last executing test programs: 17m30.39294729s ago: executing program 2 (id=2645): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce", 0x70}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408b", 0x8e}], 0x2}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 17m30.206755862s ago: executing program 2 (id=2649): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17m30.172997015s ago: executing program 2 (id=2651): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f000000cf00)=[{{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000008340)=[{&(0x7f0000006d00)=""/4096, 0x1000}, {0x0, 0x46}], 0x2}, 0x1d}], 0x2, 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r0, 0xcfa3e000) 17m29.562051913s ago: executing program 2 (id=2654): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb6e7, 0x406, 0x3}, &(0x7f0000000340), 0x0, 0x0) r0 = socket(0x2d, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x4, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getpid() mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x800, 0x0) connect$qrtr(r0, &(0x7f0000000340)={0x2d, 0x0, 0xfffffffe}, 0xc) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) write$char_usb(r4, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 17m26.744210589s ago: executing program 2 (id=2669): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0xf, &(0x7f00000004c0)=@ringbuf, 0x0, 0x2}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x1c, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00@'}}}}}}}, 0x0) 17m26.269483128s ago: executing program 2 (id=2672): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x29, 0x2, 0x400) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000240)='./file1\x00', &(0x7f0000000340)='bpf\x00', 0x100001, &(0x7f0000000380)='/dev/net/tun\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000600)=ANY=[@ANYRES32=0x0], 0x30}], 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r6) socket$phonet_pipe(0x23, 0x5, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) listen(0xffffffffffffffff, 0x1) write$qrtrtun(r6, 0x0, 0x0) 17m26.089907954s ago: executing program 32 (id=2672): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x29, 0x2, 0x400) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000240)='./file1\x00', &(0x7f0000000340)='bpf\x00', 0x100001, &(0x7f0000000380)='/dev/net/tun\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000600)=ANY=[@ANYRES32=0x0], 0x30}], 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r6) socket$phonet_pipe(0x23, 0x5, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) listen(0xffffffffffffffff, 0x1) write$qrtrtun(r6, 0x0, 0x0) 16m40.558733936s ago: executing program 0 (id=2814): ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001300)={0x0, 0x8, 0xfffffffffffffff2}) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="0000dca40240d49c584645adbe16c485effead299109b1c2fbe87c2ced85bed42dd36d36f4289b36bf7ca40da021771fe7d3d9803af07d17147f19d2f0858a9af74a3b9b86048cf7e532bdb90e786127163ba388537fb4aebc9cc63bfd86c4dac988ed734d1e5b45379ea5d7fff71296cf9cf486360a8294a21953e10e7cc649bbce4154e56a6eb7e09c9a4cf5b4167e6123189c6ec86203fb01445c42796db608313d5c18a0ff875cb32caed9b356da1f24c37c19876e9037f1", @ANYRES32=r1, @ANYBLOB="c30407001b14bf26200012800b000100697036677265000010000280050017000100000004001200"], 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x72, "a2328fac8b271af6910453692f553c7c364909c94eb1c0943cfe01f9db26d78769cd4371d48c5c9d940f3f10181906b5d7b0de6737a8a1f1bec2466f548dde7f8cb763ce97df655c1bdd01167776c0941f2b4218da3fd9c586dc6bb6bb4e57aa7325649672eb44ad39e4888d70cc74b109b3"}, &(0x7f0000000080)=0x7a) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e21, 0x6, @remote, 0x539}}}, 0x84) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x3, 0x2}]}}, 0x0, 0x2a}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c42, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) epoll_create1(0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="13012dbd7000ffdbdf25010000000000000008410000004c00180000000462726f6164636173742d6c696e6b"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20008004) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x201ff, 0x7f, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xb972, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="03000200"], 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 16m39.036297214s ago: executing program 0 (id=2816): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce", 0x70}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408b", 0x8e}], 0x2}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 16m38.457753474s ago: executing program 0 (id=2821): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$null(0xffffff9c, &(0x7f0000000580), 0x280, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) socket$kcm(0x29, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x20000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0x18ff8) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000001c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 16m38.253733704s ago: executing program 0 (id=2824): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xe) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb141a, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) syz_open_dev$vbi(&(0x7f00000003c0), 0x1, 0x2) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x40408, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000580)='./file1\x00', 0x0) setxattr$security_selinux(&(0x7f0000000140)='./file0/file0/file0\x00', &(0x7f0000000280), &(0x7f00000002c0)='system_u:object_r:unconfined_execmem_exec_t:s0\x00', 0x2f, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r4) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100"], 0x50) syz_emit_ethernet(0xfc0, &(0x7f00000039c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0xf8a, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x4, 0x6, "aaec6abdff6416cba74b557103b4927a9e49165dfec922450543fb23d9d61c30b64c09c4b3625b9b1e657a5e2a03f9c7b8b984abaa"}, {0x1f, 0x8, "1ea1632e7462658b10ee8c2f81a9240269a881b952d2c3655d113710cceaf6b52faec679403f0eff49b930f990a43b0fe6c47c9f47a1583521914500c77c"}, {0x18, 0xd, "fa49fccb647d2942f22c7f9640a23e0ac537d9fd1845430b5a8d226f86b1f6da20575d3f7588ee27bf9a0d9c010831d3a2b05c17b8a20ea7dcdaa9f71e042b302c837a18ce30be2f6a391d8b18d9e7825dde7508e3542ec0ab42807213634c662863dcf3fa0bfdc8c979f04382"}, {0x1f, 0x1d3, "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"}]}}}}}}, 0x0) write$tun(r1, &(0x7f0000000340)={@void, @val={0x2, 0x80, 0x3, 0x0, 0x1, 0x1}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @link_local, @mcast1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @private0}}, 0x3e) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 16m36.3652557s ago: executing program 0 (id=2828): ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001300)={0x0, 0x8, 0xfffffffffffffff2}) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="0000dca40240d49c584645adbe16c485effead299109b1c2fbe87c2ced85bed42dd36d36f4289b36bf7ca40da021771fe7d3d9803af07d17147f19d2f0858a9af74a3b9b86048cf7e532bdb90e786127163ba388537fb4aebc9cc63bfd86c4dac988ed734d1e5b45379ea5d7fff71296cf9cf486360a8294a21953e10e7cc649bbce4154e56a6eb7e09c9a4cf5b4167e6123189c6ec86203fb01445c42796db608313d5c18a0ff875cb32caed9b356da1f24c37c19876e9037f1", @ANYRES32=r1, @ANYBLOB="c30407001b14bf26200012800b000100697036677265000010000280050017000100000004001200"], 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x72, "a2328fac8b271af6910453692f553c7c364909c94eb1c0943cfe01f9db26d78769cd4371d48c5c9d940f3f10181906b5d7b0de6737a8a1f1bec2466f548dde7f8cb763ce97df655c1bdd01167776c0941f2b4218da3fd9c586dc6bb6bb4e57aa7325649672eb44ad39e4888d70cc74b109b3"}, &(0x7f0000000080)=0x7a) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e21, 0x6, @remote, 0x539}}}, 0x84) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x3, 0x2}]}}, 0x0, 0x2a}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c42, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) epoll_create1(0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="13012dbd7000ffdbdf25010000000000000008410000004c00180000000462726f6164636173742d6c696e6b"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20008004) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x201ff, 0x7f, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xb972, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="03000200"], 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 16m36.133198502s ago: executing program 0 (id=2831): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803", 0x81}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f", 0x91}], 0x2}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 16m36.002246814s ago: executing program 33 (id=2831): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803", 0x81}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f", 0x91}], 0x2}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7m45.10219962s ago: executing program 6 (id=5637): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0x8}, {0x5, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x200001d4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[], 0x6) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) getpeername$qrtr(r2, 0x0, 0x0) 7m43.580872633s ago: executing program 6 (id=5644): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) 7m42.874889747s ago: executing program 6 (id=5647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 7m41.81980506s ago: executing program 6 (id=5648): r0 = socket$inet6(0xa, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4b301, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) userfaultfd(0x80001) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) 7m40.461842846s ago: executing program 6 (id=5650): socket(0x2a, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4401000010000100fefffffffddbdf25fe8800051a0000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 7m40.120154062s ago: executing program 6 (id=5653): r0 = socket$inet6(0xa, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4b301, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) userfaultfd(0x80001) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) 7m24.629448947s ago: executing program 34 (id=5653): r0 = socket$inet6(0xa, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4b301, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) userfaultfd(0x80001) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) 2m8.792709341s ago: executing program 7 (id=6613): openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x20c002, 0x34) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x25}, 0x20000811) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) write$yama_ptrace_scope(r3, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x0, 0x4e22, 0x419f, 0xa, 0x30, 0x40, 0x5c}, {0x4, 0x2, 0x4, 0x7, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x8}, {0x4, 0x6, 0x7, 0x4}, 0x7, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x4d6, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3505, 0x1, 0x0, 0x6, 0x7, 0x4, 0x280000}}, 0xe8) close(r3) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001b80)=[@rdma_args={0x48, 0x114, 0x1, {{0x2, 0x6}, {0x0}, &(0x7f0000001b40)=[{&(0x7f0000001880)=""/165, 0xa5}], 0x1, 0x4, 0x83}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x80000001}], 0x60, 0x4800}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYBLOB="3f00000006020400280012800b00010062"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 2m5.388982683s ago: executing program 7 (id=6619): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000043f1"], 0x14}, 0x1, 0x0, 0x0, 0x4044855}, 0x8001) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYRES32], 0x48}}, 0x0) pread64(r6, &(0x7f0000001600)=""/4081, 0xff1, 0x2) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r9, &(0x7f0000005540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000005500)={&(0x7f0000002600)={0x2ef4, r10, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x1f}}}}, [@NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "e12b9016c375"}]}, @NL80211_ATTR_NAN_FUNC={0x5c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x5}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xcc}, @NL80211_NAN_FUNC_SERVICE_INFO={0x1f, 0xb, "6c4b9379b57542e286141e433905e079b9b65dbf0bdf54f83a7caa"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "fa2e2fdc9692"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x3}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x360, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x7}, @NL80211_NAN_FUNC_SRF={0x344, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "5de8d42ef232ef4b5fc83b5fde58e963deadfa28a2bb763e46d9de37d9967d543d1b09a5d4541497cb7aad3b3e9210352afc1fcb847b17ee2ed3f4990b5f697e34b1c08ec164cecc5867dbfbd6603596892c92d3414d8880b63b4fe43c19187632173b5cc63e9b7463d2038f870a4203d5585aa6dd892e012c116fe3f2453d3e9b3251f5c8ee9d72626ee427b5769d86fbb5c76af219f73075409125018b01fc17a0725dae09f6660f65c62830918d8a869dc55b99f3abcacdf3558ee4a4bcf06e66c95ce42eba925bfe3363d2569b475a152e0c4d192d778164ef4c09875d2cb89e78636147c9dc958b660a92d7d2db7507ffff1055e652c697d3ad473609"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x36}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x2}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x8}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xb}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x404, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0xa4, 0xd, 0x0, 0x1, [{0x9f, 0x0, "5031391ee7f28e3a0ef2101bf5b4ceb551f69097a29fb9b443a95dca7b639941db53a57aee0535af88e5e3cd4f2bcca8e01dbe4880ab841f85b77ec60bcdbdc6825023cf70d21f65a7c11d7797126f798743cedab6d92144a743777c2f5d79c48e89cfa4321cf2f3ec5df222e42da59786287104611e0437a93a9d2a6d106790f1b4dfce7cb0bd982116cdd3483a3d5b9fceeabbd03d1a92a05d1f"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x5}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "6569d93b5ea1"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3}, @NL80211_NAN_FUNC_SRF={0x328, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xc9}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x8f}, @NL80211_NAN_SRF_BF={0x103, 0x2, "1735de142118c7c17b66af6130d35a959ff3c12b895295c616b4e663af45741f863462370e94738c54c0f9dbe53ab8be49a267af55701051e9be699631ea1f4285c4c04af74b93dffd4e97c66d5ffcdf0697d09f4689597c6cec772bcb71baa51fe828ac274c3e21b1dc61bbd4233e3b1c2b625fd7f9cd1e40e580e2840b120c9b45afe528f7af375f9b9ed046bb198a369337dd63aa7dfa7cc5acdff001d726d8a67e605df11be471caa704101a1856cddedf5a5c044a665b3c84032a4d10de49710e799812ed13954216d67cf19cc5a874cd0e015d54760ef341e23c4fcc1e8e1983b8ebae0ba64dcc956f36bdb78455108bb832456c93612111bc109c5a"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SRF={0x8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}]}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7fffffff}]}, @NL80211_ATTR_NAN_FUNC={0x284, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x10}, @NL80211_NAN_FUNC_SRF={0xa4, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3e}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1cc, 0xe, 0x0, 0x1, [{0x8f, 0x0, "b00f27df39bdd252ed334f05f8ea4a8e0be83d4fb53e824e291e7f18390e3384198ce3773b1dc703d7277edba2245dcde58099818e6b1897028170f75551c8e98e565c3d424dd0632ef9a0d61c4f9d8b82cbbe71e2af0246d50da06d2d7f9f66cb078bda27415415cbe3db59265a41221d220877cb072fd6d90221d003d209d424edb908d1dd13b6941264"}, {0x87, 0x0, "997b535e221d6ca0c723e23fc15e88f990b6be2519f4c88b93a70779224742f78d4a08d37df9846e172898326c423e11612b4382c4552e0d685ca70b34db20ac033d0eca004ae3ecf851cbe3567b6e53bf5e58a6bfbb2fd3606d602199ddfcd0de60842b350922d422e810ab6adc3865f2773ea158209d110c9651b04c1d6370aeee4a"}, {0xae, 0x0, "4bba5190eb78cdce991df5d8956424aa45d955deb4d7df79403217190a72fa2bae5422faa14f044dcfbca672280ccb76881d65e2c2fc55d803a7ad291b21a82c67785ffc13a052c7d892aa08e3f0299a59c22136b043551c5867cd344ff4505573205aea4d673d7d72e94196914fbf1b85e4a96e9c98424091dc720e185d9545fc01a5c54e52fdb020f43f44be2b8deb6a2f6523145debdcb8076c66f877055c37b28f9cde70fe8b8240"}]}]}, @NL80211_ATTR_NAN_FUNC={0x1a8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x10, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xc}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x180, 0xd, 0x0, 0x1, [{0xff, 0x0, "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"}, {0x7a, 0x0, "0a7643b79f70da493260b38a2ffbe472c3fb8d275ef3dbdb5a3b49f35c6423b4c9b621d84b3e455724374be668b60888e5de3e710baec5de5a1acc70cb86c8645de3d4d03e0f15c0eb26cff94e785a8f1cb0ef29a8dfd6600d6a3e60d8abec43db6b8b8abe7812e834a4a38f0659be6c2e71cf983e63"}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0x1098, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xc0}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1068, 0xe, 0x0, 0x1, [{0x1004, 0x0, "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"}, {0x5e, 0x0, "f4f452bc735f4037fac01dd239a7dbcd9b0864fa30d260fae0f2cf9f4a60737df660020c21fe5ec0262c8f8a6c654561a7c3580c7d94f5b1c492a72743422c334f0d470be642a986349594e4b8f7d64d4be08a6ccc59bc8708b6"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xfe}, @NL80211_NAN_FUNC_SERVICE_INFO={0x19, 0xb, "20a2d64ee9d02c8a7658f9635ea7f14261672c5486"}]}, @NL80211_ATTR_NAN_FUNC={0x1210, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x11b4, 0xe, 0x0, 0x1, [{0x6a, 0x0, "21d540b76edac25048db70338fd0217794c5fe44f5be21c9ea98721ed7ccd37a09ccfc685b37f2e3808f71d565bdb20896f0e8b9e1a0ceaccf70e74b9e716c8e962a9cb39617cca4acfa7e2cff214fb65af9caa4a93dd8590959cfc18f3a75d5e9569f9b56e1"}, {0x97, 0x0, "6b5201873093f0120a71a87ab384013b3bbc340d161001a4fd1b1d5c14779c69bf74726497c32f8d1dda55428447c25b690a1d5da8e26ad038e3dc2ac26c831caef3dcaa07dd079c755657ff110ea1fe9eb23dc744cf6fd1e693907eb53131813ee9e95da871a55bab29639845ad48d1aa7d7e10af05a6fec4931785ce4bdc76a9a3f0bd4050e07730f14adc080ef85da5f622"}, {0x76, 0x0, "0aefcb39f9f2919a619d3609f37fcfbea8e6a8061fb459e4b02064722efb75e42c5b225b93b3d1bff10ab548d07d7b9e0dc1fdc70ec5f385db8fda5c9a4e8f79809e81e509dbeb280e2da015cc89df131e05973ebec21cef1002b4e38829633414806bb784a46a98c25ccc5d179f4c4a681a"}, {0x1004, 0x0, "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"}, {0x2f, 0x0, "b3c7c074164d8f3f6cad03fff3b7984994fcc4301a5d7752ef0d45a52e3b0a41bd404ba346109f40618629"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x80}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_SERVICE_INFO={0x5, 0xb, "9f"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_SERVICE_INFO={0x26, 0xb, "671416fb90810a9310e4886b3fa92bb32ba92831070835f183019dbc20cad47a209d"}]}]}, 0x2ef4}}, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) timer_create(0x2, &(0x7f00000003c0)={0x0, 0x12, 0x1, @thr={&(0x7f0000000280)="6103917b94149ed0e0298ee2dcc68c34806e2d77a84fad6651c4f10892319f778bac380c7fe339e3df28857a5c990307783520d962ee0ff1ba8363f26f7f0907f368f0e5dd7d16a7ec6cdaf6de6e213630751b9ad3", &(0x7f0000000300)="e65c29abe9e2cde121d7d40ce49ad1a368445546e63d0dafe70c7669bda59a9d5088cd2196c807730b619fba264b465fc05c5d6c553308789a6edc537c0f8da8fca8d6483829222f8a552be824ddf08c0f717d0e5f219d13a3045c3a2c062ecac21212ccd78c23ef672306bb90b7434fc379e5a1eae814f8c69e730dd61be4700fae948c1cc1"}}, &(0x7f0000000400)) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) ioctl$BTRFS_IOC_ENCODED_READ(r6, 0x80809440, &(0x7f0000000200)={&(0x7f0000000100), 0x0, 0x9, 0x0, 0x3, 0x14f, 0x3, 0x4, 0x6}) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2m4.049768102s ago: executing program 7 (id=6625): r0 = socket(0xa, 0x3, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000019080)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x5, [{0x0, 0x2, 0x2}]}]}}, 0x0, 0x4a, 0x0, 0x0, 0x10}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000100)=0x7fff, 0x8) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r4}, 0xc) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000800003fe3b94e4330a29370f7000000000000002ad0f8c32b385fda000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES32=r6, @ANYBLOB='.'], 0x20) link(0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) socket(0x1e, 0x805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000740)='cramfs\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x398, 0x398, 0xffffffff, 0x0, 0x0, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00', @remote, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote, @port=0x4e22, @gre_key}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xff]}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv6=@local, @ipv4=@multicast2, @port=0x4e24, @port=0x4e21}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}, @ipv6=@rand_addr=' \x01\x00', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0xff0000ff, 0xff000000], [0xffffffff], 'veth1_macvtap\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) 2m2.817401371s ago: executing program 7 (id=6628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 2m2.65216188s ago: executing program 7 (id=6632): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe4a, &(0x7f0000000280)=0xca) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@ipv6_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@RTA_PREF={0x5, 0x14, 0x80}]}, 0x24}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4040852) sendfile(r1, 0xffffffffffffffff, 0x0, 0x201f00) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0}, 0x1, 0x1, {}, 0x1}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x10, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@mmap={0x3, 0x1, 0x4, 0x100, 0x80, {}, {0x4, 0x8, 0x4, 0x5, 0x29, 0x9}, 0x5, 0x1, {}, 0x2}) 1m51.472207266s ago: executing program 7 (id=6678): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x29, 0x2, 0x400) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000240)='./file1\x00', &(0x7f0000000340)='bpf\x00', 0x100001, &(0x7f0000000380)='/dev/net/tun\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000600)=ANY=[@ANYRES32=0x0], 0x30}], 0x1, 0x0) close(0xffffffffffffffff) socket$phonet_pipe(0x23, 0x5, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) listen(0xffffffffffffffff, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) 1m36.26190516s ago: executing program 35 (id=6678): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x29, 0x2, 0x400) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000240)='./file1\x00', &(0x7f0000000340)='bpf\x00', 0x100001, &(0x7f0000000380)='/dev/net/tun\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000600)=ANY=[@ANYRES32=0x0], 0x30}], 0x1, 0x0) close(0xffffffffffffffff) socket$phonet_pipe(0x23, 0x5, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) listen(0xffffffffffffffff, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) 12.041823508s ago: executing program 8 (id=6937): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x15) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000100)="f8", 0x1}], 0x1) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x800}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 6.820339508s ago: executing program 5 (id=6952): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close_range(r0, 0xffffffffffffffff, 0x0) 6.717743902s ago: executing program 8 (id=6954): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x29, 0x2, 0x400) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000240)='./file1\x00', &(0x7f0000000340)='bpf\x00', 0x100001, &(0x7f0000000380)='/dev/net/tun\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000600)=ANY=[@ANYRES32=0x0], 0x30}], 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r6) socket$phonet_pipe(0x23, 0x5, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) listen(0xffffffffffffffff, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r6, 0xc0245720, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) 5.251363802s ago: executing program 4 (id=6956): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000080)=0x0) r3 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) ioctl$CEC_RECEIVE(r3, 0xc0386106, &(0x7f0000000000)={0x0, 0xb, 0x80006, 0x200006, 0x8, 0x1, "260000000000000754439400", 0xa, 0x0, 0x5, 0x2, 0x1, 0xfd, 0x9d}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, 0x0, 0x0) splice(r4, &(0x7f0000000000)=0x3, r0, &(0x7f0000000080)=0x10001, 0xfffffffffffffff8, 0xe) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0) 4.27913823s ago: executing program 3 (id=6957): pread64(0xffffffffffffffff, 0x0, 0x0, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mkdir(0x0, 0x0) 4.121760059s ago: executing program 5 (id=6958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x800000000000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$pptp(0x18, 0x1, 0x2) r4 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e2b, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e1907", 0xc, 0x2f, 0x0, @remote, @mcast2, {[], {0x0, 0x22eb, 0xffffffffffffff00, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "261fbabdae"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = dup(r1) write$UHID_INPUT(r6, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e3affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000180a010800eecd9ceaf6bb000000000000000500000a0900020073797a30000000001400000011000100000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) 3.890586369s ago: executing program 3 (id=6959): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x29, 0x2, 0x400) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000600)=ANY=[@ANYRES32=0x0], 0x30}], 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r5) socket$phonet_pipe(0x23, 0x5, 0x2) 3.718430478s ago: executing program 4 (id=6960): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x600, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, 0x0, 0x48800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000080)=""/12}, 0x20) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000001040)=""/196, &(0x7f0000001140)=0xc4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r7 = gettid() r8 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 3.485148864s ago: executing program 8 (id=6961): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x810) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r6, 0x89e0, &(0x7f0000001080)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@deltfilter={0x34, 0x2d, 0x208, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff1, 0x4}, {0xfff1, 0x1}, {0x2, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x81}}]}, 0x34}}, 0x875187a90315af15) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r11, 0x0, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r12) 3.080006636s ago: executing program 5 (id=6962): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe80000000400000000000000000001b000000fb00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14143f000000000000000000000000000004d36c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000008000003"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18", 0xf72}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.905626427s ago: executing program 4 (id=6964): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x25) preadv2(r0, 0x0, 0x0, 0x3, 0x88a, 0xb) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000001a1401000200000003000000080001"], 0x18}, 0x1, 0x0, 0x0, 0x8}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000030427bd7000fe"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x28}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB='\v\x00\x00\x00s'], 0x119) socket$packet(0x11, 0x3, 0x300) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f0000003d40)=[{&(0x7f0000000380)=""/128, 0x80}], 0x1, 0x13, 0xf7) writev(r2, &(0x7f0000000040), 0x2) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rt_acct\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x8, 0x4}}, './file0\x00'}) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400150001090212000100000000090400200003"], 0x0) 2.829695301s ago: executing program 5 (id=6965): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x15) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000100)="f8", 0x1}], 0x1) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x800}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2.788060974s ago: executing program 3 (id=6966): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe80000000400000000000000000001b000000fb00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14143f000000000000000000000000000004d36c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000008000003"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73", 0xf82}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.631916363s ago: executing program 1 (id=6967): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (fail_nth: 1) 2.301838189s ago: executing program 1 (id=6968): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close_range(r0, 0xffffffffffffffff, 0x0) 2.085664008s ago: executing program 3 (id=6969): bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x6e20, @multicast1}, 0x10) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 2.065378249s ago: executing program 1 (id=6970): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x84880) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x6e20, @multicast1}, 0x10) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 2.039478309s ago: executing program 3 (id=6971): openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000080)=0x0) r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000000)={0x0, 0xb, 0x80006, 0x200006, 0x8, 0x1, "260000000000000754439400", 0xa, 0x0, 0x5, 0x2, 0x1, 0xfd, 0x9d}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0) 2.012010807s ago: executing program 8 (id=6972): r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40015}, 0x44080) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}}, 0x20}, 0x1, 0x0, 0x0, 0x20045844}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.719058511s ago: executing program 5 (id=6973): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0x4000000000000000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x9, 0x3}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r2, &(0x7f0000001a40)={0x2020}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r5, r5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_clone(0x200000, &(0x7f0000006300), 0x0, &(0x7f0000006340), &(0x7f0000006380), &(0x7f00000063c0)="091f350f469694667bdfd9dd60cfbec6105d6460067400d386a49bb13ba036239ca27752ef8457873100fccfe818f2231c17c411d43a6c5649cfc2acf3581965bc6d8883827fbf4e280cbc50780f69ee") socket$inet_sctp(0x2, 0x1, 0x84) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000006440)={0x2, 0x6, {}, {0xee00}, 0xf328, 0x3}) ioctl$TCFLSH(r3, 0x400455c8, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) 1.466660156s ago: executing program 1 (id=6974): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x40}}, 0x810) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r6, 0x89e0, &(0x7f0000001080)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@deltfilter={0x34, 0x2d, 0x208, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff1, 0x4}, {0xfff1, 0x1}, {0x2, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x81}}]}, 0x34}}, 0x875187a90315af15) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r11, 0x0, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r12) 1.011839145s ago: executing program 8 (id=6975): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x600, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, 0x0, 0x48800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000080)=""/12}, 0x20) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000001040)=""/196, &(0x7f0000001140)=0xc4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r7 = gettid() r8 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 970.025654ms ago: executing program 3 (id=6976): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in=@loopback, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x4}]}}]}, 0x38}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000040000100feffffffffdbdf25017c0c00000042800c00018006000600800a00001c00020018001780140001"], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) mknodat(r2, &(0x7f0000000200)='./file0\x00', 0x8, 0x4) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f00000002c0)={0x20, r5}, 0x0) landlock_restrict_self(r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) r7 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f00000006c0)={r7, 0xfff, 0xea91, "a0ed13ae639b0c202a5bf4062f0800c22ffd4b80848c0d3badfa2319e63a3c0e799f2f7a1a632ab29a14cdb64d81d692f6589c9a52562d9492c9d61c122455fb307fa23330abc83367006c98f962cf"}) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) 901.086752ms ago: executing program 1 (id=6977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x14, 0x2, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x40080) 783.741102ms ago: executing program 8 (id=6978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101080) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x24, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b2618be5d4bd4944f2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x48) read(r3, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x100) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r7 = getpid() syz_pidfd_open(r7, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) 775.093109ms ago: executing program 5 (id=6979): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000280)={0x14, &(0x7f0000000100)={0x0, 0x21, 0xe6, {0xe6, 0x1, "3966d603b6cf8f70852d4e250bcb4e7934a07b0973ea47c434912aadba2dc8701755f49b41f91229e531475c75afb1ed6331133d7c341d3d1a646b5a288802458f762e3acc4ae162aca61c5edf7765c63d7a984b38dbbe7b31dbac9f0a91a3b8956a565754211c37ca5fecfa20e557b7983f5631d4c27354f6756c36cf2e4c99f422590a755b279ba8da1796076eccd0a2e615ef43af91fc454cdbd91841dcf99ead43bade716141bf07dbd3cbded833f76b0a3dc00888f9fa72ed7a35172ce7d6fc7835e0e4803c9604c45b304daa3248e5aa50faa806c19abe19985dc147777aee465c"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}}, &(0x7f0000000e00)={0x1c, &(0x7f00000002c0)={0x40, 0xe, 0x3d, "8cbe0684cdb48c4ac9489d657d97d7f113d60dd5eb6b3bd0f2aa70e2a1be10f39afd482493aecd26a06ecafd0832d96406c5f31d6c3bb284661148d5a6"}, &(0x7f0000000980)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000dc0)={0x21, 0x0, 0x4, "4c0aafd9"}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 529.65797ms ago: executing program 4 (id=6980): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000440), 0x6, 0x0, 0x4}, 0x50) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000000)=""/5, 0x210000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f0000003580)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x4c831, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x73e, &(0x7f0000419000/0x8000)=nil, 0x3) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0xa) shutdown(0xffffffffffffffff, 0x1) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x808, 0x0, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000140)=0x8, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES64], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffaebba5f906560e4d000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bf957381dddcc6e8ed020000f8ffffffb703000008ff00d8af5a52232ba14fc59f9e7c2d000004000002000000856300"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0xfffffffffffffffb, 0x0) pipe(&(0x7f00000001c0)) 355.682502ms ago: executing program 1 (id=6981): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close_range(r0, 0xffffffffffffffff, 0x0) 188.827504ms ago: executing program 4 (id=6982): bind$inet(0xffffffffffffffff, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 0s ago: executing program 4 (id=6983): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x15) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000100)="f8", 0x1}], 0x1) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x800}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) kernel console output (not intermixed with test programs): scriptor of length 0, skipping remainder of the config [ 1681.971113][T26472] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1682.033989][T26472] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1682.096991][T26472] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1682.237407][T26472] usb 5-1: config 7 interface 0 has no altsetting 0 [ 1682.284950][T26472] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1682.320481][T26472] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.420696][T19427] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1682.681540][T19427] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1682.720346][T19427] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1682.739837][T19427] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1682.771867][T19427] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1682.801363][T28058] overlayfs: missing 'lowerdir' [ 1682.819146][T19427] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1682.838218][T19427] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1682.849722][T19427] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1682.860184][T26472] hid (null): invalid report_size 28520 [ 1682.870535][T26472] hid (null): report_id 0 is invalid [ 1682.876685][T19427] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1682.899900][T19427] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1682.901553][T28065] FAULT_INJECTION: forcing a failure. [ 1682.901553][T28065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1682.911622][T26472] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.0/0003:0458:5010.001B/input/input31 [ 1682.935594][T28065] CPU: 0 UID: 0 PID: 28065 Comm: syz.1.6530 Tainted: G L syzkaller #0 PREEMPT(full) [ 1682.935611][T28065] Tainted: [L]=SOFTLOCKUP [ 1682.935615][T28065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1682.935621][T28065] Call Trace: [ 1682.935626][T28065] [ 1682.935631][T28065] dump_stack_lvl+0x100/0x190 [ 1682.935648][T28065] should_fail_ex.cold+0x5/0xa [ 1682.935668][T28065] _copy_to_user+0x32/0xd0 [ 1682.935687][T28065] simple_read_from_buffer+0xcb/0x170 [ 1682.935702][T28065] proc_fail_nth_read+0x1af/0x230 [ 1682.935715][T28065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1682.935728][T28065] ? rw_verify_area+0xce/0x6d0 [ 1682.935738][T28065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1682.935750][T28065] vfs_read+0x1e4/0xb30 [ 1682.935764][T28065] ? __pfx_vfs_read+0x10/0x10 [ 1682.935775][T28065] ? __fget_files+0x215/0x3d0 [ 1682.935792][T28065] ? __fget_files+0x21f/0x3d0 [ 1682.935809][T28065] ksys_read+0x12a/0x250 [ 1682.935821][T28065] ? __pfx_ksys_read+0x10/0x10 [ 1682.935834][T28065] ? rcu_is_watching+0x12/0xc0 [ 1682.935853][T28065] do_syscall_64+0x10b/0xf80 [ 1682.935868][T28065] ? clear_bhb_loop+0x40/0x90 [ 1682.935881][T28065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.935892][T28065] RIP: 0033:0x7f2a1255d68e [ 1682.935901][T28065] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1682.935912][T28065] RSP: 002b:00007f2a134adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1682.935922][T28065] RAX: ffffffffffffffda RBX: 00007f2a134ae6c0 RCX: 00007f2a1255d68e [ 1682.935929][T28065] RDX: 000000000000000f RSI: 00007f2a134ae0a0 RDI: 0000000000000005 [ 1682.935935][T28065] RBP: 00007f2a134ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1682.935942][T28065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1682.935948][T28065] R13: 00007f2a12816038 R14: 00007f2a12815fa0 R15: 00007fff83581a08 [ 1682.935963][T28065] [ 1683.133632][T19427] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1683.144841][T19427] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1683.153730][T19427] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1683.164597][T19427] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1683.209831][T19427] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1683.218724][T19427] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1683.229641][T19427] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1683.242467][T19427] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1683.251387][T19427] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1683.262281][T19427] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1683.272141][T19427] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1683.283567][T19427] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1683.294611][T19427] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1683.304528][T19427] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1683.313453][T19427] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1683.324514][T19427] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1683.338549][T19427] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1683.351791][T26472] kye 0003:0458:5010.001B: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 1683.364123][T19427] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1683.377025][T19427] usb 4-1: Product: syz [ 1683.381548][T19427] usb 4-1: Manufacturer: syz [ 1683.386246][T19427] usb 4-1: SerialNumber: syz [ 1683.396545][T26472] usb 5-1: USB disconnect, device number 77 [ 1683.424145][T19427] usb 4-1: config 0 descriptor?? [ 1683.443230][T28075] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6535'. [ 1683.462132][T28075] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6535'. [ 1683.462430][T28075] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6535'. [ 1683.589202][T19427] yurex 4-1:0.0: USB YUREX device now attached to Yurex #1 [ 1683.639849][T19427] usb 4-1: USB disconnect, device number 69 [ 1683.651526][T28079] fido_id[28079]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1683.680084][T19427] yurex 4-1:0.0: USB YUREX #1 now disconnected [ 1683.832804][T28072] pim6reg1: tun_chr_ioctl cmd 1074025678 [ 1683.852864][T28072] pim6reg1: group set to 0 [ 1683.901727][ T30] audit: type=1400 audit(1778895311.233:983): avc: denied { mount } for pid=28071 comm="syz.7.6534" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1683.940283][ T30] audit: type=1400 audit(1778895311.263:984): avc: denied { setopt } for pid=28071 comm="syz.7.6534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1683.960645][ T30] audit: type=1400 audit(1778895311.293:985): avc: denied { mounton } for pid=28071 comm="syz.7.6534" path="/190/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1683.992347][T28072] pim6reg1: tun_chr_ioctl cmd 1074304019 [ 1684.049196][T28090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6540'. [ 1684.102597][ T30] audit: type=1400 audit(1778895311.433:986): avc: denied { unmount } for pid=24938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1684.318599][T28095] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.6541'. [ 1684.971582][T28101] Mount JFS Failure: -5 [ 1685.190666][T28098] [U] [ 1686.990462][T19427] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1687.039609][T28127] fuse: Bad value for 'fd' [ 1687.065808][ T30] audit: type=1400 audit(1778895314.393:987): avc: denied { remount } for pid=28126 comm="syz.5.6550" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1687.085812][T28130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6551'. [ 1687.187385][T19427] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1687.203184][T19427] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1687.220590][T19427] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1687.234368][T19427] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1687.251032][T19427] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1687.252175][T28136] FAULT_INJECTION: forcing a failure. [ 1687.252175][T28136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1687.261333][T19427] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1687.273181][T28136] CPU: 1 UID: 0 PID: 28136 Comm: syz.7.6552 Tainted: G L syzkaller #0 PREEMPT(full) [ 1687.273205][T28136] Tainted: [L]=SOFTLOCKUP [ 1687.273211][T28136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1687.273220][T28136] Call Trace: [ 1687.273226][T28136] [ 1687.273232][T28136] dump_stack_lvl+0x100/0x190 [ 1687.273256][T28136] should_fail_ex.cold+0x5/0xa [ 1687.273278][T28136] _copy_from_user+0x2e/0xd0 [ 1687.273302][T28136] copy_msghdr_from_user+0x9f/0x4f0 [ 1687.273325][T28136] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1687.273356][T28136] ___sys_sendmsg+0x106/0x1e0 [ 1687.273378][T28136] ? __pfx____sys_sendmsg+0x10/0x10 [ 1687.273426][T28136] __sys_sendmsg+0x170/0x220 [ 1687.273443][T28136] ? __pfx___sys_sendmsg+0x10/0x10 [ 1687.273469][T28136] ? rcu_is_watching+0x12/0xc0 [ 1687.273496][T28136] do_syscall_64+0x10b/0xf80 [ 1687.273517][T28136] ? clear_bhb_loop+0x40/0x90 [ 1687.273535][T28136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.273551][T28136] RIP: 0033:0x7f362cf9ce59 [ 1687.273564][T28136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1687.273579][T28136] RSP: 002b:00007f362dead028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1687.273594][T28136] RAX: ffffffffffffffda RBX: 00007f362d215fa0 RCX: 00007f362cf9ce59 [ 1687.273605][T28136] RDX: 0000000024008000 RSI: 0000200000000440 RDI: 0000000000000003 [ 1687.273614][T28136] RBP: 00007f362dead090 R08: 0000000000000000 R09: 0000000000000000 [ 1687.273629][T28136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1687.273638][T28136] R13: 00007f362d216038 R14: 00007f362d215fa0 R15: 00007ffcd6ac44c8 [ 1687.273661][T28136] [ 1687.311900][T28135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6554'. [ 1687.321299][T19427] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1687.479516][T26472] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1687.490477][T19427] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1687.504473][T19427] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1687.518602][T19427] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1687.536228][T28135] nbd: illegal input index 1922267500 [ 1687.551794][T19427] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1687.563532][T19427] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1687.575777][T19427] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1687.595655][T19427] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1687.606556][T19427] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1687.621610][T19427] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1687.649641][T19427] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1687.658852][T26472] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1687.666703][T19427] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1687.678554][T26472] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1687.687600][T26472] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1687.708581][T26472] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1687.721629][T26472] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1687.732677][T19427] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1687.741221][T26472] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1687.752445][T19427] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1687.761471][T19427] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1687.769544][T15117] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1687.772666][T19427] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1687.786545][T26472] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1687.795856][T26472] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1687.805178][T26472] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1687.816905][T19427] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1687.827401][T19427] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1687.861101][T26472] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1687.867787][T19427] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1687.882739][T26472] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1687.894299][T19427] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1687.911673][T19427] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1687.937688][T26472] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1687.948894][T19427] usb 5-1: Product: syz [ 1687.957689][T19427] usb 5-1: Manufacturer: syz [ 1687.973751][T26472] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1687.980743][T19427] usb 5-1: SerialNumber: syz [ 1687.991410][T15117] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1688.012101][T15117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1688.036158][T15117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1688.055775][T15117] usb 2-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 1688.056544][T19427] usb 5-1: config 0 descriptor?? [ 1688.071686][T26472] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1688.086727][T26472] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1688.091118][T15117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.115017][T19427] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1688.124109][T15117] usb 2-1: config 0 descriptor?? [ 1688.149990][T26472] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1688.170440][T26472] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1688.193040][T26472] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1688.193051][T28155] fuse: Bad value for 'fd' [ 1688.193087][T26472] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1688.235358][T26472] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1688.245922][T26472] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1688.264684][T26472] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1688.279972][T26472] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1688.300168][T26472] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1688.349537][T26472] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1688.378536][T26472] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1688.413039][T26472] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1688.441981][T26472] usb 4-1: Product: syz [ 1688.451907][T26472] usb 4-1: Manufacturer: syz [ 1688.462954][T26472] usb 4-1: SerialNumber: syz [ 1688.480709][T26472] usb 4-1: config 0 descriptor?? [ 1688.489560][T19432] usb 5-1: USB disconnect, device number 78 [ 1688.497690][T19432] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1688.508895][T26472] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1688.576891][T28135] xt_hashlimit: size too large, truncated to 1048576 [ 1688.630643][T15117] hid_parser_main: 470 callbacks suppressed [ 1688.630664][T15117] magicmouse 0003:05AC:0324.001C: unknown main item tag 0x0 [ 1688.670418][T15117] magicmouse 0003:05AC:0324.001C: unknown main item tag 0x0 [ 1688.694975][T15117] magicmouse 0003:05AC:0324.001C: unknown main item tag 0x0 [ 1688.715621][T19432] usb 4-1: USB disconnect, device number 70 [ 1688.725168][T19432] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1688.775140][T15117] magicmouse 0003:05AC:0324.001C: unknown main item tag 0x0 [ 1688.804400][T15117] magicmouse 0003:05AC:0324.001C: unknown main item tag 0x0 [ 1688.836075][T15117] magicmouse 0003:05AC:0324.001C: unknown main item tag 0x0 [ 1688.852699][T15117] magicmouse 0003:05AC:0324.001C: unknown main item tag 0x0 [ 1688.871466][T15117] magicmouse 0003:05AC:0324.001C: unknown main item tag 0x0 [ 1688.889225][T15117] magicmouse 0003:05AC:0324.001C: unknown main item tag 0x0 [ 1688.909577][T15117] magicmouse 0003:05AC:0324.001C: unknown main item tag 0x0 [ 1688.943045][T15117] magicmouse 0003:05AC:0324.001C: unexpected long global item [ 1688.958906][T15117] magicmouse 0003:05AC:0324.001C: magicmouse hid parse failed [ 1688.977705][T15117] magicmouse 0003:05AC:0324.001C: probe with driver magicmouse failed with error -22 [ 1689.016108][T15117] usb 2-1: USB disconnect, device number 86 [ 1690.079844][T28176] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6565'. [ 1690.780757][T28185] 9p: Bad value for 'rfdno' [ 1691.603322][T28188] netlink: 'syz.3.6570': attribute type 1 has an invalid length. [ 1691.628831][T28188] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6570'. [ 1691.651387][T28188] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6570'. [ 1692.108622][T28188] netlink: 'syz.3.6570': attribute type 1 has an invalid length. [ 1692.292790][T28188] netlink: 634 bytes leftover after parsing attributes in process `syz.3.6570'. [ 1692.719589][T19427] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1692.900241][T19427] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1692.936633][T19427] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1692.974568][T19427] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1693.009357][T19427] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1693.035246][T19427] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1693.059154][T19427] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1693.070335][T19432] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1693.113557][T19427] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1693.140368][T19427] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1693.174652][T19427] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1693.208657][T19427] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1693.233063][T19427] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1693.259343][T19432] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1693.274453][T19427] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1693.290148][T19432] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1693.309461][T19427] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1693.317773][T19432] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 1693.337984][T19427] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1693.355825][T19432] usb 4-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 1693.365653][T19427] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1693.384497][T19432] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.398806][T19427] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1693.409460][T19432] usb 4-1: Product: syz [ 1693.419358][T19427] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1693.429776][T19432] usb 4-1: Manufacturer: syz [ 1693.445145][T19432] usb 4-1: SerialNumber: syz [ 1693.462621][T19427] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1693.499549][T19427] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1693.528098][T19427] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1693.556524][T19427] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1693.607392][T19427] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1693.649292][T19427] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1693.683725][T19427] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1693.721025][T19427] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1693.752960][ T30] audit: type=1400 audit(1778895321.073:988): avc: denied { connect } for pid=28201 comm="syz.5.6576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1693.776323][T19427] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1693.794662][T28202] trusted_key: encrypted_key: insufficient parameters specified [ 1693.806035][T19427] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1693.830368][T19432] usb 4-1: Can't get UAC3 power state for id 10 [ 1693.851130][T19427] usb 5-1: Product: syz [ 1693.862101][T19432] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 1693.871314][T19427] usb 5-1: Manufacturer: syz [ 1693.908310][T19427] usb 5-1: SerialNumber: syz [ 1693.927002][T19432] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1693.944221][T19427] usb 5-1: config 0 descriptor?? [ 1693.967646][T19432] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1693.981337][T19427] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1694.013025][T19432] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1694.051608][ T30] audit: type=1400 audit(1778895321.383:989): avc: denied { search } for pid=28206 comm="syz.1.6569" name="/" dev="configfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1694.824070][T28216] 9p: Bad value for 'rfdno' [ 1694.876553][ T5820] usb 5-1: USB disconnect, device number 79 [ 1694.885782][ T5820] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1694.928252][T19432] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1695.020815][T19432] usb 4-1: USB disconnect, device number 71 [ 1695.141612][T26154] udevd[26154]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1695.335583][T28226] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1695.335583][T28226] The task syz.3.6582 (28226) triggered the difference, watch for misbehavior. [ 1695.792882][T28232] FAULT_INJECTION: forcing a failure. [ 1695.792882][T28232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1695.870346][T28232] CPU: 0 UID: 0 PID: 28232 Comm: syz.4.6584 Tainted: G L syzkaller #0 PREEMPT(full) [ 1695.870365][T28232] Tainted: [L]=SOFTLOCKUP [ 1695.870369][T28232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1695.870376][T28232] Call Trace: [ 1695.870380][T28232] [ 1695.870384][T28232] dump_stack_lvl+0x100/0x190 [ 1695.870401][T28232] should_fail_ex.cold+0x5/0xa [ 1695.870418][T28232] _copy_from_user+0x2e/0xd0 [ 1695.870435][T28232] copy_msghdr_from_user+0x9f/0x4f0 [ 1695.870451][T28232] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1695.870469][T28232] ? __lock_acquire+0x4a5/0x2630 [ 1695.870488][T28232] ___sys_recvmsg+0xdd/0x1a0 [ 1695.870503][T28232] ? __pfx____sys_recvmsg+0x10/0x10 [ 1695.870535][T28232] __sys_recvmsg+0x16d/0x220 [ 1695.870547][T28232] ? __pfx___sys_recvmsg+0x10/0x10 [ 1695.870565][T28232] ? rcu_is_watching+0x12/0xc0 [ 1695.870583][T28232] do_syscall_64+0x10b/0xf80 [ 1695.870598][T28232] ? clear_bhb_loop+0x40/0x90 [ 1695.870611][T28232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.870623][T28232] RIP: 0033:0x7f8bd339ce59 [ 1695.870632][T28232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1695.870643][T28232] RSP: 002b:00007f8bd15f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1695.870654][T28232] RAX: ffffffffffffffda RBX: 00007f8bd3615fa0 RCX: 00007f8bd339ce59 [ 1695.870661][T28232] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1695.870667][T28232] RBP: 00007f8bd15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1695.870673][T28232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1695.870679][T28232] R13: 00007f8bd3616038 R14: 00007f8bd3615fa0 R15: 00007ffce1a9ba78 [ 1695.870695][T28232] [ 1696.729509][ T5820] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1696.751243][T28250] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.6588'. [ 1696.834980][T28251] Mount JFS Failure: -5 [ 1696.893122][ T5820] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1697.774622][ T5820] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1697.785843][ T5820] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 1697.799083][ T5820] usb 4-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 1697.808207][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.816281][ T5820] usb 4-1: Product: syz [ 1697.826461][ T5820] usb 4-1: Manufacturer: syz [ 1697.831842][ T5820] usb 4-1: SerialNumber: syz [ 1697.860705][T28253] ubi16: attaching mtd0 [ 1697.902158][T28253] ubi16: scanning is finished [ 1697.911884][T28253] ubi16: empty MTD device detected [ 1698.072365][ T5820] usb 4-1: Can't get UAC3 power state for id 10 [ 1698.183585][ T5820] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 1698.198633][ T5820] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1698.206300][ T5820] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1698.217285][ T5820] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1698.293783][T28260] No such timeout policy "syz1" [ 1698.370974][T28253] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1698.396248][T28253] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1698.408711][ T5820] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1698.428402][T28253] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1698.453746][T28253] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 1698.466038][ T5820] usb 4-1: USB disconnect, device number 72 [ 1698.491030][T28253] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1698.538816][T28253] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1698.542503][T27468] udevd[27468]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1698.564399][T28253] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3396051928 [ 1698.599398][T28253] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1698.612862][T28261] ubi16: background thread "ubi_bgt16d" started, PID 28261 [ 1698.864429][T28274] FAULT_INJECTION: forcing a failure. [ 1698.864429][T28274] name failslab, interval 1, probability 0, space 0, times 0 [ 1698.878976][T28274] CPU: 1 UID: 0 PID: 28274 Comm: syz.3.6595 Tainted: G L syzkaller #0 PREEMPT(full) [ 1698.879002][T28274] Tainted: [L]=SOFTLOCKUP [ 1698.879009][T28274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1698.879020][T28274] Call Trace: [ 1698.879027][T28274] [ 1698.879034][T28274] dump_stack_lvl+0x100/0x190 [ 1698.879060][T28274] should_fail_ex.cold+0x5/0xa [ 1698.879086][T28274] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1698.879112][T28274] should_failslab+0xc2/0x120 [ 1698.879131][T28274] __kmalloc_noprof+0xe0/0x850 [ 1698.879159][T28274] ? kfree+0x1dd/0x6c0 [ 1698.879187][T28274] tomoyo_realpath_from_path+0xb6/0x690 [ 1698.879216][T28274] tomoyo_path_number_perm+0x23c/0x580 [ 1698.879236][T28274] ? tomoyo_path_number_perm+0x22e/0x580 [ 1698.879257][T28274] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1698.879305][T28274] ? find_held_lock+0x2b/0x80 [ 1698.879322][T28274] ? __fget_files+0x215/0x3d0 [ 1698.879343][T28274] ? hook_file_ioctl_common+0x149/0x410 [ 1698.879367][T28274] ? __fget_files+0x215/0x3d0 [ 1698.879393][T28274] ? __fget_files+0x21f/0x3d0 [ 1698.879422][T28274] security_file_ioctl+0xd3/0x230 [ 1698.879445][T28274] __x64_sys_ioctl+0xb7/0x210 [ 1698.879466][T28274] do_syscall_64+0x10b/0xf80 [ 1698.879494][T28274] ? clear_bhb_loop+0x40/0x90 [ 1698.879517][T28274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.879535][T28274] RIP: 0033:0x7f669c39ce59 [ 1698.879550][T28274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1698.879567][T28274] RSP: 002b:00007f669d199028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1698.879584][T28274] RAX: ffffffffffffffda RBX: 00007f669c616090 RCX: 00007f669c39ce59 [ 1698.879596][T28274] RDX: 0000000000000002 RSI: 000000000000540b RDI: 0000000000000005 [ 1698.879606][T28274] RBP: 00007f669d199090 R08: 0000000000000000 R09: 0000000000000000 [ 1698.879616][T28274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1698.879626][T28274] R13: 00007f669c616128 R14: 00007f669c616090 R15: 00007fff6fd85b08 [ 1698.879653][T28274] [ 1699.221222][T28274] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1699.356193][ T30] audit: type=1400 audit(1778895326.533:990): avc: denied { accept } for pid=28275 comm="syz.4.6596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1699.455199][ T30] audit: type=1400 audit(1778895326.783:991): avc: denied { prog_load } for pid=28281 comm="syz.3.6598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1699.476599][ T30] audit: type=1400 audit(1778895326.803:992): avc: denied { bpf } for pid=28281 comm="syz.3.6598" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1699.491622][T28284] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1699.498670][ T30] audit: type=1400 audit(1778895326.803:993): avc: denied { perfmon } for pid=28281 comm="syz.3.6598" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1699.507296][T28284] FAULT_INJECTION: forcing a failure. [ 1699.507296][T28284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1699.525267][ T30] audit: type=1400 audit(1778895326.803:994): avc: denied { prog_run } for pid=28281 comm="syz.3.6598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1699.568848][T28284] CPU: 1 UID: 0 PID: 28284 Comm: syz.1.6599 Tainted: G L syzkaller #0 PREEMPT(full) [ 1699.568875][T28284] Tainted: [L]=SOFTLOCKUP [ 1699.568881][T28284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1699.568892][T28284] Call Trace: [ 1699.568898][T28284] [ 1699.568905][T28284] dump_stack_lvl+0x100/0x190 [ 1699.568931][T28284] should_fail_ex.cold+0x5/0xa [ 1699.568956][T28284] _copy_from_user+0x2e/0xd0 [ 1699.568984][T28284] copy_msghdr_from_user+0x9f/0x4f0 [ 1699.569010][T28284] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1699.569038][T28284] ? __lock_acquire+0x4a5/0x2630 [ 1699.569069][T28284] ___sys_recvmsg+0xdd/0x1a0 [ 1699.569092][T28284] ? __pfx____sys_recvmsg+0x10/0x10 [ 1699.569120][T28284] ? find_held_lock+0x2b/0x80 [ 1699.569153][T28284] do_recvmmsg+0x301/0x760 [ 1699.569181][T28284] ? __pfx_do_recvmmsg+0x10/0x10 [ 1699.569204][T28284] ? ksys_write+0x190/0x250 [ 1699.569229][T28284] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1699.569255][T28284] ? kernel_write+0x653/0x6c0 [ 1699.569283][T28284] ? __fget_files+0x21f/0x3d0 [ 1699.569313][T28284] __x64_sys_recvmmsg+0x22a/0x280 [ 1699.569334][T28284] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1699.569357][T28284] ? rcu_is_watching+0x12/0xc0 [ 1699.569387][T28284] do_syscall_64+0x10b/0xf80 [ 1699.569413][T28284] ? clear_bhb_loop+0x40/0x90 [ 1699.569435][T28284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.569452][T28284] RIP: 0033:0x7f2a1259ce59 [ 1699.569467][T28284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1699.569490][T28284] RSP: 002b:00007f2a134ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1699.569506][T28284] RAX: ffffffffffffffda RBX: 00007f2a12815fa0 RCX: 00007f2a1259ce59 [ 1699.569518][T28284] RDX: 0000000000000001 RSI: 0000200000003b00 RDI: 0000000000000003 [ 1699.569528][T28284] RBP: 00007f2a134ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1699.569539][T28284] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 1699.569549][T28284] R13: 00007f2a12816038 R14: 00007f2a12815fa0 R15: 00007fff83581a08 [ 1699.569575][T28284] [ 1699.949511][ T5820] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1700.036586][T28296] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6603'. [ 1700.102782][T28298] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 1700.113853][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 1700.143081][ T5820] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 1700.151476][ T5820] usb 4-1: config 2 has no interface number 0 [ 1700.459553][ T5820] usb 4-1: config 2 interface 31 has no altsetting 0 [ 1700.479208][ T5820] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1700.488569][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.498036][ T5820] usb 4-1: Product: syz [ 1700.503267][ T5820] usb 4-1: Manufacturer: syz [ 1700.508154][ T5820] usb 4-1: SerialNumber: syz [ 1700.754490][T28305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6606'. [ 1701.092367][ T30] audit: type=1400 audit(1778895328.373:995): avc: denied { map_create } for pid=28285 comm="syz.3.6600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1702.684496][ T30] audit: type=1400 audit(1778895328.373:996): avc: denied { map_read map_write } for pid=28285 comm="syz.3.6600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1702.708204][ T5820] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 1703.401779][T28326] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6613'. [ 1703.833806][T26496] usb 4-1: USB disconnect, device number 73 [ 1704.420157][T28332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6615'. [ 1704.510501][T28334] syz_tun: entered allmulticast mode [ 1704.541746][T28332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6615'. [ 1704.620226][T28337] No such timeout policy "syz0" [ 1705.553076][T28339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6615'. [ 1705.568180][T28332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6615'. [ 1705.579099][T28339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6615'. [ 1707.235370][T28358] netlink: 280 bytes leftover after parsing attributes in process `syz.5.6620'. [ 1707.250147][ T30] audit: type=1400 audit(1778895334.588:997): avc: denied { create } for pid=28353 comm="syz.5.6620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1709.278870][T28381] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6626'. [ 1709.401527][T28388] FAULT_INJECTION: forcing a failure. [ 1709.401527][T28388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1709.436130][T28388] CPU: 1 UID: 0 PID: 28388 Comm: syz.4.6630 Tainted: G L syzkaller #0 PREEMPT(full) [ 1709.436156][T28388] Tainted: [L]=SOFTLOCKUP [ 1709.436162][T28388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1709.436172][T28388] Call Trace: [ 1709.436179][T28388] [ 1709.436185][T28388] dump_stack_lvl+0x100/0x190 [ 1709.436211][T28388] should_fail_ex.cold+0x5/0xa [ 1709.436236][T28388] _copy_from_user+0x2e/0xd0 [ 1709.436263][T28388] copy_msghdr_from_user+0x9f/0x4f0 [ 1709.436287][T28388] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1709.436324][T28388] ___sys_sendmsg+0x106/0x1e0 [ 1709.436349][T28388] ? __pfx____sys_sendmsg+0x10/0x10 [ 1709.436410][T28388] __sys_sendmsg+0x170/0x220 [ 1709.436429][T28388] ? __pfx___sys_sendmsg+0x10/0x10 [ 1709.436458][T28388] ? rcu_is_watching+0x12/0xc0 [ 1709.436490][T28388] do_syscall_64+0x10b/0xf80 [ 1709.436512][T28388] ? clear_bhb_loop+0x40/0x90 [ 1709.436533][T28388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.436553][T28388] RIP: 0033:0x7f8bd339ce59 [ 1709.436569][T28388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1709.436586][T28388] RSP: 002b:00007f8bd15f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1709.436604][T28388] RAX: ffffffffffffffda RBX: 00007f8bd3615fa0 RCX: 00007f8bd339ce59 [ 1709.436616][T28388] RDX: 0000000000040000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1709.436627][T28388] RBP: 00007f8bd15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1709.436637][T28388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1709.436648][T28388] R13: 00007f8bd3616038 R14: 00007f8bd3615fa0 R15: 00007ffce1a9ba78 [ 1709.436673][T28388] [ 1709.772053][T28393] xt_hashlimit: size too large, truncated to 1048576 [ 1709.900679][T28403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6633'. [ 1709.960487][T28408] binder: 28407:28408 ioctl c0306201 0 returned -14 [ 1710.127706][T28414] FAULT_INJECTION: forcing a failure. [ 1710.127706][T28414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1710.278111][T28414] CPU: 0 UID: 0 PID: 28414 Comm: syz.3.6637 Tainted: G L syzkaller #0 PREEMPT(full) [ 1710.278138][T28414] Tainted: [L]=SOFTLOCKUP [ 1710.278145][T28414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1710.278155][T28414] Call Trace: [ 1710.278161][T28414] [ 1710.278168][T28414] dump_stack_lvl+0x100/0x190 [ 1710.278194][T28414] should_fail_ex.cold+0x5/0xa [ 1710.278219][T28414] _copy_to_user+0x32/0xd0 [ 1710.278246][T28414] simple_read_from_buffer+0xcb/0x170 [ 1710.278271][T28414] proc_fail_nth_read+0x1af/0x230 [ 1710.278290][T28414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1710.278311][T28414] ? rw_verify_area+0xce/0x6d0 [ 1710.278327][T28414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1710.278345][T28414] vfs_read+0x1e4/0xb30 [ 1710.278367][T28414] ? __pfx_vfs_read+0x10/0x10 [ 1710.278385][T28414] ? __fget_files+0x215/0x3d0 [ 1710.278412][T28414] ? __fget_files+0x21f/0x3d0 [ 1710.278441][T28414] ksys_read+0x12a/0x250 [ 1710.278459][T28414] ? __pfx_ksys_read+0x10/0x10 [ 1710.278480][T28414] ? rcu_is_watching+0x12/0xc0 [ 1710.278510][T28414] do_syscall_64+0x10b/0xf80 [ 1710.278533][T28414] ? clear_bhb_loop+0x40/0x90 [ 1710.278554][T28414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.278571][T28414] RIP: 0033:0x7f669c35d68e [ 1710.278585][T28414] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1710.278601][T28414] RSP: 002b:00007f669d177fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1710.278617][T28414] RAX: ffffffffffffffda RBX: 00007f669d1786c0 RCX: 00007f669c35d68e [ 1710.278628][T28414] RDX: 000000000000000f RSI: 00007f669d1780a0 RDI: 0000000000000005 [ 1710.278638][T28414] RBP: 00007f669d178090 R08: 0000000000000000 R09: 0000000000000000 [ 1710.278647][T28414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1710.278657][T28414] R13: 00007f669c616218 R14: 00007f669c616180 R15: 00007fff6fd85b08 [ 1710.278683][T28414] [ 1710.801574][ T30] audit: type=1400 audit(1778895338.148:998): avc: denied { create } for pid=28420 comm="syz.3.6639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1710.875299][ T30] audit: type=1400 audit(1778895338.188:999): avc: denied { create } for pid=28422 comm="syz.5.6640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1711.034555][T28435] FAULT_INJECTION: forcing a failure. [ 1711.034555][T28435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1711.082696][T28435] CPU: 0 UID: 0 PID: 28435 Comm: syz.4.6643 Tainted: G L syzkaller #0 PREEMPT(full) [ 1711.082725][T28435] Tainted: [L]=SOFTLOCKUP [ 1711.082732][T28435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1711.082743][T28435] Call Trace: [ 1711.082749][T28435] [ 1711.082756][T28435] dump_stack_lvl+0x100/0x190 [ 1711.082782][T28435] should_fail_ex.cold+0x5/0xa [ 1711.082808][T28435] _copy_from_user+0x2e/0xd0 [ 1711.082835][T28435] copy_msghdr_from_user+0x9f/0x4f0 [ 1711.082867][T28435] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1711.082898][T28435] ? __lock_acquire+0x4a5/0x2630 [ 1711.082927][T28435] ___sys_recvmsg+0xdd/0x1a0 [ 1711.082951][T28435] ? __pfx____sys_recvmsg+0x10/0x10 [ 1711.082977][T28435] ? find_held_lock+0x2b/0x80 [ 1711.083012][T28435] do_recvmmsg+0x301/0x760 [ 1711.083039][T28435] ? __pfx_do_recvmmsg+0x10/0x10 [ 1711.083063][T28435] ? ksys_write+0x190/0x250 [ 1711.083088][T28435] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1711.083116][T28435] ? kernel_write+0x653/0x6c0 [ 1711.083143][T28435] ? __fget_files+0x21f/0x3d0 [ 1711.083172][T28435] __x64_sys_recvmmsg+0x22a/0x280 [ 1711.083193][T28435] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1711.083214][T28435] ? rcu_is_watching+0x12/0xc0 [ 1711.083245][T28435] do_syscall_64+0x10b/0xf80 [ 1711.083268][T28435] ? clear_bhb_loop+0x40/0x90 [ 1711.083290][T28435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.083308][T28435] RIP: 0033:0x7f8bd339ce59 [ 1711.083323][T28435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1711.083340][T28435] RSP: 002b:00007f8bd15f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1711.083357][T28435] RAX: ffffffffffffffda RBX: 00007f8bd3615fa0 RCX: 00007f8bd339ce59 [ 1711.083368][T28435] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004 [ 1711.083379][T28435] RBP: 00007f8bd15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1711.083390][T28435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1711.083400][T28435] R13: 00007f8bd3616038 R14: 00007f8bd3615fa0 R15: 00007ffce1a9ba78 [ 1711.083425][T28435] [ 1712.228204][T28459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6651'. [ 1712.305233][T28462] FAULT_INJECTION: forcing a failure. [ 1712.305233][T28462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1712.318482][T28462] CPU: 0 UID: 0 PID: 28462 Comm: syz.1.6648 Tainted: G L syzkaller #0 PREEMPT(full) [ 1712.318508][T28462] Tainted: [L]=SOFTLOCKUP [ 1712.318514][T28462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1712.318525][T28462] Call Trace: [ 1712.318531][T28462] [ 1712.318538][T28462] dump_stack_lvl+0x100/0x190 [ 1712.318565][T28462] should_fail_ex.cold+0x5/0xa [ 1712.318591][T28462] strncpy_from_user+0x3b/0x2d0 [ 1712.318618][T28462] ? find_held_lock+0x2b/0x80 [ 1712.318640][T28462] path_getxattrat+0x102/0x430 [ 1712.318669][T28462] ? __pfx_path_getxattrat+0x10/0x10 [ 1712.318693][T28462] ? ksys_write+0x190/0x250 [ 1712.318719][T28462] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1712.318745][T28462] ? kernel_write+0x653/0x6c0 [ 1712.318786][T28462] ? __pfx_ksys_write+0x10/0x10 [ 1712.318808][T28462] ? rcu_is_watching+0x12/0xc0 [ 1712.318838][T28462] do_syscall_64+0x10b/0xf80 [ 1712.318861][T28462] ? clear_bhb_loop+0x40/0x90 [ 1712.318884][T28462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.318902][T28462] RIP: 0033:0x7f2a1259ce59 [ 1712.318916][T28462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1712.318933][T28462] RSP: 002b:00007f2a1346c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 1712.318950][T28462] RAX: ffffffffffffffda RBX: 00007f2a12816180 RCX: 00007f2a1259ce59 [ 1712.318962][T28462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1712.318972][T28462] RBP: 00007f2a1346c090 R08: 0000000000000000 R09: 0000000000000000 [ 1712.318982][T28462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1712.318992][T28462] R13: 00007f2a12816218 R14: 00007f2a12816180 R15: 00007fff83581a08 [ 1712.319018][T28462] [ 1712.596687][ T30] audit: type=1400 audit(1778895339.938:1000): avc: denied { mount } for pid=28453 comm="syz.5.6649" name="/" dev="ramfs" ino=149954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1712.622778][T28456] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6649'. [ 1713.160297][T28483] overlayfs: failed to resolve './file1': -2 [ 1713.240948][T28484] trusted_key: encrypted_key: insufficient parameters specified [ 1714.395840][T28488] No such timeout policy "syz0" [ 1715.091698][T28491] netlink: 'syz.5.6662': attribute type 1 has an invalid length. [ 1715.158695][T19420] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1715.214948][T28493] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1715.319484][T19420] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1715.368174][T28493] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 1715.409207][T19420] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1715.417377][ T30] audit: type=1400 audit(1778895342.598:1001): avc: denied { create } for pid=28494 comm="syz.1.6663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1715.672075][T28491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6662'. [ 1715.742405][T28493] bond1: (slave vxcan3): making interface the new active one [ 1715.802150][T28493] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 1715.878128][T28491] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 1715.956797][T28491] bond1 (unregistering): Released all slaves [ 1716.183060][T19420] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1716.195669][T19420] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1716.220174][T19420] usb 5-1: unable to read config index 1 descriptor/start: -71 [ 1716.237537][T19420] usb 5-1: can't read configurations, error -71 [ 1716.575347][T28519] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.6672'. [ 1716.748890][T28525] overlayfs: failed to resolve './file1': -2 [ 1717.367676][T28526] No such timeout policy "syz0" [ 1718.578593][T28527] trusted_key: encrypted_key: insufficient parameters specified [ 1720.845565][T28544] FAULT_INJECTION: forcing a failure. [ 1720.845565][T28544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1720.858826][T28544] CPU: 1 UID: 0 PID: 28544 Comm: syz.3.6677 Tainted: G L syzkaller #0 PREEMPT(full) [ 1720.858852][T28544] Tainted: [L]=SOFTLOCKUP [ 1720.858859][T28544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1720.858869][T28544] Call Trace: [ 1720.858875][T28544] [ 1720.858883][T28544] dump_stack_lvl+0x100/0x190 [ 1720.858909][T28544] should_fail_ex.cold+0x5/0xa [ 1720.858935][T28544] _copy_from_user+0x2e/0xd0 [ 1720.858963][T28544] copy_msghdr_from_user+0x9f/0x4f0 [ 1720.858989][T28544] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1720.859019][T28544] ? __lock_acquire+0x4a5/0x2630 [ 1720.859048][T28544] ___sys_recvmsg+0xdd/0x1a0 [ 1720.859072][T28544] ? __pfx____sys_recvmsg+0x10/0x10 [ 1720.859119][T28544] __sys_recvmsg+0x16d/0x220 [ 1720.859139][T28544] ? __pfx___sys_recvmsg+0x10/0x10 [ 1720.859170][T28544] ? rcu_is_watching+0x12/0xc0 [ 1720.859200][T28544] do_syscall_64+0x10b/0xf80 [ 1720.859224][T28544] ? clear_bhb_loop+0x40/0x90 [ 1720.859253][T28544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.859272][T28544] RIP: 0033:0x7f669c39ce59 [ 1720.859287][T28544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1720.859304][T28544] RSP: 002b:00007f669d178028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1720.859321][T28544] RAX: ffffffffffffffda RBX: 00007f669c616180 RCX: 00007f669c39ce59 [ 1720.859333][T28544] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000005 [ 1720.859344][T28544] RBP: 00007f669d178090 R08: 0000000000000000 R09: 0000000000000000 [ 1720.859355][T28544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1720.859365][T28544] R13: 00007f669c616218 R14: 00007f669c616180 R15: 00007fff6fd85b08 [ 1720.859392][T28544] [ 1722.740873][T19432] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1723.097103][T19432] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1723.124008][T19432] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1723.237388][T19432] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.278051][T19432] usb 5-1: config 220 has no interface number 2 [ 1724.474188][T19432] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1724.487403][T19432] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1724.494218][T19432] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1724.501096][T19432] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1724.508570][T19432] usb 5-1: string descriptor 0 read error: -71 [ 1724.514846][T19432] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1724.524394][T19432] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.535354][T19432] usb 5-1: can't set config #220, error -71 [ 1724.543244][T19432] usb 5-1: USB disconnect, device number 82 [ 1724.773510][T28577] trusted_key: encrypted_key: insufficient parameters specified [ 1726.257534][T28583] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6687'. [ 1726.368207][T28586] No such timeout policy "syz0" [ 1728.512969][T28592] FAULT_INJECTION: forcing a failure. [ 1728.512969][T28592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1728.568192][T28592] CPU: 0 UID: 0 PID: 28592 Comm: syz.1.6691 Tainted: G L syzkaller #0 PREEMPT(full) [ 1728.568210][T28592] Tainted: [L]=SOFTLOCKUP [ 1728.568215][T28592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1728.568221][T28592] Call Trace: [ 1728.568225][T28592] [ 1728.568229][T28592] dump_stack_lvl+0x100/0x190 [ 1728.568245][T28592] should_fail_ex.cold+0x5/0xa [ 1728.568261][T28592] _copy_from_user+0x2e/0xd0 [ 1728.568278][T28592] do_sys_poll+0x345/0xe90 [ 1728.568292][T28592] ? is_bpf_text_address+0x94/0x1a0 [ 1728.568306][T28592] ? kernel_text_address+0x8d/0x100 [ 1728.568321][T28592] ? __kernel_text_address+0xd/0x30 [ 1728.568335][T28592] ? unwind_get_return_address+0x59/0xa0 [ 1728.568355][T28592] ? __pfx_do_sys_poll+0x10/0x10 [ 1728.568381][T28592] ? __lock_acquire+0x4a5/0x2630 [ 1728.568419][T28592] ? ktime_get_ts64+0x306/0x420 [ 1728.568434][T28592] ? ktime_get_ts64+0x318/0x420 [ 1728.568446][T28592] ? ktime_get_ts64+0x257/0x420 [ 1728.568461][T28592] ? poll_select_set_timeout+0xcc/0x160 [ 1728.568476][T28592] __x64_sys_poll+0x1b3/0x420 [ 1728.568490][T28592] ? __pfx___x64_sys_poll+0x10/0x10 [ 1728.568505][T28592] ? rcu_is_watching+0x12/0xc0 [ 1728.568523][T28592] do_syscall_64+0x10b/0xf80 [ 1728.568538][T28592] ? clear_bhb_loop+0x40/0x90 [ 1728.568551][T28592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.568562][T28592] RIP: 0033:0x7f2a1259ce59 [ 1728.568571][T28592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1728.568582][T28592] RSP: 002b:00007f2a134ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1728.568593][T28592] RAX: ffffffffffffffda RBX: 00007f2a12815fa0 RCX: 00007f2a1259ce59 [ 1728.568599][T28592] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 1728.568606][T28592] RBP: 00007f2a134ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1728.568612][T28592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1728.568618][T28592] R13: 00007f2a12816038 R14: 00007f2a12815fa0 R15: 00007fff83581a08 [ 1728.568633][T28592] [ 1728.998903][T28603] No such timeout policy "syz0" [ 1731.415176][T28617] trusted_key: encrypted_key: insufficient parameters specified [ 1732.676652][T28622] netlink: 'syz.1.6700': attribute type 1 has an invalid length. [ 1732.702940][T28622] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6700'. [ 1732.747659][T28622] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6700'. [ 1732.789280][T28624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6701'. [ 1732.804661][T28622] netlink: 'syz.1.6700': attribute type 1 has an invalid length. [ 1732.829537][T28622] netlink: 634 bytes leftover after parsing attributes in process `syz.1.6700'. [ 1732.858755][T28627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6701'. [ 1732.918152][T28628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6701'. [ 1734.682162][T28644] No such timeout policy "syz0" [ 1736.179261][T28651] trusted_key: encrypted_key: insufficient parameters specified [ 1736.902695][T14239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1736.951970][T14239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1736.961028][T14239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1737.241726][T14239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1737.261655][T14239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1737.315361][T28658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6711'. [ 1737.376433][T28659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6711'. [ 1737.943516][T28658] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6711'. [ 1738.327513][T28668] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=28668 comm=syz.3.6713 [ 1738.362499][T28668] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28668 comm=syz.3.6713 [ 1739.535687][ T4929] Bluetooth: hci0: command tx timeout [ 1740.817854][T28711] usb usb8: usbfs: process 28711 (syz.1.6722) did not claim interface 0 before use [ 1740.956364][T28716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6723'. [ 1741.098602][T28718] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.6724'. [ 1741.607471][ T4929] Bluetooth: hci0: command tx timeout [ 1741.883867][T28719] Mount JFS Failure: -5 [ 1741.992796][ T36] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.422942][T28707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1742.579620][T28652] lo speed is unknown, defaulting to 1000 [ 1742.993111][T28730] comedi comedi3: pcl726: I/O base address or length out of range [ 1743.634645][ T30] audit: type=1400 audit(1778895370.310:1002): avc: denied { create } for pid=28726 comm="syz.3.6727" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 1743.722753][ T4929] Bluetooth: hci0: command tx timeout [ 1743.797065][ T30] audit: type=1400 audit(1778895370.320:1003): avc: denied { mount } for pid=28726 comm="syz.3.6727" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1743.848909][ T36] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.976082][ T36] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.059598][ T36] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.185831][T28652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.195500][T28652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1744.203542][T28652] bridge_slave_0: entered allmulticast mode [ 1744.213993][T28652] bridge_slave_0: entered promiscuous mode [ 1744.245978][T28652] bridge0: port 2(bridge_slave_1) entered blocking state [ 1744.253598][T28652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1744.261135][T28652] bridge_slave_1: entered allmulticast mode [ 1744.269222][T28652] bridge_slave_1: entered promiscuous mode [ 1744.383758][T28652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1744.422690][T28652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1744.470805][ T36] bridge_slave_1: left allmulticast mode [ 1744.482399][ T36] bridge_slave_1: left promiscuous mode [ 1744.493102][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1744.592731][ T36] bridge_slave_0: left allmulticast mode [ 1744.598824][ T36] bridge_slave_0: left promiscuous mode [ 1744.606773][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1744.698696][T28757] No such timeout policy "syz0" [ 1746.606286][T14239] Bluetooth: hci0: command tx timeout [ 1746.780806][T28766] FAULT_INJECTION: forcing a failure. [ 1746.780806][T28766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1746.794836][T28766] CPU: 0 UID: 0 PID: 28766 Comm: syz.3.6737 Tainted: G L syzkaller #0 PREEMPT(full) [ 1746.794865][T28766] Tainted: [L]=SOFTLOCKUP [ 1746.794871][T28766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1746.794881][T28766] Call Trace: [ 1746.794888][T28766] [ 1746.794895][T28766] dump_stack_lvl+0x100/0x190 [ 1746.794922][T28766] should_fail_ex.cold+0x5/0xa [ 1746.794948][T28766] _copy_from_user+0x2e/0xd0 [ 1746.794984][T28766] copy_msghdr_from_user+0x9f/0x4f0 [ 1746.795010][T28766] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1746.795040][T28766] ? __lock_acquire+0x4a5/0x2630 [ 1746.795066][T28766] ___sys_recvmsg+0xdd/0x1a0 [ 1746.795089][T28766] ? __pfx____sys_recvmsg+0x10/0x10 [ 1746.795134][T28766] __sys_recvmsg+0x16d/0x220 [ 1746.795153][T28766] ? __pfx___sys_recvmsg+0x10/0x10 [ 1746.795182][T28766] ? rcu_is_watching+0x12/0xc0 [ 1746.795213][T28766] do_syscall_64+0x10b/0xf80 [ 1746.795237][T28766] ? clear_bhb_loop+0x40/0x90 [ 1746.795259][T28766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1746.795277][T28766] RIP: 0033:0x7f669c39ce59 [ 1746.795295][T28766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1746.795312][T28766] RSP: 002b:00007f669d1ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1746.795330][T28766] RAX: ffffffffffffffda RBX: 00007f669c615fa0 RCX: 00007f669c39ce59 [ 1746.795342][T28766] RDX: 0000000000000021 RSI: 0000200000000700 RDI: 0000000000000004 [ 1746.795352][T28766] RBP: 00007f669d1ba090 R08: 0000000000000000 R09: 0000000000000000 [ 1746.795363][T28766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1746.795373][T28766] R13: 00007f669c616038 R14: 00007f669c615fa0 R15: 00007fff6fd85b08 [ 1746.795399][T28766] [ 1746.807073][T28764] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.6736'. [ 1747.275998][ T30] audit: type=1326 audit(1778895374.610:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28773 comm="syz.4.6739" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bd339ce59 code=0x0 [ 1747.353373][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1747.365404][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1747.378838][ T36] bond0 (unregistering): Released all slaves [ 1747.408188][T28652] team0: Port device team_slave_0 added [ 1747.416464][T28652] team0: Port device team_slave_1 added [ 1747.449664][T28652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1747.456754][T28652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1747.484129][T28652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1747.520348][T28754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1747.554885][T28756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1747.706589][T28652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1747.715166][T28783] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6742'. [ 1747.721485][T28652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1748.080939][T28652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1749.393952][ T36] tipc: Left network mode [ 1749.769781][T28652] hsr_slave_0: entered promiscuous mode [ 1749.863181][T28652] hsr_slave_1: entered promiscuous mode [ 1749.910257][T28652] debugfs: 'hsr0' already exists in 'hsr' [ 1749.950020][T28652] Cannot create hsr debugfs directory [ 1753.806486][ T30] audit: type=1400 audit(1778895381.081:1005): avc: denied { write } for pid=28798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1753.838802][T28833] netlink: 'syz.1.6750': attribute type 10 has an invalid length. [ 1753.872581][ T30] audit: type=1400 audit(1778895381.161:1006): avc: denied { write } for pid=28832 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1754.693114][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1754.761415][ T36] hsr_slave_0: left promiscuous mode [ 1754.805708][ T36] hsr_slave_1: left promiscuous mode [ 1754.827225][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1754.858037][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1754.883626][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1754.894576][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1754.930638][ T36] veth0_macvtap: left promiscuous mode [ 1754.962092][ T36] veth1_vlan: left promiscuous mode [ 1754.984784][ T36] veth0_vlan: left promiscuous mode [ 1754.996247][T28848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6756'. [ 1756.035346][T28863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6759'. [ 1756.955187][T28865] FAULT_INJECTION: forcing a failure. [ 1756.955187][T28865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1756.969963][T28865] CPU: 1 UID: 0 PID: 28865 Comm: syz.4.6761 Tainted: G L syzkaller #0 PREEMPT(full) [ 1756.969989][T28865] Tainted: [L]=SOFTLOCKUP [ 1756.969995][T28865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1756.970005][T28865] Call Trace: [ 1756.970011][T28865] [ 1756.970017][T28865] dump_stack_lvl+0x100/0x190 [ 1756.970044][T28865] should_fail_ex.cold+0x5/0xa [ 1756.970066][T28865] _copy_from_user+0x2e/0xd0 [ 1756.970084][T28865] __sys_bpf+0x243/0x4b90 [ 1756.970097][T28865] ? __pfx___sys_bpf+0x10/0x10 [ 1756.970106][T28865] ? proc_fail_nth_write+0x9f/0x220 [ 1756.970118][T28865] ? find_held_lock+0x2b/0x80 [ 1756.970132][T28865] ? find_held_lock+0x2b/0x80 [ 1756.970142][T28865] ? ksys_write+0x190/0x250 [ 1756.970154][T28865] ? ksys_write+0x190/0x250 [ 1756.970168][T28865] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1756.970184][T28865] ? kernel_write+0x653/0x6c0 [ 1756.970196][T28865] ? __fget_files+0x215/0x3d0 [ 1756.970217][T28865] ? fput+0x79/0x100 [ 1756.970232][T28865] ? ksys_write+0x1ac/0x250 [ 1756.970243][T28865] ? __pfx_ksys_write+0x10/0x10 [ 1756.970257][T28865] __x64_sys_bpf+0x7b/0xc0 [ 1756.970268][T28865] ? lockdep_hardirqs_on+0x78/0x100 [ 1756.970283][T28865] do_syscall_64+0x10b/0xf80 [ 1756.970297][T28865] ? clear_bhb_loop+0x40/0x90 [ 1756.970310][T28865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1756.970321][T28865] RIP: 0033:0x7f8bd339ce59 [ 1756.970330][T28865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1756.970341][T28865] RSP: 002b:00007f8bd15f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1756.970357][T28865] RAX: ffffffffffffffda RBX: 00007f8bd3615fa0 RCX: 00007f8bd339ce59 [ 1756.970364][T28865] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 1756.970370][T28865] RBP: 00007f8bd15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1756.970376][T28865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1756.970382][T28865] R13: 00007f8bd3616038 R14: 00007f8bd3615fa0 R15: 00007ffce1a9ba78 [ 1756.970398][T28865] [ 1757.373737][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1757.413034][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1757.961193][T28874] netlink: 'syz.5.6763': attribute type 10 has an invalid length. [ 1758.104085][T28878] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.6765'. [ 1758.335687][T28881] Mount JFS Failure: -5 [ 1758.367470][T28883] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6767'. [ 1759.092952][T28887] fuse: Bad value for 'fd' [ 1759.608362][T28895] comedi comedi3: pcl726: I/O base address or length out of range [ 1760.460552][T28888] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1760.830793][T28898] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1760.894500][ T30] audit: type=1400 audit(1778895388.231:1007): avc: denied { write } for pid=28880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1761.081963][ T30] audit: type=1400 audit(1778895388.421:1008): avc: denied { write } for pid=28918 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1761.171573][T28921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6774'. [ 1761.216988][ T36] IPVS: stop unused estimator thread 0... [ 1761.249274][T28923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6774'. [ 1761.337667][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1761.364394][T28921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6774'. [ 1761.594877][T28652] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1761.630609][T28652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1761.671303][T28652] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1761.734000][T28652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1761.764559][T28652] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1761.840157][T28652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1761.870268][T28652] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1761.886674][T19420] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1761.948276][T28652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1762.061277][T19420] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1762.075345][T19420] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1762.112679][T19420] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 1762.164557][T19420] usb 4-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 1762.193612][T19420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.219897][T19420] usb 4-1: Product: syz [ 1762.237150][T19420] usb 4-1: Manufacturer: syz [ 1762.260877][T19420] usb 4-1: SerialNumber: syz [ 1762.367463][T28652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1762.443229][T28652] 8021q: adding VLAN 0 to HW filter on device team0 [ 1762.481282][T28828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1762.488361][T28828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1762.525460][ T30] audit: type=1400 audit(1778895389.861:1009): avc: denied { write } for pid=28932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1762.570777][T19420] usb 4-1: Can't get UAC3 power state for id 10 [ 1762.593006][T19420] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 1762.649056][T28828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.656179][T28828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1762.674031][T19420] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1762.692607][T19420] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1762.721361][T19420] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1762.877733][ T30] audit: type=1400 audit(1778895390.221:1010): avc: denied { write } for pid=28967 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1763.147759][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1763.155015][T19420] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1763.180013][T28975] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6781'. [ 1763.241256][T19420] usb 4-1: USB disconnect, device number 74 [ 1763.429343][T28983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6782'. [ 1764.213826][T28981] udevd[28981]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1764.438786][T28992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6784'. [ 1764.525774][T28988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6784'. [ 1764.973742][T28995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6784'. [ 1765.700229][T29007] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1765.707470][T28652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1765.707956][T29007] overlayfs: failed to set xattr on upper [ 1765.788642][T29007] overlayfs: ...falling back to redirect_dir=nofollow. [ 1765.849824][T29007] overlayfs: ...falling back to index=off. [ 1766.077994][ T30] audit: type=1400 audit(1778895393.411:1011): avc: denied { write } for pid=28994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1766.126211][T29031] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 1766.190184][ T30] audit: type=1400 audit(1778895393.531:1012): avc: denied { write } for pid=29033 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1766.195834][T19432] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1766.338120][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1766.452577][T19432] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1766.467701][T19432] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1766.499351][T19432] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 1766.534448][T19432] usb 4-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 1766.554022][T19432] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.573117][T19432] usb 4-1: Product: syz [ 1766.578265][T19432] usb 4-1: Manufacturer: syz [ 1766.582937][T19432] usb 4-1: SerialNumber: syz [ 1766.634109][T28652] veth0_vlan: entered promiscuous mode [ 1766.670226][T28652] veth1_vlan: entered promiscuous mode [ 1766.736414][T28652] veth0_macvtap: entered promiscuous mode [ 1766.760555][T28652] veth1_macvtap: entered promiscuous mode [ 1766.790977][T28652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1766.872939][T28652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1766.899271][T19432] usb 4-1: Can't get UAC3 power state for id 10 [ 1766.923778][ T5840] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.938661][T19432] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 1766.970116][ T5840] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.978098][T29056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6796'. [ 1766.997616][ T5840] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.008547][T19432] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1767.016305][T19432] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1767.028462][T19432] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1767.039936][ T5840] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.070230][T29058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6796'. [ 1767.110097][T29056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6796'. [ 1767.111850][T19432] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1767.188551][T29060] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1767.219761][T19432] usb 4-1: USB disconnect, device number 75 [ 1767.269506][ T6561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.297625][ T6561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1767.374607][T28551] udevd[28551]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1768.041948][T28828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1768.071782][T28828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1768.133582][ T30] audit: type=1400 audit(1778895395.471:1013): avc: denied { mounton } for pid=28652 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1768.885325][T29082] fuse: Unknown parameter '' [ 1768.922937][ T30] audit: type=1400 audit(1778895396.261:1014): avc: denied { setattr } for pid=29080 comm="syz.3.6803" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1768.990604][ T30] audit: type=1400 audit(1778895396.332:1015): avc: denied { bind } for pid=29079 comm="syz.4.6802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1769.035764][ T30] audit: type=1400 audit(1778895396.362:1016): avc: denied { listen } for pid=29079 comm="syz.4.6802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1769.315285][ T30] audit: type=1400 audit(1778895396.622:1017): avc: denied { read } for pid=29079 comm="syz.4.6802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1769.455153][ T30] audit: type=1400 audit(1778895396.792:1018): avc: denied { execmem } for pid=29092 comm="syz.5.6805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1769.595023][ T30] audit: type=1400 audit(1778895396.932:1019): avc: denied { recv } for pid=28652 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.243 dest=48984 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1769.621833][T29095] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 1769.630071][ T30] audit: type=1400 audit(1778895396.932:1020): avc: denied { read write } for pid=29096 comm="syz.1.6806" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1771.197654][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1771.197671][ T30] audit: type=1400 audit(1778895398.542:1051): avc: denied { create } for pid=29114 comm="syz.3.6812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1771.362792][ T30] audit: type=1400 audit(1778895398.542:1052): avc: denied { create } for pid=29114 comm="syz.3.6812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1771.384753][ T30] audit: type=1400 audit(1778895398.702:1053): avc: denied { read } for pid=29114 comm="syz.3.6812" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1771.758604][ T30] audit: type=1400 audit(1778895398.702:1054): avc: denied { open } for pid=29114 comm="syz.3.6812" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1771.854420][ T30] audit: type=1400 audit(1778895398.812:1055): avc: denied { create } for pid=29114 comm="syz.3.6812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1771.854469][ T30] audit: type=1400 audit(1778895399.072:1056): avc: denied { write } for pid=29118 comm="syz.5.6813" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1771.916793][ T30] audit: type=1400 audit(1778895399.232:1057): avc: denied { getopt } for pid=29124 comm="syz.8.6815" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1771.934659][ T30] audit: type=1400 audit(1778895399.272:1058): avc: denied { create } for pid=29120 comm="syz.4.6814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1771.968656][ T30] audit: type=1400 audit(1778895399.312:1059): avc: denied { create } for pid=29108 comm="syz.1.6810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1772.061991][ T30] audit: type=1400 audit(1778895399.382:1060): avc: denied { getopt } for pid=29108 comm="syz.1.6810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1773.136997][T29140] SELinux: ebitmap: truncated map [ 1773.388333][T29140] SELinux: failed to load policy [ 1773.582699][T29164] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 1773.671701][T29167] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6824'. [ 1774.952521][T29183] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6830'. [ 1776.343988][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 1776.344003][ T30] audit: type=1400 audit(1778895403.682:1099): avc: denied { setopt } for pid=29193 comm="syz.8.6833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1776.441390][ T30] audit: type=1400 audit(1778895403.722:1100): avc: denied { append } for pid=29193 comm="syz.8.6833" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1776.499585][T29198] FAULT_INJECTION: forcing a failure. [ 1776.499585][T29198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1776.514372][ T30] audit: type=1400 audit(1778895403.742:1101): avc: denied { search } for pid=29191 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1776.553516][T29198] CPU: 0 UID: 0 PID: 29198 Comm: syz.1.6834 Tainted: G L syzkaller #0 PREEMPT(full) [ 1776.553542][T29198] Tainted: [L]=SOFTLOCKUP [ 1776.553549][T29198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1776.553560][T29198] Call Trace: [ 1776.553566][T29198] [ 1776.553573][T29198] dump_stack_lvl+0x100/0x190 [ 1776.553601][T29198] should_fail_ex.cold+0x5/0xa [ 1776.553632][T29198] _copy_from_user+0x2e/0xd0 [ 1776.553659][T29198] copy_msghdr_from_user+0x9f/0x4f0 [ 1776.553685][T29198] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1776.553721][T29198] ___sys_sendmsg+0x106/0x1e0 [ 1776.553746][T29198] ? __pfx____sys_sendmsg+0x10/0x10 [ 1776.553801][T29198] __sys_sendmsg+0x170/0x220 [ 1776.553821][T29198] ? __pfx___sys_sendmsg+0x10/0x10 [ 1776.553850][T29198] ? rcu_is_watching+0x12/0xc0 [ 1776.553881][T29198] do_syscall_64+0x10b/0xf80 [ 1776.553904][T29198] ? clear_bhb_loop+0x40/0x90 [ 1776.553926][T29198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.553944][T29198] RIP: 0033:0x7f2a1259ce59 [ 1776.553959][T29198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1776.553977][T29198] RSP: 002b:00007f2a134ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1776.553994][T29198] RAX: ffffffffffffffda RBX: 00007f2a12815fa0 RCX: 00007f2a1259ce59 [ 1776.554006][T29198] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1776.554017][T29198] RBP: 00007f2a134ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1776.554027][T29198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1776.554036][T29198] R13: 00007f2a12816038 R14: 00007f2a12815fa0 R15: 00007fff83581a08 [ 1776.554061][T29198] [ 1776.726786][ T30] audit: type=1400 audit(1778895403.742:1102): avc: denied { search } for pid=29191 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1776.749699][ T30] audit: type=1400 audit(1778895403.742:1103): avc: denied { search } for pid=29191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1776.772884][ T30] audit: type=1400 audit(1778895403.742:1104): avc: denied { search } for pid=29191 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1776.796365][ T30] audit: type=1400 audit(1778895403.772:1105): avc: denied { read } for pid=29195 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1776.819798][ T30] audit: type=1400 audit(1778895403.772:1106): avc: denied { read open } for pid=29195 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1776.845321][ T30] audit: type=1400 audit(1778895403.772:1107): avc: denied { getattr } for pid=29195 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1776.870680][ T30] audit: type=1400 audit(1778895403.812:1108): avc: denied { getattr } for pid=29195 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1811 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1777.390079][T29207] Bluetooth: MGMT ver 1.23 [ 1778.487845][T29223] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 1778.824905][T29230] comedi comedi3: pcl726: I/O base address or length out of range [ 1781.623077][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1781.623092][ T30] audit: type=1400 audit(1778895408.962:1128): avc: denied { write } for pid=29239 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1781.687617][ T30] audit: type=1400 audit(1778895408.962:1129): avc: denied { remove_name } for pid=29239 comm="rm" name="resolv.conf.eth4.ipv4ll" dev="tmpfs" ino=21042 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1781.768218][T29233] SELinux: ebitmap: truncated map [ 1781.818978][ T30] audit: type=1400 audit(1778895409.012:1130): avc: denied { unlink } for pid=29239 comm="rm" name="resolv.conf.eth4.ipv4ll" dev="tmpfs" ino=21042 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1781.967852][T29233] SELinux: failed to load policy [ 1782.351692][ T30] audit: type=1400 audit(1778895409.672:1131): avc: denied { connect } for pid=29253 comm="syz.3.6847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1782.828205][ T30] audit: type=1400 audit(1778895410.162:1132): avc: denied { create } for pid=29259 comm="syz.8.6848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1783.784241][ T30] audit: type=1400 audit(1778895410.192:1133): avc: denied { read } for pid=29259 comm="syz.8.6848" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1783.900708][T29269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6844'. [ 1785.659981][ T30] audit: type=1400 audit(1778895410.192:1134): avc: denied { open } for pid=29259 comm="syz.8.6848" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1785.769547][T29274] xt_bpf: check failed: parse error [ 1786.286741][T29279] comedi comedi3: pcl726: I/O base address or length out of range [ 1786.878851][ T30] audit: type=1400 audit(1778895414.203:1135): avc: denied { mounton } for pid=29273 comm="syz.5.6851" path="/273/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1497 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1787.014956][T29284] netlink: 'syz.8.6855': attribute type 10 has an invalid length. [ 1787.024116][ T30] audit: type=1400 audit(1778895414.203:1136): avc: denied { mount } for pid=29273 comm="syz.5.6851" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1787.059182][T29284] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1787.175162][ T30] audit: type=1400 audit(1778895414.503:1137): avc: denied { create } for pid=29286 comm="syz.8.6856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1787.851636][T29294] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6858'. [ 1788.983534][ T30] audit: type=1400 audit(1778895416.313:1138): avc: denied { read } for pid=29286 comm="syz.8.6856" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1789.895472][ T30] audit: type=1400 audit(1778895416.313:1139): avc: denied { open } for pid=29286 comm="syz.8.6856" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1790.589091][T29315] FAULT_INJECTION: forcing a failure. [ 1790.589091][T29315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1790.602425][T29315] CPU: 0 UID: 0 PID: 29315 Comm: syz.1.6862 Tainted: G L syzkaller #0 PREEMPT(full) [ 1790.602451][T29315] Tainted: [L]=SOFTLOCKUP [ 1790.602457][T29315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1790.602468][T29315] Call Trace: [ 1790.602473][T29315] [ 1790.602480][T29315] dump_stack_lvl+0x100/0x190 [ 1790.602507][T29315] should_fail_ex.cold+0x5/0xa [ 1790.602534][T29315] _copy_from_iter+0x1f4/0x1690 [ 1790.602567][T29315] ? __pfx__copy_from_iter+0x10/0x10 [ 1790.602593][T29315] ? __pfx_avc_has_perm+0x10/0x10 [ 1790.602623][T29315] copy_page_from_iter+0x238/0x300 [ 1790.602654][T29315] anon_pipe_write+0xaf0/0x18c0 [ 1790.602688][T29315] ? __pfx_anon_pipe_write+0x10/0x10 [ 1790.602718][T29315] ? selinux_file_permission+0x8f/0x6d0 [ 1790.602746][T29315] ? bpf_lsm_file_permission+0x9/0x10 [ 1790.602762][T29315] ? security_file_permission+0x76/0x210 [ 1790.602787][T29315] ? rw_verify_area+0xce/0x6d0 [ 1790.602808][T29315] vfs_write+0x6ac/0x1070 [ 1790.602828][T29315] ? __pfx_anon_pipe_write+0x10/0x10 [ 1790.602853][T29315] ? __pfx_vfs_write+0x10/0x10 [ 1790.602871][T29315] ? find_held_lock+0x2b/0x80 [ 1790.602910][T29315] ksys_write+0x1f8/0x250 [ 1790.602929][T29315] ? __pfx_ksys_write+0x10/0x10 [ 1790.602951][T29315] ? rcu_is_watching+0x12/0xc0 [ 1790.602989][T29315] do_syscall_64+0x10b/0xf80 [ 1790.603012][T29315] ? clear_bhb_loop+0x40/0x90 [ 1790.603034][T29315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.603052][T29315] RIP: 0033:0x7f2a1259ce59 [ 1790.603068][T29315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1790.603085][T29315] RSP: 002b:00007f2a134ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1790.603103][T29315] RAX: ffffffffffffffda RBX: 00007f2a12815fa0 RCX: 00007f2a1259ce59 [ 1790.603115][T29315] RDX: 00000000fffffdef RSI: 0000200000000000 RDI: 0000000000000000 [ 1790.603127][T29315] RBP: 00007f2a134ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1790.603138][T29315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1790.603149][T29315] R13: 00007f2a12816038 R14: 00007f2a12815fa0 R15: 00007fff83581a08 [ 1790.603176][T29315] [ 1790.855688][ T30] audit: type=1400 audit(1778895417.933:1140): avc: denied { read } for pid=29314 comm="syz.1.6862" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1790.879133][ T30] audit: type=1400 audit(1778895417.933:1141): avc: denied { open } for pid=29314 comm="syz.1.6862" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1790.902961][ T30] audit: type=1400 audit(1778895417.933:1142): avc: denied { map } for pid=29314 comm="syz.1.6862" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1790.967412][ T30] audit: type=1400 audit(1778895418.313:1143): avc: denied { write } for pid=29251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1791.159419][T29321] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6864'. [ 1791.229341][T29320] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.6854'. [ 1791.694062][T29320] Mount JFS Failure: -5 [ 1791.701554][ T30] audit: type=1400 audit(1778895418.983:1144): avc: denied { mounton } for pid=29319 comm="syz.3.6854" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1791.926848][T29326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6866'. [ 1792.019059][ T30] audit: type=1400 audit(1778895419.103:1145): avc: denied { append } for pid=29319 comm="syz.3.6854" name="nbd3" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1792.119483][ T30] audit: type=1400 audit(1778895419.103:1146): avc: denied { allowed } for pid=29319 comm="syz.3.6854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1792.199007][ T30] audit: type=1400 audit(1778895419.103:1147): avc: denied { map } for pid=29319 comm="syz.3.6854" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=155402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1792.296787][ T30] audit: type=1400 audit(1778895419.103:1148): avc: denied { read write } for pid=29319 comm="syz.3.6854" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=155402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1792.368008][ T30] audit: type=1326 audit(1778895419.363:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29322 comm="syz.1.6865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a1259ce59 code=0x0 [ 1792.451749][ T30] audit: type=1400 audit(1778895419.433:1150): avc: denied { create } for pid=29331 comm="syz.4.6868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1792.555907][ T30] audit: type=1400 audit(1778895419.453:1151): avc: denied { write } for pid=29328 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1792.579421][ T30] audit: type=1400 audit(1778895419.593:1152): avc: denied { ioctl } for pid=29335 comm="syz.3.6869" path="socket:[154540]" dev="sockfs" ino=154540 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1792.634098][T29356] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 1792.817323][ T30] audit: type=1400 audit(1778895419.713:1153): avc: denied { ioctl } for pid=29344 comm="syz.8.6870" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1792.842024][ T30] audit: type=1400 audit(1778895419.733:1154): avc: denied { watch } for pid=29344 comm="syz.8.6870" path="/17" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1794.655470][T26496] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1794.982045][T26496] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1795.088255][T26496] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1795.180907][T26496] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1795.375274][T26496] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1795.406632][T26496] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1795.829023][T26496] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1795.847988][T26496] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1795.859493][T26496] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1795.869567][T26496] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1795.881146][T26496] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1795.908225][T26496] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1795.942549][T26496] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1795.976162][T26496] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1796.099529][T29383] fuse: Unknown parameter 'group_id00000000000000000000' [ 1796.205343][T26496] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1796.330043][T26496] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1796.477271][T26496] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1796.492903][T29396] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6878'. [ 1797.598182][T26496] usb 5-1: unable to read config index 5 descriptor/start: -71 [ 1797.628523][T26496] usb 5-1: can't read configurations, error -71 [ 1797.785743][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1797.785758][ T30] audit: type=1400 audit(1778895425.133:1161): avc: denied { setopt } for pid=29411 comm="syz.4.6883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1797.915614][ T30] audit: type=1400 audit(1778895425.263:1162): avc: denied { write } for pid=29389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1798.076706][T29424] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 1798.241554][ T30] audit: type=1400 audit(1778895425.583:1163): avc: denied { write } for pid=29423 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1798.464001][T15119] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1798.614658][T15119] usb 2-1: Using ep0 maxpacket: 32 [ 1799.004275][T15119] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1799.029330][T15119] usb 2-1: config 0 has no interface number 0 [ 1799.044921][T15119] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1799.062890][T15119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.080760][T15119] usb 2-1: Product: syz [ 1799.102832][T15119] usb 2-1: Manufacturer: syz [ 1799.134508][T15119] usb 2-1: SerialNumber: syz [ 1799.397546][T15119] usb 2-1: config 0 descriptor?? [ 1799.433154][T15119] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1799.648473][T15119] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1799.710998][T15119] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1799.863171][T29427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1799.894314][T29427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1800.099576][T29452] fuse: Unknown parameter 'group_id00000000000000000000' [ 1800.137795][T29464] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.6894'. [ 1800.619689][ T30] audit: type=1400 audit(1778895427.713:1164): avc: denied { read } for pid=29426 comm="syz.1.6886" name="vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1800.770201][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1800.778052][T15119] usb 2-1: USB disconnect, device number 87 [ 1800.785937][T15119] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1801.058328][ T30] audit: type=1400 audit(1778895427.713:1165): avc: denied { open } for pid=29426 comm="syz.1.6886" path="/dev/vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1801.084159][T15119] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1801.097323][T15119] quatech2 2-1:0.51: device disconnected [ 1801.544003][ T30] audit: type=1400 audit(1778895427.723:1166): avc: denied { ioctl } for pid=29426 comm="syz.1.6886" path="/dev/vhost-net" dev="devtmpfs" ino=1273 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1801.603054][T29478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6898'. [ 1801.692242][T29480] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 1801.760265][T29478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6898'. [ 1801.828513][ T30] audit: type=1400 audit(1778895429.173:1167): avc: denied { listen } for pid=29477 comm="syz.1.6898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1802.309065][T29476] SELinux: ebitmap: truncated map [ 1804.348533][ T30] audit: type=1400 audit(1778895429.173:1168): avc: denied { accept } for pid=29477 comm="syz.1.6898" lport=59927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1804.425870][T29476] SELinux: failed to load policy [ 1804.503337][ T30] audit: type=1400 audit(1778895431.843:1169): avc: denied { create } for pid=29488 comm="syz.5.6903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1804.941354][ T30] audit: type=1400 audit(1778895432.284:1170): avc: denied { bind } for pid=29488 comm="syz.5.6903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1805.052935][ T30] audit: type=1400 audit(1778895432.284:1171): avc: denied { connect } for pid=29488 comm="syz.5.6903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1805.238527][ T30] audit: type=1400 audit(1778895432.314:1172): avc: denied { nlmsg_write } for pid=29488 comm="syz.5.6903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1805.303196][T29494] fuse: Bad value for 'fd' [ 1805.752154][T29507] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6907'. [ 1806.076261][T29510] comedi comedi3: pcl726: I/O base address or length out of range [ 1807.736085][ T30] audit: type=1400 audit(1778895435.074:1173): avc: denied { ioctl } for pid=29515 comm="syz.4.6910" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=156045 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1809.042029][T29532] comedi comedi3: pcl726: I/O base address or length out of range [ 1809.841992][T29535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6918'. [ 1809.980109][T29535] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1810.051302][T29536] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1810.334578][ T30] audit: type=1400 audit(1778895437.684:1174): avc: denied { ioctl } for pid=29534 comm="syz.3.6918" path="socket:[156113]" dev="sockfs" ino=156113 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1810.714445][T29546] comedi comedi3: pcl726: I/O base address or length out of range [ 1811.414568][ T30] audit: type=1400 audit(1778895438.754:1175): avc: denied { relabelfrom } for pid=29534 comm="syz.3.6918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1811.526358][ T30] audit: type=1400 audit(1778895438.754:1176): avc: denied { relabelto } for pid=29534 comm="syz.3.6918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1811.734888][T29551] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 1811.966973][T29556] tipc: Enabled bearer , priority 0 [ 1812.092209][T29556] syzkaller0: entered promiscuous mode [ 1812.102453][T29556] syzkaller0: entered allmulticast mode [ 1812.114956][T29556] tipc: Resetting bearer [ 1812.163742][T29555] tipc: Resetting bearer [ 1812.637289][ T30] audit: type=1400 audit(1778895439.984:1177): avc: denied { read } for pid=29559 comm="syz.1.6925" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1812.715223][ T30] audit: type=1400 audit(1778895439.984:1178): avc: denied { open } for pid=29559 comm="syz.1.6925" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1812.810299][ T30] audit: type=1400 audit(1778895439.984:1179): avc: denied { ioctl } for pid=29559 comm="syz.1.6925" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1812.996043][ T30] audit: type=1400 audit(1778895439.984:1180): avc: denied { write } for pid=29559 comm="syz.1.6925" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1813.270178][T29567] fuse: Bad value for 'user_id' [ 1813.275222][T29567] fuse: Bad value for 'user_id' [ 1813.513942][T29570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6913'. [ 1814.168145][ T30] audit: type=1400 audit(1778895441.514:1181): avc: denied { create } for pid=29574 comm="syz.4.6926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1814.389514][T29579] netlink: 212344 bytes leftover after parsing attributes in process `syz.8.6922'. [ 1814.484589][T29580] Mount JFS Failure: -5 [ 1818.296826][T29555] tipc: Disabling bearer [ 1818.309940][T19420] tipc: Node number set to 2125881763 [ 1818.315927][T29570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1818.334056][T29571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1818.611187][T29609] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 1818.959711][T29610] comedi comedi3: pcl726: I/O base address or length out of range [ 1820.835306][T29620] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6938'. [ 1820.966092][T29607] fuse: Bad value for 'user_id' [ 1820.970956][T29607] fuse: Bad value for 'user_id' [ 1821.580363][ T30] audit: type=1400 audit(1778895448.924:1182): avc: denied { ioctl } for pid=29623 comm="syz.4.6940" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1821.634965][ T30] audit: type=1400 audit(1778895448.924:1183): avc: denied { set_context_mgr } for pid=29623 comm="syz.4.6940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1821.682337][ T30] audit: type=1400 audit(1778895448.974:1184): avc: denied { map } for pid=29623 comm="syz.4.6940" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1822.270720][ T30] audit: type=1400 audit(1778895449.024:1185): avc: denied { call } for pid=29623 comm="syz.4.6940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1822.289754][ T30] audit: type=1400 audit(1778895449.024:1186): avc: denied { setattr } for pid=29623 comm="syz.4.6940" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1822.623800][T29645] FAULT_INJECTION: forcing a failure. [ 1822.623800][T29645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1822.721470][T29645] CPU: 0 UID: 0 PID: 29645 Comm: syz.4.6946 Tainted: G L syzkaller #0 PREEMPT(full) [ 1822.721500][T29645] Tainted: [L]=SOFTLOCKUP [ 1822.721506][T29645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1822.721516][T29645] Call Trace: [ 1822.721522][T29645] [ 1822.721529][T29645] dump_stack_lvl+0x100/0x190 [ 1822.721549][T29645] should_fail_ex.cold+0x5/0xa [ 1822.721565][T29645] _copy_from_user+0x2e/0xd0 [ 1822.721583][T29645] copy_msghdr_from_user+0x9f/0x4f0 [ 1822.721599][T29645] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1822.721618][T29645] ? sched_clock_cpu+0x6c/0x570 [ 1822.721633][T29645] ? pick_eevdf+0x198/0x860 [ 1822.721648][T29645] ___sys_sendmsg+0x106/0x1e0 [ 1822.721663][T29645] ? __pfx____sys_sendmsg+0x10/0x10 [ 1822.721695][T29645] __sys_sendmsg+0x170/0x220 [ 1822.721706][T29645] ? __pfx___sys_sendmsg+0x10/0x10 [ 1822.721715][T29645] ? irqentry_exit+0x24d/0x7e0 [ 1822.721741][T29645] do_syscall_64+0x10b/0xf80 [ 1822.721755][T29645] ? clear_bhb_loop+0x40/0x90 [ 1822.721768][T29645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.721779][T29645] RIP: 0033:0x7f8bd339ce59 [ 1822.721788][T29645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1822.721799][T29645] RSP: 002b:00007f8bd15d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1822.721810][T29645] RAX: ffffffffffffffda RBX: 00007f8bd3616090 RCX: 00007f8bd339ce59 [ 1822.721817][T29645] RDX: 0000000024040000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 1822.721824][T29645] RBP: 00007f8bd15d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1822.721830][T29645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1822.721836][T29645] R13: 00007f8bd3616128 R14: 00007f8bd3616090 R15: 00007ffce1a9ba78 [ 1822.721851][T29645] [ 1823.605276][T29654] comedi comedi3: pcl726: I/O base address or length out of range [ 1824.814115][ T30] audit: type=1326 audit(1778895452.135:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29650 comm="syz.4.6948" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd339ce59 code=0x7ffc0000 [ 1825.210602][ T30] audit: type=1326 audit(1778895452.135:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29650 comm="syz.4.6948" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd339ce59 code=0x7ffc0000 [ 1825.237757][ T30] audit: type=1326 audit(1778895452.145:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29650 comm="syz.4.6948" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bd339ce59 code=0x7ffc0000 [ 1825.262051][T29656] [U] [ 1825.387445][ T30] audit: type=1326 audit(1778895452.145:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29650 comm="syz.4.6948" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd339ce59 code=0x7ffc0000 [ 1825.695324][ T30] audit: type=1326 audit(1778895452.145:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29650 comm="syz.4.6948" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd339ce59 code=0x7ffc0000 [ 1825.902447][T19427] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1826.448808][T29672] fuse: Bad value for 'fd' [ 1826.462602][T15129] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1826.493442][T19427] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 1826.506622][T19427] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1826.535426][T19427] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1826.560218][T19427] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1826.575940][T19427] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1826.595104][T19427] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1826.618174][T19427] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1826.624977][T15129] usb 2-1: Using ep0 maxpacket: 8 [ 1826.633296][T15129] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1826.641683][T15129] usb 2-1: config 0 has no interface number 0 [ 1826.648815][T15129] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1826.805469][T19427] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1826.835760][T19427] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1826.846801][T15129] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1826.871574][T19427] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1826.879269][T15129] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1826.914986][T29683] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 1827.260670][T19427] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1827.270959][T15129] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1827.284421][T19427] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1827.295447][T19427] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1827.302081][T15129] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1827.311356][T15129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.320947][T19427] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1827.331242][T15129] usb 2-1: config 0 descriptor?? [ 1827.336312][T19427] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1827.349999][T15129] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1827.359223][T19427] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1827.378994][T19427] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1827.473512][T19427] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1827.484933][T19427] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1827.819369][T19427] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1827.838606][T19427] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1827.851627][T29676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1827.871200][T29676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1827.881230][T19427] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1827.893513][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1827.893526][ T30] audit: type=1400 audit(1778895455.215:1199): avc: denied { mount } for pid=29688 comm="syz.3.6957" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1827.933765][T19427] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1827.952745][T19427] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1827.982436][T19427] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1828.000755][ T30] audit: type=1400 audit(1778895455.345:1200): avc: denied { mounton } for pid=29688 comm="syz.3.6957" path="/235/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1828.039673][T19427] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1828.050544][T29692] sock: sock_timestamping_bind_phc: sock not bind to device [ 1828.057882][T19427] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1828.066827][T19427] usb 9-1: Product: syz [ 1828.092396][ T30] audit: type=1400 audit(1778895455.345:1201): avc: denied { mount } for pid=29688 comm="syz.3.6957" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1828.131681][T19427] usb 9-1: Manufacturer: syz [ 1828.141772][T19427] usb 9-1: SerialNumber: syz [ 1828.170726][T19427] usb 9-1: config 0 descriptor?? [ 1828.192685][ T30] audit: type=1400 audit(1778895455.425:1202): avc: denied { unmount } for pid=29688 comm="syz.3.6957" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1828.226831][T19427] yurex 9-1:0.0: USB YUREX device now attached to Yurex #1 [ 1828.279653][ T30] audit: type=1400 audit(1778895455.485:1203): avc: denied { unmount } for pid=25168 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1828.421481][T19420] usb 9-1: USB disconnect, device number 2 [ 1828.450814][T19420] yurex 9-1:0.0: USB YUREX #1 now disconnected [ 1828.497271][T19413] usb 2-1: USB disconnect, device number 88 [ 1828.497301][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 1828.614529][T19413] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1828.661694][T29676] ldusb: No device or device unplugged -19 [ 1828.961685][T29706] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6961'. [ 1829.079405][T29706] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1829.135141][T29712] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1829.206130][ T30] audit: type=1400 audit(1778895456.555:1204): avc: denied { watch_reads } for pid=29715 comm="syz.4.6964" path="/156" dev="tmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1829.262905][ T30] audit: type=1400 audit(1778895456.605:1205): avc: denied { ioctl } for pid=29714 comm="syz.1.6963" path="socket:[157355]" dev="sockfs" ino=157355 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1829.288892][T29717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6963'. [ 1829.301202][ T30] audit: type=1400 audit(1778895456.615:1206): avc: denied { create } for pid=29715 comm="syz.4.6964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1829.304897][T29716] Bluetooth: MGMT ver 1.23 [ 1829.323104][ T30] audit: type=1400 audit(1778895456.615:1207): avc: denied { write } for pid=29715 comm="syz.4.6964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1829.360825][ T30] audit: type=1400 audit(1778895456.705:1208): avc: denied { read write } for pid=29714 comm="syz.1.6963" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1829.415563][T29722] FAULT_INJECTION: forcing a failure. [ 1829.415563][T29722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1829.433130][T29724] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.6964'. [ 1829.472347][T29722] CPU: 1 UID: 0 PID: 29722 Comm: syz.1.6967 Tainted: G L syzkaller #0 PREEMPT(full) [ 1829.472376][T29722] Tainted: [L]=SOFTLOCKUP [ 1829.472383][T29722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1829.472394][T29722] Call Trace: [ 1829.472400][T29722] [ 1829.472407][T29722] dump_stack_lvl+0x100/0x190 [ 1829.472435][T29722] should_fail_ex.cold+0x5/0xa [ 1829.472462][T29722] _copy_from_user+0x2e/0xd0 [ 1829.472491][T29722] move_addr_to_kernel+0x65/0x170 [ 1829.472517][T29722] __sys_sendto+0x1c9/0x4b0 [ 1829.472553][T29722] ? __pfx___sys_sendto+0x10/0x10 [ 1829.472603][T29722] ? ksys_write+0x1ac/0x250 [ 1829.472625][T29722] ? __pfx_ksys_write+0x10/0x10 [ 1829.472649][T29722] __x64_sys_sendto+0xe0/0x1c0 [ 1829.472675][T29722] ? do_syscall_64+0x90/0xf80 [ 1829.472700][T29722] ? lockdep_hardirqs_on+0x78/0x100 [ 1829.472725][T29722] do_syscall_64+0x10b/0xf80 [ 1829.472750][T29722] ? clear_bhb_loop+0x40/0x90 [ 1829.472772][T29722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.472790][T29722] RIP: 0033:0x7f2a1259ce59 [ 1829.472806][T29722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1829.472823][T29722] RSP: 002b:00007f2a134ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1829.472842][T29722] RAX: ffffffffffffffda RBX: 00007f2a12815fa0 RCX: 00007f2a1259ce59 [ 1829.472853][T29722] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1829.472864][T29722] RBP: 00007f2a134ae090 R08: 0000200000000140 R09: 000000000000001c [ 1829.472875][T29722] R10: 000000000400c0d4 R11: 0000000000000246 R12: 0000000000000001 [ 1829.472885][T29722] R13: 00007f2a12816038 R14: 00007f2a12815fa0 R15: 00007fff83581a08 [ 1829.472913][T29722] [ 1829.686032][T29716] netlink: 'syz.4.6964': attribute type 2 has an invalid length. [ 1829.926849][T29729] fuse: Bad value for 'fd' [ 1830.092215][T19427] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1830.506304][T19427] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1830.516712][T19427] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1830.540750][T19427] usb 5-1: New USB device strings: Mfr=0, Product=21, SerialNumber=0 [ 1830.553584][T19427] usb 5-1: Product: syz [ 1830.578746][T19427] usb 5-1: config 0 descriptor?? [ 1830.587187][T19427] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1830.736723][T29751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6974'. [ 1830.817219][T19427] usb 5-1: USB disconnect, device number 85 [ 1830.853963][T29751] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1830.919954][T29751] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1831.123175][T29761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1831.452893][T19420] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1831.708160][T19420] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1831.748175][T19420] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1831.770939][T19420] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1831.805763][T19420] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 1160, setting to 1024 [ 1831.850063][T19420] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1831.975557][T19420] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1832.004437][T19420] usb 4-1: Manufacturer: syz [ 1832.024193][T19420] usb 4-1: config 0 descriptor?? [ 1832.061879][T19420] smsusb:smsusb_probe: board id=9, interface number 0 [ 1832.093626][T19420] smsusb:siano_media_device_register: media controller created [ 1832.134971][T19420] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 1832.152413][T19420] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 1832.286204][T19420] ------------[ cut here ]------------ [ 1832.292381][T19420] !PageLargeKmalloc(page) [ 1832.292390][T19420] WARNING: mm/slub.c:6475 at free_large_kmalloc+0xbf/0x100, CPU#1: kworker/1:13/19420 [ 1832.306683][T19420] Modules linked in: [ 1832.311332][T19420] CPU: 1 UID: 0 PID: 19420 Comm: kworker/1:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 1832.324023][T19420] Tainted: [L]=SOFTLOCKUP [ 1832.328354][T19420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1832.340343][T19420] Workqueue: usb_hub_wq hub_event [ 1832.345687][T19420] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 1832.351414][T19420] Code: 28 90 0f 0b 90 80 3d bf f0 55 0e 00 0f 84 f7 23 ba fe 48 8b 74 24 28 48 89 ef e8 3c 00 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 bf da f0 8d 5b 5d 41 5c 41 [ 1832.371303][T19420] RSP: 0018:ffffc900035e6d68 EFLAGS: 00010202 [ 1832.377424][T19420] RAX: 00000000000000ff RBX: ffffea00011fd880 RCX: 000000000000002e [ 1832.385490][T19420] RDX: 0000000000000000 RSI: ffff888047f62000 RDI: ffffea00011fd880 [ 1832.394104][T19420] RBP: ffff888047f62000 R08: 0000000000000005 R09: 0000000000000000 [ 1832.402623][T19420] R10: ffffffffffffffff R11: ffffffff82762f84 R12: ffff8880602b6000 [ 1832.410575][T19420] R13: ffff8880602b1000 R14: dffffc0000000000 R15: ffff8880602b60f0 [ 1832.418538][T19420] FS: 0000000000000000(0000) GS:ffff888124470000(0000) knlGS:0000000000000000 [ 1832.427454][T19420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1832.434031][T19420] CR2: 00007fe0a9be8158 CR3: 000000000e596000 CR4: 00000000003526f0 [ 1832.441989][T19420] Call Trace: [ 1832.445271][T19420] [ 1832.448183][T19420] usb_free_urb.part.0+0xf8/0x110 [ 1832.453222][T19420] usb_free_urb+0x1f/0x30 [ 1832.457529][T19420] smsusb_term_device+0x108/0x200 [ 1832.462590][T19420] smsusb_init_device+0xb4e/0xbb0 [ 1832.467622][T19420] ? __pfx_smsusb_init_device+0x10/0x10 [ 1832.473232][T19420] ? kfree+0x1dd/0x6c0 [ 1832.477311][T19420] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1832.483371][T19420] ? usb_clear_halt+0x61/0x160 [ 1832.488148][T19420] smsusb_probe+0xd7f/0xe1f [ 1832.493543][T19420] ? __pfx_smsusb_probe+0x10/0x10 [ 1832.498563][T19420] ? mark_held_locks+0x40/0x70 [ 1832.504131][T19420] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1832.509948][T19420] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1832.515760][T19420] ? __pm_runtime_set_status+0x13c/0x970 [ 1832.521373][T19420] usb_probe_interface+0x303/0x8f0 [ 1832.526512][T19420] ? __pfx_usb_probe_interface+0x10/0x10 [ 1832.532157][T19420] really_probe+0x241/0xa60 [ 1832.536659][T19420] __driver_probe_device+0x22e/0x480 [ 1832.541929][T19420] driver_probe_device+0x4c/0x1b0 [ 1832.546972][T19420] __device_attach_driver+0x1df/0x340 [ 1832.552363][T19420] ? __pfx___device_attach_driver+0x10/0x10 [ 1832.558230][T19420] bus_for_each_drv+0x159/0x1e0 [ 1832.563213][T19420] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1832.568587][T19420] ? lockdep_hardirqs_on+0x78/0x100 [ 1832.573801][T19420] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1832.579606][T19420] __device_attach+0x1e4/0x4d0 [ 1832.584405][T19420] ? __pfx___device_attach+0x10/0x10 [ 1832.589781][T19420] ? do_raw_spin_unlock+0x145/0x1e0 [ 1832.595189][T19420] device_initial_probe+0xaf/0xd0 [ 1832.600209][T19420] bus_probe_device+0x64/0x160 [ 1832.605670][T19420] device_add+0x1210/0x1950 [ 1832.610162][T19420] ? __pfx_device_add+0x10/0x10 [ 1832.615426][T19420] usb_set_configuration+0xd97/0x1c60 [ 1832.620790][T19420] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1832.626845][T19420] usb_generic_driver_probe+0xa1/0xe0 [ 1832.632223][T19420] usb_probe_device+0xef/0x400 [ 1832.636966][T19420] ? __pfx_usb_probe_device+0x10/0x10 [ 1832.642434][T19420] really_probe+0x241/0xa60 [ 1832.646915][T19420] __driver_probe_device+0x22e/0x480 [ 1832.652246][T19420] ? usb_driver_applicable+0x1c7/0x220 [ 1832.657679][T19420] driver_probe_device+0x4c/0x1b0 [ 1832.662698][T19420] __device_attach_driver+0x1df/0x340 [ 1832.668044][T19420] ? __pfx___device_attach_driver+0x10/0x10 [ 1832.673953][T19420] bus_for_each_drv+0x159/0x1e0 [ 1832.678796][T19420] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1832.684180][T19420] ? lockdep_hardirqs_on+0x78/0x100 [ 1832.689456][T19420] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1832.695326][T19420] __device_attach+0x1e4/0x4d0 [ 1832.700632][T19420] ? __pfx___device_attach+0x10/0x10 [ 1832.706284][T19420] ? do_raw_spin_unlock+0x145/0x1e0 [ 1832.711466][T19420] device_initial_probe+0xaf/0xd0 [ 1832.716488][T19420] bus_probe_device+0x64/0x160 [ 1832.721251][T19420] device_add+0x1210/0x1950 [ 1832.726051][T19420] ? __pfx_device_add+0x10/0x10 [ 1832.730882][T19420] ? add_device_randomness+0xb7/0xf0 [ 1832.736343][T19420] usb_new_device.cold+0x685/0x115c [ 1832.741533][T19420] ? do_raw_spin_lock+0x128/0x260 [ 1832.746562][T19420] ? __pfx_usb_new_device+0x10/0x10 [ 1832.751741][T19420] ? mark_held_locks+0x40/0x70 [ 1832.756510][T19420] hub_event+0x314d/0x4af0 [ 1832.760916][T19420] ? __pfx_hub_event+0x10/0x10 [ 1832.765741][T19420] ? rcu_is_watching+0x12/0xc0 [ 1832.770487][T19420] process_one_work+0xa0e/0x1980 [ 1832.775432][T19420] ? __pfx_process_one_work+0x10/0x10 [ 1832.780784][T19420] ? __pfx_hub_event+0x10/0x10 [ 1832.785548][T19420] worker_thread+0x5ef/0xe50 [ 1832.790122][T19420] ? kthread+0x13a/0x450 [ 1832.794462][T19420] ? __pfx_worker_thread+0x10/0x10 [ 1832.799560][T19420] kthread+0x370/0x450 [ 1832.804392][T19420] ? __pfx_kthread+0x10/0x10 [ 1832.808967][T19420] ret_from_fork+0x72b/0xd50 [ 1832.813920][T19420] ? __pfx_ret_from_fork+0x10/0x10 [ 1832.819010][T19420] ? rcu_is_watching+0x12/0xc0 [ 1832.823770][T19420] ? __switch_to+0x800/0x1100 [ 1832.828428][T19420] ? __pfx_kthread+0x10/0x10 [ 1832.833013][T19420] ret_from_fork_asm+0x1a/0x30 [ 1832.837773][T19420] [ 1832.840768][T19420] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1832.848021][T19420] CPU: 1 UID: 0 PID: 19420 Comm: kworker/1:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 1832.859098][T19420] Tainted: [L]=SOFTLOCKUP [ 1832.863399][T19420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1832.873425][T19420] Workqueue: usb_hub_wq hub_event [ 1832.878438][T19420] Call Trace: [ 1832.881691][T19420] [ 1832.884600][T19420] dump_stack_lvl+0x100/0x190 [ 1832.889258][T19420] vpanic+0x552/0x970 [ 1832.893211][T19420] ? __pfx_vpanic+0x10/0x10 [ 1832.897693][T19420] panic+0xd1/0xe0 [ 1832.901387][T19420] ? __pfx_panic+0x10/0x10 [ 1832.905782][T19420] check_panic_on_warn.cold+0x19/0x34 [ 1832.911128][T19420] ? free_large_kmalloc+0xbf/0x100 [ 1832.916212][T19420] __warn.cold+0x191/0x328 [ 1832.920610][T19420] __report_bug+0x296/0x3d0 [ 1832.925090][T19420] ? free_large_kmalloc+0xbf/0x100 [ 1832.930180][T19420] ? __pfx___report_bug+0x10/0x10 [ 1832.935178][T19420] ? bus_for_each_drv+0x159/0x1e0 [ 1832.940188][T19420] ? __device_attach+0x1e4/0x4d0 [ 1832.945095][T19420] ? device_initial_probe+0xaf/0xd0 [ 1832.950265][T19420] ? bus_probe_device+0x64/0x160 [ 1832.955177][T19420] ? device_add+0x1210/0x1950 [ 1832.959826][T19420] ? usb_new_device.cold+0x685/0x115c [ 1832.965173][T19420] ? hub_event+0x314d/0x4af0 [ 1832.969738][T19420] ? process_one_work+0xa0e/0x1980 [ 1832.974824][T19420] ? worker_thread+0x5ef/0xe50 [ 1832.979571][T19420] ? kthread+0x370/0x450 [ 1832.983790][T19420] ? ret_from_fork+0x72b/0xd50 [ 1832.988530][T19420] ? find_held_lock+0x2b/0x80 [ 1832.993177][T19420] ? smscore_unregister_device+0x537/0x7f0 [ 1832.998955][T19420] ? smscore_unregister_device+0x537/0x7f0 [ 1833.004742][T19420] ? free_large_kmalloc+0xbf/0x100 [ 1833.009848][T19420] report_bug+0xb2/0x220 [ 1833.014065][T19420] ? free_large_kmalloc+0xbf/0x100 [ 1833.019157][T19420] handle_bug+0x16a/0x2a0 [ 1833.023474][T19420] exc_invalid_op+0x17/0x50 [ 1833.027967][T19420] asm_exc_invalid_op+0x1a/0x20 [ 1833.032790][T19420] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 1833.038482][T19420] Code: 28 90 0f 0b 90 80 3d bf f0 55 0e 00 0f 84 f7 23 ba fe 48 8b 74 24 28 48 89 ef e8 3c 00 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 bf da f0 8d 5b 5d 41 5c 41 [ 1833.058073][T19420] RSP: 0018:ffffc900035e6d68 EFLAGS: 00010202 [ 1833.064113][T19420] RAX: 00000000000000ff RBX: ffffea00011fd880 RCX: 000000000000002e [ 1833.072055][T19420] RDX: 0000000000000000 RSI: ffff888047f62000 RDI: ffffea00011fd880 [ 1833.079996][T19420] RBP: ffff888047f62000 R08: 0000000000000005 R09: 0000000000000000 [ 1833.087937][T19420] R10: ffffffffffffffff R11: ffffffff82762f84 R12: ffff8880602b6000 [ 1833.095877][T19420] R13: ffff8880602b1000 R14: dffffc0000000000 R15: ffff8880602b60f0 [ 1833.103823][T19420] ? kasan_save_track+0x14/0x30 [ 1833.108656][T19420] usb_free_urb.part.0+0xf8/0x110 [ 1833.113655][T19420] usb_free_urb+0x1f/0x30 [ 1833.117957][T19420] smsusb_term_device+0x108/0x200 [ 1833.122959][T19420] smsusb_init_device+0xb4e/0xbb0 [ 1833.127963][T19420] ? __pfx_smsusb_init_device+0x10/0x10 [ 1833.133483][T19420] ? kfree+0x1dd/0x6c0 [ 1833.137545][T19420] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1833.143082][T19420] ? usb_clear_halt+0x61/0x160 [ 1833.147823][T19420] smsusb_probe+0xd7f/0xe1f [ 1833.152306][T19420] ? __pfx_smsusb_probe+0x10/0x10 [ 1833.157306][T19420] ? mark_held_locks+0x40/0x70 [ 1833.162044][T19420] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1833.167827][T19420] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1833.173608][T19420] ? __pm_runtime_set_status+0x13c/0x970 [ 1833.179215][T19420] usb_probe_interface+0x303/0x8f0 [ 1833.184300][T19420] ? __pfx_usb_probe_interface+0x10/0x10 [ 1833.189904][T19420] really_probe+0x241/0xa60 [ 1833.194379][T19420] __driver_probe_device+0x22e/0x480 [ 1833.199634][T19420] driver_probe_device+0x4c/0x1b0 [ 1833.204632][T19420] __device_attach_driver+0x1df/0x340 [ 1833.209978][T19420] ? __pfx___device_attach_driver+0x10/0x10 [ 1833.215845][T19420] bus_for_each_drv+0x159/0x1e0 [ 1833.220680][T19420] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1833.226027][T19420] ? lockdep_hardirqs_on+0x78/0x100 [ 1833.231201][T19420] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1833.236983][T19420] __device_attach+0x1e4/0x4d0 [ 1833.241717][T19420] ? __pfx___device_attach+0x10/0x10 [ 1833.246972][T19420] ? do_raw_spin_unlock+0x145/0x1e0 [ 1833.252150][T19420] device_initial_probe+0xaf/0xd0 [ 1833.257144][T19420] bus_probe_device+0x64/0x160 [ 1833.261884][T19420] device_add+0x1210/0x1950 [ 1833.266362][T19420] ? __pfx_device_add+0x10/0x10 [ 1833.271189][T19420] usb_set_configuration+0xd97/0x1c60 [ 1833.276545][T19420] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1833.282584][T19420] usb_generic_driver_probe+0xa1/0xe0 [ 1833.287930][T19420] usb_probe_device+0xef/0x400 [ 1833.292668][T19420] ? __pfx_usb_probe_device+0x10/0x10 [ 1833.298018][T19420] really_probe+0x241/0xa60 [ 1833.302499][T19420] __driver_probe_device+0x22e/0x480 [ 1833.307755][T19420] ? usb_driver_applicable+0x1c7/0x220 [ 1833.313185][T19420] driver_probe_device+0x4c/0x1b0 [ 1833.318193][T19420] __device_attach_driver+0x1df/0x340 [ 1833.323547][T19420] ? __pfx___device_attach_driver+0x10/0x10 [ 1833.329410][T19420] bus_for_each_drv+0x159/0x1e0 [ 1833.334237][T19420] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1833.339581][T19420] ? lockdep_hardirqs_on+0x78/0x100 [ 1833.344754][T19420] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1833.350537][T19420] __device_attach+0x1e4/0x4d0 [ 1833.355273][T19420] ? __pfx___device_attach+0x10/0x10 [ 1833.360530][T19420] ? do_raw_spin_unlock+0x145/0x1e0 [ 1833.365718][T19420] device_initial_probe+0xaf/0xd0 [ 1833.370714][T19420] bus_probe_device+0x64/0x160 [ 1833.375456][T19420] device_add+0x1210/0x1950 [ 1833.379933][T19420] ? __pfx_device_add+0x10/0x10 [ 1833.384755][T19420] ? add_device_randomness+0xb7/0xf0 [ 1833.390021][T19420] usb_new_device.cold+0x685/0x115c [ 1833.395196][T19420] ? do_raw_spin_lock+0x128/0x260 [ 1833.400196][T19420] ? __pfx_usb_new_device+0x10/0x10 [ 1833.405374][T19420] ? mark_held_locks+0x40/0x70 [ 1833.410122][T19420] hub_event+0x314d/0x4af0 [ 1833.414527][T19420] ? __pfx_hub_event+0x10/0x10 [ 1833.419273][T19420] ? rcu_is_watching+0x12/0xc0 [ 1833.424028][T19420] process_one_work+0xa0e/0x1980 [ 1833.428947][T19420] ? __pfx_process_one_work+0x10/0x10 [ 1833.434299][T19420] ? __pfx_hub_event+0x10/0x10 [ 1833.439040][T19420] worker_thread+0x5ef/0xe50 [ 1833.443617][T19420] ? kthread+0x13a/0x450 [ 1833.447845][T19420] ? __pfx_worker_thread+0x10/0x10 [ 1833.452929][T19420] kthread+0x370/0x450 [ 1833.456972][T19420] ? __pfx_kthread+0x10/0x10 [ 1833.461536][T19420] ret_from_fork+0x72b/0xd50 [ 1833.466100][T19420] ? __pfx_ret_from_fork+0x10/0x10 [ 1833.471184][T19420] ? rcu_is_watching+0x12/0xc0 [ 1833.475925][T19420] ? __switch_to+0x800/0x1100 [ 1833.480578][T19420] ? __pfx_kthread+0x10/0x10 [ 1833.485143][T19420] ret_from_fork_asm+0x1a/0x30 [ 1833.489900][T19420] [ 1833.493168][T19420] Kernel Offset: disabled [ 1833.497467][T19420] Rebooting in 86400 seconds..