inet_hash_connect+0x6da/0x2000 [ 1001.464436][T15580] ? __pfx___inet6_check_established+0x10/0x10 [ 1001.464456][T15580] ? __pfx___inet_hash_connect+0x10/0x10 [ 1001.464469][T15580] ? inet6_ehashfn+0x25/0x3e0 [ 1001.464488][T15580] ? inet6_hash_connect+0xe7/0x180 [ 1001.464506][T15580] tcp_v6_connect+0x166f/0x2660 [ 1001.464523][T15580] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1001.464540][T15580] __inet_stream_connect+0x208/0xff0 [ 1001.464562][T15580] ? __pfx___inet_stream_connect+0x10/0x10 [ 1001.464578][T15580] ? kasan_save_track+0x14/0x30 [ 1001.464593][T15580] ? __kasan_kmalloc+0xaa/0xb0 [ 1001.464609][T15580] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1001.464621][T15580] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 1001.464634][T15580] tcp_sendmsg_fastopen+0x3ed/0x750 [ 1001.464654][T15580] tcp_sendmsg_locked+0x27da/0x4420 [ 1001.464669][T15580] ? __lock_acquire+0x5c0/0x1f40 [ 1001.464686][T15580] ? reacquire_held_locks+0xdd/0x1f0 [ 1001.464699][T15580] ? release_sock+0x21/0x280 [ 1001.464714][T15580] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1001.464725][T15580] ? lock_acquire+0x1d1/0x380 [ 1001.464739][T15580] ? do_raw_spin_lock+0x128/0x260 [ 1001.464755][T15580] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1001.464775][T15580] ? __local_bh_enable_ip+0xa5/0x120 [ 1001.464790][T15580] tcp_sendmsg+0x2e/0x50 [ 1001.464801][T15580] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1001.464814][T15580] inet6_sendmsg+0xb9/0x140 [ 1001.464826][T15580] __sys_sendto+0x36d/0x4e0 [ 1001.464838][T15580] ? __pfx___sys_sendto+0x10/0x10 [ 1001.464859][T15580] ? __x64_sys_clock_gettime+0x189/0x270 [ 1001.464871][T15580] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 1001.464885][T15580] __x64_sys_sendto+0xe0/0x1c0 [ 1001.464895][T15580] ? do_syscall_64+0xae/0x790 [ 1001.464911][T15580] ? lockdep_hardirqs_on+0x7d/0x110 [ 1001.464928][T15580] do_syscall_64+0x123/0x790 [ 1001.464946][T15580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.464958][T15580] RIP: 0033:0x7f84d719f559 [ 1001.464967][T15580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.464978][T15580] RSP: 002b:00007f84d7f7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1001.464991][T15580] RAX: ffffffffffffffda RBX: 00007f84d7426090 RCX: 00007f84d719f559 [ 1001.464999][T15580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1001.465006][T15580] RBP: 00007f84d7236b20 R08: 0000200000000480 R09: 000000000000001c [ 1001.465012][T15580] R10: 0000000024000045 R11: 0000000000000246 R12: 0000000000000000 [ 1001.465019][T15580] R13: 00007f84d7426128 R14: 00007f84d7426090 R15: 00007ffcb6f15de8 [ 1001.465033][T15580] [ 1001.531862][ T5338] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1001.543780][ T5338] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.543795][ T5338] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1001.569584][ T5338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.569600][ T5338] usb 4-1: Product: syz [ 1001.569609][ T5338] usb 4-1: Manufacturer: syz [ 1001.569617][ T5338] usb 4-1: SerialNumber: syz [ 1002.368843][T15522] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.869815][ T5605] Bluetooth: hci0: command tx timeout [ 1003.309805][T15522] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.755941][T15522] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.866061][T15535] usb 4-1: USB disconnect, device number 65 [ 1005.093461][ T5605] Bluetooth: hci0: command tx timeout [ 1005.123997][T15562] rxe_eth0 speed is unknown, defaulting to 1000 [ 1005.265026][T15605] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1005.327799][ T5812] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1005.489817][ T5812] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1005.494023][ T5812] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.494050][ T5812] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1005.494065][ T5812] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1005.494086][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.688695][T15522] bridge_slave_1: left allmulticast mode [ 1005.688714][T15522] bridge_slave_1: left promiscuous mode [ 1005.688866][T15522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.719082][T15522] bridge_slave_0: left allmulticast mode [ 1005.719100][T15522] bridge_slave_0: left promiscuous mode [ 1005.719250][T15522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.107473][T15621] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2190'. [ 1007.141820][ T5812] cxacru 4-1:1.0: send of cm 0x91 failed (-71) [ 1007.141839][ T5812] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1007.141846][ T5812] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1007.142828][ T5812] cxacru 4-1:1.0: probe with driver cxacru failed with error -71 [ 1007.204107][ T5812] usb 4-1: USB disconnect, device number 66 [ 1007.275333][T15522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1007.297323][T15522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1007.301007][T15522] bond0 (unregistering): Released all slaves [ 1007.322760][ T5605] Bluetooth: hci0: command tx timeout [ 1007.342917][T15562] lo speed is unknown, defaulting to 1000 [ 1007.384310][T15522] Uý: left promiscuous mode [ 1007.487900][ T30] audit: type=1400 audit(1792548944.972:1386): avc: denied { write } for pid=15615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1007.600494][T15637] FAULT_INJECTION: forcing a failure. [ 1007.600494][T15637] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1007.600518][T15637] CPU: 0 UID: 0 PID: 15637 Comm: syz.6.2192 Tainted: G L syzkaller #0 PREEMPT(full) [ 1007.600535][T15637] Tainted: [L]=SOFTLOCKUP [ 1007.600540][T15637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1007.600547][T15637] Call Trace: [ 1007.600552][T15637] [ 1007.600558][T15637] dump_stack_lvl+0x100/0x190 [ 1007.600578][T15637] should_fail_ex.cold+0x5/0xa [ 1007.600596][T15637] get_futex_key+0x1c9/0x13e0 [ 1007.600615][T15637] ? __pfx_get_futex_key+0x10/0x10 [ 1007.600630][T15637] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 1007.600647][T15637] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 1007.600665][T15637] futex_wait_setup+0x91/0x540 [ 1007.600681][T15637] __futex_wait+0x19f/0x360 [ 1007.600693][T15637] ? __pfx___futex_wait+0x10/0x10 [ 1007.600704][T15637] ? __pfx_try_to_wake_up+0x10/0x10 [ 1007.600718][T15637] ? futex_hash+0x311/0x400 [ 1007.600735][T15637] ? __pfx_futex_wake_mark+0x10/0x10 [ 1007.600749][T15637] ? find_held_lock+0x2b/0x80 [ 1007.600765][T15637] ? futex_wake+0x4ea/0x5e0 [ 1007.600780][T15637] futex_wait+0xe6/0x370 [ 1007.600792][T15637] ? __pfx_futex_wait+0x10/0x10 [ 1007.600806][T15637] ? __might_fault+0xc5/0x140 [ 1007.600817][T15637] ? find_held_lock+0x2b/0x80 [ 1007.600833][T15637] ? __might_fault+0xc5/0x140 [ 1007.600846][T15637] do_futex+0x265/0x440 [ 1007.600862][T15637] ? __pfx_do_futex+0x10/0x10 [ 1007.600878][T15637] ? _copy_to_user+0xaf/0xd0 [ 1007.600897][T15637] __x64_sys_futex+0x34f/0x4d0 [ 1007.600915][T15637] ? __pfx___x64_sys_futex+0x10/0x10 [ 1007.600932][T15637] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 1007.600948][T15637] do_syscall_64+0x123/0x790 [ 1007.600970][T15637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.600981][T15637] RIP: 0033:0x7f84d719f559 [ 1007.600991][T15637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.601002][T15637] RSP: 002b:00007f84d7fa00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1007.601016][T15637] RAX: ffffffffffffffda RBX: 00007f84d7425fa8 RCX: 00007f84d719f559 [ 1007.601024][T15637] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f84d7425fa8 [ 1007.601030][T15637] RBP: 00007f84d7425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1007.601037][T15637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1007.601043][T15637] R13: 00007f84d7426038 R14: 00007ffcb6f15d00 R15: 00007ffcb6f15de8 [ 1007.601057][T15637] [ 1008.044106][ T30] audit: type=1400 audit(1792548945.496:1387): avc: denied { write } for pid=15638 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1008.295772][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1009.009326][T15522] hsr_slave_0: left promiscuous mode [ 1009.050342][T15522] hsr_slave_1: left promiscuous mode [ 1009.050799][T15522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1009.050812][T15522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.091375][T15522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.091398][T15522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.151278][T15522] veth1_macvtap: left promiscuous mode [ 1009.151306][T15522] veth0_macvtap: left promiscuous mode [ 1009.151352][T15522] veth1_vlan: left promiscuous mode [ 1009.151368][T15522] veth0_vlan: left promiscuous mode [ 1009.540986][ T5605] Bluetooth: hci0: command tx timeout [ 1009.557617][ T30] audit: type=1400 audit(1792548946.908:1388): avc: denied { write } for pid=15653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1009.820030][ T30] audit: type=1400 audit(1792548947.161:1389): avc: denied { write } for pid=15668 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1009.867813][T15522] team0 (unregistering): Port device team_slave_1 removed [ 1009.907455][T15522] team0 (unregistering): Port device team_slave_0 removed [ 1010.033484][T10965] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1010.163624][T15677] FAULT_INJECTION: forcing a failure. [ 1010.163624][T15677] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.163648][T15677] CPU: 0 UID: 0 PID: 15677 Comm: syz.6.2197 Tainted: G L syzkaller #0 PREEMPT(full) [ 1010.163663][T15677] Tainted: [L]=SOFTLOCKUP [ 1010.163667][T15677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1010.163674][T15677] Call Trace: [ 1010.163679][T15677] [ 1010.163683][T15677] dump_stack_lvl+0x100/0x190 [ 1010.163707][T15677] should_fail_ex.cold+0x5/0xa [ 1010.163728][T15677] should_failslab+0xc2/0x120 [ 1010.163747][T15677] __kmalloc_cache_noprof+0x91/0x6d0 [ 1010.163760][T15677] ? do_raw_spin_lock+0x128/0x260 [ 1010.163776][T15677] ? alloc_fdtable+0xbd/0x2d0 [ 1010.163796][T15677] alloc_fdtable+0xbd/0x2d0 [ 1010.163813][T15677] dup_fd+0xa1e/0xd90 [ 1010.163830][T15677] ? copy_fs_struct+0x29b/0x340 [ 1010.163847][T15677] ? do_raw_spin_unlock+0x145/0x1e0 [ 1010.163865][T15677] unshare_fd+0xd6/0x140 [ 1010.163881][T15677] ksys_unshare+0x3c7/0x980 [ 1010.163895][T15677] ? __pfx_ksys_unshare+0x10/0x10 [ 1010.163910][T15677] ? __x64_sys_clock_gettime+0x189/0x270 [ 1010.163923][T15677] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 1010.163938][T15677] __x64_sys_unshare+0x31/0x40 [ 1010.163952][T15677] do_syscall_64+0x123/0x790 [ 1010.163970][T15677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.163982][T15677] RIP: 0033:0x7f84d719f559 [ 1010.163992][T15677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.164002][T15677] RSP: 002b:00007f84d7f7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1010.164014][T15677] RAX: ffffffffffffffda RBX: 00007f84d7426090 RCX: 00007f84d719f559 [ 1010.164022][T15677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 1010.164028][T15677] RBP: 00007f84d7236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1010.164035][T15677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1010.164041][T15677] R13: 00007f84d7426128 R14: 00007f84d7426090 R15: 00007ffcb6f15de8 [ 1010.164056][T15677] [ 1010.198146][T10965] usb 9-1: Using ep0 maxpacket: 32 [ 1010.198879][T10965] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1010.216589][T10965] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1010.216609][T10965] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1010.216622][T10965] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1010.262905][T10965] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.262923][T10965] usb 9-1: Product: syz [ 1010.262932][T10965] usb 9-1: Manufacturer: syz [ 1010.262940][T10965] usb 9-1: SerialNumber: syz [ 1010.285351][T10965] usb 9-1: config 0 descriptor?? [ 1010.493765][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1010.632917][T15562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.635097][T15562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.635225][T15562] bridge_slave_0: entered allmulticast mode [ 1010.668177][T15562] bridge_slave_0: entered promiscuous mode [ 1010.683571][T15562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.683672][T15562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.683798][T15562] bridge_slave_1: entered allmulticast mode [ 1010.692264][T15562] bridge_slave_1: entered promiscuous mode [ 1010.775689][T15684] netlink: 'syz.3.2201': attribute type 1 has an invalid length. [ 1010.830139][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2201'. [ 1010.857168][T15562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.877509][T15562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1011.933503][T10965] gs_usb 9-1:0.0: Couldn't get device config: (err=-110) [ 1011.933535][T10965] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -110 [ 1012.470132][T15562] team0: Port device team_slave_0 added [ 1012.479791][T15562] team0: Port device team_slave_1 added [ 1012.589203][T15562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.589214][T15562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.589228][T15562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.589985][T15562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.589993][T15562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.590006][T15562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1012.814542][T15562] hsr_slave_0: entered promiscuous mode [ 1012.827526][T15562] hsr_slave_1: entered promiscuous mode [ 1012.893772][ T30] audit: type=1400 audit(1792548950.033:1390): avc: denied { bind } for pid=15698 comm="syz.3.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1013.010521][ T5800] usb 9-1: USB disconnect, device number 26 [ 1013.857464][T15711] netlink: 'syz.3.2208': attribute type 1 has an invalid length. [ 1014.059646][ T30] audit: type=1400 audit(1792548951.118:1391): avc: denied { write } for pid=15696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1014.324409][ T30] audit: type=1400 audit(1792548951.371:1392): avc: denied { write } for pid=15725 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1014.359156][T15727] netlink: 'syz.4.2213': attribute type 2 has an invalid length. [ 1014.359169][T15727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2213'. [ 1014.468302][ T5800] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 1014.680852][ T5800] usb 4-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 1014.860078][ T5800] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1014.860101][ T5800] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1014.860120][ T5800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.769005][T15727] Uý: entered promiscuous mode [ 1015.778211][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1015.778624][T15734] netlink: 'syz.6.2214': attribute type 2 has an invalid length. [ 1015.778671][T15734] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2214'. [ 1016.308182][T15734] Uý: entered promiscuous mode [ 1016.899815][ T5800] pegasus 4-1:1.0: probe with driver pegasus failed with error -121 [ 1017.601939][ T30] audit: type=1326 audit(1792548954.439:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15723 comm="syz.3.2212" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2652749cba code=0x7ffc0000 [ 1017.601978][ T30] audit: type=1326 audit(1792548954.439:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15723 comm="syz.3.2212" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265179f559 code=0x7ffc0000 [ 1017.601999][ T30] audit: type=1326 audit(1792548954.439:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15723 comm="syz.3.2212" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265179f559 code=0x7ffc0000 [ 1017.607732][ T30] audit: type=1326 audit(1792548954.439:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15723 comm="syz.3.2212" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2652749cba code=0x7ffc0000 [ 1017.607765][ T30] audit: type=1326 audit(1792548954.439:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15723 comm="syz.3.2212" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f265179f559 code=0x7ffc0000 [ 1017.607786][ T30] audit: type=1326 audit(1792548954.439:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15723 comm="syz.3.2212" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2652749cba code=0x7ffc0000 [ 1017.607808][ T30] audit: type=1326 audit(1792548954.439:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15723 comm="syz.3.2212" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265179f559 code=0x7ffc0000 [ 1018.665371][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 1018.665384][ T30] audit: type=1400 audit(1792548955.431:1447): avc: denied { setopt } for pid=15758 comm="syz.6.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1018.756909][T15761] netlink: 'syz.6.2216': attribute type 4 has an invalid length. [ 1018.805205][T15761] netlink: 'syz.6.2216': attribute type 4 has an invalid length. [ 1018.829492][ T30] audit: type=1400 audit(1792548955.590:1448): avc: denied { write } for pid=15740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.022343][ T30] audit: type=1400 audit(1792548955.768:1449): avc: denied { write } for pid=15769 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.149903][T15535] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1019.176050][T15537] usb 4-1: USB disconnect, device number 67 [ 1019.251991][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1019.321392][T15535] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1019.323826][T15535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.323843][T15535] usb 5-1: Product: syz [ 1019.323851][T15535] usb 5-1: Manufacturer: syz [ 1019.323859][T15535] usb 5-1: SerialNumber: syz [ 1019.425119][T15562] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1019.489775][T15562] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1019.490247][T15562] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1019.516493][T15562] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1019.521021][T15562] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1019.551329][T15562] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1019.563737][T15562] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1019.570153][T15535] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1019.629858][T15562] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1019.914948][T15562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.981114][T15562] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.867955][T15535] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1020.868139][T15535] ath9k_htc: Failed to initialize the device [ 1021.063180][T15522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.063253][T15522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.569846][T15521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.569896][T15521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.673822][T15394] block nbd3: Possible stuck request ffff888029560000: control (read@0,4096B). Runtime 120 seconds [ 1021.695753][T15535] usb 5-1: ath9k_htc: USB layer deinitialized [ 1021.982602][ T5812] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 1021.986236][ T30] audit: type=1400 audit(1792548958.537:1450): avc: denied { write } for pid=15776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1022.111225][T15535] usb 5-1: USB disconnect, device number 11 [ 1022.145165][ T5812] usb 9-1: not running at top speed; connect to a high speed hub [ 1022.145188][ T5812] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1022.147651][ T5812] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1022.149583][ T5812] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.149600][ T5812] usb 9-1: Product: ᵫⱻî¯ï£¸ì‰‘훳Õ㧨쮂é€ï¿¿ [ 1022.149610][ T5812] usb 9-1: Manufacturer: ⎦ꃺ릉ሧ⩎ᶿ⓱̖ᜉá˜ÔºåŠœãžºè¾˜å¦ï®—åŠå‡›ì‘ Å…ꣾïœê±–ǰ줷嫱è¤î¤”䰛㚅âŸè½´é›±âŠžåº™á‹§ï¢¤ã°—襷㗯団兜淄਋귶競㌡ꌕç½ë‹ƒç‹ä…Ÿä†³îœ†è‰”é¹è¥ªë¼¼É‘⹥⤫â½ä·„䢞औꋣ꧆鷃ꎾ磡㈿熑᧋ࣥ陳ᆒ醥噚皯ç¡ï‚‰é…«è¥ä™¿ïŸ‚æ—‡ä«Æ˜ [ 1022.149628][ T5812] usb 9-1: SerialNumber: ï“¿ [ 1022.307100][T15819] netlink: 'syz.6.2224': attribute type 2 has an invalid length. [ 1022.307115][T15819] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2224'. [ 1022.341837][ T30] audit: type=1400 audit(1792548958.874:1451): avc: denied { write } for pid=15816 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1023.885908][ T5812] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 1023.885933][ T5812] cdc_ncm 9-1:1.0: bind() failure [ 1023.913406][ T5812] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1023.913431][ T5812] cdc_ncm 9-1:1.1: bind() failure [ 1023.963750][ T5812] usb 9-1: USB disconnect, device number 27 [ 1025.086604][T15562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.139182][T15846] busy [ 1025.181926][T15846] netlink: 'syz.8.2232': attribute type 21 has an invalid length. [ 1025.181943][T15846] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2232'. [ 1025.181971][T15846] netlink: 'syz.8.2232': attribute type 4 has an invalid length. [ 1025.181978][T15846] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2232'. [ 1025.378447][T15856] Format for deleting device is "id" (uint). [ 1025.421844][T15860] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2236'. [ 1025.479567][ T30] audit: type=1400 audit(1792548961.811:1452): avc: denied { write } for pid=15830 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1025.484122][ T30] audit: type=1400 audit(1792548961.811:1453): avc: denied { setopt } for pid=15859 comm="syz.6.2234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1025.787566][T15535] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1026.068301][T15535] usb 4-1: Using ep0 maxpacket: 16 [ 1026.103180][T15535] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1026.264580][T15535] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1026.363586][T10965] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 1026.505756][T15535] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.505775][T15535] usb 4-1: Product: syz [ 1026.505784][T15535] usb 4-1: Manufacturer: syz [ 1026.505793][T15535] usb 4-1: SerialNumber: syz [ 1026.574463][T15535] usb 4-1: config 0 descriptor?? [ 1026.784377][T15535] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1026.860176][T10965] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1026.901670][T10965] usb 9-1: not running at top speed; connect to a high speed hub [ 1026.901693][T10965] usb 9-1: New USB device found, idVendor=0582, idProduct=0065, bcdDevice= 0.40 [ 1027.097417][T10965] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1027.227294][T10965] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.227315][T10965] usb 9-1: Product: syz [ 1027.227324][T10965] usb 9-1: Manufacturer: syz [ 1027.227333][T10965] usb 9-1: SerialNumber: syz [ 1027.239680][T15868] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1027.290357][T15535] usb 4-1: USB disconnect, device number 68 [ 1027.368495][ T5338] libceph: connect (1)[c::]:6789 error -101 [ 1027.368635][ T5338] libceph: mon0 (1)[c::]:6789 connect error [ 1027.408930][ T30] audit: type=1400 audit(1792548963.607:1454): avc: denied { write } for pid=15871 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1027.649659][ T5338] libceph: connect (1)[c::]:6789 error -101 [ 1027.649757][ T5338] libceph: mon0 (1)[c::]:6789 connect error [ 1027.699955][T15866] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2237'. [ 1027.749607][T15562] veth0_vlan: entered promiscuous mode [ 1027.795181][T15562] veth1_vlan: entered promiscuous mode [ 1027.819301][T10965] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1027.824419][T10965] usb 9-1: invalid MIDI in EP 0 [ 1027.895235][T15562] veth0_macvtap: entered promiscuous mode [ 1027.915396][T15562] veth1_macvtap: entered promiscuous mode [ 1027.921247][T15869] ceph: No mds server is up or the cluster is laggy [ 1028.008342][T15562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1028.028258][T15562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1028.110531][T15516] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.113146][ T1171] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.113174][ T1171] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.113194][ T1171] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.115081][T15888] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2238'. [ 1028.351140][T10965] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1028.385887][T15894] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2241'. [ 1028.392982][T10965] usb 9-1: USB disconnect, device number 28 [ 1028.463667][ T1487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.463679][ T1487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.502709][ T5812] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1028.526420][T13301] udevd[13301]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1028.605798][T15898] input: syz0 as /devices/virtual/input/input204 [ 1028.627510][T15523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.627525][T15523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.663225][ T5812] usb 5-1: Using ep0 maxpacket: 16 [ 1028.665090][ T5812] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1028.669889][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1028.701621][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.701638][ T5812] usb 5-1: Product: syz [ 1028.701647][ T5812] usb 5-1: Manufacturer: syz [ 1028.701655][ T5812] usb 5-1: SerialNumber: syz [ 1028.713040][ T5812] usb 5-1: config 0 descriptor?? [ 1028.758984][ T5812] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1028.837962][T15905] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2240'. [ 1028.916246][ T30] audit: type=1400 audit(1792548965.020:1455): avc: denied { write } for pid=15880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.027994][T15799] usb 5-1: USB disconnect, device number 12 [ 1029.069838][T10965] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1029.130484][ T30] audit: type=1400 audit(1792548965.216:1456): avc: denied { write } for pid=15912 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.156114][ T5812] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1029.225624][T10965] usb 9-1: device descriptor read/64, error -71 [ 1029.324455][ T5812] usb 7-1: Using ep0 maxpacket: 16 [ 1029.325378][ T5812] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1029.326220][ T5812] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1029.328589][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.328603][ T5812] usb 7-1: Product: syz [ 1029.328611][ T5812] usb 7-1: Manufacturer: syz [ 1029.328619][ T5812] usb 7-1: SerialNumber: syz [ 1029.330994][ T5812] usb 7-1: config 0 descriptor?? [ 1029.381671][ T5812] pegasus_notetaker 7-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1029.475245][T10965] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1029.511868][ T30] audit: type=1400 audit(1792548965.581:1457): avc: denied { write } for pid=15917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.591215][ T30] audit: type=1400 audit(1792548965.647:1458): avc: denied { write } for pid=15928 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.617368][T10965] usb 9-1: device descriptor read/64, error -71 [ 1029.653742][T15799] usb 7-1: USB disconnect, device number 47 [ 1029.735541][T10965] usb usb9-port1: attempt power cycle [ 1029.988748][ T30] audit: type=1400 audit(1792548966.030:1459): avc: denied { write } for pid=15931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1030.079252][T15948] lo: entered allmulticast mode [ 1030.096149][T10965] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1030.102352][T15948] dvmrp6: entered allmulticast mode [ 1030.120300][T10965] usb 9-1: device descriptor read/8, error -71 [ 1030.120812][T15946] lo: left allmulticast mode [ 1030.142459][ T30] audit: type=1400 audit(1792548966.171:1460): avc: denied { write } for pid=15947 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1030.172725][T15799] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1030.290091][T15954] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2249'. [ 1030.330475][T15799] usb 5-1: Using ep0 maxpacket: 16 [ 1030.332580][T15799] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1030.334979][T15799] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 1030.334994][T15799] usb 5-1: config 0 has no interface number 0 [ 1030.335013][T15799] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1030.335027][T15799] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1030.336624][T15799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.336637][T15799] usb 5-1: Product: syz [ 1030.336646][T15799] usb 5-1: Manufacturer: syz [ 1030.336655][T15799] usb 5-1: SerialNumber: syz [ 1030.338754][T15799] usb 5-1: config 0 descriptor?? [ 1030.339410][T15939] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1030.339500][T15939] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1030.372059][T10965] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1030.403698][T10965] usb 9-1: device descriptor read/8, error -71 [ 1030.511291][T10965] usb usb9-port1: unable to enumerate USB device [ 1031.434038][T15961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1031.498876][T15733] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1031.525757][T15939] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1031.525853][T15939] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1031.679768][T15733] usb 4-1: Using ep0 maxpacket: 16 [ 1031.680792][T15733] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1031.681675][T15733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1031.702074][T15733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.702091][T15733] usb 4-1: Product: syz [ 1031.702100][T15733] usb 4-1: Manufacturer: syz [ 1031.702108][T15733] usb 4-1: SerialNumber: syz [ 1031.742628][T15733] usb 4-1: config 0 descriptor?? [ 1031.749725][T15733] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1031.777635][T15799] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1031.982572][T15733] usb 4-1: USB disconnect, device number 69 [ 1032.029738][ T30] audit: type=1400 audit(1792548967.939:1461): avc: denied { write } for pid=15952 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.077572][T15973] FAULT_INJECTION: forcing a failure. [ 1032.077572][T15973] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.077596][T15973] CPU: 0 UID: 0 PID: 15973 Comm: syz.5.2254 Tainted: G L syzkaller #0 PREEMPT(full) [ 1032.077613][T15973] Tainted: [L]=SOFTLOCKUP [ 1032.077617][T15973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1032.077624][T15973] Call Trace: [ 1032.077629][T15973] [ 1032.077634][T15973] dump_stack_lvl+0x100/0x190 [ 1032.077656][T15973] should_fail_ex.cold+0x5/0xa [ 1032.077675][T15973] should_failslab+0xc2/0x120 [ 1032.077695][T15973] __kmalloc_node_noprof+0xff/0x880 [ 1032.077711][T15973] ? __get_vm_area_node+0x1ff/0x350 [ 1032.077727][T15973] ? __get_vm_area_node+0x22b/0x350 [ 1032.077742][T15973] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 1032.077762][T15973] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 1032.077779][T15973] ? __pfx_stack_trace_save+0x10/0x10 [ 1032.077797][T15973] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1032.077815][T15973] ? do_syscall_64+0x123/0x790 [ 1032.077833][T15973] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1032.077856][T15973] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1032.077870][T15973] __vmalloc_node_noprof+0xad/0xf0 [ 1032.077887][T15973] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1032.077904][T15973] __vmalloc_noprof+0xa3/0x120 [ 1032.077920][T15973] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1032.077942][T15973] bpf_prog_alloc_no_stats+0x59/0x690 [ 1032.077959][T15973] bpf_prog_alloc+0x3b/0x200 [ 1032.077975][T15973] bpf_prog_create_from_user+0xb4/0x2e0 [ 1032.077991][T15973] ? __pfx_seccomp_check_filter+0x10/0x10 [ 1032.078010][T15973] do_seccomp+0x870/0x27c0 [ 1032.078021][T15973] ? put_timespec64+0xce/0x130 [ 1032.078035][T15973] ? __pfx_put_timespec64+0x10/0x10 [ 1032.078048][T15973] ? __pfx_do_seccomp+0x10/0x10 [ 1032.078060][T15973] ? __x64_sys_clock_gettime+0x189/0x270 [ 1032.078072][T15973] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 1032.078089][T15973] do_syscall_64+0x123/0x790 [ 1032.078109][T15973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.078121][T15973] RIP: 0033:0x7ff34019f559 [ 1032.078131][T15973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.078142][T15973] RSP: 002b:00007ff341057028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1032.078153][T15973] RAX: ffffffffffffffda RBX: 00007ff340425fa0 RCX: 00007ff34019f559 [ 1032.078161][T15973] RDX: 0000200000000040 RSI: 0000000000000008 RDI: 0000000000000001 [ 1032.078167][T15973] RBP: 00007ff340236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1032.078174][T15973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1032.078181][T15973] R13: 00007ff340426038 R14: 00007ff340425fa0 R15: 00007fff650ab838 [ 1032.078196][T15973] [ 1032.078247][T15973] syz.5.2254: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1032.078286][T15973] CPU: 0 UID: 0 PID: 15973 Comm: syz.5.2254 Tainted: G L syzkaller #0 PREEMPT(full) [ 1032.078303][T15973] Tainted: [L]=SOFTLOCKUP [ 1032.078307][T15973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1032.078313][T15973] Call Trace: [ 1032.078317][T15973] [ 1032.078321][T15973] dump_stack_lvl+0x100/0x190 [ 1032.078341][T15973] warn_alloc.cold+0x9e/0xb2 [ 1032.078356][T15973] ? __pfx_warn_alloc+0x10/0x10 [ 1032.078370][T15973] ? dump_stack_lvl+0x17c/0x190 [ 1032.078387][T15973] ? rcu_is_watching+0x13/0xc0 [ 1032.078403][T15973] ? __kasan_kmalloc+0x8a/0xb0 [ 1032.078419][T15973] ? __kmalloc_node_noprof+0x360/0x880 [ 1032.078432][T15973] ? __get_vm_area_node+0x1ff/0x350 [ 1032.078447][T15973] ? __get_vm_area_node+0x22b/0x350 [ 1032.078462][T15973] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 1032.078482][T15973] __vmalloc_node_range_noprof+0x10f4/0x1420 [ 1032.078499][T15973] ? __pfx_stack_trace_save+0x10/0x10 [ 1032.078515][T15973] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1032.078532][T15973] ? do_syscall_64+0x123/0x790 [ 1032.078549][T15973] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1032.078571][T15973] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1032.078587][T15973] __vmalloc_node_noprof+0xad/0xf0 [ 1032.078603][T15973] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1032.078620][T15973] __vmalloc_noprof+0xa3/0x120 [ 1032.078637][T15973] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1032.078658][T15973] bpf_prog_alloc_no_stats+0x59/0x690 [ 1032.078675][T15973] bpf_prog_alloc+0x3b/0x200 [ 1032.078692][T15973] bpf_prog_create_from_user+0xb4/0x2e0 [ 1032.078707][T15973] ? __pfx_seccomp_check_filter+0x10/0x10 [ 1032.078725][T15973] do_seccomp+0x870/0x27c0 [ 1032.078736][T15973] ? put_timespec64+0xce/0x130 [ 1032.078749][T15973] ? __pfx_put_timespec64+0x10/0x10 [ 1032.078762][T15973] ? __pfx_do_seccomp+0x10/0x10 [ 1032.078774][T15973] ? __x64_sys_clock_gettime+0x189/0x270 [ 1032.078786][T15973] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 1032.078802][T15973] do_syscall_64+0x123/0x790 [ 1032.078820][T15973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.078833][T15973] RIP: 0033:0x7ff34019f559 [ 1032.078842][T15973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.078852][T15973] RSP: 002b:00007ff341057028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1032.078862][T15973] RAX: ffffffffffffffda RBX: 00007ff340425fa0 RCX: 00007ff34019f559 [ 1032.078869][T15973] RDX: 0000200000000040 RSI: 0000000000000008 RDI: 0000000000000001 [ 1032.078875][T15973] RBP: 00007ff340236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1032.078882][T15973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1032.078888][T15973] R13: 00007ff340426038 R14: 00007ff340425fa0 R15: 00007fff650ab838 [ 1032.078903][T15973] [ 1032.078944][T15973] Mem-Info: [ 1032.078950][T15973] active_anon:44076 inactive_anon:0 isolated_anon:0 [ 1032.078950][T15973] active_file:219 inactive_file:70501 isolated_file:0 [ 1032.078950][T15973] unevictable:0 dirty:566 writeback:0 [ 1032.078950][T15973] slab_reclaimable:9531 slab_unreclaimable:109697 [ 1032.078950][T15973] mapped:37443 shmem:33438 pagetables:1766 [ 1032.078950][T15973] sec_pagetables:0 bounce:0 [ 1032.078950][T15973] kernel_misc_reclaimable:0 [ 1032.078950][T15973] free:1128101 free_pcp:8506 free_cma:0 [ 1032.078980][T15973] Node 0 active_anon:176304kB inactive_anon:0kB active_file:876kB inactive_file:281804kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149772kB dirty:2264kB writeback:0kB shmem:133752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14272kB pagetables:6904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1032.079011][T15973] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1032.079040][T15973] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1032.079107][T15973] lowmem_reserve[]: 0 2451 2452 2452 2452 [ 1032.079127][T15973] Node 0 DMA32 free:760688kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:176304kB inactive_anon:0kB active_file:876kB inactive_file:281804kB unevictable:0kB writepending:2264kB zspages:0kB present:3129332kB managed:2510840kB mlocked:0kB bounce:0kB free_pcp:34024kB local_pcp:34024kB free_cma:0kB [ 1032.079157][T15973] lowmem_reserve[]: 0 0 0 0 0 [ 1032.079174][T15973] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:60kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1032.079207][T15973] lowmem_reserve[]: 0 0 0 0 0 [ 1032.194782][T15973] Node 1 Normal free:3736356kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1032.194820][T15973] lowmem_reserve[]: 0 0 0 0 0 [ 1032.194880][T15973] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1032.194946][T15973] Node 0 DMA32: 6*4kB (E) 423*8kB (UE) 442*16kB (UE) 1356*32kB (UE) 638*64kB (UME) 365*128kB (UME) 195*256kB (UME) 104*512kB (UME) 20*1024kB (UME) 12*2048kB (UME) 115*4096kB (UM) = 760688kB [ 1032.195073][T15973] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1032.195121][T15973] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 6*16kB (UM) 7*32kB (UM) 11*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 910*4096kB (M) = 3736356kB [ 1032.195245][T15973] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1032.195254][T15973] Node 0 hugepages_total=100 hugepages_free=98 hugepages_surp=0 hugepages_size=2048kB [ 1032.195262][T15973] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1032.195270][T15973] Node 1 hugepages_total=98 hugepages_free=98 hugepages_surp=0 hugepages_size=2048kB [ 1032.195279][T15973] 104037 total pagecache pages [ 1032.195283][T15973] 0 pages in swap cache [ 1032.195288][T15973] Free swap = 124996kB [ 1032.195329][T15973] Total swap = 124996kB [ 1032.195334][T15973] 2097051 pages RAM [ 1032.195338][T15973] 0 pages HighMem/MovableOnly [ 1032.195343][T15973] 437710 pages reserved [ 1032.195346][T15973] 0 pages cma reserved [ 1033.005304][T15975] rxe_eth0 speed is unknown, defaulting to 1000 [ 1033.227651][T15799] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1033.227670][T15799] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1033.227785][T15799] asix 5-1:0.34: probe with driver asix failed with error -71 [ 1033.234769][T15799] usb 5-1: USB disconnect, device number 13 [ 1034.044224][ T30] audit: type=1400 audit(1792548969.819:1462): avc: denied { write } for pid=15976 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1034.393070][T15975] lo speed is unknown, defaulting to 1000 [ 1035.382185][ T30] audit: type=1400 audit(1792548971.073:1463): avc: denied { write } for pid=15994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1035.690056][ T30] audit: type=1400 audit(1792548971.363:1464): avc: denied { write } for pid=16018 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1035.832602][T16028] FAULT_INJECTION: forcing a failure. [ 1035.832602][T16028] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.832627][T16028] CPU: 0 UID: 0 PID: 16028 Comm: syz.4.2265 Tainted: G L syzkaller #0 PREEMPT(full) [ 1035.832644][T16028] Tainted: [L]=SOFTLOCKUP [ 1035.832649][T16028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1035.832657][T16028] Call Trace: [ 1035.832661][T16028] [ 1035.832667][T16028] dump_stack_lvl+0x100/0x190 [ 1035.832689][T16028] should_fail_ex.cold+0x5/0xa [ 1035.832705][T16028] should_failslab+0xc2/0x120 [ 1035.832724][T16028] __kmalloc_noprof+0xfc/0x840 [ 1035.832741][T16028] ? __register_sysctl_table+0xac/0x1650 [ 1035.832759][T16028] __register_sysctl_table+0xac/0x1650 [ 1035.832774][T16028] ? lock_acquire+0x1d1/0x380 [ 1035.832789][T16028] ? __pfx___register_sysctl_table+0x10/0x10 [ 1035.832802][T16028] ? is_module_address+0x5f/0xf0 [ 1035.832817][T16028] ? is_module_address+0x5f/0xf0 [ 1035.832835][T16028] register_net_sysctl_sz+0x325/0x420 [ 1035.832851][T16028] __devinet_sysctl_register+0x1b9/0x360 [ 1035.832869][T16028] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 1035.832887][T16028] ? __asan_memcpy+0x3c/0x60 [ 1035.832901][T16028] devinet_init_net+0x334/0x8d0 [ 1035.832917][T16028] ? __pfx_devinet_init_net+0x10/0x10 [ 1035.832932][T16028] ops_init+0x1e2/0x5f0 [ 1035.832948][T16028] setup_net+0x118/0x3a0 [ 1035.832963][T16028] ? __pfx_setup_net+0x10/0x10 [ 1035.832979][T16028] copy_net_ns+0x345/0x7a0 [ 1035.832994][T16028] create_new_namespaces+0x3ea/0xac0 [ 1035.833012][T16028] unshare_nsproxy_namespaces+0xf2/0x220 [ 1035.833027][T16028] ksys_unshare+0x44f/0x980 [ 1035.833040][T16028] ? __pfx_ksys_unshare+0x10/0x10 [ 1035.833055][T16028] ? __x64_sys_clock_gettime+0x189/0x270 [ 1035.833069][T16028] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 1035.833085][T16028] __x64_sys_unshare+0x31/0x40 [ 1035.833101][T16028] do_syscall_64+0x123/0x790 [ 1035.833128][T16028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.833141][T16028] RIP: 0033:0x7f27f879f559 [ 1035.833155][T16028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.833167][T16028] RSP: 002b:00007f27f9712028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1035.833181][T16028] RAX: ffffffffffffffda RBX: 00007f27f8a25fa0 RCX: 00007f27f879f559 [ 1035.833189][T16028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1035.833196][T16028] RBP: 00007f27f8836b20 R08: 0000000000000000 R09: 0000000000000000 [ 1035.833204][T16028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.833211][T16028] R13: 00007f27f8a26038 R14: 00007f27f8a25fa0 R15: 00007ffcefc62bb8 [ 1035.833229][T16028] [ 1036.083022][T15733] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1036.272368][T15733] usb 4-1: Using ep0 maxpacket: 8 [ 1036.273913][T15733] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1036.274808][T15733] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.274833][T15733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.276220][T15733] usb 4-1: config 0 descriptor?? [ 1036.320080][T15733] ldusb 4-1:0.0: Interrupt in endpoint not found [ 1037.365521][ T30] audit: type=1400 audit(1792548972.934:1465): avc: denied { append } for pid=16040 comm="syz.8.2266" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1037.691858][T16054] vimc link validate: Sensor B:src:4096x480 (0x33524742, 12, 0, 2, 7) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1037.715397][T16054] binder: 16052:16054 ioctl c0306201 200000000300 returned -11 [ 1037.877103][ T30] audit: type=1400 audit(1792548973.411:1466): avc: denied { write } for pid=16032 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1038.167450][ T30] audit: type=1400 audit(1792548973.683:1467): avc: denied { write } for pid=16065 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1038.231082][T16069] netlink: 'syz.4.2273': attribute type 12 has an invalid length. [ 1038.231159][T16069] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2273'. [ 1038.495833][T16075] FAULT_INJECTION: forcing a failure. [ 1038.495833][T16075] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.495858][T16075] CPU: 0 UID: 0 PID: 16075 Comm: syz.8.2276 Tainted: G L syzkaller #0 PREEMPT(full) [ 1038.495875][T16075] Tainted: [L]=SOFTLOCKUP [ 1038.495880][T16075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1038.495887][T16075] Call Trace: [ 1038.495892][T16075] [ 1038.495898][T16075] dump_stack_lvl+0x100/0x190 [ 1038.495919][T16075] should_fail_ex.cold+0x5/0xa [ 1038.495935][T16075] should_failslab+0xc2/0x120 [ 1038.495954][T16075] __kmalloc_noprof+0xfc/0x840 [ 1038.495969][T16075] ? __register_sysctl_table+0xac/0x1650 [ 1038.495987][T16075] __register_sysctl_table+0xac/0x1650 [ 1038.496002][T16075] ? lock_acquire+0x1d1/0x380 [ 1038.496016][T16075] ? __pfx___register_sysctl_table+0x10/0x10 [ 1038.496030][T16075] ? is_module_address+0x5f/0xf0 [ 1038.496045][T16075] ? is_module_address+0x5f/0xf0 [ 1038.496063][T16075] register_net_sysctl_sz+0x325/0x420 [ 1038.496079][T16075] __devinet_sysctl_register+0x1b9/0x360 [ 1038.496097][T16075] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 1038.496115][T16075] ? __asan_memcpy+0x3c/0x60 [ 1038.496129][T16075] devinet_init_net+0x334/0x8d0 [ 1038.496145][T16075] ? __pfx_devinet_init_net+0x10/0x10 [ 1038.496160][T16075] ops_init+0x1e2/0x5f0 [ 1038.496182][T16075] setup_net+0x118/0x3a0 [ 1038.496196][T16075] ? __pfx_setup_net+0x10/0x10 [ 1038.496215][T16075] copy_net_ns+0x345/0x7a0 [ 1038.496232][T16075] create_new_namespaces+0x3ea/0xac0 [ 1038.496251][T16075] unshare_nsproxy_namespaces+0xf2/0x220 [ 1038.496268][T16075] ksys_unshare+0x44f/0x980 [ 1038.496284][T16075] ? __pfx_ksys_unshare+0x10/0x10 [ 1038.496300][T16075] ? __x64_sys_clock_gettime+0x189/0x270 [ 1038.496313][T16075] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 1038.496328][T16075] __x64_sys_unshare+0x31/0x40 [ 1038.496342][T16075] do_syscall_64+0x123/0x790 [ 1038.496362][T16075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.496374][T16075] RIP: 0033:0x7fb99139f559 [ 1038.496385][T16075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.496395][T16075] RSP: 002b:00007fb9922b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1038.496407][T16075] RAX: ffffffffffffffda RBX: 00007fb991625fa0 RCX: 00007fb99139f559 [ 1038.496415][T16075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1038.496423][T16075] RBP: 00007fb991436b20 R08: 0000000000000000 R09: 0000000000000000 [ 1038.496430][T16075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1038.496437][T16075] R13: 00007fb991626038 R14: 00007fb991625fa0 R15: 00007ffff054c548 [ 1038.496454][T16075] [ 1038.830484][T16078] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2275'. [ 1039.086812][T10816] usb 4-1: USB disconnect, device number 70 [ 1039.121566][T15799] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1039.280096][T15799] usb 7-1: Using ep0 maxpacket: 16 [ 1039.284469][T15799] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1039.304990][T15799] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1039.326765][T15799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.326783][T15799] usb 7-1: Product: syz [ 1039.326792][T15799] usb 7-1: Manufacturer: syz [ 1039.326830][T15799] usb 7-1: SerialNumber: syz [ 1039.328429][T15799] usb 7-1: config 0 descriptor?? [ 1039.361654][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2278'. [ 1039.367657][T15799] pegasus_notetaker 7-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1039.370713][T16087] netlink: 1492 bytes leftover after parsing attributes in process `syz.8.2278'. [ 1039.370725][T16087] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2278'. [ 1039.421790][T16087] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2278'. [ 1039.488512][T16092] afs: Unknown parameter 'dyn' [ 1040.066713][T16094] SET target dimension over the limit! [ 1040.802980][ T5812] usb 7-1: USB disconnect, device number 48 [ 1041.550095][T16112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61464 sclass=netlink_route_socket pid=16112 comm=syz.5.2269 [ 1041.650391][T16111] comedi comedi1: Minor 4 specified more than once! [ 1041.748047][ T30] audit: type=1400 audit(1792548977.022:1468): avc: denied { write } for pid=16074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1041.993108][T16120] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1042.019937][T15522] IPVS: starting estimator thread 0... [ 1042.088378][ T30] audit: type=1400 audit(1792548977.340:1469): avc: denied { write } for pid=16121 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1042.121865][T16123] IPVS: using max 22 ests per chain, 52800 per kthread [ 1044.799151][ T30] audit: type=1400 audit(1792548979.885:1470): avc: denied { write } for pid=16134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1044.845356][T10816] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1045.050410][T10816] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1045.071352][T10816] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.071382][T10816] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.071395][T10816] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1045.071409][T10816] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1045.192445][T10816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.192464][T10816] usb 6-1: Product: syz [ 1045.192473][T10816] usb 6-1: Manufacturer: syz [ 1045.192482][T10816] usb 6-1: SerialNumber: syz [ 1045.381050][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2290'. [ 1045.422758][ T5812] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1045.423796][T16162] netlink: 1492 bytes leftover after parsing attributes in process `syz.6.2290'. [ 1045.423807][T16162] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2290'. [ 1045.441691][T16162] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2290'. [ 1045.587403][ T5812] usb 9-1: Using ep0 maxpacket: 32 [ 1045.591748][ T5812] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1045.593504][ T5812] usb 9-1: config 0 has no interfaces? [ 1045.593523][ T5812] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.631400][ T5812] usb 9-1: config 0 descriptor?? [ 1045.693799][T10816] usb 6-1: Not enough endpoints found in device, aborting! [ 1045.753377][ T30] audit: type=1400 audit(1792548980.774:1471): avc: denied { write } for pid=16173 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1045.863734][ T5812] usb 9-1: USB disconnect, device number 33 [ 1046.065053][T10816] usb 6-1: USB disconnect, device number 30 [ 1046.206150][T16179] syzkaller0: entered promiscuous mode [ 1046.206169][T16179] syzkaller0: entered allmulticast mode [ 1046.728324][ T30] audit: type=1400 audit(1792548981.681:1472): avc: denied { write } for pid=16176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1046.824326][T10816] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1046.851469][T16194] kvm: pic: non byte read [ 1046.996079][T10816] usb 9-1: Using ep0 maxpacket: 8 [ 1046.997475][T10816] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1047.000209][T10816] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1047.000228][T10816] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1047.002349][T10816] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.002364][T10816] usb 9-1: Product: syz [ 1047.002373][T10816] usb 9-1: Manufacturer: syz [ 1047.002381][T10816] usb 9-1: SerialNumber: syz [ 1047.105932][ T30] audit: type=1400 audit(1792548982.037:1473): avc: denied { write } for pid=16199 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1047.168241][ T5812] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1047.325621][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 1047.344911][ T5812] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1047.344938][ T5812] usb 4-1: New USB device found, idVendor=17cc, idProduct=1915, bcdDevice= 0.40 [ 1047.354536][ T5812] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.354618][ T5812] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1047.383388][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.383404][ T5812] usb 4-1: Product: syz [ 1047.383413][ T5812] usb 4-1: Manufacturer: syz [ 1047.383421][ T5812] usb 4-1: SerialNumber: syz [ 1047.412442][T15799] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1047.447243][T16213] input: syz0 as /devices/virtual/input/input209 [ 1047.463125][ T5812] usb 4-1: 1:1 : bogus bTerminalLink 2 [ 1047.463142][ T5812] usb 4-1: selecting invalid altsetting 0 [ 1047.582917][T10816] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 1047.582942][T10816] cdc_ncm 9-1:1.0: bind() failure [ 1047.583952][T15799] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1047.586649][T15799] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.586677][T15799] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.636866][T15799] usb 7-1: config 0 descriptor?? [ 1047.641318][T10816] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1047.641363][T10816] cdc_ncm 9-1:1.1: bind() failure [ 1047.666631][T15799] pwc: Askey VC010 type 2 USB webcam detected. [ 1047.719791][T10816] usb 9-1: USB disconnect, device number 34 [ 1047.765005][ T5812] usb 4-1: selecting invalid altsetting 1 [ 1047.765023][ T5812] snd-usb-caiaq 4-1:1.2: can't set alt interface. [ 1047.765032][ T5812] usb 4-1: unable to init card! (ret=-5) [ 1047.765353][ T5812] snd-usb-caiaq 4-1:1.2: probe with driver snd-usb-caiaq failed with error -5 [ 1047.814735][ T5812] usb 4-1: USB disconnect, device number 71 [ 1047.885162][T15799] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1047.890515][T15799] pwc: recv_control_msg error -32 req 02 val 2700 [ 1047.916378][T15799] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1047.947598][T15799] pwc: recv_control_msg error -32 req 04 val 1000 [ 1047.954674][T15799] pwc: recv_control_msg error -32 req 04 val 1300 [ 1047.971898][T15561] udevd[15561]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1047.995426][T15799] pwc: recv_control_msg error -32 req 04 val 1400 [ 1047.996380][T15799] pwc: recv_control_msg error -32 req 02 val 2000 [ 1047.996837][T15799] pwc: recv_control_msg error -32 req 02 val 2100 [ 1048.024129][T15799] pwc: recv_control_msg error -32 req 04 val 1500 [ 1048.025222][T15799] pwc: recv_control_msg error -32 req 02 val 2500 [ 1048.027066][T15799] pwc: recv_control_msg error -32 req 02 val 2400 [ 1048.549415][T16229] rnbd_client L607: Mapping device /dev/ram: on session s., (access_mode: rw, nr_poll_queues: 0) [ 1048.573883][ T30] audit: type=1400 audit(1792548983.412:1474): avc: denied { write } for pid=16212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1048.600475][T16229] rtrs_client L2834: pathname cannot contain / and . [ 1049.671644][ T30] audit: type=1400 audit(1792548984.441:1475): avc: denied { write } for pid=16237 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1049.730735][T16244] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1049.777488][T16244] cramfs: wrong magic [ 1049.799008][T16244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43779 sclass=netlink_route_socket pid=16244 comm=syz.8.2304 [ 1049.973343][T16246] FAULT_INJECTION: forcing a failure. [ 1049.973343][T16246] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1049.973366][T16246] CPU: 0 UID: 0 PID: 16246 Comm: syz.8.2304 Tainted: G L syzkaller #0 PREEMPT(full) [ 1049.973382][T16246] Tainted: [L]=SOFTLOCKUP [ 1049.973386][T16246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1049.973392][T16246] Call Trace: [ 1049.973400][T16246] [ 1049.973405][T16246] dump_stack_lvl+0x100/0x190 [ 1049.973429][T16246] should_fail_ex.cold+0x5/0xa [ 1049.973447][T16246] get_futex_key+0x1c9/0x13e0 [ 1049.973466][T16246] ? __pfx_get_futex_key+0x10/0x10 [ 1049.973481][T16246] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 1049.973498][T16246] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 1049.973516][T16246] futex_wait_setup+0x91/0x540 [ 1049.973532][T16246] __futex_wait+0x19f/0x360 [ 1049.973545][T16246] ? __pfx___futex_wait+0x10/0x10 [ 1049.973556][T16246] ? __pfx_try_to_wake_up+0x10/0x10 [ 1049.973570][T16246] ? futex_hash+0x311/0x400 [ 1049.973586][T16246] ? __pfx_futex_wake_mark+0x10/0x10 [ 1049.973601][T16246] ? find_held_lock+0x2b/0x80 [ 1049.973617][T16246] ? futex_wake+0x4ea/0x5e0 [ 1049.973632][T16246] futex_wait+0xe6/0x370 [ 1049.973644][T16246] ? __pfx_futex_wait+0x10/0x10 [ 1049.973658][T16246] ? __might_fault+0xc5/0x140 [ 1049.973670][T16246] ? find_held_lock+0x2b/0x80 [ 1049.973686][T16246] ? __might_fault+0xc5/0x140 [ 1049.973698][T16246] do_futex+0x265/0x440 [ 1049.973715][T16246] ? __pfx_do_futex+0x10/0x10 [ 1049.973731][T16246] ? _copy_to_user+0xaf/0xd0 [ 1049.973751][T16246] __x64_sys_futex+0x34f/0x4d0 [ 1049.973769][T16246] ? __pfx___x64_sys_futex+0x10/0x10 [ 1049.973786][T16246] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 1049.973803][T16246] do_syscall_64+0x123/0x790 [ 1049.973823][T16246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.973835][T16246] RIP: 0033:0x7fb99139f559 [ 1049.973845][T16246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1049.973862][T16246] RSP: 002b:00007fb9922720e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1049.973874][T16246] RAX: ffffffffffffffda RBX: 00007fb991626188 RCX: 00007fb99139f559 [ 1049.973882][T16246] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb991626188 [ 1049.973888][T16246] RBP: 00007fb991626180 R08: 0000000000000000 R09: 0000000000000000 [ 1049.973895][T16246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1049.973903][T16246] R13: 00007fb991626218 R14: 00007ffff054c460 R15: 00007ffff054c548 [ 1049.973918][T16246] [ 1050.332139][T15799] pwc: recv_control_msg error -71 req 02 val 2900 [ 1050.332969][T15799] pwc: recv_control_msg error -71 req 02 val 2800 [ 1050.335503][T15799] pwc: recv_control_msg error -71 req 04 val 1100 [ 1050.336030][T15799] pwc: recv_control_msg error -71 req 04 val 1200 [ 1050.404574][T15799] pwc: Registered as video103. [ 1050.408051][T15799] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input210 [ 1050.441534][T15799] usb 7-1: USB disconnect, device number 49 [ 1050.581576][T16250] comedi comedi1: aio_aio12_8: I/O base address or length out of range [ 1050.690042][T16250] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1050.718457][T16250] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 1051.752929][T10816] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1051.924320][T10816] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1051.965140][T10816] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.965159][T10816] usb 7-1: Product: syz [ 1051.965168][T10816] usb 7-1: Manufacturer: syz [ 1051.965177][T10816] usb 7-1: SerialNumber: syz [ 1051.966465][T10816] usb 7-1: config 0 descriptor?? [ 1051.969508][T10816] ch341 7-1:0.0: ch341-uart converter detected [ 1052.187807][T10816] usb 7-1: failed to receive control message: -32 [ 1052.187844][T10816] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 1052.754971][T10816] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1052.819579][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1052.819612][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1052.916315][T10816] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1052.917148][T10816] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1052.917164][T10816] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.917175][T10816] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1052.917196][T10816] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.918533][T10816] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1052.918547][T10816] usb 6-1: Product: syz [ 1052.918555][T10816] usb 6-1: Manufacturer: syz [ 1053.050905][T10816] cdc_wdm 6-1:1.0: skipping garbage [ 1053.050919][T10816] cdc_wdm 6-1:1.0: skipping garbage [ 1053.052915][T10816] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1053.052927][T10816] cdc_wdm 6-1:1.0: Unknown control protocol [ 1053.142416][ T30] audit: type=1400 audit(1792548987.687:1476): avc: denied { write } for pid=16259 comm="syz.8.2310" name="functions" dev="configfs" ino=19630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1053.180307][T10816] usb 6-1: USB disconnect, device number 31 [ 1053.273755][T16276] can0: slcan on ttyS3. [ 1053.517014][T16277] can0 (unregistered): slcan off ttyS3. [ 1053.618853][ T30] audit: type=1400 audit(1792548988.127:1477): avc: denied { write } for pid=16260 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1053.674200][T10816] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1053.837037][T10816] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1053.839426][T10816] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1053.839445][T10816] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.839457][T10816] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1053.839478][T10816] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.844942][T10816] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1053.844959][T10816] usb 6-1: Product: syz [ 1053.844967][T10816] usb 6-1: Manufacturer: syz [ 1053.925848][T10816] cdc_wdm 6-1:1.0: skipping garbage [ 1053.925862][T10816] cdc_wdm 6-1:1.0: skipping garbage [ 1053.975788][T10816] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1053.975803][T10816] cdc_wdm 6-1:1.0: Unknown control protocol [ 1054.026245][ T30] audit: type=1400 audit(1792548988.510:1478): avc: denied { write } for pid=16289 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1054.177345][T15394] block nbd3: Possible stuck request ffff888029560000: control (read@0,4096B). Runtime 150 seconds [ 1054.206458][T16294] busy [ 1054.249195][T16294] netlink: 'syz.4.2314': attribute type 21 has an invalid length. [ 1054.249211][T16294] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2314'. [ 1054.249245][T16294] netlink: 'syz.4.2314': attribute type 4 has an invalid length. [ 1054.249253][T16294] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2314'. [ 1054.318004][T10049] Bluetooth: hci0: link tx timeout [ 1054.318018][T10049] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1054.351687][T16299] Bluetooth: hci0: link tx timeout [ 1054.351699][T16299] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1055.058589][T16299] Bluetooth: hci4: command 0x0406 tx timeout [ 1055.950102][ T30] audit: type=1400 audit(1792548990.307:1479): avc: denied { read write } for pid=16255 comm="syz.5.2308" name="cdc-wdm0" dev="devtmpfs" ino=4024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1055.980663][ T30] audit: type=1400 audit(1792548990.344:1480): avc: denied { open } for pid=16255 comm="syz.5.2308" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1056.071594][T15733] usb 7-1: USB disconnect, device number 50 [ 1056.072601][T15733] ch341 7-1:0.0: device disconnected [ 1056.109527][T15799] usb 6-1: USB disconnect, device number 32 [ 1056.318350][T16317] tipc: Started in network mode [ 1056.318368][T16317] tipc: Node identity ac14142f, cluster identity 4711 [ 1056.319242][T16317] tipc: Enabled bearer , priority 10 [ 1056.347623][T16317] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2318'. [ 1056.502672][ T5605] Bluetooth: hci0: command 0x0406 tx timeout [ 1056.656259][T16321] syzkaller0: entered promiscuous mode [ 1056.657319][T16321] syzkaller0: entered allmulticast mode [ 1056.712082][T16321] can0: slcan on ttyS3. [ 1056.895237][ T30] audit: type=1400 audit(1792548991.205:1481): avc: denied { write } for pid=16306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1057.096571][ T30] audit: type=1400 audit(1792548991.392:1482): avc: denied { write } for pid=16334 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1057.698109][T15799] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1057.784535][T16343] ip_tables: iptables: counters copy to user failed while replacing table [ 1057.851768][T16344] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2322'. [ 1057.860461][T15799] usb 5-1: Using ep0 maxpacket: 16 [ 1057.870066][T15799] usb 5-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 1057.876970][T15799] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1057.876993][T15799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.903031][T15799] usb 5-1: config 0 descriptor?? [ 1058.352610][T15799] thrustmaster 0003:044F:B324.004F: can't find FF field in output reports [ 1058.369973][T15799] thrustmaster 0003:044F:B324.004F: hiddev0,hidraw0: USB HID v0.00 Device [HID 044f:b324] on usb-dummy_hcd.4-1/input0 [ 1058.683810][T15799] usb 5-1: USB disconnect, device number 14 [ 1060.528088][T16355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2324'. [ 1060.530492][ T30] audit: type=1400 audit(1792548994.601:1483): avc: denied { execute } for pid=16354 comm="syz.4.2324" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1060.593572][ T30] audit: type=1400 audit(1792548994.657:1484): avc: denied { read } for pid=16354 comm="syz.4.2324" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1061.709311][T15733] tipc: Node number set to 2886997039 [ 1062.608443][T16274] can0 (unregistered): slcan off ttyS3. [ 1062.689062][T16358] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1062.689126][T16358] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1062.898650][T16358] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1062.905670][T16358] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1062.997935][T16358] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1062.998020][T16358] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1063.373432][ T30] audit: type=1400 audit(1792548997.257:1485): avc: denied { create } for pid=16375 comm="syz.8.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1063.568530][ T5605] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 1063.569272][ T5605] Bluetooth: hci4: unexpected event for opcode 0x203e [ 1063.683245][ T30] audit: type=1400 audit(1792548997.547:1486): avc: denied { write } for pid=16360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1063.941619][ T30] audit: type=1400 audit(1792548997.791:1487): avc: denied { write } for pid=16404 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1064.164071][T10816] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1064.323142][T10816] usb 7-1: Using ep0 maxpacket: 32 [ 1064.349755][T10816] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1064.349792][T10816] usb 7-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 1064.382508][T10816] usb 7-1: config 3 has an invalid interface number: 223 but max is 1 [ 1064.382526][T10816] usb 7-1: config 3 has an invalid interface number: 25 but max is 1 [ 1064.382538][T10816] usb 7-1: config 3 has an invalid interface number: 223 but max is 1 [ 1064.382549][T10816] usb 7-1: config 3 has no interface number 0 [ 1064.382559][T10816] usb 7-1: config 3 has no interface number 1 [ 1064.382581][T10816] usb 7-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1064.382593][T10816] usb 7-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 1064.382610][T10816] usb 7-1: config 3 interface 223 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 1064.382625][T10816] usb 7-1: config 3 interface 223 has no altsetting 1 [ 1064.382636][T10816] usb 7-1: config 3 interface 25 has no altsetting 0 [ 1064.496387][T10816] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.496404][T10816] usb 7-1: Product: syz [ 1064.496413][T10816] usb 7-1: Manufacturer: syz [ 1064.496422][T10816] usb 7-1: SerialNumber: syz [ 1064.865777][ T5605] Bluetooth: hci2: command 0x0406 tx timeout [ 1065.007158][ T5812] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1065.106638][ T30] audit: type=1400 audit(1792548998.876:1488): avc: denied { create } for pid=16400 comm="syz.6.2330" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1065.165912][ T5812] usb 5-1: Using ep0 maxpacket: 32 [ 1065.174197][ T5812] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1065.174225][ T5812] usb 5-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=e7.cf [ 1065.189853][ T5812] usb 5-1: config 14 has an invalid interface number: 64 but max is 0 [ 1065.189871][ T5812] usb 5-1: config 14 has no interface number 0 [ 1065.189886][ T5812] usb 5-1: config 14 interface 64 has no altsetting 0 [ 1065.207853][ T5605] Bluetooth: hci0: command 0x0406 tx timeout [ 1065.249910][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.249929][ T5812] usb 5-1: Product: syz [ 1065.249938][ T5812] usb 5-1: Manufacturer: syz [ 1065.249947][ T5812] usb 5-1: SerialNumber: syz [ 1065.404628][T16424] syzkaller0: entered promiscuous mode [ 1065.404688][T16424] syzkaller0: entered allmulticast mode [ 1065.823235][T16401] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2330'. [ 1066.317803][ T30] audit: type=1400 audit(1792549000.008:1489): avc: denied { write } for pid=16417 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1066.563560][T16449] busy [ 1066.624288][T16449] netlink: 'syz.8.2337': attribute type 21 has an invalid length. [ 1066.624303][T16449] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2337'. [ 1066.626971][T10816] usb 7-1: USB disconnect, device number 51 [ 1066.695822][ T30] audit: type=1400 audit(1792549000.373:1490): avc: denied { write } for pid=16448 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1067.094936][ T5605] Bluetooth: hci2: command 0x0406 tx timeout [ 1067.329225][ T30] audit: type=1400 audit(1792549000.962:1491): avc: denied { unlink } for pid=10189 comm="syz-executor" name="file0" dev="tmpfs" ino=1512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1067.436414][ T5605] Bluetooth: hci0: command 0x0406 tx timeout [ 1067.859565][ T5605] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1067.859706][ T5605] Bluetooth: hci4: Injecting HCI hardware error event [ 1067.864811][T10049] Bluetooth: hci4: hardware error 0x00 [ 1069.448018][ T32] INFO: task syz.1.1949:14494 blocked for more than 144 seconds. [ 1069.448037][ T32] Tainted: G L syzkaller #0 [ 1069.448044][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1069.448049][ T32] task:syz.1.1949 state:D stack:28152 pid:14494 tgid:14470 ppid:11701 task_flags:0x400040 flags:0x00080002 [ 1069.448081][ T32] Call Trace: [ 1069.448085][ T32] [ 1069.448093][ T32] __schedule+0x1259/0x6980 [ 1069.448113][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1069.448170][ T32] ? __pfx___schedule+0x10/0x10 [ 1069.448185][ T32] ? find_held_lock+0x2b/0x80 [ 1069.448203][ T32] ? schedule+0x225/0x2c0 [ 1069.448221][ T32] schedule+0xdd/0x2c0 [ 1069.448236][ T32] schedule_preempt_disabled+0x13/0x30 [ 1069.448252][ T32] __mutex_lock+0xccf/0x1c20 [ 1069.448263][ T32] ? sync_bdevs+0x153/0x480 [ 1069.448317][ T32] ? sync_bdevs+0x1ff/0x480 [ 1069.448334][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1069.448350][ T32] ? iput.part.0+0x1a0/0x1050 [ 1069.448363][ T32] ? sync_bdevs+0x67/0x480 [ 1069.448381][ T32] ? sync_bdevs+0x153/0x480 [ 1069.448396][ T32] sync_bdevs+0x153/0x480 [ 1069.448414][ T32] ksys_sync+0xb0/0xf0 [ 1069.448426][ T32] ? __pfx_ksys_sync+0x10/0x10 [ 1069.448471][ T32] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 1069.448487][ T32] ? do_syscall_64+0xae/0x790 [ 1069.448504][ T32] __do_sys_sync+0xe/0x20 [ 1069.448521][ T32] do_syscall_64+0x123/0x790 [ 1069.448540][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.448552][ T32] RIP: 0033:0x7f914b59f559 [ 1069.448562][ T32] RSP: 002b:00007f914c4b2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1069.448572][ T32] RAX: ffffffffffffffda RBX: 00007f914b826090 RCX: 00007f914b59f559 [ 1069.448580][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1069.448587][ T32] RBP: 00007f914b826090 R08: 0000000000000000 R09: 0000000000000000 [ 1069.448628][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1069.448636][ T32] R13: 00007f914b826128 R14: 00007f914b826090 R15: 00007fff65677838 [ 1069.448651][ T32] [ 1069.448671][ T32] [ 1069.448671][ T32] Showing all locks held in the system: [ 1069.448678][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1069.448686][ T32] #0: ffffffff8fdec660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1069.448722][ T32] locks held by kworker/u8:5/62: 3, on CPU#0: [ 1069.448730][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1069.448794][ T32] #1: ffffc9000204fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1069.448819][ T32] #2: ffffffff91cd7e80 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1069.448854][ T32] locks held by kworker/u8:11/1171: 4, last CPU#0: [ 1069.448862][ T32] #0: ffff8880281b1940 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1069.448890][ T32] #1: ffffc90004f97d08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1069.448953][ T32] #2: ffff8880370e1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 1069.448982][ T32] #3: ffff88807edeb4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 1069.449023][ T32] locks held by dhcpcd/5267: 2, on CPU#0: [ 1069.449031][ T32] #0: ffff8880284c66f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 1069.449096][ T32] #1: ffffffff91cd7e80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa53/0x14b0 [ 1069.449126][ T32] locks held by getty/5363: 2, on CPU#0: [ 1069.449134][ T32] #0: ffff88801e7d80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1069.449165][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1540 [ 1069.449195][ T32] locks held by kworker/0:8/5812: 4, on CPU#0: [ 1069.449203][ T32] #0: ffff8880252f8140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1069.449266][ T32] #1: ffffc90004cafd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1069.449291][ T32] #2: ffff88802be361d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 1069.449318][ T32] #3: ffff88802e9391d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1069.449344][ T32] locks held by kworker/u9:1/10049: 3, on CPU#0: [ 1069.449352][ T32] #0: ffff88803c37e140 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1069.449410][ T32] #1: ffffc90005a17d08 ((work_completion)(&hdev->error_reset)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1069.449436][ T32] #2: ffff88807a15cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_open+0x22/0xb0 [ 1069.449468][ T32] locks held by udevd/13282: 1, on CPU#1: [ 1069.449498][ T32] #0: ffff888029436350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1069.449565][ T32] locks held by syz.1.1949/14494: 1, on CPU#1: [ 1069.449573][ T32] #0: ffff888029436350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1069.449604][ T32] locks held by kworker/u8:19/15521: 3, last CPU#0: [ 1069.449611][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1069.449636][ T32] #1: ffffc90004befd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1069.449660][ T32] #2: ffff888036540800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1069.449715][ T32] locks held by udevd/15561: 4, on CPU#0: [ 1069.449723][ T32] #0: ffff888036914cf8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 1069.449753][ T32] #1: ffff888056cde480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 1069.520175][ T32] #2: ffff888056ea9878 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 1069.520210][ T32] #3: ffff88802e9391d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1069.520248][ T32] locks held by syz.4.2334/16419: 2, on CPU#0: [ 1069.520257][ T32] #0: ffffffff91ca7a40 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5ca/0x6b0 [ 1069.520287][ T32] #1: ffffffff91cd7e80 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xcf/0xa70 [ 1069.520352][ T32] locks held by syz.3.2335/16422: 1, last CPU#0: [ 1069.520360][ T32] #0: ffffffff91cd7e80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1069.520391][ T32] locks held by syz.5.2336/16446: 1, on CPU#0: [ 1069.520399][ T32] #0: ffffffff91cd7e80 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 1069.520427][ T32] locks held by syz.8.2337/16449: 1, on CPU#0: [ 1069.520435][ T32] #0: ffffffff91cd7e80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newroute+0x148/0x210 [ 1069.520507][ T32] [ 1069.520515][ T32] ============================================= [ 1069.520515][ T32] [ 1069.520521][ T32] NMI backtrace for cpu 0 [ 1069.520532][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1069.520547][ T32] Tainted: [L]=SOFTLOCKUP [ 1069.520551][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1069.520558][ T32] Call Trace: [ 1069.520562][ T32] [ 1069.520567][ T32] dump_stack_lvl+0x100/0x190 [ 1069.520584][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1069.520605][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1069.520619][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1069.520635][ T32] sys_info+0x141/0x190 [ 1069.520647][ T32] watchdog+0xcb6/0x1030 [ 1069.520664][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1069.520680][ T32] ? __pfx_watchdog+0x10/0x10 [ 1069.520694][ T32] ? __kthread_parkme+0x18f/0x230 [ 1069.520710][ T32] ? kthread+0x13a/0x450 [ 1069.520724][ T32] ? __pfx_watchdog+0x10/0x10 [ 1069.520737][ T32] kthread+0x373/0x450 [ 1069.520752][ T32] ? __pfx_kthread+0x10/0x10 [ 1069.520769][ T32] ret_from_fork+0x730/0xd60 [ 1069.520782][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1069.520796][ T32] ? __switch_to+0x800/0x10f0 [ 1069.520812][ T32] ? __pfx_kthread+0x10/0x10 [ 1069.520828][ T32] ret_from_fork_asm+0x1a/0x30 [ 1069.520846][ T32] [ 1069.520886][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1070.233310][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1070.243955][ T32] Tainted: [L]=SOFTLOCKUP [ 1070.248249][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1070.258276][ T32] Call Trace: [ 1070.261531][ T32] [ 1070.264437][ T32] dump_stack_lvl+0x100/0x190 [ 1070.269095][ T32] vpanic+0x553/0x970 [ 1070.273048][ T32] ? __pfx_vpanic+0x10/0x10 [ 1070.277526][ T32] panic+0xd1/0xe0 [ 1070.281219][ T32] ? __pfx_panic+0x10/0x10 [ 1070.285619][ T32] ? nmi_cpu_backtrace+0x79/0x200 [ 1070.290636][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 1070.296778][ T32] ? watchdog.cold+0x1ec/0x234 [ 1070.301516][ T32] watchdog.cold+0x1fd/0x234 [ 1070.306083][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1070.311876][ T32] ? __pfx_watchdog+0x10/0x10 [ 1070.316528][ T32] ? __kthread_parkme+0x18f/0x230 [ 1070.321528][ T32] ? kthread+0x13a/0x450 [ 1070.325761][ T32] ? __pfx_watchdog+0x10/0x10 [ 1070.330411][ T32] kthread+0x373/0x450 [ 1070.334455][ T32] ? __pfx_kthread+0x10/0x10 [ 1070.339033][ T32] ret_from_fork+0x730/0xd60 [ 1070.343600][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1070.348685][ T32] ? __switch_to+0x800/0x10f0 [ 1070.353341][ T32] ? __pfx_kthread+0x10/0x10 [ 1070.357910][ T32] ret_from_fork_asm+0x1a/0x30 [ 1070.362653][ T32] [ 1070.365701][ T32] Kernel Offset: disabled [ 1070.369999][ T32] Rebooting in 86400 seconds..