last executing test programs: 17m58.607617115s ago: executing program 32 (id=119): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd"], 0x0) r1 = io_uring_setup(0x647e, &(0x7f0000000000)={0x0, 0x12fca0, 0x2, 0x3, 0x4}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) r3 = fsopen(&(0x7f0000000200)='omfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x13, &(0x7f0000000580)=[{0x0, 0x1}, {}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r4, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x40, 0x0, 0x8}, 0x18) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000006480)=[{0x0, 0x1}], 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) getpeername$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e6fdaf793a8a543e3e497db2317772b90ac06c0a2fb264350667e4d613372afade6f937775d749f208054aca78330976624f6c3dd5f68234cd75c94682c92365d9b5d751c31643efcc713d941a15a76910b719ea51a17346d9383f1fb8af0b1ecb43106471133cc137c75599fc0110ba42d3b78f0b204ef107ccfb3b18f6a4bc11126877cbef43ed21b644a194fe07220cc9769d40acb0a7cce84050a2f919d6", @ANYRES32=r10, @ANYBLOB="0800100a0a000100000000000000000008000f0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r6, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc0145b0e, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0x3, 0x10}) 16m50.829538396s ago: executing program 33 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x3f, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05140100140e1208150f0100810401a80016ea1f000740042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) kcmp(r0, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast1, 0x7}, 0x1c) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x401, @remote, 0x91}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video4linux(&(0x7f0000000180), 0x2a3, 0x25100) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="b84ddffeda563be6c0e4a57050b25508456d7202e97acb1154f1fadbebf427e3a052c128760fa8b387f429e6ce0ad89fb3f40e058badaa8b9340fd7855c21d8d9c5736d1a4a34436daa17f072e926b027c4c113a8cbbb8796f9b4ea94809000000bdc953", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fcdbdf2501000000000000000c410000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x4044055) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) 14m15.215483958s ago: executing program 5 (id=852): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x840) write$nci(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="60060223ff"], 0x8) 14m14.669451901s ago: executing program 5 (id=854): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f00000003c0)=0x3) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x4, 0x0, 0x4b, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x10, 0x7, 0x40000004, 0x804}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r4 = socket(0x10, 0x803, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5500000020007fafb70000200000000080000000030b43026c26ca8a9848a3c728f9c46b7b31afdc1338d5e801e0b009000000000100005ae583de0dd7d8319f98af84fda542e718f99a5650645929192403bad02c78", 0x56}], 0x1}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x8, 0xe3, 0x8000}) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa0009058202"], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="201a0100dbc9001a04c627de5bf922c1d1edbc7012f83af6ea655b6920f5f6e39462681e9f6ce013fa4d2e83e97624b3af436b07df5cbf1365ac30e823fdc87c300200000000000000c65ec14801746abf40eb91acd15495623f052e2f197615b29d3a6e2298a1256a738f9e10b191f6a5a47f85bef81c"], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x80040, 0x405, 0xc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000200)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 14m12.956726423s ago: executing program 1 (id=859): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000844) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000036c0)=@userptr={0x6448, 0x5, 0x4, 0x100, 0x10000, {}, {0x2, 0xc, 0x80, 0x7, 0x95, 0xfd, "4499d0aa"}, 0x10, 0x2, {0x0}, 0x4}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f4305f0671271e31c2f8d", 0x1a}, {&(0x7f0000000240)="d26319afcf07e69edb08", 0xa}, {&(0x7f0000000300)="d9a0f0481ae7", 0x6}], 0x3) 14m12.322429755s ago: executing program 1 (id=860): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r2 = openat$nullb(0xffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xa0000) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000001600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000580)={0xe10, 0x453, 0x1, 0x70bd29, 0x25dfdbff, "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", [""]}, 0xe10}, 0x1, 0x0, 0x0, 0x200400c0}, 0x24008850) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x7d, 0x0, 0x7ffe, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$OCFS2_IOC_GROUP_ADD(r2, 0x40186f02, &(0x7f0000000180)={0xc404, 0x100, 0x0, 0x38c1}) (async) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) close(0x4) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 14m12.321188451s ago: executing program 0 (id=861): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f0000000000)={0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000180)={0x0, 0x1, 0x5, 0x0, 0x0}) 14m12.211337918s ago: executing program 1 (id=862): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000001050527776987738dda430a000005300002802c00018014000300ff400400ff"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x1000, 0x4, 0x800, 0x2000, 0xffffffffffffffff, 0x12000000}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001540)={0x14, r4, 0xd8e0afc25e019b91, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv(r0, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 14m12.211127599s ago: executing program 0 (id=863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) (fail_nth: 6) 14m11.778082434s ago: executing program 4 (id=864): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="60060223ff"], 0x8) 14m11.762886836s ago: executing program 0 (id=865): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f00000000c0)={0xfffffff9, 0x704, 0x5, 0x6c0, 0x6, "72363c74870db401b77d5e594263bef08c2cae"}) r5 = open(&(0x7f00000003c0)='./file0\x00', 0x48040, 0x0) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a3, &(0x7f0000000200)='bridge0\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r8) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000003"], 0x3c}}, 0x0) syz_pidfd_open(r0, 0x0) syz_clone(0x54800500, 0x0, 0x0, 0x0, 0x0, 0x0) 14m11.114488225s ago: executing program 1 (id=868): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f09"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 14m11.047723583s ago: executing program 5 (id=869): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706050000000000000000000100000205000100070000042c6b0ab15f"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) 14m10.124477822s ago: executing program 5 (id=871): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905097a63"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) rmdir(0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000005c0)=0xfffffffd) 14m9.499766663s ago: executing program 6 (id=872): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b90402200d00098000000000150010001400259070f409000d2000000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee05e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5e08001b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6cce50dd6e4edef3d939acd92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) 14m9.376868808s ago: executing program 6 (id=873): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = io_uring_setup(0x6ed6, &(0x7f00000004c0)={0x0, 0xbf57, 0x3400, 0x2, 0x355}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r2, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, &(0x7f00000002c0)) mlock(&(0x7f0000588000/0x1000)=nil, 0x1000) modify_ldt$write(0x1, &(0x7f0000000000)={0x8, 0x100000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, 0x10) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0xbe, 0x418001) close_range(r0, r3, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b90402000000008000000000150010001400259070f409000d2000000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee05e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5e08001b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6cce50dd6e4edef3d939acd92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) 14m9.356242266s ago: executing program 6 (id=874): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x70bd28, 0x0, {0x7, 0x0, 0x0, 0x0, 0x40, 0x64, 0xb}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040051}, 0x4048080) 14m9.096482367s ago: executing program 6 (id=875): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2002, 0x0) fsopen(&(0x7f0000000280)='bfs\x00', 0x0) r4 = gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000100)=0x7, 0x4) sendmsg$nl_route(r5, 0x0, 0x4c0c8) tkill(r4, 0xb) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r7 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000009b80)={0x40000012}) read$FUSE(r6, 0x0, 0x0) epoll_pwait(r7, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) 14m8.224973118s ago: executing program 0 (id=876): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect$uac3(0x3, 0x98, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100100000008410e494240000102030109028600030109200c080b0001010130080904000000010130000a24010122000010000013240303000001060004000002050004000a001f24", @ANYRES16=r1], 0x0) 14m7.426042226s ago: executing program 1 (id=877): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x40, 0xe}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x400) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000400)={0x6, @pix={0x1, 0x1, 0x39555659, 0x0, 0x81, 0x9, 0xc, 0xef6, 0x0, 0x2, 0x2, 0x1}}) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14}, [@RTA_PREFSRC={0x8, 0x7, @local}]}, 0x24}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044044) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x40) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) socket$can_raw(0x1d, 0x3, 0x1) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000300)={0x0, 0x7f, 0x6, &(0x7f00000002c0)={0x10, "dbe59aa96be76f16b24f7fa82127993690ff06d3586655d666db04ee3f6df95bc9"}}) syz_emit_ethernet(0xdc4, &(0x7f0000001500)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60f9edff0d8e3a00fe8000000000000000000000000000bbff020000000000000000000000000001800090780ffffff8e169018abf3bba16f1cc4357d84e73a4d6861c12dd0261b74589b7137749d96324657062cf14743c7aaed18f642c71ee65bf55552536196208372f133eae26ff892efe07790d0327cd32895042bac0bce167d9d57f4a79fad9dbc0854af14467cbe187bb1ad85b6a7951070659432a831232249183527dbc1273676d5a8895b20e1e546a77e13f1318eb4c9be48499b018b66bc585e7a8113dc7ed13cc497440b3f09bce6074ac056e7fe968b3c169c5be2a5fd8b6fe5c0b5b52a8493844fe4319acc98940987cd59625d9e272fa7b677f47db3ebd1935be20a177f47047edc705777dae28834748111e1d6a8fe4c5f3f7a588fd5111d46a20e6bb4b3029e313d837a581d4411bed9191d73b89d6efecc419b4db6c3e9c6d299e23569ed4c49b05a7c5f54238e6b6290c0826bdee5057f36963cd0a439dbb38c1152c9ba2b71a9fc9e06a7e38f0e64646510c8f6d5d09317ee7735baf198206b724538b2059b7e7cb3af0986ef3615d991cb74a34903273e9da22972f57c40b77288109d209cc4c4a526c692d87e9a5261ea1de79462d18c4bb1c5b91dcaba8d4adfa68434be9d6d93148c63d002ec26da072258c0aecaa72b189077333a92f67d7c19a767df420ae7891cda232b9ca0d97c4b6b0a200ef78223a4f5e73ae0e34cf0173f6e57fdf7c44037a0265892033f575756d2f72ce32b5a9902239e837727f251d26f21fad7a64702cb9d2d1dc99fccfc4130e597984cbe0baff28c3323e7f354d1846078ffaebb82b2bcd10dd5c50f80b0fe5e5d4a6fa4c05f1e4e0b15e93d2c1243da6d9c67bf1a23576f5078a682dad3b60535f7471f6e2e7b61450321585b862c33f733309a6af16c50b4f490efca2fec4303d04dd18f2f92539eb15ac94012497b497e44baa370b6bd173dc068cad7bc16f8ca19f77a3838f8f20d4395d4f0578cf5c16cb352a5fb9aadd3125efb529ff2d51afafb1923f37da0982f2eb6469f3d6cd312dcb6162ddacfa376e3004c4fa90264440fce34b5f442d327af14c4c62b01f43e39a1b8f728c9a5bd0b3850ca6fd364a42c9ea2313a3510d46c1bfeaade3626900161d3d27a76721da32e686ebb04a0d531a6f88c52d2385e33413c3562805430d0c7936d5bee80c21f12fc87fc64f6a38a9d260e9eeb25450c140f9d6ea5c525522d04d39f5ffcec822b78718354b61c3cc0276a096dbc2d59956914e388a04f64538fed548a5276e9e5ba84e8758280e76e54b84efa973a0add06799cad803f92050d9af4f45f33b6a82517c8a1efab256edd5c7a3938809a22e649560386d0c1eb0946ad6d572e1c8caac0eaa4d448927e444e2c0610285b0100ee0e7f88ca0472086a09473263a3d20f59c67bfa754c4fbb927e82422b878030e9147da79b1aa296b34056b4cd3596b93797a74db603f2cf83a1a61475539f7d1f67dd767930806eb51d610f2806b4ec9d6585514f2078951e6570f3ee275a9647b0b5fc29e21bda2428f3aba499ae4b5c445a1277d5d6aede5e4f3b80d94e814475e43936db3ab38ea0a21a7cac62e706ba41d12fbe545093570687ef4e549a9a7c5b0afd2ef86d4477c30d8929aac65eac8bc56e5b04460c10886255cbbb6a2afdd8144e039a1b25c614cf96cacbcb64d6e71d24fff1135b960aed9c6fd8fc0f855519aec548b64cace2efbb6b6de8fb8f5d5a963ef0567a8ba09eaf7992a8eec82de57ea383eaa4f310a70fe27aed53f1eecd6a4924046bf8caa20ba3b61b8aa344c0b528cd0678b9ac52baf65f3c47d1de97af1542eb9fb55d9a4a9235ee362d69040108b9fe5a2184b87370a62f7fe472d861825473dc55b5802dde5d5429fa38a82e0546a67fee08e7d6fe63aa4f4a2509fbe826c1de770c2b4ac96e64766e38984c299ecdd797f3fc36b93a08e127da9855c57d7bfdb3b18686889b1db53ce0e1e2819226db19d9142b1da6c3459f1d303ca42784b026a01130ca55d028eef0bca625ee61a1eaa14a7178c833669fe47baedb39a8aa10eb69cbaaca593a0aac0c6f41f4c4a2ab92f77fc7d85a7f543b71467efca2bfaa69103950d482dc743f9cbee9beedbaf4ee277895341781544aaeccdd084c29af8a5ab1dce8f48a01721e6f6f56bf095057fe68b3c8ddd43c92ffe614062970b1e22cfcddeca8925b58af598a1e89890d0c7ba6d74d06d8eb01a1a68f5cf81a6031ad137471943def7d3cdce38abe8d23981933ffedb72aa5f4bdf47dc0e9150220347f673f4cbebcf1b0149e8eea12252bd950d172960c1dabeeac4ee9127f7dbc695fc6364960ce9e53c8d63432895eb2d99d4b7538734a9e20126b26a09c4c0dc74b85a3ee740b8b4722588e5bbdb3c254badf15a22482f178827cd4bccff1262213cffa0ca95ac91b56e99eb8495c3b58063e91c1038bebcbcab3a2981bb9238235c45262c6da5f38904edc311a72a7e239e427232f58499de7b33fcb0e335733e3240f5f15697898b266e82e123e6f11157d985ddb611e970e5082a255144df45e41afc853294631c52eca42c66391ad886ac6d827efa5eeee59e08905399bbbf549703bcef6c070553a6a01eb3b07418f9e61d5861cbcd77600f7e6b747c5a3bcea1b685a6f66a9e6b1743992b164db2ade93771e8d4490c5677a1e9f7fcf767b96cfb8c36521bcf7563d4333f4362fea05f5a63de3970fe62d5a00983eeee0b7ea9f9f32bbe2bc356901969ea533e4c5af2fe3389905773f492a6cd2b9df1d1e19438c005d2b4d92114aac54b3fd5ceb4dd8eb3483e31ee0d4559c6c0ad2b1e0a14c570de46dce5d5cea7da1f4dd5e9fec9797f1e40a9bdcc7c39c67ca93e8bc9fc450121004ffc3d614d1a5bf7dd8bcab5765fef9d52763ec0f924efd983acbdfc6c268777d7de90315355df80bbdbc369c2f2c9e9a8ca0b1c179ed3f83db0e6ced935c578c54d8ad379b7df35114512951019019959d5d5d7683a16585b91e7882ebd7083b1c46dcbff1470f463e5775c7ef94ed6f4cbdeceaf4fb74ee51b9177725d2773cae1ad3e0f32b9bfb764db89d98a3d516c83c544e47a375a149a45baa2395ab1073f360dbe734205812e0a591ca352779e739f64216a8ced9b34bf4fbdea02a592a15be233c920e933ffe90bf4fa9bc4bd78c7b23ba2a012d4d23219739a9d2e7bbf51506eeeb2ee4600d55d9cf919c147029740d76c9bfbc28d443cb1ba38d2b2ce46b2381403a1f4ec7d241e8d31388976ca882e4d2dbe19198a6b800b0b8153c1102a458ee7a55ae695da0da4e443338318b9b30fe717a41820e9952f97bc73adb8cf2ebfc9521cdbf25900cfb95f56408086845ded53744485088666b08a257f4358b88c20086ab36b6c65e5ce59f496cc97f050584f3a470074e1b18db2f247b882fa1588d2276cc8fefaf1588561b080b6cf63cc757e0bfcde45c8f64556bf296563982bab730d80621304052829674eb57833f09d4050cfc0dfc29abc150a8ae2fd4d80daa0481df7c1a6bf4bb1e819fdcb2ac51750ec6be4972b4db79332dc9ce67be5031075318d7c52d40e2cdd95f259f2dda1fac5aacf50c8b845849e93b1a9c1c0d9471d80436f3b4b9046a760ec7f64b1f473d680b6e52460e512ab8b744e798c028dcdf6191ec94a3d70600669f1053b13c364fb5a4aecebc0290952c094d25dbd01a2e19a69b470417a402af195ab6908dde5d8375a22cf085c94a2cea1df54cbde3ffafc677604030163403c7ca866a3b528afd892ec5ca63784c820ecd0d1132bfeb0c266ab9b367dfd63d021ce0dc6820d3aa133c0691dd3eb84f96eaf98ddbb91a10cf846624f1a2b97929f7af0873d5b96af1f8387b6ec96324ec9e9275383b8ac4eba2e998e88f4d83931b59b66f531bf9054e8198a2d5e27292f85e97d7c2c75446ed57cb93b5977c0171dd5fa9d552fd4c7d703db4d62eb53669cf75fcf041fc672a33f56b82302b41c35af5b0e066c3e2d72e0dd31a28a94b5a04de4f45ce175b080e81d5eda5ec617ef8b60d5bfe66ab4bcf8c6fcc2b07558a3f4821398c2985463ad33c3c1492a2c2fcd1f4b45df9355a2872310c1f26205984d5df45b09f6c58b5b597f261dd01bce9d6de569aa7a0873f757c4118d86ca644dc08a4b02bd7d7730902a503e7b2fd4e7762c4ce746f2fe680fe335cc928feb202aa174663b70ed20c05e537208565c020c2141992873a8d187cf5d84501ec0825b3aa8c7fb94eedd7b4cb92d239f2239629a832c8e0048e18bd54077d34fba87c2d2be30ba81ac6e7b3aad15f78cfbfb6888790bbb0d651ad37965beda5842c948071db842d8cc002d429c186386563937b09fc5fe890c5f55604306ff029c0f4fa32cfe2ee4edbd91c64a9f56bf7bb89dd05f4179a0fd387c503b764441fcf29bd5064c63bd88ca24a492b409673645ee47bd6712600ca832d15772f3ecec08153ccb884fcea032cdcb71ad72c6b78dc0347411ef1b25716d040b9b6b4aa7d12a3bdc82c94453b068b8cb7b7e8c0677102585a64da968385a997d10d24d8c91e8180de651fa623fe34f0d27623df9f3fe107aacc15e40f67c54012213e7ab27e04b1b3d019e78acd2ea109a00f885633883ea815ae8f194140015da1af3703564604b4693399b7f5e89391099a15d8009cf0d5f647aeaca4166bea683a624d9b7f92a8603026fb534ff10f75e5449ca07a49dccd8c55f82ecc375eae14daeaabdf05cee7f2d229be849387d38b49d03058162bc5216fe77eaf0ed73cfdca8f834c946a4904e1db773d5c7fb8d6217f78ff105da143bc06417878fe51ba65e9514f26683dab59f636156d30c8f289b47171ca809b6c1af7d636f55056312139b811d16eac16f0343d04762d1b25bd508a6ea224736853c19ad2a6840d32280"], 0x0) 14m7.095978425s ago: executing program 4 (id=878): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000001050527776987738dda430a000005300002802c00018014000300ff400400ff"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x1000, 0x4, 0x800, 0x2000, 0xffffffffffffffff, 0x12000000}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001540)={0x14, r4, 0xd8e0afc25e019b91, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv(r0, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 14m6.983553056s ago: executing program 5 (id=879): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f00000003c0)=0x3) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x4, 0x0, 0x4b, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x10, 0x7, 0x40000004, 0x804}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r4 = socket(0x10, 0x803, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5500000020007fafb70000200000000080000000030b43026c26ca8a9848a3c728f9c46b7b31afdc1338d5e801e0b009000000000100005ae583de0dd7d8319f98af84fda542e718f99a5650645929192403bad02c78", 0x56}], 0x1}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x8, 0xe3, 0x8000}) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa0009058202"], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="201a0100dbc9001a04c627de5bf922c1d1edbc7012f83af6ea655b6920f5f6e39462681e9f6ce013fa4d2e83e97624b3af436b07df5cbf1365ac30e823fdc87c300200000000000000c65ec14801746abf40eb91acd15495623f052e2f197615b29d3a6e2298a1256a738f9e10b191f6a5a47f85bef81c"], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x80040, 0x405, 0xc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000200)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 14m6.403566018s ago: executing program 6 (id=880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'comedi_parport\x00', [0x100, 0xf, 0xcd, 0x2, 0x5, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x6, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0x7, 0x9, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x77ffffff, 0xa]}) request_key(&(0x7f0000000080)='id_resolver\x00', 0x0, &(0x7f0000000100)='(^\xbb-\x00', 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0x97e, 0x0, 0x1012, 0xffeffffe, 0xfffffffd, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x40000002, 0x800, 0x0, 0x0, 0x2, 0x0, 0x20000]}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0, 0x2}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000007f00000000d84fe57c1cc6f620128181863840ed0000bcda8602dcf00561f6c3815a3e0357000000e4ffffff000000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc020000000000000000000000000000140003006970766c616e30000000000000000000240012800b0001006970766c616e00001400028006000200010000000600010000000000"], 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 14m5.788936073s ago: executing program 4 (id=881): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r1, 0x540b, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setresuid(0xee00, 0xee00, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) 14m5.63807267s ago: executing program 4 (id=882): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) socket$inet6(0xa, 0x80002, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x2, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f000001fcc0)={'syztnl1\x00', &(0x7f000001fc40)={'ip6gre0\x00', r1, 0x2f, 0x6, 0x74, 0x101, 0x40, @dev={0xfe, 0x80, '\x00', 0x42}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x8, 0x401}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) (fail_nth: 6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$netlink(0x10, 0x3, 0x8000000004) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000d584000002000000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x2, r4}, 0x38) 14m5.5243754s ago: executing program 6 (id=883): timer_create(0x0, &(0x7f00000003c0)={0x0, 0x6}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f00000001c0)=[{r2}, {r2}], 0x2, 0x9) (async) poll(&(0x7f00000001c0)=[{r2}, {r2}], 0x2, 0x9) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x242000, 0x8) lseek(r2, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x40}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000100)={0x0, 0x41, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x140) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r6, &(0x7f0000004300)=""/102390, 0xfffffe74) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(r3, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000884}, 0x80) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f00000004c0)) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f00000004c0)) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, 0x0, 0x0, 0xee01, 0xb, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0xd}) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, 0x0, 0x0, 0xee01, 0xb, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0xd}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 14m5.219310963s ago: executing program 4 (id=884): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff1f856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, 0x0) 14m5.146730015s ago: executing program 0 (id=885): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, 0x0) readlinkat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) setreuid(0x0, 0xee00) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x4, 0x9}) shmctl$SHM_LOCK(0x0, 0xb) 14m4.296682361s ago: executing program 4 (id=886): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x34}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 14m4.02251512s ago: executing program 0 (id=887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x9) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x101, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x64, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xf}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x407, 0x2, 0x0, 0x3, 0x6}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x21d5}, 0x8840) io_uring_setup(0x512e, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000001c0)={0x84, @empty, 0x0, 0x0, 'lblcr\x00', 0x0, 0xfffffffd}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x20, 0xffffffff}, 0x2c) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 14m3.390309252s ago: executing program 1 (id=888): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r6, 0xb0d, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x880) r7 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x7}, &(0x7f00000001c0)=0x10001, 0x0, 0xffffffff, 0x9, 0x7, 0x0, 0x24, 0xffffffffffffffff}}], 0x58, 0x800}, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0) mlock(&(0x7f0000a33000/0x4000)=nil, 0x4000) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) msync(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x4) timer_create(0x6, 0x0, &(0x7f0000001100)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14m0.953081977s ago: executing program 5 (id=889): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x10eb, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0xa6, 0x66, 0x12, 0x20, 0x46d, 0x920, 0x1a72, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10d9, 0x4, 0x7f, 0x3, 0x0, 0x2, "", [{{0x9, 0x4, 0xb2, 0xfd, 0x10, 0x4e, 0xe4, 0xf5, 0x4, [@generic={0x28, 0x3, "7ff97fa7e418b12cd5ffa6520b1b374fb24c1ea4b818da08fb9bb9ee9d486989b75e19a2b215"}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0xa}}], [{{0x9, 0x5, 0x9, 0x10, 0x20, 0x7, 0xf7, 0x1}}, {{0x9, 0x5, 0x5, 0x10, 0x0, 0x1f, 0x9, 0x80, [@generic={0x3c, 0x21, "525822e40e44d8e30d15a773ab21a05554bc393266c1c2d166f968443a1a5dd3bd9e95e7dd8b5ba491c7f4b400102f1aff17263f84869279e6a9"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x697, 0x3, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x1}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x81, 0x4, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x5, 0x2, 0x6d, [@generic={0xf4, 0x3, "64001160e6f2ee4b403da95925f957c6b45067819a3e0aaa67bc7956379b7e23a6e04f41869c21c8e9e779f5d646f70cc39932cf7f50991a1619a5ffb37f37abadc0de6b77d5a2f5644d7b916a9a5814873a061fdb6ab75bedd470ec0b2aabf5cfa4518ef2117cb035cfbadcab2a2b684e1a9f54a7db1c4e4c69e860b839a74bf1f67843389e9f9cd942ecc909caacf0d2376992de6f9038d9ee75252bb001711303b76267985b6bdbf60b48a86e823fc14dd53fa33dfb9359cd361629dde6ff0c2683eaa3e320f7d7fb4f78bab9ab8bb1670c6a6ae0d5e91845cc6027bc44abb84ee83a2449b2ca4d7d01ef56ef2316bb3d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x2}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x2, 0x6, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xc}]}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0xf9, 0x2, 0x8}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x1, 0x3, 0x5, [@generic={0xb6, 0x30, "d305692a2833ddbea801bc5c55fa9ae3e84225c51a3fec5b81c3fc712f7c27302037fb5468379ade1876400ebd14b8d8079fa4408a551c61ed91ff170f4ca0f31603e3fa8fcb7ae8e934d8d5c688c961009fa5f654df064603691d4da879d16a32b0946afd50154104258492b9fdd14c71c4e0176fbb5d07391f05bf5b25475bb730c403fd98833d60692ee243676eeaa0333b08a55a5ee086afd78802f8cb3bd3bdbbf36225320893bbd1a57fce48cda583334a"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x7bf, 0x7f, 0xdd, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x5}]}}, {{0x9, 0x5, 0x2, 0x1, 0x400, 0x8, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0xe5}]}}, {{0x9, 0x5, 0x6, 0x1, 0x40, 0x2, 0x10, 0x9, [@generic={0x6, 0xb, "0536ebb7"}]}}, {{0x9, 0x5, 0x8, 0x17, 0x20, 0x5, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x3}, @generic={0xfb, 0x5, "576f523a94d794901f3a29294885af746de544aaffca557c2a47514dc8e02048fcacc8a536c7cf2c8af10a8b0218089fe2558f23b269c57d7e83c312d49cc6252553ed50a387fbf1421baa4e1b2f9da7a41c1a18244df35d10c1b26248147cb5d23cdb14b20e54a2b4ea6ec7cc550ed2f79c47c3826094743287998b5c429fed3392c24ea4f19a8f9568ec034df9fd687c58b7e70f8c2dea364f31b443e9d3859ca674908e08dd190f1b35e8177e2793abaf79ea3618f61d3c088fbd59ed684e15aa12a106f50a2ff4fc6e0b641ebb827fe7fe63848b5db92e0187c5589d2799152e25ff9c828837fc899fbf5b8af5abc3b339c97f7524b5d4"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x7, 0x9, 0xe5, [@generic={0x6a, 0x21, "4a336e0e0c0069fb727e265894cc4a3d95a5259a106977639687421fcd073d8c329c52616f232ea595ed3e21190dbbcce5807834ac5ab8bff540b32e8c7b98cc89e7848902c4802f66b61b1142cec4533ed535a65085cb0f951610a1cf5f11e077766b909128e3c8"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0xc, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xff, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x6}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x6, 0x35, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xff6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xc5b}]}}]}}, {{0x9, 0x4, 0x8c, 0x7, 0x8, 0x12, 0x26, 0x8f, 0xc, [@generic={0x5f, 0x30, "3dccdc59fc5988098eeed2586e34737766c52c111a123b37bb0c0c40ead7f91e6afcb33cf005b1ce9283535840aa76b804e4f26317c100077a6b6e1fb25601a0a213b9d8fff43507991efa56a6624b839d77268cf5253a5f6af8fb5b6f"}], [{{0x9, 0x5, 0xe, 0x4, 0x400, 0x4, 0x3, 0x9}}, {{0x9, 0x5, 0xc, 0xc, 0x200, 0x3, 0xa, 0x6, [@generic={0xc2, 0x4, "abacf3acc1c7b1fd6ece64a540f5c089af1a4498c4986163cc0ba092a3cb577b0153ee991e80e8e87ee6e5f9589f6c7d15ff2014eff4c603fa1c68eb312dd3684ff9bdd6fea836dcb45337a198f08a00c1d8ad898bdc553362fa05d9bb7eeee281340174f0ac7fbc1394c6d26f1027013298985891e3e6f9c595754139c8073d79f72ae9b7e7b77585fec17c2d6dc43a3920dc9e84bd53b3299d1098b03ca0ad6626a18bd5e58348de44bf6f1af76432908768094128fc3b508aa4b784e159da"}, @generic={0x61, 0x8, "71b7b2985f9f5f6fdcd2ec8c1b2032e4e6cb71e7bffdec33279bdbb98ba6c141f433eb4da08c88db04f8abe6c0be792c77789d55df416389d5e75b7426d83b8e9428fdd0bcffcb4aeedefe04cbe1b55f3f17f27fe4c01f18de02e6a1a2eed0"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x6, 0x3, 0x3, [@generic={0xbb, 0x9, "ed00da2bd204853281c974eb2f589ec4c8d28c15aa59db85f930b3cb9468d0e08e2bebde1fa99e8ad0c9e6e43a8c3e9d22d6e5b2fffeefd77b147f419382f09fe295564ca8e79221300397cc6b7666659b83e7cef88a6c180077e8262831bdbb96aef8a7cd9adbcf0a9be55ba12955bd7664a91b109cc91651ec3b1e753b62b05d6fb3b64fd1c89ef4941261bfa0573e8b1483dbb366d44fa4113e6f563fe45ccba99deab0634ad7bfec3ba20749d93dfdc3e19746a5259f80"}, @generic={0xc0, 0x10, "c5b015efc4e2d5679de940e057d096083f12a00b0463a1f41aad78349e07491265bfe4082a17d812854d4808c1534eccf3889782ace388c6464560afa7bdffc5a5757a3f253e3c9c307857c2e229ed094d27b6aa829e87b02d756897f12050c137a1f0bbea4e9c0ea84af764580132445a378c70c374f505d11cd57d590d2786a1bdcaab579e5b559114a0558277b7a2dcb2be37da15658a7ffd55a2691f9c414fd61f6f907af718c14f96afb30d12eff9a8fe818918cab18ccfe7cf91d6"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x20, 0x5, 0x0, 0x5}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x80, 0x6f, 0x5, [@generic={0x5c, 0x5, "db07a107609d8ad111454ba757ce39a2704f55cc74a63baf0d507d56330cebfb79f7c5396aa3c310d1ed990450bf3a2ef83131ccc828030c3a20280194681590c12673e522396c64cb3ef0477065372b3d1e13d01e67a1c57217"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0xe, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xff8d}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x653}]}}, {{0x9, 0x5, 0x4, 0x0, 0x7bf, 0x5, 0x0, 0x4}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0xf0, 0x5, 0x1}}]}}, {{0x9, 0x4, 0x4, 0x1, 0x8, 0x1, 0x3, 0xcd, 0x9, [@generic={0x57, 0x7, "9692e6089b14475f2faa876981b307839aa5c030f7183ed076ee760d30bb870a082ba955279f2694139acfc26f101ead7197ff7f55ab2c0dba48d44e4043d9e9ac8be4cbe3e194169fe7f047dc2871dbd265d87158"}], [{{0x9, 0x5, 0xb, 0x2, 0x40, 0x1, 0x81, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}]}}, {{0x9, 0x5, 0x4, 0xc, 0x40, 0x9, 0x80, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x9}, @generic={0xff, 0x31, "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"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0x8, 0x2, 0x7, [@generic={0xb1, 0x1f, "0ab6b7884a26456627b0aa5031d7c6e616806396bb1d33b4fe771e8fbabdecd9e8339ab2bde3de23450834a1f61c616256ae3cb24abd78a761c45f74d703746cb10fc3f015c8273715370f68a731b1bd5d8da9d28938644253b36b64cb4ec1891d937387d3b8b72b5fb61ab56807c41b40c0c572df898d8eb62b8d9f45f88838f9523043a50c9ffc2b1a1ab49066cf1eec57b39618bd664ba04bb79dd088fa92467f85a614826787b4f3053d5d93a6"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x3, 0x5, 0x81, [@generic={0xdb, 0x31, "fdab80f97d655ad76cab859aaa2ea420fe4e9775112c4814d7e2b0d7c362b637d4289e487a94484d97991a2cb0f4d9f84cbf9b9e3d2cec0a8de0be157cd381c35db88b35d41652260ee4b7f9991de1a75480c19bb71d47b080d8ceaaf954fb82d7d954a2158209e779ec92c9aae1c951cc056ee495c445952a716c9e54021dfc9cd0e35f53b1052eb186c26f63e6b29907d30a2d1fb486b9823eb77cd8b9dc2f9a691ac0df6d10f83cf496cb38de21ef5316e0dedffc09e5b375b2291d913ff3d3170980a3eec16e66de154d3d141717872119660628f373c2"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x54, 0x4}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x7, 0xf8, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x22}, @generic={0xdb, 0xe, "fa523945bfb292a2fef7efb5505089e24942bbcb3dc87fc2ef4a326b868607f043f07adb73f2584722c144c381d1d3ab02ed94a43ec5f22bc0591d6a0cbcb3b2a6acbfb250da6e1e0fecf1724573d9b96a311ee99ff6fe0e06dd0ab07f71f885691386f8aa0932915aa35452dd77540c8a6823e2370b10fd013706776dd8efc67c6eb73b8809a53e4440776e17a0b0736b9a12798c5fc9130e06159e56ed7975916badcbbd41a23f71e0e928e16438e18254bcfa4f1eb8b356699f179b72dbe7e7a150eb646d19728cbec28303b751b35b53e5a166e787f089"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x1, 0x7a, 0x4, [@generic={0x41, 0x4, "5ac9801c2d25dbf9b9466e6b4e3c8d58983c0fd5a1cd74a597df5c8a96779f8552a016bf879f7a6492ddb1258998e00ceff24c3342d47cdf96289e945a4b30"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xa0, 0x383}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x4, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x2}]}}, {{0x9, 0x5, 0x2, 0x10, 0x0, 0x1, 0x5b, 0x6}}]}}, {{0x9, 0x4, 0x0, 0xa5, 0x10, 0x89, 0x7d, 0x0, 0x6, [], [{{0x9, 0x5, 0x1, 0x3, 0x0, 0x10, 0x7, 0x7f, [@generic={0xb6, 0xf, "ef745b1883229f2b0ffc79ffdc712ee2f5bcff62455498e9c625c58932de01de5760354c4a31265195f6f5245846fcb03df892b475cc3892d1c07878ce20b67250a236932b03ec2d08e8050d7c61d8c4274a5d73a3486ebfd83a4ab69f32ef1c82f13e787dbca0dd50b3e0f42507486c8622e59edd3232928311b3a1f26324a195d9d4c39f65c92f56d64c7c174ce5ab0deabb09b90405ae229b1ef2d4eb1fd3ac0a9786b1dd7a928e09feabe420a8c2f8914514"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x3, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x7}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x8, 0x3, 0x6, [@generic={0x3c, 0xe, "01005cab6a9fd2f4e8805c3b76c5d5fb382bfd64bec266e0a37e141ab050dcc9f56e495f2b59639efe647cb302a7706d8b231e76ef89a2073bbd"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xf, 0x7f}]}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0x9, 0x1, 0x9}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x5, 0x0, 0x6}}, {{0x9, 0x5, 0xa, 0x1d, 0x3ff, 0x7, 0x3, 0x5, [@generic={0xc1, 0x8, "dfb8d312f5f53b65c1f48657f7753bf6359f7ed44d5d7a291ba056390fc2e47fde657d8d417985aba15afd911da88182689083bc9d37d25e2de8610d85272a15a27f3105ef286eed025b028148103b568918f111d9e0b01867cdcdc3e210a7f163314834a6eab1023d8cabb02bf9ea97260e5b461f3c5b89eb40fe54eb91a6cc7d81456ecedea7d3717dd85e3e5991830dc0b317e7760c92ea822a0a2b90956f5a43e137f8cd1e548ac54cc99fa7698cc82e8d12b1e8a92bf698937d98c5b4"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x1, 0x9, 0x8}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0x4, 0xb0, 0xe}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x9, 0xff, 0x5d}}, {{0x9, 0x5, 0x9, 0x0, 0x0, 0x9, 0x80, 0x7, [@generic={0x82, 0x0, "28f4fe806d82dd31b3e262f3151e918f65b576653f25229eb08a045c3722161dcdc6622a2a05489bc284906357a48af16d395b4b4fb9a39d28ae5a2404c02c04ba9bba24f9cdb655dd64872c895e9e4fb27219e7d3b8fc8a541ff3acedd0e51f18dd6f23ca82134c2c2d6d1dbc833c180b56072031085650fb317cfd4167220f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6}]}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x5, 0xfb, 0xce, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xb}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x5, 0x1b, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x6}, @generic={0x3d, 0x4, "b33fa94ae4643eb789c2e46dcc85eb7de0e5e99d51e04454c58eacb430058eccd51dea39e62f766388aa579ee94bbe0f64b213f08e5bc679d8bf4d"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0xb, 0x0, 0x7, [@generic={0xe5, 0x4, "c32912fc28b8d62674c282137690618b52ca003b86ca4e37309a9d51022d54bfc82126070fbefd582657b5e292985f2b9363a91d4955a4e7c322c9bee9677d67e4a085289a058d871c0773ff3282998a760d7855bd079ce07f5cc68b9b5e5de01d9f0dd75d5092e3fbe0ccd68c9ed2a9c1c8a4e6bab06de482b37238f5a0adb7395b3d29ebfc4c9dc859c7150a6b3c064dbec173303dd900107ab21ac816f342afd2845194a3a8dfc4c1e68624e2ba647e876c3fdc5bc8465f67dd7f7752c0ef0ebb4a79aed076d16d45c0f7eb8f0c6e34c6142a239d7b63b2807cd2e3812fced9442d"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x4}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x0, 0x6f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd3, 0x6000}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xd}]}}]}}]}}]}}, &(0x7f0000001500)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x310, 0x3, 0x3, 0xe, 0x20, 0x1b}, 0x23, &(0x7f00000013c0)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7, 0x3, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "1ff7461cbbd9dd6ea889302818c79831"}]}, 0x4, [{0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x418}}]}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001900010027bd7000000000000a000000fe01"], 0x24}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000100)) 13m12.357192307s ago: executing program 34 (id=883): timer_create(0x0, &(0x7f00000003c0)={0x0, 0x6}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f00000001c0)=[{r2}, {r2}], 0x2, 0x9) (async) poll(&(0x7f00000001c0)=[{r2}, {r2}], 0x2, 0x9) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x242000, 0x8) lseek(r2, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x40}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000100)={0x0, 0x41, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x140) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r6, &(0x7f0000004300)=""/102390, 0xfffffe74) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(r3, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000884}, 0x80) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f00000004c0)) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f00000004c0)) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, 0x0, 0x0, 0xee01, 0xb, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0xd}) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, 0x0, 0x0, 0xee01, 0xb, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0xd}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 13m12.14074272s ago: executing program 35 (id=887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x9) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x101, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x64, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xf}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x407, 0x2, 0x0, 0x3, 0x6}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x21d5}, 0x8840) io_uring_setup(0x512e, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000001c0)={0x84, @empty, 0x0, 0x0, 'lblcr\x00', 0x0, 0xfffffffd}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x20, 0xffffffff}, 0x2c) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 13m12.024982947s ago: executing program 36 (id=888): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r6, 0xb0d, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x880) r7 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x7}, &(0x7f00000001c0)=0x10001, 0x0, 0xffffffff, 0x9, 0x7, 0x0, 0x24, 0xffffffffffffffff}}], 0x58, 0x800}, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0) mlock(&(0x7f0000a33000/0x4000)=nil, 0x4000) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) msync(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x4) timer_create(0x6, 0x0, &(0x7f0000001100)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m11.891648658s ago: executing program 37 (id=889): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x10eb, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0xa6, 0x66, 0x12, 0x20, 0x46d, 0x920, 0x1a72, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10d9, 0x4, 0x7f, 0x3, 0x0, 0x2, "", [{{0x9, 0x4, 0xb2, 0xfd, 0x10, 0x4e, 0xe4, 0xf5, 0x4, [@generic={0x28, 0x3, "7ff97fa7e418b12cd5ffa6520b1b374fb24c1ea4b818da08fb9bb9ee9d486989b75e19a2b215"}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0xa}}], [{{0x9, 0x5, 0x9, 0x10, 0x20, 0x7, 0xf7, 0x1}}, {{0x9, 0x5, 0x5, 0x10, 0x0, 0x1f, 0x9, 0x80, [@generic={0x3c, 0x21, "525822e40e44d8e30d15a773ab21a05554bc393266c1c2d166f968443a1a5dd3bd9e95e7dd8b5ba491c7f4b400102f1aff17263f84869279e6a9"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x697, 0x3, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x1}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x81, 0x4, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x5, 0x2, 0x6d, [@generic={0xf4, 0x3, "64001160e6f2ee4b403da95925f957c6b45067819a3e0aaa67bc7956379b7e23a6e04f41869c21c8e9e779f5d646f70cc39932cf7f50991a1619a5ffb37f37abadc0de6b77d5a2f5644d7b916a9a5814873a061fdb6ab75bedd470ec0b2aabf5cfa4518ef2117cb035cfbadcab2a2b684e1a9f54a7db1c4e4c69e860b839a74bf1f67843389e9f9cd942ecc909caacf0d2376992de6f9038d9ee75252bb001711303b76267985b6bdbf60b48a86e823fc14dd53fa33dfb9359cd361629dde6ff0c2683eaa3e320f7d7fb4f78bab9ab8bb1670c6a6ae0d5e91845cc6027bc44abb84ee83a2449b2ca4d7d01ef56ef2316bb3d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x2}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x2, 0x6, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xc}]}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0xf9, 0x2, 0x8}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x1, 0x3, 0x5, [@generic={0xb6, 0x30, "d305692a2833ddbea801bc5c55fa9ae3e84225c51a3fec5b81c3fc712f7c27302037fb5468379ade1876400ebd14b8d8079fa4408a551c61ed91ff170f4ca0f31603e3fa8fcb7ae8e934d8d5c688c961009fa5f654df064603691d4da879d16a32b0946afd50154104258492b9fdd14c71c4e0176fbb5d07391f05bf5b25475bb730c403fd98833d60692ee243676eeaa0333b08a55a5ee086afd78802f8cb3bd3bdbbf36225320893bbd1a57fce48cda583334a"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x7bf, 0x7f, 0xdd, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x5}]}}, {{0x9, 0x5, 0x2, 0x1, 0x400, 0x8, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0xe5}]}}, {{0x9, 0x5, 0x6, 0x1, 0x40, 0x2, 0x10, 0x9, [@generic={0x6, 0xb, "0536ebb7"}]}}, {{0x9, 0x5, 0x8, 0x17, 0x20, 0x5, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x3}, @generic={0xfb, 0x5, "576f523a94d794901f3a29294885af746de544aaffca557c2a47514dc8e02048fcacc8a536c7cf2c8af10a8b0218089fe2558f23b269c57d7e83c312d49cc6252553ed50a387fbf1421baa4e1b2f9da7a41c1a18244df35d10c1b26248147cb5d23cdb14b20e54a2b4ea6ec7cc550ed2f79c47c3826094743287998b5c429fed3392c24ea4f19a8f9568ec034df9fd687c58b7e70f8c2dea364f31b443e9d3859ca674908e08dd190f1b35e8177e2793abaf79ea3618f61d3c088fbd59ed684e15aa12a106f50a2ff4fc6e0b641ebb827fe7fe63848b5db92e0187c5589d2799152e25ff9c828837fc899fbf5b8af5abc3b339c97f7524b5d4"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x7, 0x9, 0xe5, [@generic={0x6a, 0x21, "4a336e0e0c0069fb727e265894cc4a3d95a5259a106977639687421fcd073d8c329c52616f232ea595ed3e21190dbbcce5807834ac5ab8bff540b32e8c7b98cc89e7848902c4802f66b61b1142cec4533ed535a65085cb0f951610a1cf5f11e077766b909128e3c8"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0xc, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xff, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x6}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x6, 0x35, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xff6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xc5b}]}}]}}, {{0x9, 0x4, 0x8c, 0x7, 0x8, 0x12, 0x26, 0x8f, 0xc, [@generic={0x5f, 0x30, "3dccdc59fc5988098eeed2586e34737766c52c111a123b37bb0c0c40ead7f91e6afcb33cf005b1ce9283535840aa76b804e4f26317c100077a6b6e1fb25601a0a213b9d8fff43507991efa56a6624b839d77268cf5253a5f6af8fb5b6f"}], [{{0x9, 0x5, 0xe, 0x4, 0x400, 0x4, 0x3, 0x9}}, {{0x9, 0x5, 0xc, 0xc, 0x200, 0x3, 0xa, 0x6, [@generic={0xc2, 0x4, "abacf3acc1c7b1fd6ece64a540f5c089af1a4498c4986163cc0ba092a3cb577b0153ee991e80e8e87ee6e5f9589f6c7d15ff2014eff4c603fa1c68eb312dd3684ff9bdd6fea836dcb45337a198f08a00c1d8ad898bdc553362fa05d9bb7eeee281340174f0ac7fbc1394c6d26f1027013298985891e3e6f9c595754139c8073d79f72ae9b7e7b77585fec17c2d6dc43a3920dc9e84bd53b3299d1098b03ca0ad6626a18bd5e58348de44bf6f1af76432908768094128fc3b508aa4b784e159da"}, @generic={0x61, 0x8, "71b7b2985f9f5f6fdcd2ec8c1b2032e4e6cb71e7bffdec33279bdbb98ba6c141f433eb4da08c88db04f8abe6c0be792c77789d55df416389d5e75b7426d83b8e9428fdd0bcffcb4aeedefe04cbe1b55f3f17f27fe4c01f18de02e6a1a2eed0"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x6, 0x3, 0x3, [@generic={0xbb, 0x9, "ed00da2bd204853281c974eb2f589ec4c8d28c15aa59db85f930b3cb9468d0e08e2bebde1fa99e8ad0c9e6e43a8c3e9d22d6e5b2fffeefd77b147f419382f09fe295564ca8e79221300397cc6b7666659b83e7cef88a6c180077e8262831bdbb96aef8a7cd9adbcf0a9be55ba12955bd7664a91b109cc91651ec3b1e753b62b05d6fb3b64fd1c89ef4941261bfa0573e8b1483dbb366d44fa4113e6f563fe45ccba99deab0634ad7bfec3ba20749d93dfdc3e19746a5259f80"}, @generic={0xc0, 0x10, "c5b015efc4e2d5679de940e057d096083f12a00b0463a1f41aad78349e07491265bfe4082a17d812854d4808c1534eccf3889782ace388c6464560afa7bdffc5a5757a3f253e3c9c307857c2e229ed094d27b6aa829e87b02d756897f12050c137a1f0bbea4e9c0ea84af764580132445a378c70c374f505d11cd57d590d2786a1bdcaab579e5b559114a0558277b7a2dcb2be37da15658a7ffd55a2691f9c414fd61f6f907af718c14f96afb30d12eff9a8fe818918cab18ccfe7cf91d6"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x20, 0x5, 0x0, 0x5}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x80, 0x6f, 0x5, [@generic={0x5c, 0x5, "db07a107609d8ad111454ba757ce39a2704f55cc74a63baf0d507d56330cebfb79f7c5396aa3c310d1ed990450bf3a2ef83131ccc828030c3a20280194681590c12673e522396c64cb3ef0477065372b3d1e13d01e67a1c57217"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0xe, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xff8d}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x653}]}}, {{0x9, 0x5, 0x4, 0x0, 0x7bf, 0x5, 0x0, 0x4}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0xf0, 0x5, 0x1}}]}}, {{0x9, 0x4, 0x4, 0x1, 0x8, 0x1, 0x3, 0xcd, 0x9, [@generic={0x57, 0x7, "9692e6089b14475f2faa876981b307839aa5c030f7183ed076ee760d30bb870a082ba955279f2694139acfc26f101ead7197ff7f55ab2c0dba48d44e4043d9e9ac8be4cbe3e194169fe7f047dc2871dbd265d87158"}], [{{0x9, 0x5, 0xb, 0x2, 0x40, 0x1, 0x81, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}]}}, {{0x9, 0x5, 0x4, 0xc, 0x40, 0x9, 0x80, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x9}, @generic={0xff, 0x31, "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"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0x8, 0x2, 0x7, [@generic={0xb1, 0x1f, "0ab6b7884a26456627b0aa5031d7c6e616806396bb1d33b4fe771e8fbabdecd9e8339ab2bde3de23450834a1f61c616256ae3cb24abd78a761c45f74d703746cb10fc3f015c8273715370f68a731b1bd5d8da9d28938644253b36b64cb4ec1891d937387d3b8b72b5fb61ab56807c41b40c0c572df898d8eb62b8d9f45f88838f9523043a50c9ffc2b1a1ab49066cf1eec57b39618bd664ba04bb79dd088fa92467f85a614826787b4f3053d5d93a6"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x3, 0x5, 0x81, [@generic={0xdb, 0x31, "fdab80f97d655ad76cab859aaa2ea420fe4e9775112c4814d7e2b0d7c362b637d4289e487a94484d97991a2cb0f4d9f84cbf9b9e3d2cec0a8de0be157cd381c35db88b35d41652260ee4b7f9991de1a75480c19bb71d47b080d8ceaaf954fb82d7d954a2158209e779ec92c9aae1c951cc056ee495c445952a716c9e54021dfc9cd0e35f53b1052eb186c26f63e6b29907d30a2d1fb486b9823eb77cd8b9dc2f9a691ac0df6d10f83cf496cb38de21ef5316e0dedffc09e5b375b2291d913ff3d3170980a3eec16e66de154d3d141717872119660628f373c2"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x54, 0x4}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x7, 0xf8, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x22}, @generic={0xdb, 0xe, "fa523945bfb292a2fef7efb5505089e24942bbcb3dc87fc2ef4a326b868607f043f07adb73f2584722c144c381d1d3ab02ed94a43ec5f22bc0591d6a0cbcb3b2a6acbfb250da6e1e0fecf1724573d9b96a311ee99ff6fe0e06dd0ab07f71f885691386f8aa0932915aa35452dd77540c8a6823e2370b10fd013706776dd8efc67c6eb73b8809a53e4440776e17a0b0736b9a12798c5fc9130e06159e56ed7975916badcbbd41a23f71e0e928e16438e18254bcfa4f1eb8b356699f179b72dbe7e7a150eb646d19728cbec28303b751b35b53e5a166e787f089"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x1, 0x7a, 0x4, [@generic={0x41, 0x4, "5ac9801c2d25dbf9b9466e6b4e3c8d58983c0fd5a1cd74a597df5c8a96779f8552a016bf879f7a6492ddb1258998e00ceff24c3342d47cdf96289e945a4b30"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xa0, 0x383}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x4, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x2}]}}, {{0x9, 0x5, 0x2, 0x10, 0x0, 0x1, 0x5b, 0x6}}]}}, {{0x9, 0x4, 0x0, 0xa5, 0x10, 0x89, 0x7d, 0x0, 0x6, [], [{{0x9, 0x5, 0x1, 0x3, 0x0, 0x10, 0x7, 0x7f, [@generic={0xb6, 0xf, "ef745b1883229f2b0ffc79ffdc712ee2f5bcff62455498e9c625c58932de01de5760354c4a31265195f6f5245846fcb03df892b475cc3892d1c07878ce20b67250a236932b03ec2d08e8050d7c61d8c4274a5d73a3486ebfd83a4ab69f32ef1c82f13e787dbca0dd50b3e0f42507486c8622e59edd3232928311b3a1f26324a195d9d4c39f65c92f56d64c7c174ce5ab0deabb09b90405ae229b1ef2d4eb1fd3ac0a9786b1dd7a928e09feabe420a8c2f8914514"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x3, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x7}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x8, 0x3, 0x6, [@generic={0x3c, 0xe, "01005cab6a9fd2f4e8805c3b76c5d5fb382bfd64bec266e0a37e141ab050dcc9f56e495f2b59639efe647cb302a7706d8b231e76ef89a2073bbd"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xf, 0x7f}]}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0x9, 0x1, 0x9}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x5, 0x0, 0x6}}, {{0x9, 0x5, 0xa, 0x1d, 0x3ff, 0x7, 0x3, 0x5, [@generic={0xc1, 0x8, "dfb8d312f5f53b65c1f48657f7753bf6359f7ed44d5d7a291ba056390fc2e47fde657d8d417985aba15afd911da88182689083bc9d37d25e2de8610d85272a15a27f3105ef286eed025b028148103b568918f111d9e0b01867cdcdc3e210a7f163314834a6eab1023d8cabb02bf9ea97260e5b461f3c5b89eb40fe54eb91a6cc7d81456ecedea7d3717dd85e3e5991830dc0b317e7760c92ea822a0a2b90956f5a43e137f8cd1e548ac54cc99fa7698cc82e8d12b1e8a92bf698937d98c5b4"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x1, 0x9, 0x8}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0x4, 0xb0, 0xe}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x9, 0xff, 0x5d}}, {{0x9, 0x5, 0x9, 0x0, 0x0, 0x9, 0x80, 0x7, [@generic={0x82, 0x0, "28f4fe806d82dd31b3e262f3151e918f65b576653f25229eb08a045c3722161dcdc6622a2a05489bc284906357a48af16d395b4b4fb9a39d28ae5a2404c02c04ba9bba24f9cdb655dd64872c895e9e4fb27219e7d3b8fc8a541ff3acedd0e51f18dd6f23ca82134c2c2d6d1dbc833c180b56072031085650fb317cfd4167220f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6}]}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x5, 0xfb, 0xce, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xb}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x5, 0x1b, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x6}, @generic={0x3d, 0x4, "b33fa94ae4643eb789c2e46dcc85eb7de0e5e99d51e04454c58eacb430058eccd51dea39e62f766388aa579ee94bbe0f64b213f08e5bc679d8bf4d"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0xb, 0x0, 0x7, [@generic={0xe5, 0x4, "c32912fc28b8d62674c282137690618b52ca003b86ca4e37309a9d51022d54bfc82126070fbefd582657b5e292985f2b9363a91d4955a4e7c322c9bee9677d67e4a085289a058d871c0773ff3282998a760d7855bd079ce07f5cc68b9b5e5de01d9f0dd75d5092e3fbe0ccd68c9ed2a9c1c8a4e6bab06de482b37238f5a0adb7395b3d29ebfc4c9dc859c7150a6b3c064dbec173303dd900107ab21ac816f342afd2845194a3a8dfc4c1e68624e2ba647e876c3fdc5bc8465f67dd7f7752c0ef0ebb4a79aed076d16d45c0f7eb8f0c6e34c6142a239d7b63b2807cd2e3812fced9442d"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x4}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x0, 0x6f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd3, 0x6000}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xd}]}}]}}]}}]}}, &(0x7f0000001500)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x310, 0x3, 0x3, 0xe, 0x20, 0x1b}, 0x23, &(0x7f00000013c0)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7, 0x3, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "1ff7461cbbd9dd6ea889302818c79831"}]}, 0x4, [{0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x418}}]}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001900010027bd7000000000000a000000fe01"], 0x24}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000100)) 13m11.776005949s ago: executing program 38 (id=886): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x34}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 10.661388447s ago: executing program 8 (id=3673): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000980)=@mgmt_frame=@probe_response={{{}, {}, @device_b}, 0x800000000000, @default, 0x56f9, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, [{0xdd, 0x6, "4ccba44749df"}]}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x24000806) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000600)=ANY=[@ANYBLOB="100000010802110000005050505050502000010000000100010882848b960c1218242d1a40000f01000000000000000000f5000500000000040200000002"], 0x44) 9.036632945s ago: executing program 7 (id=3678): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) capset(0x0, &(0x7f0000000000)={0x208004, 0x21fffc, 0xc, 0x0, 0xc0, 0xfffffffe}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000d40)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x7a, 0x889, {}, 0x1119dff, 0xffffffff80000002, 0xcd41}}}, 0xfffffd74) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x2, 0x2, 0x1000, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x1, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) 8.944932347s ago: executing program 8 (id=3679): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x100008b}, 0x0) r1 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001b80)={{r1, &(0x7f0000001400)='\x95\x99\x1d\xb6N\x91\\\x8b\x00\x00\x00_lis\x8d\x0f\xd0\x1f\xe9\xc1/\xf9\xe6\xb4\x00', 0x2000, &(0x7f0000001c00)={@align=0x5, {0x53, 0xc3, 0x100, 0x7fffffffffffffff}}, 0xef95e4c, &(0x7f0000000340)={@_ha_fsid}, &(0x7f00000003c0)=0x7}, 0x0, &(0x7f0000001c40)}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) msgget$private(0x0, 0x4d2) ioperm(0x8, 0xa8, 0x9) syz_usbip_server_init(0x5) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000300)={{0x3, @addr=0x8000}, 0x8, 0x7, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000200)={0xc}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) acct(&(0x7f00000005c0)='./file0/file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x20000040) 8.896318875s ago: executing program 7 (id=3680): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x26) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001440)=""/117, 0x75, 0x2000009) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$kcm(0x2, 0x0, 0x84) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac1414b488"], 0x68}, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r2, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001640)=""/230, 0xe6}, {0x0}], 0x2}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}], 0x3, 0x40012032, 0x0) syz_open_dev$loop(0x0, 0x9, 0xe900) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40010001, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r7, 0x4b48, &(0x7f0000000080)) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r6}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9, 0x2010, 0xffffffffffffffff, 0x0) 7.437082784s ago: executing program 7 (id=3682): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = gettid() ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0445624, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000280)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x8020}, 0x2, 0x3, 0x5, r5, 0x0, 0x4ff, 'syz1\x00', 0x0}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=@newqdisc={0xcc, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x9c, 0x2, {{0x9, 0x29, 0x80, 0x9, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x7, 0x7fffffff}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x9}, @TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x3aa8, 0x7}}, @TCA_NETEM_LOSS={0x23, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9be8, 0x166e, 0xfffffff9, 0xffff476a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7fffffff, 0x15, 0x8, 0xff}}]}, @TCA_NETEM_DELAY_DIST={0x19, 0x2, "1fec3497f3dbd724734657c49974e72102ac6ec276"}, @TCA_NETEM_ECN={0x8}]}}}]}, 0xcc}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r6, @ANYBLOB="00012abd7000fddbdf25040000005c0001801400020070696d726567310000000000000000001400020064766d7270310000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="a815000050cfb764efca76cd56120cf0a673fbff9634d3885f32e92dabb9c2284509f6baeeb49fc2a783899d14a59925f9fa2930e8a3614539d782c95a12d453850c17c522ac0438095f224c99f307eef543937de96b8a925d0efbaa5a23a062135f9e03f2dcd9cf37", @ANYRES32=0x0, @ANYBLOB="0800030003000000080003000200000008000300010000000c00018008000300020000001800018014000200626174616476300000000000000000000c0001800800030002000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4006}, 0x20000800) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x25dfdbfd, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x8000010}, 0x4044) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffff, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0x9, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 6.204792061s ago: executing program 8 (id=3684): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000280)={0x7, @win={{0x3, 0x3, 0x3, 0x5}, 0x8, 0x10000, 0x0, 0x9, 0x0, 0xb}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000eb", @ANYRES16=r6, @ANYBLOB="010026bd7000020000000c000000180001801400020076657468305f746f5f626f6e640000000c0003800800020000000000"], 0x38}}, 0x40) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r8, 0x0, 0x29, 0x0, 0x57) getsockopt$inet_mreqn(r8, 0x0, 0x24, &(0x7f0000000600)={@local, @multicast2, 0x0}, &(0x7f0000000640)=0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x1, &(0x7f00000001c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000380)='syzkaller\x00', 0x6, 0xa4, &(0x7f0000000400)=""/164, 0x41000, 0x2b, '\x00', r9, 0x1a, r7, 0x8, &(0x7f0000000680)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x8, 0xffffffff, 0x8}, 0x10, 0x27e9a, 0xffffffffffffffff, 0x1, &(0x7f0000000700)=[r7], &(0x7f0000000740)=[{0x4, 0x2, 0x8, 0xc}]}, 0x94) 6.089822744s ago: executing program 3 (id=3685): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x400, @mcast2, 0x6}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x54) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x44, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x464, 0x0, 0x1, [@nested={0x18, 0xcd, 0x0, 0x1, [@typed={0x14, 0x9b, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}}]}]}]}]}, 0x38}}, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x2042) write$P9_RMKNOD(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x70bd28, 0x25dfdbfe, {0x81, 0x80, 0x80}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}}]}, 0x30}}, 0x884) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100c0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r8, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) splice(r6, 0x0, r7, 0x0, 0x10500, 0x0) 5.904479896s ago: executing program 3 (id=3687): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a80000060027"], 0x44}, 0x1, 0x0, 0x0, 0x24048004}, 0x4000) (fail_nth: 5) 5.059720972s ago: executing program 8 (id=3688): r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000006c0)={r1, 0x3, 0x0, [0x7, 0x8001, 0x101, 0x1, 0x99], [0x71c246f4, 0x0, 0x4, 0xfffffffffffffffc, 0x2, 0x1, 0x6, 0x5, 0x4, 0x4, 0x3, 0xff, 0x4, 0x10, 0x200, 0xa9, 0x3, 0x6, 0x1, 0x1d, 0xfffffffffffffff7, 0xe44, 0x2, 0x8, 0x81, 0x10000, 0x1, 0x9, 0x6, 0x4, 0xfce8, 0xffffffff80000001, 0x6616, 0x7, 0x8, 0x8, 0x9, 0x5, 0x1, 0x3, 0xe9, 0x2, 0x6, 0x80, 0x0, 0x1, 0x0, 0x979, 0x9d, 0x6, 0x7fffffffffffffff, 0x3400000, 0x4b94, 0x1, 0x6, 0x57, 0x3, 0x8000000, 0x8, 0x3, 0xc, 0xe, 0x3, 0x8, 0xd6bd, 0x4, 0x9, 0xb3f7, 0x7, 0x6, 0x5, 0x2, 0xc, 0x4, 0x4, 0x875, 0x6, 0x6, 0x10, 0x8, 0x0, 0x5, 0xf9, 0x7, 0x2, 0x5, 0x9, 0x9, 0x3, 0x8000000000000000, 0x6, 0x1, 0x8, 0x2, 0x8, 0x5, 0xffff, 0xcdbc, 0x2f, 0x0, 0x5, 0x3, 0x8, 0x7de, 0xf39, 0x6, 0x8, 0x4, 0xb, 0x3, 0xffffffffffffff49, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x7fffffffffffffff, 0x3, 0x4b7d, 0x8, 0x4, 0x743]}) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = open$dir(&(0x7f0000000780)='./file0\x00', 0x20000, 0xc0) fanotify_mark(0xffffffffffffffff, 0x4, 0x20, r4, &(0x7f00000007c0)='./file0/file0\x00') writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0xc000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0x6a, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0x21c8, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r8, 0x0, 0x0, 0x0, 0x0, 0x10003}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(r8, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000036c0)={0x2, 0xce}, 0x2) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000080)="05000000010001", 0x7) r10 = fsopen(&(0x7f0000000600)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r10, 0x7, 0x3f, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) 5.038074241s ago: executing program 7 (id=3689): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4044015}, 0x814) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x6c, @multicast2, 0x4e23, 0x4, 'wrr\x00', 0x23, 0x9, 0x74}, 0x2c) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000240)='),!($-[,)@:\x00', 0x0, r1) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x68c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='7\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000427bd7000080000002e00000008002201ad03000005001801180000000800a10000000000050019010d000000"], 0x34}, 0x1, 0x0, 0x0, 0xc080}, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x208400, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000002c0)={0x9, 0x0, 0x7, 0x569}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f0000000100)=0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={r10, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000400)={r10, @in={{0x2, 0x4e22, @empty}}}, 0x90) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={r10, 0x2}, &(0x7f0000000400)=0x8) r11 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r11, 0x7a5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r5, 0xf517, 0x0) 4.575082156s ago: executing program 3 (id=3690): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4, 0x257}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x1000, 0x1, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac8e, 0x8200, 0x2, 0x367}}], 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f00000000c0)={0x7, 0x1, '\x00', @zc_export}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1000, 0x0, r7}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 4.475766233s ago: executing program 7 (id=3691): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2dff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x39, 0x70, 0x60, 0x40, 0x14cd, 0x6116, 0x155, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0x40, 0x7, "", [{{0x9, 0x4, 0xe, 0x6, 0x0, 0xe2, 0x6a, 0x85, 0x8}}]}}]}}, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r2, 0xc0386447, &(0x7f0000000140)={{0x8, 0x8, &(0x7f0000000100)=[{0x9, 0x0, 0x1000}, {0x6, 0x0, 0x7f}, {0x26, 0x0, 0x1}, {0x5, 0x0, 0x101}, {0x6, 0x0, 0x40}, {0x3, 0x0, 0x1}, {0x9, 0x0, 0xa6}, {0x3, 0x0, 0x3c}]}, 0xa4, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x8, 0xffffffffffffffff}) process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f0000000200)=""/253, 0xfd}, {&(0x7f0000000300)=""/226, 0xe2}, {&(0x7f0000000480)=""/128, 0x80}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/133, 0x85}, {&(0x7f0000000640)=""/180, 0xb4}], 0x6, &(0x7f0000000a00)=[{&(0x7f0000000780)=""/26, 0x1a}, {&(0x7f00000007c0)=""/246, 0xf6}, {&(0x7f00000008c0)=""/39, 0x27}, {&(0x7f0000000900)=""/219, 0xdb}], 0x4, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04250c20"], 0x7) 3.982009106s ago: executing program 3 (id=3692): socket(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x8, 0x6, &(0x7f0000000540)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650cab, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x96, 0x0, 0x0, 0xa, "ee0f09a2"}, 0xffff, 0x2, {}, 0x80000}) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000000c0)=[{0x3f, '\x00', @st={0x4, [{0x0, @svalue=0x2}, {0x3, @uvalue=0x3}, {0x1, @svalue=0xff}, {0x0, @uvalue=0x8d3c}]}, 0x4}, {0x39, '\x00', @buffer={"55eb476b13d85ef7a019aef895e9baae03d9827fe704c54bbcd80c0ac8383761", 0x20}, 0x5}, {0x13, '\x00', @data=0x81, 0x3}, {0x3c, '\x00', @data=0x8, 0x1}]}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r3 = accept4(r2, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x0, 0x80800) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket(0x1e, 0x1, 0x0) getsockopt$inet6_tcp_buf(r9, 0x6, 0x3c, 0x0, &(0x7f00000000c0)) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES8], 0xfc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="0ffe55b739b4ec00e9395cb11b6d78bc0dbaf14238fff2bf4b25ba805699b91bc07222f94a10a759dddc63b5663dd2254456dad0cb63e3b8f46e63a8b607f1296682799d73ce79afd4399aa86773546b8ca7565e6397f6d92871bd6f97c4b354f06afc800f75aac9019759000000000000000405e6eb9162aa37f64fbbbbd951568cc3defe20023bbd9c54afeca8622ed083e63b5c8d3fb3b3344a6ed72e5f4251b5e8c91890dc96b0de5e9049"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f00000001c0)={0x40000014}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0) syz_usb_control_io$rtl8150(r10, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r10, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000a00)=ANY=[@ANYBLOB="100e0400000053016a31"], 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_REINIT(r2, 0x7c81, 0x0) 3.944424679s ago: executing program 8 (id=3693): syz_open_dev$loop(0x0, 0xffff, 0x14f600) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, 0x0, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x3c, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000a00)=ANY=[@ANYBLOB="100e0400000053016a31"], 0x0, 0x0}) 2.23314816s ago: executing program 9 (id=3700): socket$inet6_sctp(0xa, 0x5, 0x84) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x101101, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0xfffffffffffff000, 0x1, 0x800, 0x2, 0x8000000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (fail_nth: 5) 1.875401795s ago: executing program 9 (id=3701): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x80800, 0x0) socket(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x49, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x5, 0x0) read$msr(r1, &(0x7f0000007880)=""/102400, 0x19000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0x14, 0x30, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x4000005) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='mqueue\x00', 0x306891, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000040)={[], [], 0x2f}) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x101) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendfile(r0, r4, &(0x7f0000000240)=0x1, 0x200) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001480)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004091}, 0x24000040) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r2], 0x9c}}, 0x20000084) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) 1.862989628s ago: executing program 9 (id=3702): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0xff00, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 1.792968908s ago: executing program 2 (id=3703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setpipe(r1, 0x407, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, 0x0) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x2000000) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) 1.727113909s ago: executing program 2 (id=3704): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x80000) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="fb00ffffffff72b40000005908060001080006040001aaaaaaaaaa16ac1414bbfebd7a271d7ae0000002"], 0x0) sendto$packet(r6, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r11, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r10, 0x0, 0x0, 0x600}]) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f0000000080)={r8, r9/1000+10000}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000f37b00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r12, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r12, &(0x7f0000006180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x5, {0x2, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xfffffffc, 0x120, 0x2000, 0xa8, r13, r14, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup2(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x40, &(0x7f0000000840)={[{@pids_localevents}, {@memory_localevents}, {@memory_localevents}, {@memory_localevents}], [{@obj_type={'obj_type', 0x3d, ']^]!)@{.'}}, {@fowner_gt={'fowner>', r13}}, {@appraise_type}, {@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, 'raw\x00'}}, {@hash}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESHEX=r8, @ANYBLOB="5fc40e2b96190fee791872c49b73c7f445f5ea34d28fca937cbc20779a92dd66a0014929c690c9ac7f35d0b9c61770ab89b20d3a0d0671a9c0c09cb18c4abfab22d2c744a7946c02234a17b54f2abd50e03a58052aae2403bb2dae3e1572c9581e037bad12e289498d3fab2c249efd36ce6e3ab7e39835453d0972ae1caa066604afa268dbc93f2612b9ff9cd307c901c57f7f50c045ef5b77ab6ccd3fcb23751406ba76fcd1964f64f1016a34bc7e89f4b1d9ea2be09af783c18a078be3e5aef4c0147b4bda", @ANYRES32=r7, @ANYRES16=0x0], 0x50) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x100000, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 1.726576076s ago: executing program 9 (id=3705): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x800) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0xff02, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) 1.590243474s ago: executing program 9 (id=3706): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 1.535033036s ago: executing program 9 (id=3707): syz_usb_connect$cdc_ncm(0x1, 0x78, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x1, 0x80, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "42b7a9d8b5"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x6, 0x4, 0x80}, {0x6, 0x24, 0x1a, 0x124, 0x5}, [@obex={0x5, 0x24, 0x15, 0x8001}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x1, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0xc20, 0x7, 0x1, 0xb0}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x2, 0x8}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x350, 0x8, 0x5, 0x6, 0xff, 0x70}, 0x8, &(0x7f0000000440)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xc07}}, {0x4b, &(0x7f00000009c0)=@string={0x4b, 0x3, "60396a737992c7bc7dd952ed6282198ac46fdf111b478b27432fa102742bc0c7caba43cfba67d9f695a25e111d5048a4848b6dc1e4a4b38f13dfd4f7e9949115ec05b30d666a408e57"}}]}) syz_usb_connect$uac2(0x2, 0x13c, &(0x7f0000000a80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x763, 0x200d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12a, 0x3, 0x1, 0x5, 0xa0, 0x2, {0x8, 0xb, 0x2, 0x2, 0x1, 0x7, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0xa, 0x44, 0x7}, [@sample_rate={0xd, 0x24, 0xd, 0x5, 0x0, 0x4, [0x2, 0x1, 0x1]}, @feature_unit={0x11, 0x24, 0x6, 0x4, 0x6, [0x8, 0xc, 0x0, 0x9, 0xa, 0x12]}, @processing_unit={0xd, 0x24, 0x8, 0x3, 0x2, [0x3, 0x1, 0x3, 0x2]}, @input_terminal={0x10, 0x24, 0x2, 0x3, 0x204, 0x2, 0x4, 0x5, 0x8, 0x2b, 0xe, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xb7, 0x4, 0x30, 0xc, "bcafa15360"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xff, 0x5, 0x8, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xcf6, 0x3, 0xfc, 0xfa}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x2}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x3, 0xcb, 0x10, "7a8f1a"}, @as_header={0x10, 0x24, 0x1, 0x7, 0x3a, 0x56e0d0453366570f, 0x1002, 0x8, 0x101, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x3, 0xef, {0x8, 0x25, 0x1, 0x3, 0x1b, 0x4, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x4, 0x2, 0x3, 0x1001, 0x5, 0x6be42da8, 0xff}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x9, 0xfc, 0x4, 0x2}, @as_header={0x10, 0x24, 0x1, 0x4, 0x2, 0x2, 0xc9938680cbf6ba5c, 0xa, 0xd}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1, 0x30a9, 0x38, "8706c978"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1, 0x1, 0x5, 0xa2, "c6d82bc76e5b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x5, 0x5, {0x8, 0x25, 0x1, 0x0, 0x3c, 0x2, 0x7}}}}}}}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x201, 0x5a, 0x4, 0xf, 0xc7, 0x9}, 0x72, &(0x7f00000014c0)=ANY=[@ANYBLOB="050f72000266100347f45d8be3b0db5049c5fcb583a32f454d44fc808c7963bacc8cfa8ced457a0e43db7e4aff725788dfb78f8a6bd46c51805a18009990ab28378f0d129e0725c4afed52a808fb508013bde5150e8528f6a815928107c540e7a8f4d5930a2d861f2ee84f57e0792056055711a46f602d07100206ba0500"], 0x9, [{0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x100c}}, {0x5c, &(0x7f0000000cc0)=@string={0x5c, 0x3, "d77e9338f7b46be040d3ac777ad08f9a831efca820e5e4a62166143ee03ba846eb62c1e4ac765299738a02ccaa1df12d3643464488b5c3d2a52874863fbe6976256245e4c8eae1a996c5e64b7fbdc8dcfa678ed89e4e72bb1a8d"}}, {0x1c, &(0x7f0000000d40)=@string={0x1c, 0x3, "479103ca3700f7ef2a196db7d7378529d1f18d02adb4cc009b39"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x448}}, {0x100, &(0x7f0000000dc0)=@string={0x100, 0x3, "c0e68755ac36d4ed063ec80deb89a1eeffab32ae4a878627b4556e2698af4ca6dd1161d4878657eb920a9457e1b75925cdfd641bb49cddb0b57d2c17725a313975312e70b43a991f8323fee3c54faa48be50b54ff16d2215ee7cf722d2e7a9d3b74f344410a1c66edfcd3515c00d58f6bac258d98f7d12fe40f5441d52b5397aa556fc31b86ce3fd083367b342548862586942c29071189123fdbd5e004e73ca0697593f501b2f011388066f71b5211c2ed56e8b7e1daf81f7b7c6573123baa6cf540055ae8ec17722b27f0b329fc2c9b2d257eb826ece73c7bbad23ab8437374e27f9d9c2734b8086ee042bc65fbc30af65ea995c6e9c3785d1d7f3cbdd"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0xf}}, {0x59, &(0x7f0000000f80)=@string={0x59, 0x3, "f9e5d39080c60159262ee0da82a14ff8e7c82b7d49e1b6c675a17c74a006ddc108269bbfb7cd124c679306b0e3d10efacb7013f3e7aa9c30feba6b4027de999166da620f4e1c9f47306ddf7bd9f78240fc513bd2813a7f"}}]}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x3, "fef890"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$uac2(0x1, 0xb1, &(0x7f00000010c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x40, 0x30, 0x2, {0x8, 0xb, 0x2, 0x0, 0x1, 0x2, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x400, 0xa, 0x19, 0x7}, [@input_terminal={0x10, 0x24, 0x2, 0x5, 0x205, 0x2, 0x9, 0x1, 0x1ff, 0xf, 0xcf, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0xe2, 0x2, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x3, 0x8, {0x8, 0x25, 0x1, 0x82, 0x6c, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x86, 0x3, 0x0, 0x10, "6bd0", "da"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x1, 0x8c, 0x8, "", "c4637a"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xe0}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0xba, 0x5, {0x8, 0x25, 0x1, 0x83, 0x3c, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000001180)={0xa, 0x6, 0x110, 0x5, 0xa9, 0x8, 0x40, 0x96}, 0xf, &(0x7f00000011c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0xa, 0x6, 0x7}]}, 0x5, [{0x9a, &(0x7f0000001540)=@string={0x9a, 0x3, "5f2d401790271aeec0a673a0fe3d206200d5d8aa287a00d01c9ed06dd117e4a9c0f8df78c4c13ca5ce6b81516c1c3311af79b5a9e8c2a072e85af98646141c5b7f94c39b181ec4f408080e44ee24668be2d41d74f06528d395d33ec65d7e750f5b6ce379834cf8f64b2de7d844c42f6220eca87754ff07b75b7940512ca0d56e25a163b53bb9635184ad1782d6ae0c40f69370a0ec5467a4"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0xc01}}, {0xc7, &(0x7f0000001280)=@string={0xc7, 0x3, "b25b1da37d6f2ed16bba5b8333562e0676f9f84462d39cd5944effe7b4e2734c956a2310d9c3088309a3164bd7bec15a56b27b0362ff9f2b43beabef4eabe44a640d0c2bea9ef728ec1ee1b31cbe282a07b63210134f634f841c87cdf6170fd89c506baa73a85ee1dbed765a88f3818870dfee214695dfcba426ad077c21e0e546d4c08058000c5e55b5c480f6d773d112499a04e65d1ebe77a8247ca21b1e14772763757307ebb29163aff6360b8d87aa2c61d2aa0643db24f5e711ec8d20332f57a678cd"}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x1009}}]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r5 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x2, 0x2, 0x40, 0xd, 0x0, 0xa}, {0x9, 0x5, 0x7, 0x2, 0x8, 0x4, 0x9, 0x5}, {0x9, 0x5, 0x0, 0x3, 0x8, 0x80, 0xe2, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r5, &(0x7f0000000280)={0x14, &(0x7f0000000040)={0x40, 0x21, 0x34, {0x34, 0xa, "85bd01f6dc55431ecadfeb78c1f344816039902638a7603344bbf511f37e69e534a713778afc77cf1e4c3dd6c5be0e85f13b"}}, &(0x7f00000002c0)={0x0, 0x3, 0xac, @string={0xac, 0x3, "3c7228fb2415c676e3c3b7b10d9f48eb866ebfdd0ebead98b98198cdcb901e1ecac26c1aba07254c8c0df8dbd666c6ac07af78b5537f47dc71087a131db0dd4cd2d83e31100e7120e60f9dc79a6e711b4a7fe29e24797fd6ae4b12cb4169f0d67197c3a076c021a90f7dfb1f7f21463d57491d5b4f0903639cd19bf2c2b7b06f139d8ed71342f499d7e2824d42d75a7bd92556f77fd053e05d254a26b79ef0ebdb2f572e8da612cab2ae"}}}, &(0x7f0000000940)={0x1c, &(0x7f0000000400)={0x40, 0xe, 0x6, "0944ec645676"}, &(0x7f00000004c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000900)={0x21, 0x0, 0x4, "e2b2e938"}}) kexec_load(0xfffffffffffffffa, 0x1, &(0x7f00000013c0)=[{0x0, 0x0, 0x5, 0x7}], 0x1) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mq_notify(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe}, 0x94) 1.525401433s ago: executing program 3 (id=3708): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2) memfd_create(0x0, 0x1) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000027000000001f00088000000010000000", @ANYRES32=r1, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000004000000040000000f00"/28], 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000040000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)=ANY=[@ANYRES16=0x0], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x56) write$dsp(r0, &(0x7f0000000040)='F', 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x123, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x7, 0xffffffffffffffff}, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 1.45117694s ago: executing program 2 (id=3709): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = gettid() ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0445624, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000280)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x8020}, 0x2, 0x3, 0x5, r5, 0x0, 0x4ff, 'syz1\x00', 0x0}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=@newqdisc={0xcc, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x9c, 0x2, {{0x9, 0x29, 0x80, 0x9, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x7, 0x7fffffff}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x9}, @TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x3aa8, 0x7}}, @TCA_NETEM_LOSS={0x23, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9be8, 0x166e, 0xfffffff9, 0xffff476a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7fffffff, 0x15, 0x8, 0xff}}]}, @TCA_NETEM_DELAY_DIST={0x19, 0x2, "1fec3497f3dbd724734657c49974e72102ac6ec276"}, @TCA_NETEM_ECN={0x8}]}}}]}, 0xcc}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r6, @ANYBLOB="00012abd7000fddbdf25040000005c0001801400020070696d726567310000000000000000001400020064766d7270310000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="a815000050cfb764efca76cd56120cf0a673fbff9634d3885f32e92dabb9c2284509f6baeeb49fc2a783899d14a59925f9fa2930e8a3614539d782c95a12d453850c17c522ac0438095f224c99f307eef543937de96b8a925d0efbaa5a23a062135f9e03f2dcd9cf37", @ANYRES32=0x0, @ANYBLOB="0800030003000000080003000200000008000300010000000c00018008000300020000001800018014000200626174616476300000000000000000000c0001800800030002000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4006}, 0x20000800) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x25dfdbfd, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x8000010}, 0x4044) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffff, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0x9, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 1.388280771s ago: executing program 7 (id=3710): mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='ubifs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101840) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) close(0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x2000043, 0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x1, r2}) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000500)=' ,1\t#|^q', 0x8}], 0x1) fallocate(0xffffffffffffffff, 0x2, 0x2, 0x8fffd) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f00000019c0)={0xa, 0x4e20, 0x6, @local, 0x8000}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x120}}], 0x1, 0x0) 535.59809ms ago: executing program 8 (id=3711): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x1d8, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffffff, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x308) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052409000105240000000d0b979d60a53067d50060200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b"], 0x0) 352.352656ms ago: executing program 3 (id=3712): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc532, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x5, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x8, 0x64}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x20, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000000140)={0x4c, 0x0, 0x0, 0x0, 0x0, [{0x0, &(0x7f0000000080)=@lang_id={0x0, 0x3, 0x4c0a}}, {0x0, &(0x7f00000000c0)=@lang_id={0x0, 0x3, 0x2409}}, {0x0, &(0x7f0000000180)=@string={0x0, 0x3, "eba96afe41838f619bec852fd2de546ec3592f6e87fa44dff276fef6103789185a8406ee"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f00000001c0)={0x0, 0xa, 0x94, {0x94, 0xa, "166fa3ee9c7237fd88c869d1b40872d19c9a1bbc6d7434f2bbda7c8874b9ad8d63fae4f524bbd84f376d2316d7f86ab779452d89c7c261e8479a8fc5e10df2be08125a4554f682a175a53a624c5e68048cdb25c71f20062e650d4a84066e5d64870e71da224b763c1e69e9f9bcc5505ba1616da4e81ea6e625d0ce3f079a935a0b2935231381d35ef166394b79879bb5be50"}}, &(0x7f0000000280)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}, &(0x7f00000003c0)={0x0, 0x22, 0xe, {[@local=@item_4={0x3, 0x2, 0x1f, "f6cc86c2"}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_012={0x2, 0x0, 0xc, "5081"}, @global=@item_4={0x3, 0x1, 0x2, "a3d442a8"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xe0, 0x1, {0x22, 0xd6a}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x0, 0xe, 0x24, "55d097dca019d359707be30bcf884d861d9c78e89decd9df1dbd682676ab52c8477ffab4"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x1, 0x8b, "5227ac095057fa72d34784f619388539bbb1fab41f7c83fff881022db472a9d3a64bcba6b6362dc197d84468b4ab6b66cd7f958d2d273e0828ecb4d64eeb3780ff24200567e2be19e82eacde07d380f1a2a7e5b68c754c514017090103d03bc5f106efd21d41973605caab7718eb25bed65c6d2ba287f00efce96211969a8afe178a725f679bba1824eee2"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x2}}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) 231.412334ms ago: executing program 2 (id=3713): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x2000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x23) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x81000000}]}, 0x20}}, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x7, 0xffffffffffffffcc, 0x1d}) 133.318132ms ago: executing program 2 (id=3714): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0x8, 0x7, 0x0, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0x5, 0x43, 0x558}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40808000000000073113500000000008510"], 0x0, 0x4}, 0x94) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e131d"], 0x16) 0s ago: executing program 2 (id=3715): clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r2, 0x5452, &(0x7f0000000100)={'veth1\x00'}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 471350][T18501] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000006 [ 1058.471361][T18501] RBP: 00007f8b38c30090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.471371][T18501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.471381][T18501] R13: 00007f8b38026038 R14: 00007f8b38025fa0 R15: 00007ffde42e23c8 [ 1058.471404][T18501] [ 1058.834332][T18505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3311'. [ 1058.843526][T18505] netlink: 'syz.2.3311': attribute type 10 has an invalid length. [ 1058.871260][T18504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1058.888890][ T24] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1058.938575][T18510] netlink: zone id is out of range [ 1058.943755][T18510] netlink: get zone limit has 4 unknown bytes [ 1058.992831][T18504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1059.014011][T18514] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3319'. [ 1059.023098][T18514] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1059.063315][ T24] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1059.072458][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.080732][ T24] usb 4-1: Product: syz [ 1059.084922][ T24] usb 4-1: Manufacturer: syz [ 1059.089584][ T24] usb 4-1: SerialNumber: syz [ 1059.101255][ T24] usb 4-1: config 0 descriptor?? [ 1059.112937][ T24] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 086 [ 1059.631365][ T24] (null): failure reading functionality [ 1059.779813][ T24] i2c i2c-1: connected i2c-tiny-usb device [ 1059.934138][ T24] usb 4-1: USB disconnect, device number 86 [ 1060.165573][T18533] comedi: No check for data length of config insn id 1025 is implemented [ 1060.183002][T18533] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1060.193470][T18533] comedi: Assuming n=29200 is correct [ 1060.295169][ T9272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1060.321016][ T9272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1060.331697][ T9272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1060.343291][ T9272] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1060.353266][ T29] audit: type=1326 audit(1060.485:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18526 comm="syz.9.3325" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee52b9de99 code=0x0 [ 1060.384953][ T9272] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1060.478113][ T29] audit: type=1400 audit(1060.615:1725): avc: denied { watch watch_reads } for pid=18541 comm="syz.7.3327" path="/465/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1060.479799][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1060.523091][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1060.532904][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1060.541286][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1060.551333][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1060.602994][ T29] audit: type=1400 audit(1060.725:1726): avc: denied { mounton } for pid=18537 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1060.662627][ T29] audit: type=1400 audit(1060.805:1727): avc: denied { ioctl } for pid=18547 comm="syz.3.3328" path="socket:[63652]" dev="sockfs" ino=63652 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1061.131099][ T47] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1061.142387][ T47] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.287789][T18557] netlink: 'syz.9.3329': attribute type 1 has an invalid length. [ 1061.668572][T18571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3332'. [ 1061.677778][T18571] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1061.704252][T18571] Bluetooth: MGMT ver 1.23 [ 1062.423107][T18573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1062.453594][ T47] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1062.464043][ T47] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.519387][T18537] lo speed is unknown, defaulting to 1000 [ 1062.589631][T18574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.417800][ T9272] Bluetooth: hci0: command tx timeout [ 1063.435534][T18587] FAULT_INJECTION: forcing a failure. [ 1063.435534][T18587] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.576467][T18587] CPU: 0 UID: 0 PID: 18587 Comm: syz.3.3336 Tainted: G L syzkaller #0 PREEMPT(full) [ 1063.576487][T18587] Tainted: [L]=SOFTLOCKUP [ 1063.576491][T18587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1063.576498][T18587] Call Trace: [ 1063.576502][T18587] [ 1063.576507][T18587] dump_stack_lvl+0x100/0x190 [ 1063.576525][T18587] should_fail_ex.cold+0x5/0xa [ 1063.576539][T18587] should_failslab+0xc2/0x120 [ 1063.576553][T18587] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1063.576565][T18587] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1063.576586][T18587] ? mm_alloc+0x1b/0x60 [ 1063.576600][T18587] mm_alloc+0x1b/0x60 [ 1063.576612][T18587] alloc_bprm+0x2ba/0x9d0 [ 1063.576629][T18587] do_execveat_common.isra.0+0x19c/0x580 [ 1063.576645][T18587] ? do_getname+0x191/0x390 [ 1063.576658][T18587] __x64_sys_execveat+0xdf/0x130 [ 1063.576675][T18587] do_syscall_64+0x115/0x870 [ 1063.576692][T18587] ? clear_bhb_loop+0x40/0x90 [ 1063.576705][T18587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.576716][T18587] RIP: 0033:0x7ff9e139de99 [ 1063.576726][T18587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1063.576737][T18587] RSP: 002b:00007ff9e226e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1063.576748][T18587] RAX: ffffffffffffffda RBX: 00007ff9e1626090 RCX: 00007ff9e139de99 [ 1063.576755][T18587] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1063.576762][T18587] RBP: 00007ff9e226e090 R08: 0000000000001000 R09: 0000000000000000 [ 1063.576768][T18587] R10: 0000200000004780 R11: 0000000000000246 R12: 0000000000000001 [ 1063.576774][T18587] R13: 00007ff9e1626128 R14: 00007ff9e1626090 R15: 00007ffd5c9b4768 [ 1063.576787][T18587] [ 1064.014337][ T47] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1064.024917][ T47] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.169469][T18596] FAULT_INJECTION: forcing a failure. [ 1064.169469][T18596] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.184778][T18596] CPU: 1 UID: 0 PID: 18596 Comm: syz.8.3342 Tainted: G L syzkaller #0 PREEMPT(full) [ 1064.184809][T18596] Tainted: [L]=SOFTLOCKUP [ 1064.184816][T18596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1064.184827][T18596] Call Trace: [ 1064.184833][T18596] [ 1064.184841][T18596] dump_stack_lvl+0x100/0x190 [ 1064.184869][T18596] should_fail_ex.cold+0x5/0xa [ 1064.184893][T18596] should_failslab+0xc2/0x120 [ 1064.184915][T18596] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1064.184934][T18596] ? do_raw_spin_lock+0x128/0x260 [ 1064.184957][T18596] ? inet_bind_bucket_create+0x2d/0x280 [ 1064.184982][T18596] inet_bind_bucket_create+0x2d/0x280 [ 1064.185005][T18596] inet_csk_get_port+0x8d2/0x28e0 [ 1064.185034][T18596] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1064.185062][T18596] ? __local_bh_enable_ip+0x9e/0x120 [ 1064.185087][T18596] __inet6_bind+0x653/0x1b40 [ 1064.185119][T18596] inet6_bind+0xdb/0x120 [ 1064.185145][T18596] __sys_bind+0x1a9/0x260 [ 1064.185172][T18596] ? __pfx___sys_bind+0x10/0x10 [ 1064.185195][T18596] ? __fget_files+0x21f/0x3d0 [ 1064.185231][T18596] ? __pfx_ksys_write+0x10/0x10 [ 1064.185262][T18596] __x64_sys_bind+0x72/0xb0 [ 1064.185285][T18596] ? lockdep_hardirqs_on+0x78/0x100 [ 1064.185312][T18596] do_syscall_64+0x115/0x870 [ 1064.185338][T18596] ? clear_bhb_loop+0x40/0x90 [ 1064.185359][T18596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.185378][T18596] RIP: 0033:0x7f55f019de99 [ 1064.185395][T18596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.185412][T18596] RSP: 002b:00007f55f107b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1064.185431][T18596] RAX: ffffffffffffffda RBX: 00007f55f0425fa0 RCX: 00007f55f019de99 [ 1064.185443][T18596] RDX: 000000000000001c RSI: 0000200000000240 RDI: 0000000000000003 [ 1064.185453][T18596] RBP: 00007f55f107b090 R08: 0000000000000000 R09: 0000000000000000 [ 1064.185464][T18596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1064.185474][T18596] R13: 00007f55f0426038 R14: 00007f55f0425fa0 R15: 00007ffc7645d6d8 [ 1064.185498][T18596] [ 1064.604382][ T47] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1064.614933][ T47] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.862780][T18537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.870137][T18537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.877769][T18537] bridge_slave_0: entered allmulticast mode [ 1064.886149][T18537] bridge_slave_0: entered promiscuous mode [ 1064.895534][T18537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.902915][T18537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.910583][T18537] bridge_slave_1: entered allmulticast mode [ 1064.918593][T18537] bridge_slave_1: entered promiscuous mode [ 1064.959844][T18537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.973639][T18537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.007906][T18537] team0: Port device team_slave_0 added [ 1065.017930][T18537] team0: Port device team_slave_1 added [ 1065.136602][T18537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.152832][T18537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.180045][T18537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.198562][T18537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.295793][T18537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.323778][T18537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.426123][T18616] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3344'. [ 1065.571887][ T9272] Bluetooth: hci0: command tx timeout [ 1065.848416][ T29] audit: type=1400 audit(1065.983:1728): avc: denied { read } for pid=5270 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1065.967304][T18622] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3345'. [ 1065.976449][T18622] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1066.464777][T18624] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3347'. [ 1067.623660][ T9272] Bluetooth: hci0: command tx timeout [ 1067.645934][T18537] hsr_slave_0: entered promiscuous mode [ 1067.659042][T18537] hsr_slave_1: entered promiscuous mode [ 1067.687233][T18637] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3353'. [ 1067.824524][T18640] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1068.089495][ T47] pimreg2: left allmulticast mode [ 1068.407615][ T29] audit: type=1400 audit(1068.541:1729): avc: denied { setattr } for pid=18654 comm="syz.8.3355" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1068.812588][ T29] audit: type=1400 audit(1068.931:1730): avc: denied { write } for pid=18641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1068.949024][ T29] audit: type=1400 audit(1069.081:1731): avc: denied { write } for pid=18666 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1069.158689][ T47] team0: Port device geneve1 removed [ 1069.343598][ T47] bond0 (unregistering): Released all slaves [ 1069.393143][T18671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1069.431059][ T47] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1069.508076][ T47] bond1 (unregistering): Released all slaves [ 1069.545820][T18671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1069.606891][ T47] bond2 (unregistering): (slave veth5): Releasing backup interface [ 1069.645963][ T47] bond2 (unregistering): Released all slaves [ 1069.694044][ T9272] Bluetooth: hci0: command tx timeout [ 1069.714233][ T47] bond3 (unregistering): (slave veth11): Releasing backup interface [ 1069.738781][ T47] bond3 (unregistering): Released all slaves [ 1069.808143][ T47] bond4 (unregistering): (slave veth13): Releasing backup interface [ 1069.849113][ T47] bond4 (unregistering): Released all slaves [ 1070.662521][ T5270] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1070.762486][T18680] comedi comedi3: pcmda12: I/O port conflict (0x100,16) [ 1070.877884][T18684] FAULT_INJECTION: forcing a failure. [ 1070.877884][T18684] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.968702][T18684] CPU: 1 UID: 0 PID: 18684 Comm: syz.7.3362 Tainted: G L syzkaller #0 PREEMPT(full) [ 1070.968733][T18684] Tainted: [L]=SOFTLOCKUP [ 1070.968740][T18684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1070.968752][T18684] Call Trace: [ 1070.968759][T18684] [ 1070.968766][T18684] dump_stack_lvl+0x100/0x190 [ 1070.968794][T18684] should_fail_ex.cold+0x5/0xa [ 1070.968818][T18684] should_failslab+0xc2/0x120 [ 1070.968840][T18684] __kmalloc_cache_noprof+0x91/0x6c0 [ 1070.968867][T18684] ? rcu_is_watching+0x12/0xc0 [ 1070.968893][T18684] ? __request_module+0x2b7/0x6a0 [ 1070.968921][T18684] __request_module+0x2b7/0x6a0 [ 1070.968946][T18684] ? __pfx___request_module+0x10/0x10 [ 1070.968978][T18684] ? find_held_lock+0x2b/0x80 [ 1070.969004][T18684] ? rtnl_link_ops_get+0x17b/0x2c0 [ 1070.969023][T18684] ? rtnl_link_ops_get+0x17b/0x2c0 [ 1070.969048][T18684] rtnl_newlink+0x1657/0x2380 [ 1070.969076][T18684] ? __pfx_rtnl_newlink+0x10/0x10 [ 1070.969094][T18684] ? find_held_lock+0x2b/0x80 [ 1070.969119][T18684] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1070.969138][T18684] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1070.969162][T18684] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1070.969201][T18684] ? find_held_lock+0x2b/0x80 [ 1070.969227][T18684] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1070.969246][T18684] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1070.969267][T18684] ? __pfx_rtnl_newlink+0x10/0x10 [ 1070.969287][T18684] rtnetlink_rcv_msg+0x95e/0xe90 [ 1070.969310][T18684] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1070.969336][T18684] ? ref_tracker_free+0x37e/0x6c0 [ 1070.969363][T18684] netlink_rcv_skb+0x159/0x420 [ 1070.969390][T18684] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1070.969412][T18684] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1070.969446][T18684] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1070.969475][T18684] netlink_unicast+0x585/0x850 [ 1070.969503][T18684] ? __pfx_netlink_unicast+0x10/0x10 [ 1070.969535][T18684] netlink_sendmsg+0x8b0/0xda0 [ 1070.969571][T18684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.969600][T18684] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1070.969628][T18684] ____sys_sendmsg+0xa4d/0xbe0 [ 1070.969650][T18684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.969677][T18684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1070.969711][T18684] ___sys_sendmsg+0x190/0x1e0 [ 1070.969738][T18684] ? __pfx____sys_sendmsg+0x10/0x10 [ 1070.969761][T18684] ? __lock_acquire+0x49f/0x1a40 [ 1070.969781][T18684] ? get_pid_task+0x106/0x250 [ 1070.969837][T18684] __sys_sendmsg+0x160/0x210 [ 1070.969857][T18684] ? __pfx___sys_sendmsg+0x10/0x10 [ 1070.969888][T18684] do_syscall_64+0x115/0x870 [ 1070.969915][T18684] ? clear_bhb_loop+0x40/0x90 [ 1070.969938][T18684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.969956][T18684] RIP: 0033:0x7f8b37d9de99 [ 1070.969972][T18684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.969989][T18684] RSP: 002b:00007f8b38c30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1070.970008][T18684] RAX: ffffffffffffffda RBX: 00007f8b38025fa0 RCX: 00007f8b37d9de99 [ 1070.970020][T18684] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1070.970031][T18684] RBP: 00007f8b38c30090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.970042][T18684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.970052][T18684] R13: 00007f8b38026038 R14: 00007f8b38025fa0 R15: 00007ffde42e23c8 [ 1070.970077][T18684] [ 1070.982154][ T29] audit: type=1400 audit(1071.110:1732): avc: denied { bind } for pid=18685 comm="syz.8.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1071.009372][ T47] tipc: Disabling bearer [ 1071.073438][ T29] audit: type=1400 audit(1071.110:1733): avc: denied { bind } for pid=18685 comm="syz.8.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1071.390533][ T47] tipc: Left network mode [ 1071.925378][ T24] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1071.990292][ T29] audit: type=1400 audit(1071.110:1734): avc: denied { node_bind } for pid=18685 comm="syz.8.3363" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1072.104267][ T24] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.133671][ T29] audit: type=1400 audit(1071.570:1735): avc: denied { create } for pid=18672 comm="syz.9.3358" name="#a7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1072.147315][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1072.222969][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 1072.235194][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.279871][ T24] usb 4-1: config 0 descriptor?? [ 1072.296866][ T29] audit: type=1400 audit(1071.570:1736): avc: denied { link } for pid=18672 comm="syz.9.3358" name="#a7" dev="tmpfs" ino=2674 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1072.338722][ T29] audit: type=1400 audit(1071.580:1737): avc: denied { rename } for pid=18672 comm="syz.9.3358" name="#a8" dev="tmpfs" ino=2674 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1072.543770][ T29] audit: type=1400 audit(1072.659:1738): avc: denied { write } for pid=18686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1072.574974][ T46] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 1072.643751][ T29] audit: type=1400 audit(1072.769:1739): avc: denied { write } for pid=18711 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1072.731146][T18708] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3366'. [ 1072.822146][ T46] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.069158][T18714] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3361'. [ 1073.170905][T18708] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3366'. [ 1073.200519][ T46] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.257463][ T46] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1073.270711][ T24] logitech 0003:046D:CA04.000D: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.3-1/input0 [ 1073.294498][ T46] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.330041][ T24] logitech 0003:046D:CA04.000D: no inputs found [ 1073.343055][ T46] usb 10-1: config 0 descriptor?? [ 1073.720506][ T47] hsr_slave_0: left promiscuous mode [ 1073.732958][ T29] audit: type=1400 audit(1073.859:1740): avc: denied { append } for pid=18718 comm="syz.8.3367" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1073.783763][ T47] hsr_slave_1: left promiscuous mode [ 1073.849689][ T47] virt_wifi0: left promiscuous mode [ 1073.859110][ T29] audit: type=1400 audit(1073.859:1741): avc: denied { map } for pid=18718 comm="syz.8.3367" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1073.883625][ T47] veth1_macvtap: left promiscuous mode [ 1073.933445][ T47] veth0_macvtap: left promiscuous mode [ 1073.940210][ T47] veth1_vlan: left promiscuous mode [ 1073.952840][ T47] veth0_vlan: left promiscuous mode [ 1073.996176][T18703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.013765][T18703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.149541][ T46] hid-steam 0003:28DE:1142.000E: unknown main item tag 0x0 [ 1074.449702][ T46] hid-steam 0003:28DE:1142.000E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.9-1/input0 [ 1074.532349][ T46] hid-steam 0003:28DE:1142.000E: Steam wireless receiver connected [ 1074.542660][ T46] hid-steam 0003:28DE:1142.000E: No HID_FEATURE_REPORT submitted - nothing to read [ 1074.579527][ T46] hid-steam 0003:28DE:1142.000F: unknown main item tag 0x0 [ 1074.622627][ T46] hid-steam 0003:28DE:1142.000F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.9-1/input0 [ 1074.647948][ T46] usb 10-1: USB disconnect, device number 80 [ 1074.678262][ T46] hid-steam 0003:28DE:1142.000E: Steam wireless receiver disconnected [ 1074.746421][ T4827] usb 4-1: USB disconnect, device number 87 [ 1074.820285][T18726] fido_id[18726]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1075.414458][T18734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1075.578342][T18738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1076.605404][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1076.605420][ T29] audit: type=1400 audit(1076.727:1745): avc: denied { write } for pid=18739 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1076.637826][ T47] IPVS: stop unused estimator thread 0... [ 1076.676589][T18537] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1076.766990][ T4827] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1076.815842][T18537] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1076.855668][T18537] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1076.996751][ T4827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.000931][T18537] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1077.047327][ T29] audit: type=1400 audit(1077.167:1746): avc: denied { write } for pid=18767 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1077.047721][ T4827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.101943][T18537] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1077.132978][T18537] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1077.150446][T18768] netlink: 'syz.7.3376': attribute type 12 has an invalid length. [ 1077.158884][T18768] netlink: 'syz.7.3376': attribute type 29 has an invalid length. [ 1077.193641][ T4827] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1077.199252][T18768] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3376'. [ 1077.234871][T18768] netlink: 'syz.7.3376': attribute type 3 has an invalid length. [ 1077.243851][T18768] netlink: 'syz.7.3376': attribute type 2 has an invalid length. [ 1077.263157][ T4827] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1077.297279][ T4827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.307491][T18768] netlink: 35 bytes leftover after parsing attributes in process `syz.7.3376'. [ 1077.317850][T18537] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1077.338601][ T4827] usb 4-1: config 0 descriptor?? [ 1077.394190][T18537] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1077.412215][T18773] hsr0: entered allmulticast mode [ 1077.433465][T18773] hsr_slave_0: entered allmulticast mode [ 1077.718617][T18773] hsr_slave_1: entered allmulticast mode [ 1077.973195][T18537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.982389][T18791] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3380'. [ 1078.010782][T18537] 8021q: adding VLAN 0 to HW filter on device team0 [ 1078.023915][T14513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.031112][T14513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.082706][ T4827] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1078.085865][T14513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.102149][T14513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.244030][ T29] audit: type=1400 audit(1078.376:1747): avc: denied { write } for pid=18774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1078.390390][T18809] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3383'. [ 1078.399562][T18809] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1078.435582][ T29] audit: type=1400 audit(1078.566:1748): avc: denied { write } for pid=18806 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1078.517667][T18754] loop2: detected capacity change from 0 to 3 [ 1078.542899][T18754] Dev loop2: unable to read RDB block 3 [ 1078.572716][T18754] loop2: unable to read partition table [ 1078.574307][T18814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1078.590467][T18754] loop2: partition table beyond EOD, truncated [ 1078.614970][T18754] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1078.761565][T18787] 9pnet_fd: p9_fd_create_tcp (18787): problem connecting socket to 127.0.0.1 [ 1078.773079][T18821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1078.864888][T18826] comedi comedi3: pcmda12: I/O port conflict (0x100,16) [ 1079.473793][ T24] usb 4-1: reset high-speed USB device number 88 using dummy_hcd [ 1079.840517][T18537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1080.296409][T18537] veth0_vlan: entered promiscuous mode [ 1080.357935][T18537] veth1_vlan: entered promiscuous mode [ 1080.398391][ T29] audit: type=1400 audit(1080.525:1749): avc: denied { connect } for pid=18840 comm="syz.9.3390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1080.484938][T18537] veth0_macvtap: entered promiscuous mode [ 1080.503472][ T29] audit: type=1400 audit(1080.565:1750): avc: denied { connect } for pid=18840 comm="syz.9.3390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1080.563467][T18537] veth1_macvtap: entered promiscuous mode [ 1080.572131][T18844] ubi0: attaching mtd0 [ 1080.590540][ T29] audit: type=1400 audit(1080.585:1751): avc: denied { write } for pid=18840 comm="syz.9.3390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1080.603906][T18844] ubi0: scanning is finished [ 1080.636261][T18537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1080.664168][T18844] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1080.679098][ T4827] usb 4-1: USB disconnect, device number 88 [ 1080.693566][T18537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1080.734009][T14513] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.751458][T18848] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1080.784448][T14513] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.831500][T14513] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.865174][T18850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3393'. [ 1080.874246][T18850] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1080.889336][T14513] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.202189][T16593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.222569][T16593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.319496][T18844] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1081.411782][T14513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.420347][T14513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.433856][ T29] audit: type=1400 audit(1081.565:1752): avc: denied { mounton } for pid=18537 comm="syz-executor" path="/root/syzkaller.YX3eu5/syz-tmp" dev="sda1" ino=2062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1081.467443][T18860] comedi comedi3: pcmda12: I/O port conflict (0x100,16) [ 1082.399650][ T29] audit: type=1400 audit(1081.565:1753): avc: denied { mounton } for pid=18537 comm="syz-executor" path="/root/syzkaller.YX3eu5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1082.435825][ T29] audit: type=1400 audit(1081.565:1754): avc: denied { mounton } for pid=18537 comm="syz-executor" path="/root/syzkaller.YX3eu5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=63350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1082.464757][ T29] audit: type=1400 audit(1081.595:1755): avc: denied { mounton } for pid=18537 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1082.565811][T18866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1083.105432][T18869] No source specified [ 1083.311368][T18877] FAULT_INJECTION: forcing a failure. [ 1083.311368][T18877] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.324171][T18877] CPU: 0 UID: 0 PID: 18877 Comm: syz.2.3324 Tainted: G L syzkaller #0 PREEMPT(full) [ 1083.324204][T18877] Tainted: [L]=SOFTLOCKUP [ 1083.324211][T18877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1083.324221][T18877] Call Trace: [ 1083.324227][T18877] [ 1083.324234][T18877] dump_stack_lvl+0x100/0x190 [ 1083.324263][T18877] should_fail_ex.cold+0x5/0xa [ 1083.324286][T18877] should_failslab+0xc2/0x120 [ 1083.324314][T18877] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 1083.324334][T18877] ? __pfx_vsnprintf+0x10/0x10 [ 1083.324356][T18877] ? kasprintf+0xc7/0x100 [ 1083.324384][T18877] kvasprintf+0xbc/0x150 [ 1083.324405][T18877] ? __pfx_kvasprintf+0x10/0x10 [ 1083.324426][T18877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.324455][T18877] kasprintf+0xc7/0x100 [ 1083.324475][T18877] ? __pfx_kasprintf+0x10/0x10 [ 1083.324508][T18877] logfc+0x11c/0x4e0 [ 1083.324531][T18877] ? __pfx_logfc+0x10/0x10 [ 1083.324551][T18877] ? kasan_save_track+0x14/0x30 [ 1083.324572][T18877] ? lockdep_init_map_type+0x5c/0x250 [ 1083.324595][T18877] ? lockdep_init_map_type+0x5c/0x250 [ 1083.324616][T18877] ? __init_waitqueue_head+0xca/0x150 [ 1083.324643][T18877] virtio_fs_get_tree+0x88b/0x1020 [ 1083.324670][T18877] ? bpf_lsm_capable+0x9/0x10 [ 1083.324686][T18877] ? security_capable+0x80/0x260 [ 1083.324708][T18877] vfs_get_tree+0x92/0x320 [ 1083.324732][T18877] vfs_cmd_create+0xd7/0x2a0 [ 1083.324756][T18877] __do_sys_fsconfig+0x55a/0xcb0 [ 1083.324781][T18877] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1083.324803][T18877] ? fput+0x79/0x100 [ 1083.324824][T18877] ? trace_hardirqs_off+0x70/0x170 [ 1083.324852][T18877] do_syscall_64+0x115/0x870 [ 1083.324878][T18877] ? clear_bhb_loop+0x40/0x90 [ 1083.324899][T18877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.324917][T18877] RIP: 0033:0x7f3aced9de99 [ 1083.324933][T18877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.324950][T18877] RSP: 002b:00007f3acfbf8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1083.324968][T18877] RAX: ffffffffffffffda RBX: 00007f3acf026180 RCX: 00007f3aced9de99 [ 1083.324980][T18877] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000009 [ 1083.324990][T18877] RBP: 00007f3acfbf8090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.325001][T18877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.325013][T18877] R13: 00007f3acf026218 R14: 00007f3acf026180 R15: 00007ffe69a4ee18 [ 1083.325038][T18877] [ 1083.582521][T18866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1084.081496][T18879] overlayfs: overlapping lowerdir path [ 1084.466691][T18892] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3403'. [ 1084.475766][T18892] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1085.271335][ T29] audit: type=1326 audit(1085.393:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18890 comm="syz.2.3402" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aced9de99 code=0x7fc00000 [ 1085.554009][T18911] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3407'. [ 1085.576412][T18913] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3409'. [ 1085.590588][T18913] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3409'. [ 1085.600869][T18911] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3407'. [ 1085.638213][ T46] libceph: connect (1)[c::]:6789 error -101 [ 1085.649408][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 1085.678729][T18918] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3410'. [ 1086.318861][ T46] libceph: connect (1)[c::]:6789 error -101 [ 1086.333472][T18922] Unknown options in mask 5 [ 1086.334783][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 1086.352077][ T9638] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 1086.462276][T18915] ceph: No mds server is up or the cluster is laggy [ 1086.655398][ T9638] usb 10-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1086.667983][ T29] audit: type=1400 audit(1086.782:1757): avc: denied { ioctl } for pid=18912 comm="syz.9.3409" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1086.733776][ T9638] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.769595][ T9638] usb 10-1: Product: syz [ 1086.780887][ T9638] usb 10-1: Manufacturer: syz [ 1086.795568][ T9638] usb 10-1: SerialNumber: syz [ 1086.805170][ T29] audit: type=1400 audit(1086.932:1758): avc: denied { read write } for pid=18537 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1086.838948][ T9638] usb 10-1: config 0 descriptor?? [ 1086.886048][ T29] audit: type=1400 audit(1086.932:1759): avc: denied { open } for pid=18537 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1086.887029][ T9638] i2c-tiny-usb 10-1:0.0: version 6d.cc found at bus 010 address 081 [ 1086.963231][T18924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1086.984286][ T29] audit: type=1400 audit(1086.932:1760): avc: denied { ioctl } for pid=18537 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1087.020672][ T29] audit: type=1400 audit(1087.042:1761): avc: denied { create } for pid=18923 comm="syz.2.3413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1087.057366][ T29] audit: type=1400 audit(1087.042:1762): avc: denied { write } for pid=18923 comm="syz.2.3413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1087.097743][T18929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1087.133405][T18930] netlink: 'syz.8.3414': attribute type 1 has an invalid length. [ 1087.218041][T18930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.233179][T18934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3415'. [ 1087.242276][T18934] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1087.286634][ T9638] (null): failure reading functionality [ 1087.297235][ T9638] i2c i2c-1: connected i2c-tiny-usb device [ 1087.351400][T18932] bond0: (slave veth5): Enslaving as a backup interface with a down link [ 1087.429704][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 1087.429721][ T29] audit: type=1400 audit(1087.552:1790): avc: denied { write } for pid=18936 comm="syz.3.3416" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1087.440013][T18937] kvm: pic: non byte write [ 1087.517436][ T9638] usb 10-1: USB disconnect, device number 81 [ 1087.686674][ T29] audit: type=1400 audit(1087.722:1791): avc: denied { execmem } for pid=18939 comm="syz.7.3417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1087.826842][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3417'. [ 1087.901094][ T29] audit: type=1400 audit(1087.972:1793): avc: denied { create } for pid=18939 comm="syz.7.3417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1088.225351][T18943] netlink: zone id is out of range [ 1088.230921][T18943] netlink: get zone limit has 4 unknown bytes [ 1088.240253][ T29] audit: type=1400 audit(1087.872:1792): avc: denied { name_bind } for pid=18942 comm="syz.3.3418" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1088.324752][ T29] audit: type=1400 audit(1088.022:1794): avc: denied { node_bind } for pid=18942 comm="syz.3.3418" saddr=ff02::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1088.463522][ T29] audit: type=1400 audit(1088.391:1795): avc: denied { read } for pid=18942 comm="syz.3.3418" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1088.760006][ T29] audit: type=1400 audit(1088.391:1796): avc: denied { open } for pid=18942 comm="syz.3.3418" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1088.809134][T18943] netlink: 'syz.3.3418': attribute type 5 has an invalid length. [ 1088.928169][ T29] audit: type=1400 audit(1088.391:1797): avc: denied { create } for pid=18942 comm="syz.3.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1088.998294][ T29] audit: type=1400 audit(1088.471:1798): avc: denied { module_request } for pid=18942 comm="syz.3.3418" kmod=72746E6C2D6C696E6B2D6272696467655F736C61766580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1089.072943][ T29] audit: type=1400 audit(1088.521:1799): avc: denied { allowed } for pid=18946 comm="syz.2.3419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1089.137867][T18964] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3423'. [ 1089.168273][T18964] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3423'. [ 1089.521344][ T4827] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1089.653530][ T24] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 1089.673752][ T4827] usb 3-1: device descriptor read/64, error -71 [ 1089.818266][ T24] usb 10-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 1089.828984][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.845064][ T24] usb 10-1: Product: ည [ 1089.852657][ T24] usb 10-1: Manufacturer: 㝐㐐擕ビ꘷䣍뙴兊■⮯ﶈ쬇䱵豆㘤⪞堗電뽀꤄줌악箢䉍廦឵॒牙둻ῃﶶ펾蚶ᛯ눛蚚ቡ鵟惞嬵紌玈〓쑘ἅ妑▤㏸땡穠୵Ⲻ唻䧭ﬧ꣚雖碳饼岬⊣㢪࿸췰ࠧ끇捠퀌꜍๫뀛よ떸㮭吐ġ侗ส篧⚏뇸ࡣ儐揶ꏰ䰓壀퉔㴲딽㶢陘ﴢ走蝠㓟䍚搻ħ癃跊⾱ᵔ씰慯ᰵ⏭ [ 1089.889449][ T24] usb 10-1: SerialNumber: ࡣ蹏ና⒞ৠ雯洅뜽橩魟䨴噋ꙇꖪ㬬䒀묆鈯௠빷赹쯩ଽ횊冗㒷컓儆넑椢槍懫淃슺駓ス띉⌐⠼䘇ꮻ쬫蟻본꟦뷚伫ὶ㮤詣廑뛅쨛雦策꟔鉆Ὂϡ訃뢊羝䟪эᙟ⎆镶荻シ뚧녶蟄킅롔蓵钙굏踲养컽薛鯬밂貳醴 [ 1089.943903][ T4827] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1090.095394][ T4827] usb 3-1: device descriptor read/64, error -71 [ 1090.126475][T18986] No source specified [ 1090.139059][T18986] overlayfs: overlapping lowerdir path [ 1090.209253][ T24] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 1090.227114][ T4827] usb usb3-port1: attempt power cycle [ 1090.350011][ T24] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1090.400397][ T24] usb 10-1: USB disconnect, device number 82 [ 1090.452083][T17197] udevd[17197]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1090.585989][ T4827] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1090.624554][ T4827] usb 3-1: device descriptor read/8, error -71 [ 1090.874090][ T4827] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1090.925993][ T4827] usb 3-1: device descriptor read/8, error -71 [ 1090.969185][T18996] __nla_validate_parse: 3 callbacks suppressed [ 1090.969925][T18996] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3435'. [ 1091.018900][T18996] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3435'. [ 1091.052970][ T4827] usb usb3-port1: unable to enumerate USB device [ 1092.057065][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3439'. [ 1092.066513][T19007] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1093.901875][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 1093.901891][ T29] audit: type=1400 audit(1094.019:1846): avc: denied { read write } for pid=19017 comm="syz.7.3445" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1093.979126][ T29] audit: type=1400 audit(1094.049:1847): avc: denied { open } for pid=19017 comm="syz.7.3445" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1094.055937][ T29] audit: type=1400 audit(1094.059:1848): avc: denied { mount } for pid=19017 comm="syz.7.3445" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1094.169640][ T29] audit: type=1400 audit(1094.059:1849): avc: denied { write } for pid=19016 comm="syz.8.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1094.252974][T19032] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3446'. [ 1094.275606][ T29] audit: type=1400 audit(1094.059:1850): avc: denied { connect } for pid=19016 comm="syz.8.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1094.316759][T19032] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3446'. [ 1094.346272][T19036] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3447'. [ 1094.346296][ T29] audit: type=1400 audit(1094.139:1851): avc: denied { create } for pid=19015 comm="syz.9.3441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1094.346334][ T29] audit: type=1400 audit(1094.149:1852): avc: denied { bind } for pid=19015 comm="syz.9.3441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1094.439644][T19036] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3447'. [ 1094.506280][ T29] audit: type=1400 audit(1094.159:1853): avc: denied { append } for pid=19017 comm="syz.7.3445" name="nbd7" dev="devtmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1094.608685][ T29] audit: type=1400 audit(1094.159:1854): avc: denied { mounton } for pid=19017 comm="syz.7.3445" path="/490/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1094.666265][ T29] audit: type=1400 audit(1094.199:1855): avc: denied { setopt } for pid=19015 comm="syz.9.3441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1094.706056][ T4827] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1094.864717][T19042] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1094.881277][ T4827] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1094.893072][ T4827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.920241][ T4827] usb 4-1: Product: syz [ 1094.932599][ T4827] usb 4-1: Manufacturer: syz [ 1094.932837][T19042] overlayfs: overlapping lowerdir path [ 1094.964749][ T4827] usb 4-1: SerialNumber: syz [ 1094.978615][ T4827] usb 4-1: config 0 descriptor?? [ 1095.043588][ T4827] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 089 [ 1095.642290][ T4827] (null): failure reading functionality [ 1095.666696][ T4827] i2c i2c-1: connected i2c-tiny-usb device [ 1095.761296][T19050] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3443'. [ 1096.012168][ T4827] usb 4-1: USB disconnect, device number 89 [ 1098.517598][T19076] erofs: Unknown parameter 'acl0000000000000000' [ 1099.096750][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1099.096780][ T29] audit: type=1400 audit(1099.216:1868): avc: denied { shutdown } for pid=19087 comm="syz.7.3460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1099.157927][ T29] audit: type=1400 audit(1099.246:1869): avc: denied { connect } for pid=19087 comm="syz.7.3460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1099.216613][ T29] audit: type=1400 audit(1099.256:1870): avc: denied { name_connect } for pid=19087 comm="syz.7.3460" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1099.279834][ T29] audit: type=1400 audit(1099.366:1871): avc: denied { sys_module } for pid=19087 comm="syz.7.3460" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1099.721871][ T29] audit: type=1400 audit(1099.846:1872): avc: denied { mmap_zero } for pid=19094 comm="syz.3.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1099.748319][T19095] FAULT_INJECTION: forcing a failure. [ 1099.748319][T19095] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.798702][T19095] CPU: 1 UID: 0 PID: 19095 Comm: syz.3.3455 Tainted: G L syzkaller #0 PREEMPT(full) [ 1099.798733][T19095] Tainted: [L]=SOFTLOCKUP [ 1099.798740][T19095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1099.798750][T19095] Call Trace: [ 1099.798757][T19095] [ 1099.798764][T19095] dump_stack_lvl+0x100/0x190 [ 1099.798793][T19095] should_fail_ex.cold+0x5/0xa [ 1099.798817][T19095] should_failslab+0xc2/0x120 [ 1099.798839][T19095] __kmalloc_noprof+0xfc/0x820 [ 1099.798858][T19095] ? dma_fence_chain_walk+0x2ff/0x3c0 [ 1099.798882][T19095] ? sync_file_ioctl+0x2d4/0xea0 [ 1099.798907][T19095] sync_file_ioctl+0x2d4/0xea0 [ 1099.798929][T19095] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1099.798950][T19095] ? __pfx_sync_file_ioctl+0x10/0x10 [ 1099.798968][T19095] ? do_vfs_ioctl+0x226/0x13e0 [ 1099.798992][T19095] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1099.799015][T19095] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1099.799049][T19095] ? __fget_files+0x215/0x3d0 [ 1099.799074][T19095] ? hook_file_ioctl_common+0x140/0x440 [ 1099.799098][T19095] ? selinux_file_ioctl+0x13b/0x290 [ 1099.799120][T19095] ? selinux_file_ioctl+0xb6/0x290 [ 1099.799144][T19095] ? __pfx_sync_file_ioctl+0x10/0x10 [ 1099.799165][T19095] __x64_sys_ioctl+0x18e/0x210 [ 1099.799190][T19095] do_syscall_64+0x115/0x870 [ 1099.799217][T19095] ? clear_bhb_loop+0x40/0x90 [ 1099.799237][T19095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.799256][T19095] RIP: 0033:0x7ff9e139de99 [ 1099.799271][T19095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.799288][T19095] RSP: 002b:00007ff9e228f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1099.799307][T19095] RAX: ffffffffffffffda RBX: 00007ff9e1625fa0 RCX: 00007ff9e139de99 [ 1099.799318][T19095] RDX: 00002000000003c0 RSI: 00000000c0383e04 RDI: 0000000000000007 [ 1099.799329][T19095] RBP: 00007ff9e228f090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.799340][T19095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1099.799350][T19095] R13: 00007ff9e1626038 R14: 00007ff9e1625fa0 R15: 00007ffd5c9b4768 [ 1099.799372][T19095] [ 1100.437129][ T29] audit: type=1400 audit(1100.535:1873): avc: denied { execute } for pid=19096 comm="syz.2.3461" name="file2" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1100.478226][ T29] audit: type=1400 audit(1100.535:1874): avc: denied { execute_no_trans } for pid=19096 comm="syz.2.3461" path="/11/file2" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1100.555245][ T29] audit: type=1400 audit(1100.545:1875): avc: denied { listen } for pid=19096 comm="syz.2.3461" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1100.616124][T19103] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3463'. [ 1100.648445][T19103] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3463'. [ 1100.933977][ T4827] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1101.164976][ T4827] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1101.178429][ T4827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.189496][ T4827] usb 4-1: Product: syz [ 1101.200815][ T4827] usb 4-1: Manufacturer: syz [ 1101.205976][ T4827] usb 4-1: SerialNumber: syz [ 1101.299464][ T4827] usb 4-1: config 0 descriptor?? [ 1101.325139][ T4827] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 090 [ 1101.740837][ T4827] (null): failure reading functionality [ 1101.764457][ T4827] i2c i2c-1: connected i2c-tiny-usb device [ 1101.854355][ T29] audit: type=1400 audit(1101.975:1876): avc: denied { ioctl } for pid=19111 comm="syz.2.3466" path="socket:[66103]" dev="sockfs" ino=66103 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1101.897822][ T29] audit: type=1400 audit(1101.975:1877): avc: denied { create } for pid=19111 comm="syz.2.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1102.253370][ T4827] usb 4-1: USB disconnect, device number 90 [ 1102.442572][T19126] FAULT_INJECTION: forcing a failure. [ 1102.442572][T19126] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.457255][T19126] CPU: 1 UID: 0 PID: 19126 Comm: syz.2.3470 Tainted: G L syzkaller #0 PREEMPT(full) [ 1102.457285][T19126] Tainted: [L]=SOFTLOCKUP [ 1102.457291][T19126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1102.457301][T19126] Call Trace: [ 1102.457308][T19126] [ 1102.457315][T19126] dump_stack_lvl+0x100/0x190 [ 1102.457342][T19126] should_fail_ex.cold+0x5/0xa [ 1102.457365][T19126] should_failslab+0xc2/0x120 [ 1102.457387][T19126] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1102.457407][T19126] ? __alloc_skb+0x140/0x710 [ 1102.457430][T19126] __alloc_skb+0x140/0x710 [ 1102.457445][T19126] ? __alloc_skb+0x5b7/0x710 [ 1102.457461][T19126] ? __pfx___alloc_skb+0x10/0x10 [ 1102.457478][T19126] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1102.457501][T19126] __tipc_nl_compat_doit+0xa3/0x3d0 [ 1102.457523][T19126] ? kmem_cache_free+0x127/0x6b0 [ 1102.457548][T19126] ? __pfx___tipc_nl_compat_doit+0x10/0x10 [ 1102.457568][T19126] ? __dev_queue_xmit+0x1b9d/0x4940 [ 1102.457592][T19126] ? netlink_deliver_tap+0xa4d/0xcc0 [ 1102.457615][T19126] ? netlink_unicast+0x62b/0x850 [ 1102.457647][T19126] ? bpf_lsm_capable+0x9/0x10 [ 1102.457663][T19126] ? security_capable+0x80/0x260 [ 1102.457686][T19126] tipc_nl_compat_doit+0x11e/0x290 [ 1102.457710][T19126] tipc_nl_compat_recv+0x908/0xc40 [ 1102.457734][T19126] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1102.457757][T19126] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 1102.457785][T19126] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 1102.457818][T19126] ? trace_contention_end+0x126/0x160 [ 1102.457838][T19126] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1102.457872][T19126] genl_family_rcv_msg_doit+0x214/0x300 [ 1102.457901][T19126] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1102.457929][T19126] ? genl_get_cmd+0x3e7/0x760 [ 1102.457961][T19126] ? __dev_queue_xmit+0xa11/0x4940 [ 1102.457985][T19126] ? __radix_tree_lookup+0x217/0x2b0 [ 1102.458014][T19126] genl_rcv_msg+0x560/0x800 [ 1102.458033][T19126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1102.458051][T19126] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1102.458083][T19126] netlink_rcv_skb+0x159/0x420 [ 1102.458108][T19126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1102.458131][T19126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1102.458166][T19126] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1102.458194][T19126] genl_rcv+0x28/0x40 [ 1102.458218][T19126] netlink_unicast+0x585/0x850 [ 1102.458246][T19126] ? __pfx_netlink_unicast+0x10/0x10 [ 1102.458269][T19126] ? __pfx_sock_has_perm+0x10/0x10 [ 1102.458294][T19126] netlink_sendmsg+0x8b0/0xda0 [ 1102.458323][T19126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1102.458351][T19126] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1102.458378][T19126] ____sys_sendmsg+0xa4d/0xbe0 [ 1102.458400][T19126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1102.458424][T19126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1102.458456][T19126] ___sys_sendmsg+0x190/0x1e0 [ 1102.458480][T19126] ? __pfx____sys_sendmsg+0x10/0x10 [ 1102.458503][T19126] ? __lock_acquire+0x49f/0x1a40 [ 1102.458549][T19126] __sys_sendmsg+0x160/0x210 [ 1102.458568][T19126] ? __pfx___sys_sendmsg+0x10/0x10 [ 1102.458600][T19126] do_syscall_64+0x115/0x870 [ 1102.458624][T19126] ? clear_bhb_loop+0x40/0x90 [ 1102.458645][T19126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.458663][T19126] RIP: 0033:0x7f3aced9de99 [ 1102.458678][T19126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.458695][T19126] RSP: 002b:00007f3acfc3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1102.458711][T19126] RAX: ffffffffffffffda RBX: 00007f3acf025fa0 RCX: 00007f3aced9de99 [ 1102.458723][T19126] RDX: 0000000004000010 RSI: 0000200000000340 RDI: 0000000000000003 [ 1102.458733][T19126] RBP: 00007f3acfc3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.458743][T19126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.458753][T19126] R13: 00007f3acf026038 R14: 00007f3acf025fa0 R15: 00007ffe69a4ee18 [ 1102.458777][T19126] [ 1103.042476][T19133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3473'. [ 1103.075697][T19133] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3473'. [ 1103.132641][T19133] geneve2: entered promiscuous mode [ 1103.139120][T19133] geneve2: entered allmulticast mode [ 1104.365516][T19147] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1104.372078][T19147] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1104.380479][T19147] vhci_hcd vhci_hcd.0: Device attached [ 1104.822273][ T5746] usb 38-1: SetAddress Request (2) to port 0 [ 1104.835581][ T5746] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1104.958222][T19156] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3476'. [ 1105.589403][T19150] vhci_hcd: connection reset by peer [ 1105.609020][T16599] vhci_hcd vhci_hcd.2: stop threads [ 1105.615049][T16599] vhci_hcd vhci_hcd.2: release socket [ 1105.630978][T16599] vhci_hcd vhci_hcd.2: disconnect device [ 1106.151738][ T5703] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 1106.321139][ T5703] usb 10-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1106.358642][ T5703] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.394128][ T5703] usb 10-1: Product: syz [ 1106.417501][ T5703] usb 10-1: Manufacturer: syz [ 1106.434981][ T5703] usb 10-1: SerialNumber: syz [ 1106.466276][ T5703] usb 10-1: config 0 descriptor?? [ 1107.660841][ T5703] i2c-tiny-usb 10-1:0.0: version 6d.cc found at bus 010 address 083 [ 1108.474493][ T5703] i2c i2c-1: failure reading functionality [ 1108.498775][T19182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.539950][ T5703] i2c i2c-1: connected i2c-tiny-usb device [ 1108.572094][ T5703] usb 10-1: USB disconnect, device number 83 [ 1108.662544][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 1108.662576][ T29] audit: type=1326 audit(1108.771:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19183 comm="syz.7.3487" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b37d9de99 code=0x0 [ 1108.663385][T19182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.718637][T19185] netlink: 'syz.7.3487': attribute type 1 has an invalid length. [ 1108.810601][T19185] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1108.844955][ T29] audit: type=1400 audit(1108.961:1960): avc: denied { connect } for pid=19188 comm="syz.3.3488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1108.863589][T19185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58905 sclass=netlink_route_socket pid=19185 comm=syz.7.3487 [ 1108.922645][T19187] bond6: (slave veth9): Enslaving as a backup interface with a down link [ 1109.087193][T19194] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3485'. [ 1109.118600][T19194] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3485'. [ 1109.138655][T19195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19195 comm=syz.3.3489 [ 1109.388939][T19199] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3490'. [ 1109.404134][ T4827] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1109.426270][T19199] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3490'. [ 1109.720144][ T4827] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1109.729616][ T4827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.737975][ T4827] usb 3-1: Product: syz [ 1109.743895][ T4827] usb 3-1: Manufacturer: syz [ 1109.749245][ T4827] usb 3-1: SerialNumber: syz [ 1109.811262][T19205] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3492'. [ 1110.205749][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.340993][ T5746] usb 38-1: device descriptor read/8, error -110 [ 1110.530739][ T4827] usb 3-1: config 0 descriptor?? [ 1110.541278][ T4827] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 030 [ 1110.909371][T19217] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3493'. [ 1111.045471][ T5746] usb usb38-port1: attempt power cycle [ 1111.053540][ T4827] (null): failure reading functionality [ 1111.653554][ T4827] i2c i2c-1: connected i2c-tiny-usb device [ 1112.950316][ T5702] usb 3-1: USB disconnect, device number 30 [ 1113.053692][T19229] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3498'. [ 1113.062815][T19229] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1113.247162][T19233] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3496'. [ 1113.294859][T19232] ubi0: attaching mtd0 [ 1113.308830][T19232] ubi0: scanning is finished [ 1113.330165][T19232] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1113.377565][ T5746] usb usb38-port1: unable to enumerate USB device [ 1113.684736][T19232] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1113.705847][T19235] ubi0: attaching mtd0 [ 1113.752970][T19242] netlink: 'syz.3.3501': attribute type 1 has an invalid length. [ 1113.773540][T19235] ubi0: scanning is finished [ 1113.791882][T19235] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1114.029766][T19235] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1114.041480][T19246] ubi0: attaching mtd0 [ 1114.060919][T19246] ubi0: scanning is finished [ 1114.078259][T19246] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1114.160497][ T29] audit: type=1400 audit(1114.268:1961): avc: denied { create } for pid=19249 comm="syz.3.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1114.257928][ T29] audit: type=1400 audit(1114.298:1962): avc: denied { bind } for pid=19249 comm="syz.3.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1114.342341][ T29] audit: type=1400 audit(1114.298:1963): avc: denied { listen } for pid=19249 comm="syz.3.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1114.501938][ T29] audit: type=1400 audit(1114.298:1964): avc: denied { accept } for pid=19249 comm="syz.3.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1115.687332][T19246] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1119.879181][ T29] audit: type=1326 audit(1119.986:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19267 comm="syz.7.3506" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b37d9de99 code=0x7fc00000 [ 1120.014765][ T29] audit: type=1400 audit(1120.126:1966): avc: denied { read } for pid=19278 comm="syz.9.3508" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1120.038643][ T29] audit: type=1400 audit(1120.126:1967): avc: denied { open } for pid=19278 comm="syz.9.3508" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1121.353071][ T29] audit: type=1326 audit(1121.355:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19280 comm="syz.3.3510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e139de99 code=0x7fc00000 [ 1121.559942][T19294] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3513'. [ 1121.592999][T19297] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3514'. [ 1121.613914][ T29] audit: type=1400 audit(1121.715:1969): avc: denied { create } for pid=19293 comm="syz.3.3513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1121.710755][ T29] audit: type=1400 audit(1121.745:1970): avc: denied { write } for pid=19293 comm="syz.3.3513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1121.910887][ T29] audit: type=1326 audit(1122.025:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19301 comm="syz.8.3516" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55f019de99 code=0x0 [ 1121.966032][T19304] netlink: 'syz.8.3516': attribute type 1 has an invalid length. [ 1122.216262][T19308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58905 sclass=netlink_route_socket pid=19308 comm=syz.8.3516 [ 1123.865715][T19304] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1125.100703][T19329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1125.167489][ T29] audit: type=1326 audit(1125.273:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19311 comm="syz.9.3518" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee52b9de99 code=0x7fc00000 [ 1125.223777][ T24] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 1125.234522][T19329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1125.256430][ T24] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1125.288272][ T29] audit: type=1400 audit(1125.343:1973): avc: denied { read } for pid=19331 comm="syz.8.3521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1125.296346][ T35] wlan1: 08:02:11:00:00:00 denied authentication (status 40) [ 1125.331969][T19330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1125.522004][ T29] audit: type=1400 audit(1125.623:1974): avc: denied { setopt } for pid=19332 comm="syz.7.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1125.916072][T19336] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1125.926961][T19336] block device autoloading is deprecated and will be removed. [ 1126.410609][ T29] audit: type=1400 audit(1126.512:1975): avc: denied { create } for pid=19340 comm="syz.7.3524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1126.431132][ T29] audit: type=1400 audit(1126.532:1976): avc: denied { ioctl } for pid=19340 comm="syz.7.3524" path="socket:[66995]" dev="sockfs" ino=66995 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1126.586551][T19344] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3524'. [ 1126.608997][ T29] audit: type=1400 audit(1126.712:1977): avc: denied { write } for pid=19345 comm="syz.2.3525" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1126.632074][T19344] openvswitch: netlink: Flow key attr not present in new flow. [ 1126.683440][ T29] audit: type=1400 audit(1126.712:1978): avc: denied { open } for pid=19345 comm="syz.2.3525" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1127.137933][ T29] audit: type=1400 audit(1127.242:1979): avc: denied { ioctl } for pid=19345 comm="syz.2.3525" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x4d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1127.163093][ T24] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 1127.323175][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 1127.331352][ T24] usb 10-1: config index 0 descriptor too short (expected 137, got 18) [ 1127.356834][ T24] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1127.371154][ T24] usb 10-1: config 0 has no interface number 0 [ 1127.380904][ T24] usb 10-1: New USB device found, idVendor=569f, idProduct=1e9d, bcdDevice=b6.d7 [ 1127.395748][T19353] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3527'. [ 1127.409304][ T24] usb 10-1: New USB device strings: Mfr=248, Product=132, SerialNumber=35 [ 1127.421712][ T29] audit: type=1400 audit(1127.512:1980): avc: denied { append } for pid=19354 comm="syz.7.3529" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1127.451435][ T24] usb 10-1: Product: syz [ 1127.456201][ T24] usb 10-1: Manufacturer: syz [ 1127.461839][ T24] usb 10-1: SerialNumber: syz [ 1127.470970][ T24] usb 10-1: config 0 descriptor?? [ 1127.472209][T19353] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3527'. [ 1127.483189][ T24] hub 10-1:0.132: bad descriptor, ignoring hub [ 1127.496626][ T24] hub 10-1:0.132: probe with driver hub failed with error -5 [ 1127.705888][ T29] audit: type=1400 audit(1127.812:1981): avc: denied { ioctl } for pid=19347 comm="syz.9.3526" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1127.733432][T19348] binder: BINDER_SET_CONTEXT_MGR already set [ 1127.739502][T19348] binder: 19347:19348 ioctl 4018620d 200000004a80 returned -16 [ 1127.781587][T19355] xt_connbytes: Forcing CT accounting to be enabled [ 1127.801373][T19355] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 1127.810936][T19358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3528'. [ 1127.854301][T19358] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3528'. [ 1127.862879][T18852] usb 10-1: USB disconnect, device number 84 [ 1128.759986][T19368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3531'. [ 1128.873085][T19368] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3531'. [ 1130.427104][T19398] netlink: zone id is out of range [ 1130.432340][T19398] netlink: get zone limit has 4 unknown bytes [ 1130.441049][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1130.441063][ T29] audit: type=1400 audit(1130.540:1986): avc: denied { setopt } for pid=19389 comm="syz.2.3539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1130.480205][ T29] audit: type=1400 audit(1130.540:1987): avc: denied { connect } for pid=19389 comm="syz.2.3539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1130.690966][T19402] netlink: zone id is out of range [ 1130.702103][T19402] netlink: get zone limit has 4 unknown bytes [ 1130.913858][ T29] audit: type=1400 audit(1131.010:1988): avc: denied { setopt } for pid=19405 comm="syz.7.3543" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1130.914809][T19406] xt_hashlimit: size too large, truncated to 1048576 [ 1131.067234][ T29] audit: type=1400 audit(1131.100:1989): avc: denied { connect } for pid=19405 comm="syz.7.3543" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1131.123534][ T29] audit: type=1400 audit(1131.100:1990): avc: denied { write } for pid=19405 comm="syz.7.3543" laddr=fe80::13 lport=60 faddr=fe80::d fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1132.588014][ T29] audit: type=1326 audit(1132.689:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19385 comm="syz.3.3538" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e139de99 code=0x7fc00000 [ 1132.802436][T19420] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3548'. [ 1132.850478][T19420] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3548'. [ 1132.973994][T19424] No source specified [ 1133.019840][T19426] ubi0: attaching mtd0 [ 1133.078575][T19426] ubi0: scanning is finished [ 1133.100411][T19426] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1133.281291][T19426] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1133.555578][ T29] audit: type=1400 audit(1133.649:1992): avc: denied { read } for pid=19431 comm="syz.3.3552" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1133.558459][T19433] FAULT_INJECTION: forcing a failure. [ 1133.558459][T19433] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.597085][T19433] CPU: 0 UID: 0 PID: 19433 Comm: syz.3.3552 Tainted: G L syzkaller #0 PREEMPT(full) [ 1133.597117][T19433] Tainted: [L]=SOFTLOCKUP [ 1133.597124][T19433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1133.597134][T19433] Call Trace: [ 1133.597142][T19433] [ 1133.597149][T19433] dump_stack_lvl+0x100/0x190 [ 1133.597177][T19433] should_fail_ex.cold+0x5/0xa [ 1133.597201][T19433] should_failslab+0xc2/0x120 [ 1133.597223][T19433] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1133.597242][T19433] ? stack_trace_save+0x8e/0xc0 [ 1133.597270][T19433] ? alloc_empty_file+0x5b/0x1c0 [ 1133.597293][T19433] alloc_empty_file+0x5b/0x1c0 [ 1133.597313][T19433] path_openat+0xe7/0x4280 [ 1133.597328][T19433] ? __kasan_slab_alloc+0x89/0x90 [ 1133.597346][T19433] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1133.597362][T19433] ? do_getname+0x35/0x390 [ 1133.597380][T19433] ? do_sys_openat2+0xc7/0x1e0 [ 1133.597398][T19433] ? __x64_sys_openat+0x12d/0x210 [ 1133.597415][T19433] ? do_syscall_64+0x115/0x870 [ 1133.597438][T19433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.597468][T19433] ? __pfx_path_openat+0x10/0x10 [ 1133.597491][T19433] do_file_open+0x20e/0x430 [ 1133.597509][T19433] ? __pfx_do_file_open+0x10/0x10 [ 1133.597543][T19433] ? alloc_fd+0x471/0x7a0 [ 1133.597562][T19433] ? do_getname+0x191/0x390 [ 1133.597584][T19433] do_sys_openat2+0x10f/0x1e0 [ 1133.597604][T19433] ? __pfx_do_sys_openat2+0x10/0x10 [ 1133.597626][T19433] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1133.597654][T19433] ? __fget_files+0x21f/0x3d0 [ 1133.597685][T19433] __x64_sys_openat+0x12d/0x210 [ 1133.597706][T19433] ? __pfx___x64_sys_openat+0x10/0x10 [ 1133.597726][T19433] ? ksys_write+0x1ac/0x250 [ 1133.597759][T19433] do_syscall_64+0x115/0x870 [ 1133.597784][T19433] ? clear_bhb_loop+0x40/0x90 [ 1133.597806][T19433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.597825][T19433] RIP: 0033:0x7ff9e135e6ce [ 1133.597841][T19433] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1133.597859][T19433] RSP: 002b:00007ff9e226db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1133.597878][T19433] RAX: ffffffffffffffda RBX: 00007ff9e226e6c0 RCX: 00007ff9e135e6ce [ 1133.597890][T19433] RDX: 0000000000000000 RSI: 00007ff9e226dc00 RDI: ffffffffffffff9c [ 1133.597901][T19433] RBP: 00007ff9e226dc00 R08: 0000000000000000 R09: 0000000000000000 [ 1133.597911][T19433] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1133.597923][T19433] R13: 00007ff9e1626128 R14: 00007ff9e1626090 R15: 00007ffd5c9b4768 [ 1133.597946][T19433] [ 1133.611108][ T29] audit: type=1400 audit(1133.649:1993): avc: denied { open } for pid=19431 comm="syz.3.3552" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1134.417850][T19440] netlink: zone id is out of range [ 1134.424438][T19440] netlink: get zone limit has 4 unknown bytes [ 1134.805496][T19445] No source specified [ 1134.822693][T19445] overlayfs: overlapping lowerdir path [ 1134.847313][T19440] netlink: 'syz.3.3553': attribute type 5 has an invalid length. [ 1135.262124][T19456] netlink: zone id is out of range [ 1135.281785][T19456] netlink: get zone limit has 4 unknown bytes [ 1135.429141][T19460] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3558'. [ 1135.580186][ T29] audit: type=1400 audit(1135.668:1994): avc: denied { create } for pid=19461 comm="syz.9.3559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1136.097061][ T29] audit: type=1400 audit(1135.698:1995): avc: denied { setopt } for pid=19461 comm="syz.9.3559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1136.651786][ T29] audit: type=1400 audit(1135.708:1996): avc: denied { append } for pid=19461 comm="syz.9.3559" name="demux0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1137.033205][T19468] ubi0: attaching mtd0 [ 1137.160271][T19468] ubi0: scanning is finished [ 1137.185706][T19468] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1137.692977][T19468] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1137.919072][T19490] can0: slcan on ptm0. [ 1138.626184][ T29] audit: type=1400 audit(1138.726:1997): avc: denied { search } for pid=5270 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1140.128650][ T29] audit: type=1400 audit(1138.756:1998): avc: denied { search } for pid=5270 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1140.177851][ T29] audit: type=1400 audit(1138.756:1999): avc: denied { search } for pid=5270 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1140.223926][ T29] audit: type=1400 audit(1138.756:2000): avc: denied { read } for pid=5270 comm="dhcpcd" name="n61" dev="tmpfs" ino=14220 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1140.273328][ T29] audit: type=1400 audit(1138.756:2001): avc: denied { open } for pid=5270 comm="dhcpcd" path="/run/udev/data/n61" dev="tmpfs" ino=14220 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1140.357820][T19489] can0 (unregistered): slcan off ptm0. [ 1140.468806][ T29] audit: type=1400 audit(1138.756:2002): avc: denied { getattr } for pid=5270 comm="dhcpcd" path="/run/udev/data/n61" dev="tmpfs" ino=14220 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1140.518897][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1140.884935][ T29] audit: type=1326 audit(1140.605:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19491 comm="syz.7.3569" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b37d9de99 code=0x7fc00000 [ 1140.929622][ T24] usb 3-1: device descriptor read/64, error -71 [ 1140.939206][T19506] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3571'. [ 1140.989870][T19506] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3571'. [ 1141.000755][ T29] audit: type=1400 audit(1141.095:2004): avc: denied { read } for pid=19507 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1141.079668][ T29] audit: type=1400 audit(1141.095:2005): avc: denied { read open } for pid=19507 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1141.137710][ T29] audit: type=1400 audit(1141.095:2006): avc: denied { getattr } for pid=19507 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1141.189336][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1141.296226][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3573'. [ 1141.318004][ T29] audit: type=1400 audit(1141.415:2007): avc: denied { ioctl } for pid=19518 comm="syz.3.3575" path="socket:[68506]" dev="sockfs" ino=68506 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1141.433508][ T29] audit: type=1400 audit(1141.455:2008): avc: denied { create } for pid=19518 comm="syz.3.3575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1141.742486][ T29] audit: type=1400 audit(1141.845:2009): avc: denied { write } for pid=19504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1141.982188][ T29] audit: type=1400 audit(1141.875:2010): avc: denied { add_name } for pid=19504 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1142.006869][T19537] xfrm0: entered allmulticast mode [ 1142.235158][ T29] audit: type=1400 audit(1141.875:2011): avc: denied { create } for pid=19504 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1142.477661][ T29] audit: type=1400 audit(1141.875:2012): avc: denied { write } for pid=19504 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=14244 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1142.687121][T19545] /dev/nullb0: Can't open blockdev [ 1144.540325][T19564] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3586'. [ 1146.050468][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1146.050483][ T29] audit: type=1400 audit(1146.143:2025): avc: denied { write } for pid=19555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1146.563373][ T29] audit: type=1400 audit(1146.652:2026): avc: denied { write } for pid=19589 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1148.734297][T19601] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3593'. [ 1148.878578][T19601] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3593'. [ 1148.888359][T19601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.895687][T19601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.913832][T19601] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3593'. [ 1149.023417][T19611] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3594'. [ 1149.076444][T19611] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3594'. [ 1149.293045][T19612] /dev/nullb0: Can't open blockdev [ 1149.297264][T19617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3595'. [ 1149.340883][T19616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3595'. [ 1149.355997][ T4827] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1149.420536][T19616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3595'. [ 1150.210349][T19617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3595'. [ 1150.258913][ T4827] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1150.466649][ T4827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.503394][ T4827] usb 3-1: Product: syz [ 1150.591916][ T4827] usb 3-1: Manufacturer: syz [ 1150.616147][ T4827] usb 3-1: SerialNumber: syz [ 1150.623500][ T4827] usb 3-1: config 0 descriptor?? [ 1150.674243][ T4827] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 033 [ 1151.048636][ T4827] (null): failure reading functionality [ 1151.067121][ T4827] i2c i2c-1: connected i2c-tiny-usb device [ 1151.270215][ T5702] usb 3-1: USB disconnect, device number 33 [ 1151.493357][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3599'. [ 1152.594409][ T29] audit: type=1326 audit(1152.679:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.7.3601" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b37d9de99 code=0x7fc00000 [ 1155.888289][ T29] audit: type=1400 audit(1155.968:2028): avc: denied { create } for pid=19665 comm="syz.2.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1156.282885][ T29] audit: type=1400 audit(1156.367:2029): avc: denied { write } for pid=19665 comm="syz.2.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1156.742630][T19678] __nla_validate_parse: 2 callbacks suppressed [ 1156.742664][T19678] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3612'. [ 1156.799360][T19679] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3612'. [ 1157.070687][T19686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3613'. [ 1157.747466][T18852] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1157.939070][T18852] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1157.970244][T18852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.989360][T18852] usb 3-1: Product: syz [ 1158.007561][T18852] usb 3-1: Manufacturer: syz [ 1158.012708][T18852] usb 3-1: SerialNumber: syz [ 1158.039024][T18852] usb 3-1: config 0 descriptor?? [ 1158.063126][T18852] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 034 [ 1158.138278][ T29] audit: type=1326 audit(1158.217:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19695 comm="syz.9.3617" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee52b9de99 code=0x0 [ 1158.200243][T19697] netlink: 'syz.9.3617': attribute type 1 has an invalid length. [ 1158.236296][ T29] audit: type=1400 audit(1158.326:2031): avc: denied { read } for pid=19699 comm="syz.7.3618" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1158.315633][T19697] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1158.330176][T19702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58905 sclass=netlink_route_socket pid=19702 comm=syz.9.3617 [ 1158.436270][T19707] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3610'. [ 1158.465706][T18852] (null): failure reading functionality [ 1158.496290][T19701] bond7: (slave veth11): Enslaving as a backup interface with a down link [ 1158.499102][T18852] i2c i2c-1: connected i2c-tiny-usb device [ 1158.625955][T19713] comedi comedi3: pcmda12: I/O port conflict (0x100,16) [ 1158.695432][ T5703] usb 3-1: USB disconnect, device number 34 [ 1158.726697][ T29] audit: type=1326 audit(1158.816:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19690 comm="syz.3.3615" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e139de99 code=0x7fc00000 [ 1158.781208][T19712] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1158.787744][T19712] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1158.795535][T19712] vhci_hcd vhci_hcd.0: Device attached [ 1159.159286][ T4827] usb 48-1: SetAddress Request (2) to port 0 [ 1159.198913][ T4827] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1159.574137][T19728] FAULT_INJECTION: forcing a failure. [ 1159.574137][T19728] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.728734][T19728] CPU: 1 UID: 0 PID: 19728 Comm: syz.8.3624 Tainted: G L syzkaller #0 PREEMPT(full) [ 1159.728766][T19728] Tainted: [L]=SOFTLOCKUP [ 1159.728772][T19728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1159.728782][T19728] Call Trace: [ 1159.728790][T19728] [ 1159.728797][T19728] dump_stack_lvl+0x100/0x190 [ 1159.728825][T19728] should_fail_ex.cold+0x5/0xa [ 1159.728844][T19728] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1159.728868][T19728] should_failslab+0xc2/0x120 [ 1159.728889][T19728] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1159.728908][T19728] ? skb_clone+0x190/0x400 [ 1159.728929][T19728] skb_clone+0x190/0x400 [ 1159.728948][T19728] netlink_deliver_tap+0xaed/0xcc0 [ 1159.728976][T19728] netlink_unicast+0x62b/0x850 [ 1159.729006][T19728] ? __pfx_netlink_unicast+0x10/0x10 [ 1159.729037][T19728] netlink_sendmsg+0x8b0/0xda0 [ 1159.729066][T19728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1159.729097][T19728] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1159.729126][T19728] ____sys_sendmsg+0xa4d/0xbe0 [ 1159.729146][T19728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1159.729173][T19728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1159.729194][T19728] ? __lock_acquire+0x49f/0x1a40 [ 1159.729217][T19728] ? __lock_acquire+0x49f/0x1a40 [ 1159.729242][T19728] ___sys_sendmsg+0x190/0x1e0 [ 1159.729268][T19728] ? __pfx____sys_sendmsg+0x10/0x10 [ 1159.729291][T19728] ? __lock_acquire+0x49f/0x1a40 [ 1159.729337][T19728] __sys_sendmsg+0x160/0x210 [ 1159.729357][T19728] ? __pfx___sys_sendmsg+0x10/0x10 [ 1159.729374][T19728] ? __irq_exit_rcu+0x162/0x210 [ 1159.729407][T19728] do_syscall_64+0x115/0x870 [ 1159.729433][T19728] ? clear_bhb_loop+0x40/0x90 [ 1159.729453][T19728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.729470][T19728] RIP: 0033:0x7f55f019de99 [ 1159.729484][T19728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1159.729499][T19728] RSP: 002b:00007f55f107b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1159.729517][T19728] RAX: ffffffffffffffda RBX: 00007f55f0425fa0 RCX: 00007f55f019de99 [ 1159.729527][T19728] RDX: 0000000004000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1159.729537][T19728] RBP: 00007f55f107b090 R08: 0000000000000000 R09: 0000000000000000 [ 1159.729546][T19728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1159.729556][T19728] R13: 00007f55f0426038 R14: 00007f55f0425fa0 R15: 00007ffc7645d6d8 [ 1159.729577][T19728] [ 1159.730180][T19728] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3624'. [ 1159.987056][T19730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3625'. [ 1160.744833][T19715] vhci_hcd: connection reset by peer [ 1160.791797][ T9245] vhci_hcd vhci_hcd.7: stop threads [ 1160.845258][ T9245] vhci_hcd vhci_hcd.7: release socket [ 1160.908684][ T9245] vhci_hcd vhci_hcd.7: disconnect device [ 1161.066857][T19741] netlink: zone id is out of range [ 1161.092944][T19741] netlink: get zone limit has 4 unknown bytes [ 1161.200003][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1161.397783][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1161.451037][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1161.476853][ T24] usb 3-1: config 0 has no interface number 0 [ 1161.498305][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1161.550516][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.588000][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1161.630862][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.674850][ T24] usb 3-1: config 0 descriptor?? [ 1161.857186][T19749] ubi0: attaching mtd0 [ 1161.875978][T19749] ubi0: scanning is finished [ 1161.889614][T19749] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1161.896746][T19751] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 1161.911554][ T29] audit: type=1400 audit(1162.005:2033): avc: denied { relabelto } for pid=19750 comm="syz.3.3634" name="file0" dev="tmpfs" ino=2731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:pam_console_exec_t:s0" [ 1161.929900][T19754] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3630'. [ 1162.015110][ T29] audit: type=1400 audit(1162.005:2034): avc: denied { associate } for pid=19750 comm="syz.3.3634" name="file0" dev="tmpfs" ino=2731 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pam_console_exec_t:s0" [ 1162.142426][ T29] audit: type=1400 audit(1162.015:2035): avc: denied { module_load } for pid=19750 comm="syz.3.3634" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1162.264689][ T24] ft260 0003:0403:6030.0011: item fetching failed at offset 0/2 [ 1162.276029][ T24] ft260 0003:0403:6030.0011: failed to parse HID [ 1162.288337][ T24] ft260 0003:0403:6030.0011: probe with driver ft260 failed with error -22 [ 1162.366078][T19760] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3636'. [ 1162.385825][T19749] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1162.406103][T19760] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3636'. [ 1162.407705][T19762] ubi0: attaching mtd0 [ 1162.438769][T19762] ubi0: scanning is finished [ 1162.454015][T19762] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1162.621271][T19762] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1162.721124][T19768] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1162.754225][T19769] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1162.762327][ T29] audit: type=1400 audit(1162.844:2036): avc: denied { write } for pid=19737 comm="syz.2.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1162.829635][T19772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3629'. [ 1162.831967][ T29] audit: type=1400 audit(1162.914:2037): avc: denied { ioctl } for pid=19737 comm="syz.2.3629" path="socket:[69807]" dev="sockfs" ino=69807 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1162.921379][T19772] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1163.293450][T19772] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1163.384037][T19778] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3641'. [ 1163.492833][T19778] batman_adv: batadv0: Adding interface: macsec1 [ 1163.511530][T19778] batman_adv: batadv0: The MTU of interface macsec1 is too small (1418) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1163.592378][T19778] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 1163.649994][T19780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3640'. [ 1163.660554][T19780] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3640'. [ 1163.913580][ T29] audit: type=1400 audit(1164.004:2038): avc: denied { read } for pid=19773 comm="syz.8.3639" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1163.955588][ T29] audit: type=1400 audit(1164.004:2039): avc: denied { open } for pid=19773 comm="syz.8.3639" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1164.300869][ T4827] usb 48-1: device descriptor read/8, error -110 [ 1164.509792][T19787] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3642'. [ 1164.519994][T19787] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3642'. [ 1164.582863][ T5702] usb 3-1: USB disconnect, device number 35 [ 1164.640841][ T29] audit: type=1400 audit(1164.713:2040): avc: denied { connect } for pid=19785 comm="syz.3.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1164.708501][ T4827] usb usb48-port1: attempt power cycle [ 1164.736750][T19792] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1164.745671][T19792] ALSA: mixer_oss: invalid index 1374389 [ 1164.752291][T19792] ALSA: mixer_oss: invalid OSS volume 'H' [ 1164.758459][T19792] ALSA: mixer_oss: invalid OSS volume '' [ 1164.765248][T19792] ALSA: mixer_oss: invalid OSS volume '' [ 1164.772337][T19792] ALSA: mixer_oss: invalid OSS volume '(' [ 1164.778176][T19792] ALSA: mixer_oss: invalid OSS volume '' [ 1164.797091][T19792] ALSA: mixer_oss: invalid OSS volume '' [ 1164.824554][T19792] ALSA: mixer_oss: invalid OSS volume '' [ 1164.855158][ T29] audit: type=1400 audit(1164.943:2041): avc: denied { block_suspend } for pid=19791 comm="syz.2.3644" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1164.893763][T19792] ALSA: mixer_oss: invalid OSS volume '' [ 1165.282043][ T4827] usb usb48-port1: unable to enumerate USB device [ 1165.478098][T19801] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3647'. [ 1165.495568][T19799] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1165.502104][T19799] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1165.510089][T19799] vhci_hcd vhci_hcd.0: Device attached [ 1165.861874][ T4827] usb 52-1: SetAddress Request (2) to port 0 [ 1165.880203][ T4827] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1165.987125][T19807] netlink: 'syz.3.3648': attribute type 5 has an invalid length. [ 1166.409660][T19809] netlink: 'syz.7.3649': attribute type 5 has an invalid length. [ 1166.854000][T19818] ubi0: attaching mtd0 [ 1166.869258][T19818] ubi0: scanning is finished [ 1166.877751][T19818] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1166.878690][T19802] vhci_hcd: connection reset by peer [ 1166.903972][T14514] vhci_hcd vhci_hcd.9: stop threads [ 1166.919943][T14514] vhci_hcd vhci_hcd.9: release socket [ 1166.942140][T14514] vhci_hcd vhci_hcd.9: disconnect device [ 1167.148140][T19818] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1167.666660][T19833] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1167.673219][T19833] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1167.681039][T19833] vhci_hcd vhci_hcd.0: Device attached [ 1168.073978][ T24] usb 40-1: SetAddress Request (2) to port 0 [ 1168.098129][ T24] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1168.184678][T19838] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3657'. [ 1168.236590][T19838] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3657'. [ 1168.502998][ T5702] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1168.690827][T19834] vhci_hcd: connection reset by peer [ 1168.696932][T14514] vhci_hcd vhci_hcd.3: stop threads [ 1168.702549][T14514] vhci_hcd vhci_hcd.3: release socket [ 1168.729716][T14514] vhci_hcd vhci_hcd.3: disconnect device [ 1168.767874][ T5702] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1168.793058][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.802372][ T5702] usb 3-1: Product: syz [ 1168.807166][ T5702] usb 3-1: Manufacturer: syz [ 1168.812002][ T5702] usb 3-1: SerialNumber: syz [ 1168.821532][ T5702] usb 3-1: config 0 descriptor?? [ 1168.832194][ T5702] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 036 [ 1168.883812][ T5746] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 1168.908279][T19848] comedi comedi3: pcmda12: I/O port conflict (0x100,16) [ 1169.046487][ T5746] usb 10-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1169.062834][ T5746] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.072913][ T5746] usb 10-1: Product: syz [ 1169.077836][ T5746] usb 10-1: Manufacturer: syz [ 1169.085658][ T5746] usb 10-1: SerialNumber: syz [ 1169.096131][ T5746] usb 10-1: config 0 descriptor?? [ 1169.105605][ T5746] i2c-tiny-usb 10-1:0.0: version 6d.cc found at bus 010 address 085 [ 1169.112865][ T29] audit: type=1326 audit(1169.181:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19852 comm="syz.7.3662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b37d9de99 code=0x0 [ 1169.156359][T19854] netlink: 'syz.7.3662': attribute type 1 has an invalid length. [ 1169.189939][T19854] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1169.232704][ T5702] (null): failure reading functionality [ 1169.263001][ T5702] i2c i2c-1: connected i2c-tiny-usb device [ 1169.307430][T19856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58905 sclass=netlink_route_socket pid=19856 comm=syz.7.3662 [ 1169.331505][ T29] audit: type=1400 audit(1169.411:2043): avc: denied { map } for pid=19857 comm="syz.3.3663" path="socket:[69911]" dev="sockfs" ino=69911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1169.357730][ T29] audit: type=1400 audit(1169.411:2044): avc: denied { read accept } for pid=19857 comm="syz.3.3663" path="socket:[69911]" dev="sockfs" ino=69911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1169.365891][T19854] bond7: (slave veth11): Enslaving as a backup interface with a down link [ 1169.466294][T19849] usb 3-1: USB disconnect, device number 36 [ 1169.578073][T19864] FAULT_INJECTION: forcing a failure. [ 1169.578073][T19864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.594935][T19864] CPU: 0 UID: 0 PID: 19864 Comm: syz.3.3665 Tainted: G L syzkaller #0 PREEMPT(full) [ 1169.594968][T19864] Tainted: [L]=SOFTLOCKUP [ 1169.594974][T19864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1169.594985][T19864] Call Trace: [ 1169.594991][T19864] [ 1169.594998][T19864] dump_stack_lvl+0x100/0x190 [ 1169.595026][T19864] should_fail_ex.cold+0x5/0xa [ 1169.595050][T19864] _copy_from_user+0x2e/0xd0 [ 1169.595074][T19864] kstrtouint_from_user+0xd6/0x1d0 [ 1169.595100][T19864] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1169.595126][T19864] ? __lock_acquire+0x49f/0x1a40 [ 1169.595157][T19864] proc_fail_nth_write+0x83/0x220 [ 1169.595182][T19864] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1169.595213][T19864] vfs_write+0x2aa/0x1050 [ 1169.595239][T19864] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1169.595264][T19864] ? __pfx_vfs_write+0x10/0x10 [ 1169.595286][T19864] ? __fget_files+0x215/0x3d0 [ 1169.595318][T19864] ? __fget_files+0x21f/0x3d0 [ 1169.595351][T19864] ksys_write+0x12a/0x250 [ 1169.595375][T19864] ? __pfx_ksys_write+0x10/0x10 [ 1169.595410][T19864] do_syscall_64+0x115/0x870 [ 1169.595436][T19864] ? clear_bhb_loop+0x40/0x90 [ 1169.595458][T19864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.595476][T19864] RIP: 0033:0x7ff9e135e6ce [ 1169.595492][T19864] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1169.595509][T19864] RSP: 002b:00007ff9e228efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1169.595526][T19864] RAX: ffffffffffffffda RBX: 00007ff9e228f6c0 RCX: 00007ff9e135e6ce [ 1169.595537][T19864] RDX: 0000000000000001 RSI: 00007ff9e228f0a0 RDI: 0000000000000005 [ 1169.595547][T19864] RBP: 00007ff9e228f090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.595558][T19864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.595567][T19864] R13: 00007ff9e1626038 R14: 00007ff9e1625fa0 R15: 00007ffd5c9b4768 [ 1169.595591][T19864] [ 1169.811080][ T5746] i2c i2c-1: failure reading functionality [ 1169.820416][ T5746] i2c i2c-1: connected i2c-tiny-usb device [ 1169.831030][ T5746] usb 10-1: USB disconnect, device number 85 [ 1169.861681][ T29] audit: type=1400 audit(1169.941:2045): avc: denied { setopt } for pid=19865 comm="syz.3.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1169.968066][ T29] audit: type=1400 audit(1170.051:2046): avc: denied { accept } for pid=19867 comm="syz.7.3667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1170.203155][T19871] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1170.294622][T19873] gretap0: entered promiscuous mode [ 1170.538948][ T29] audit: type=1400 audit(1170.600:2047): avc: denied { write } for pid=19865 comm="syz.3.3666" name="001" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1170.980252][ T4827] usb 52-1: device descriptor read/8, error -110 [ 1171.060195][T19876] bridge0: port 3(vlan2) entered blocking state [ 1171.205417][T19876] bridge0: port 3(vlan2) entered disabled state [ 1171.389447][T19876] vlan2: entered allmulticast mode [ 1172.646359][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1172.700329][T19876] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1172.761798][T19876] vlan2: entered promiscuous mode [ 1172.788962][T19876] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1172.805095][T19892] comedi comedi3: pcmda12: I/O port conflict (0x100,16) [ 1172.876839][ T4827] usb usb52-port1: attempt power cycle [ 1172.947465][T19872] lo speed is unknown, defaulting to 1000 [ 1173.037266][T19894] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3674'. [ 1173.056126][T19874] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1173.124933][T19874] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1173.185799][ T24] usb 40-1: device descriptor read/8, error -110 [ 1173.476494][ T4827] usb usb52-port1: unable to enumerate USB device [ 1173.515582][ T29] audit: type=1400 audit(1173.559:2048): avc: denied { open } for pid=19905 comm="syz.9.3676" path="/dev/ptyr6" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1173.597802][ T29] audit: type=1400 audit(1173.639:2049): avc: denied { ioctl } for pid=19905 comm="syz.9.3676" path="/dev/ptyr6" dev="devtmpfs" ino=141 ioctlcmd=0x542d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1173.631718][ T29] audit: type=1400 audit(1173.639:2050): avc: denied { write } for pid=19905 comm="syz.9.3676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1173.656359][ T24] usb usb40-port1: attempt power cycle [ 1174.420558][ T24] usb usb40-port1: unable to enumerate USB device [ 1174.539389][ T5702] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 1174.609146][T19918] comedi comedi3: pcmda12: I/O port conflict (0x100,16) [ 1174.686654][T19921] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 1174.693188][T19921] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1174.700915][T19921] vhci_hcd vhci_hcd.0: Device attached [ 1175.025063][ T5702] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.072151][ T5702] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.121993][ T5702] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1175.196485][ T5746] usb 50-1: SetAddress Request (2) to port 0 [ 1176.045032][ T29] audit: type=1400 audit(1175.888:2051): avc: denied { ioctl } for pid=19924 comm="syz.7.3680" path="socket:[70027]" dev="sockfs" ino=70027 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1176.052075][ T5746] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1176.077129][ T5702] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1176.100590][ T5702] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.114775][ T5702] usb 10-1: config 0 descriptor?? [ 1176.152624][ T29] audit: type=1400 audit(1175.908:2052): avc: denied { bind } for pid=19924 comm="syz.7.3680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1176.312464][T19922] vhci_hcd: connection reset by peer [ 1176.341104][T14514] vhci_hcd vhci_hcd.8: stop threads [ 1176.353604][T14514] vhci_hcd vhci_hcd.8: release socket [ 1176.422891][T14514] vhci_hcd vhci_hcd.8: disconnect device [ 1177.499049][T19947] netlink: zone id is out of range [ 1177.504332][T19947] netlink: get zone limit has 4 unknown bytes [ 1177.678914][ T5702] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1178.556196][ T5703] usb 10-1: USB disconnect, device number 86 [ 1178.572464][T19956] FAULT_INJECTION: forcing a failure. [ 1178.572464][T19956] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.605507][T19956] CPU: 1 UID: 0 PID: 19956 Comm: syz.3.3687 Tainted: G L syzkaller #0 PREEMPT(full) [ 1178.605537][T19956] Tainted: [L]=SOFTLOCKUP [ 1178.605544][T19956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1178.605554][T19956] Call Trace: [ 1178.605562][T19956] [ 1178.605569][T19956] dump_stack_lvl+0x100/0x190 [ 1178.605596][T19956] should_fail_ex.cold+0x5/0xa [ 1178.605618][T19956] should_failslab+0xc2/0x120 [ 1178.605641][T19956] __kmalloc_cache_noprof+0x91/0x6c0 [ 1178.605668][T19956] ? rtnl_newlink+0x126/0x2380 [ 1178.605689][T19956] ? __pfx_rtnl_newlink+0x10/0x10 [ 1178.605709][T19956] rtnl_newlink+0x126/0x2380 [ 1178.605737][T19956] ? __pfx_rtnl_newlink+0x10/0x10 [ 1178.605754][T19956] ? find_held_lock+0x2b/0x80 [ 1178.605779][T19956] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1178.605797][T19956] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1178.605819][T19956] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1178.605844][T19956] ? __lock_acquire+0x49f/0x1a40 [ 1178.605875][T19956] ? find_held_lock+0x2b/0x80 [ 1178.605898][T19956] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1178.605916][T19956] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1178.605937][T19956] ? __pfx_rtnl_newlink+0x10/0x10 [ 1178.605959][T19956] rtnetlink_rcv_msg+0x95e/0xe90 [ 1178.605981][T19956] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1178.606008][T19956] ? ref_tracker_free+0x37e/0x6c0 [ 1178.606035][T19956] netlink_rcv_skb+0x159/0x420 [ 1178.606061][T19956] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1178.606083][T19956] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1178.606115][T19956] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1178.606143][T19956] netlink_unicast+0x585/0x850 [ 1178.606172][T19956] ? __pfx_netlink_unicast+0x10/0x10 [ 1178.606203][T19956] netlink_sendmsg+0x8b0/0xda0 [ 1178.606231][T19956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1178.606259][T19956] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1178.606291][T19956] ____sys_sendmsg+0xa4d/0xbe0 [ 1178.606313][T19956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1178.606340][T19956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1178.606373][T19956] ___sys_sendmsg+0x190/0x1e0 [ 1178.606400][T19956] ? __pfx____sys_sendmsg+0x10/0x10 [ 1178.606422][T19956] ? __lock_acquire+0x49f/0x1a40 [ 1178.606441][T19956] ? get_pid_task+0x106/0x250 [ 1178.606492][T19956] __sys_sendmsg+0x160/0x210 [ 1178.606512][T19956] ? __pfx___sys_sendmsg+0x10/0x10 [ 1178.606542][T19956] do_syscall_64+0x115/0x870 [ 1178.606568][T19956] ? clear_bhb_loop+0x40/0x90 [ 1178.606590][T19956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.606608][T19956] RIP: 0033:0x7ff9e139de99 [ 1178.606624][T19956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.606640][T19956] RSP: 002b:00007ff9e228f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1178.606658][T19956] RAX: ffffffffffffffda RBX: 00007ff9e1625fa0 RCX: 00007ff9e139de99 [ 1178.606669][T19956] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1178.606680][T19956] RBP: 00007ff9e228f090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.606691][T19956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.606700][T19956] R13: 00007ff9e1626038 R14: 00007ff9e1625fa0 R15: 00007ffd5c9b4768 [ 1178.606725][T19956] [ 1178.966877][T19952] fido_id[19952]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1178.996557][ T29] audit: type=1400 audit(1179.076:2053): avc: denied { wake_alarm } for pid=19960 comm="syz.7.3689" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1179.500256][ T29] audit: type=1400 audit(1179.076:2054): avc: denied { setopt } for pid=19960 comm="syz.7.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1179.523110][ T29] audit: type=1400 audit(1179.426:2055): avc: denied { map } for pid=19967 comm="syz.3.3690" path="/dev/video3" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1179.653361][T19974] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3692'. [ 1179.677246][T19974] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3692'. [ 1179.803485][T19976] FAULT_INJECTION: forcing a failure. [ 1179.803485][T19976] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.816748][T19976] CPU: 1 UID: 0 PID: 19976 Comm: syz.9.3694 Tainted: G L syzkaller #0 PREEMPT(full) [ 1179.816777][T19976] Tainted: [L]=SOFTLOCKUP [ 1179.816783][T19976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1179.816794][T19976] Call Trace: [ 1179.816800][T19976] [ 1179.816806][T19976] dump_stack_lvl+0x100/0x190 [ 1179.816834][T19976] should_fail_ex.cold+0x5/0xa [ 1179.816857][T19976] should_failslab+0xc2/0x120 [ 1179.816878][T19976] __kmalloc_noprof+0xfc/0x820 [ 1179.816896][T19976] ? trace_kmalloc+0xeb/0x110 [ 1179.816916][T19976] ? lsm_blob_alloc+0x68/0x90 [ 1179.816943][T19976] lsm_blob_alloc+0x68/0x90 [ 1179.816961][T19976] security_sk_alloc+0x2d/0x290 [ 1179.816984][T19976] sk_prot_alloc+0x12a/0x2a0 [ 1179.817008][T19976] sk_alloc+0x36/0xe80 [ 1179.817027][T19976] bpf_prog_test_run_skb+0x4db/0x3540 [ 1179.817058][T19976] ? find_held_lock+0x2b/0x80 [ 1179.817082][T19976] ? __fget_files+0x1f1/0x3d0 [ 1179.817111][T19976] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1179.817134][T19976] ? fput+0x79/0x100 [ 1179.817152][T19976] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1179.817173][T19976] __sys_bpf+0x2a12/0x4e80 [ 1179.817202][T19976] ? __pfx___sys_bpf+0x10/0x10 [ 1179.817223][T19976] ? find_held_lock+0x2b/0x80 [ 1179.817245][T19976] ? get_pid_task+0xfc/0x250 [ 1179.817266][T19976] ? get_pid_task+0xfc/0x250 [ 1179.817293][T19976] ? find_held_lock+0x2b/0x80 [ 1179.817318][T19976] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1179.817342][T19976] ? find_held_lock+0x2b/0x80 [ 1179.817361][T19976] ? ksys_write+0x190/0x250 [ 1179.817381][T19976] ? ksys_write+0x190/0x250 [ 1179.817416][T19976] ? fput+0x79/0x100 [ 1179.817436][T19976] ? __x64_sys_bpf+0xce/0x140 [ 1179.817449][T19976] __x64_sys_bpf+0xce/0x140 [ 1179.817463][T19976] ? do_syscall_64+0x90/0x870 [ 1179.817486][T19976] do_syscall_64+0x115/0x870 [ 1179.817507][T19976] ? clear_bhb_loop+0x40/0x90 [ 1179.817524][T19976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.817541][T19976] RIP: 0033:0x7fee52b9de99 [ 1179.817553][T19976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.817568][T19976] RSP: 002b:00007fee53998028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1179.817583][T19976] RAX: ffffffffffffffda RBX: 00007fee52e25fa0 RCX: 00007fee52b9de99 [ 1179.817593][T19976] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1179.817603][T19976] RBP: 00007fee53998090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.817611][T19976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.817620][T19976] R13: 00007fee52e26038 R14: 00007fee52e25fa0 R15: 00007fffb7ee4ad8 [ 1179.817641][T19976] [ 1179.817968][T18852] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1179.996307][T19982] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3696'. [ 1180.018623][ T187] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1180.120482][T19982] netlink: 'syz.9.3696': attribute type 10 has an invalid length. [ 1180.128373][T19982] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3696'. [ 1180.200238][T18852] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1180.209101][T18852] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1180.220352][T18852] usb 3-1: config 0 has no interface number 0 [ 1180.231387][T18852] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1180.243164][T18852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.251744][T18852] usb 3-1: Product: syz [ 1180.256086][T18852] usb 3-1: Manufacturer: syz [ 1180.261055][T18852] usb 3-1: SerialNumber: syz [ 1180.268277][T18852] usb 3-1: config 0 descriptor?? [ 1180.314003][ T187] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1180.324471][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.333196][ T187] usb 4-1: Product: syz [ 1180.337373][ T187] usb 4-1: Manufacturer: syz [ 1180.341983][ T187] usb 4-1: SerialNumber: syz [ 1180.343152][T19985] netlink: zone id is out of range [ 1180.348907][ T187] usb 4-1: config 0 descriptor?? [ 1180.352116][T19985] netlink: get zone limit has 4 unknown bytes [ 1181.020698][ T187] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 091 [ 1181.030430][ T187] (null): failure reading functionality [ 1181.039789][ T187] i2c i2c-1: connected i2c-tiny-usb device [ 1181.199323][ T5746] usb 50-1: device descriptor read/8, error -110 [ 1181.250922][ T24] usb 4-1: USB disconnect, device number 91 [ 1181.288826][T19992] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3699'. [ 1181.302868][T19993] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3699'. [ 1181.353988][ T29] audit: type=1400 audit(1181.435:2056): avc: denied { write } for pid=19995 comm="syz.9.3700" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1181.379968][ T29] audit: type=1400 audit(1181.435:2057): avc: denied { open } for pid=19995 comm="syz.9.3700" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1181.414883][T19996] FAULT_INJECTION: forcing a failure. [ 1181.414883][T19996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1181.428393][T19996] CPU: 1 UID: 0 PID: 19996 Comm: syz.9.3700 Tainted: G L syzkaller #0 PREEMPT(full) [ 1181.428421][T19996] Tainted: [L]=SOFTLOCKUP [ 1181.428427][T19996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1181.428438][T19996] Call Trace: [ 1181.428444][T19996] [ 1181.428451][T19996] dump_stack_lvl+0x100/0x190 [ 1181.428478][T19996] should_fail_ex.cold+0x5/0xa [ 1181.428499][T19996] core_sys_select+0x5d1/0xbb0 [ 1181.428531][T19996] ? __pfx_core_sys_select+0x10/0x10 [ 1181.428554][T19996] ? find_held_lock+0x2b/0x80 [ 1181.428579][T19996] ? get_pid_task+0xfc/0x250 [ 1181.428623][T19996] ? __pfx_set_user_sigmask+0x10/0x10 [ 1181.428643][T19996] ? ktime_get_ts64+0x318/0x420 [ 1181.428661][T19996] ? ktime_get_ts64+0x257/0x420 [ 1181.428683][T19996] do_pselect.constprop.0+0x238/0x270 [ 1181.428711][T19996] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 1181.428741][T19996] ? ksys_write+0x1ac/0x250 [ 1181.428768][T19996] __x64_sys_pselect6+0x149/0x1c0 [ 1181.428796][T19996] do_syscall_64+0x115/0x870 [ 1181.428834][T19996] ? clear_bhb_loop+0x40/0x90 [ 1181.428854][T19996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.428871][T19996] RIP: 0033:0x7fee52b9de99 [ 1181.428885][T19996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1181.428901][T19996] RSP: 002b:00007fee53998028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1181.428920][T19996] RAX: ffffffffffffffda RBX: 00007fee52e25fa0 RCX: 00007fee52b9de99 [ 1181.428931][T19996] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 1181.428941][T19996] RBP: 00007fee53998090 R08: 0000200000000280 R09: 0000000000000000 [ 1181.428952][T19996] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1181.428962][T19996] R13: 00007fee52e26038 R14: 00007fee52e25fa0 R15: 00007fffb7ee4ad8 [ 1181.428984][T19996] [ 1181.617934][ T5746] usb usb50-port1: attempt power cycle [ 1181.716250][ T29] audit: type=1400 audit(1181.795:2058): avc: denied { bind } for pid=19999 comm="syz.9.3702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1181.771029][ T29] audit: type=1400 audit(1181.795:2059): avc: denied { node_bind } for pid=19999 comm="syz.9.3702" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1181.866886][T20004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3704'. [ 1181.875897][ T29] audit: type=1400 audit(1181.935:2060): avc: denied { read } for pid=20005 comm="syz.9.3705" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1181.898565][ T29] audit: type=1400 audit(1181.935:2061): avc: denied { open } for pid=20005 comm="syz.9.3705" path="/dev/input/event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1181.922435][ T29] audit: type=1400 audit(1181.935:2062): avc: denied { ioctl } for pid=20005 comm="syz.9.3705" path="/dev/input/event2" dev="devtmpfs" ino=923 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1181.941400][T20004] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 1181.963912][T18852] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1181.977862][T18852] uvcvideo 3-1:0.64: No valid video chain found. [ 1182.000035][T18852] usb 3-1: USB disconnect, device number 37 [ 1182.204822][ T5746] usb usb50-port1: unable to enumerate USB device [ 1182.349782][ T187] usb 10-1: new low-speed USB device number 87 using dummy_hcd [ 1182.539903][ T187] usb 10-1: device descriptor read/64, error -71 [ 1182.780034][ T187] usb 10-1: new low-speed USB device number 88 using dummy_hcd [ 1183.311029][ T187] usb 10-1: device descriptor read/64, error -71 [ 1183.374175][ T29] audit: type=1400 audit(1183.454:2063): avc: denied { name_bind } for pid=20028 comm="syz.2.3713" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1183.430926][ T187] usb usb10-port1: attempt power cycle [ 1183.603120][ T5746] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1289.523303][ C1] ------------[ cut here ]------------ [ 1289.530118][ C1] 1 [ 1289.530134][ C1] WARNING: kernel/rcu/tree_stall.h:1048 at rcu_check_gp_start_stall.part.0+0x1c4/0x4b0, CPU#1: kworker/u8:9/5905 [ 1289.544436][ C1] Modules linked in: [ 1289.549191][ C1] CPU: 1 UID: 0 PID: 5905 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1289.560222][ C1] Tainted: [L]=SOFTLOCKUP [ 1289.564552][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1289.574600][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1289.581103][ C1] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 1289.588032][ C1] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 80 15 73 9b e8 c0 18 8c 00 b8 01 00 00 00 87 05 35 d2 84 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 64 73 22 91 48 81 fd c0 14 bf 8e 74 5a 48 b8 00 [ 1289.607633][ C1] RSP: 0018:ffffc90000a08df0 EFLAGS: 00010046 [ 1289.613692][ C1] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81ee4340 [ 1289.621654][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff9b731580 [ 1289.629616][ C1] RBP: ffffffff8ebf14c0 R08: 0000000000000001 R09: fffffbfff36e62b0 [ 1289.637577][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 1ffffffff1d01e50 [ 1289.645539][ C1] R13: 0000000000000246 R14: 0000000000000200 R15: 0000000000000001 [ 1289.653585][ C1] FS: 0000000000000000(0000) GS:ffff888123ee8000(0000) knlGS:0000000000000000 [ 1289.662508][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1289.669095][ C1] CR2: 000020000002b000 CR3: 000000000e992000 CR4: 00000000003526f0 [ 1289.677057][ C1] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000404 [ 1289.685019][ C1] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1289.692980][ C1] Call Trace: [ 1289.696254][ C1] [ 1289.699097][ C1] rcu_core+0x2cb/0x10d0 [ 1289.703339][ C1] ? irqentry_exit+0x24d/0xa00 [ 1289.708116][ C1] ? __pfx_rcu_core+0x10/0x10 [ 1289.712800][ C1] handle_softirqs+0x1ea/0x9b0 [ 1289.717564][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1289.722845][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1289.727782][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1289.733422][ C1] __irq_exit_rcu+0x162/0x210 [ 1289.738096][ C1] irq_exit_rcu+0x9/0x30 [ 1289.742334][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1289.747972][ C1] [ 1289.750895][ C1] [ 1289.753813][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1289.759789][ C1] RIP: 0010:write_comp_data+0x10/0x90 [ 1289.765153][ C1] Code: 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 8b 05 d9 aa 59 12 49 89 f8 49 89 f1 49 89 d2 <65> 48 8b 3d b0 aa 59 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 [ 1289.784776][ C1] RSP: 0018:ffffc90005617870 EFLAGS: 00000202 [ 1289.790879][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81fd46fd [ 1289.798854][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005 [ 1289.806814][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 1289.814772][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1289.822734][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 1289.830700][ C1] ? smp_call_function_many_cond+0x5ad/0x16c0 [ 1289.836772][ C1] smp_call_function_many_cond+0x5ad/0x16c0 [ 1289.842662][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1289.847696][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1289.854016][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1289.859393][ C1] ? __pfx___text_poke+0x10/0x10 [ 1289.864333][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1289.869360][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1289.874471][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 1289.880364][ C1] smp_text_poke_batch_finish+0x337/0xc60 [ 1289.886089][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 1289.891990][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1289.898225][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1289.904464][ C1] ? find_held_lock+0x2b/0x80 [ 1289.909146][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1289.915121][ C1] jump_label_update+0x37a/0x550 [ 1289.920056][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 1289.925949][ C1] static_key_enable+0x1a/0x20 [ 1289.930714][ C1] toggle_allocation_gate+0xfe/0x2d0 [ 1289.935993][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1289.941885][ C1] ? rcu_is_watching+0x12/0xc0 [ 1289.946651][ C1] process_one_work+0xa23/0x1940 [ 1289.951591][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1289.956965][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1289.962855][ C1] worker_thread+0x5ef/0xe50 [ 1289.967446][ C1] ? kthread+0x13a/0x450 [ 1289.971689][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1289.976794][ C1] kthread+0x370/0x450 [ 1289.980864][ C1] ? __pfx_kthread+0x10/0x10 [ 1289.985456][ C1] ret_from_fork+0x72b/0xd50 [ 1289.990045][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1289.995168][ C1] ? __switch_to+0x800/0x10f0 [ 1289.999936][ C1] ? __pfx_kthread+0x10/0x10 [ 1290.004531][ C1] ret_from_fork_asm+0x1a/0x30 [ 1290.009311][ C1] [ 1290.012322][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1290.019595][ C1] CPU: 1 UID: 0 PID: 5905 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1290.030612][ C1] Tainted: [L]=SOFTLOCKUP [ 1290.034923][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1290.044987][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1290.051489][ C1] Call Trace: [ 1290.054758][ C1] [ 1290.057596][ C1] dump_stack_lvl+0x100/0x190 [ 1290.062274][ C1] vpanic+0x552/0x970 [ 1290.066254][ C1] ? __pfx_vpanic+0x10/0x10 [ 1290.070759][ C1] panic+0xd1/0xe0 [ 1290.074474][ C1] ? __pfx_panic+0x10/0x10 [ 1290.078891][ C1] ? check_panic_on_warn+0x1f/0x90 [ 1290.084005][ C1] check_panic_on_warn.cold+0x19/0x34 [ 1290.089373][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 1290.095692][ C1] __warn.cold+0x191/0x318 [ 1290.100104][ C1] __report_bug+0x30f/0x440 [ 1290.104613][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 1290.110935][ C1] ? __pfx___report_bug+0x10/0x10 [ 1290.115959][ C1] ? lock_acquire+0x1b9/0x370 [ 1290.120632][ C1] ? find_held_lock+0x2b/0x80 [ 1290.125313][ C1] ? clockevents_program_event+0x23e/0x820 [ 1290.131123][ C1] ? clockevents_program_event+0x23e/0x820 [ 1290.136934][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1290.141870][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 1290.148196][ C1] report_bug+0xb2/0x220 [ 1290.152462][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 1290.158789][ C1] handle_bug+0x16a/0x2a0 [ 1290.163117][ C1] exc_invalid_op+0x17/0x50 [ 1290.167615][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1290.172465][ C1] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 1290.179396][ C1] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 80 15 73 9b e8 c0 18 8c 00 b8 01 00 00 00 87 05 35 d2 84 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 64 73 22 91 48 81 fd c0 14 bf 8e 74 5a 48 b8 00 [ 1290.198999][ C1] RSP: 0018:ffffc90000a08df0 EFLAGS: 00010046 [ 1290.205062][ C1] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81ee4340 [ 1290.213041][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff9b731580 [ 1290.221007][ C1] RBP: ffffffff8ebf14c0 R08: 0000000000000001 R09: fffffbfff36e62b0 [ 1290.228969][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 1ffffffff1d01e50 [ 1290.236933][ C1] R13: 0000000000000246 R14: 0000000000000200 R15: 0000000000000001 [ 1290.244916][ C1] ? rcu_check_gp_start_stall.part.0+0x1b0/0x4b0 [ 1290.251254][ C1] rcu_core+0x2cb/0x10d0 [ 1290.255497][ C1] ? irqentry_exit+0x24d/0xa00 [ 1290.260270][ C1] ? __pfx_rcu_core+0x10/0x10 [ 1290.265043][ C1] handle_softirqs+0x1ea/0x9b0 [ 1290.269814][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1290.275096][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1290.279947][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1290.285587][ C1] __irq_exit_rcu+0x162/0x210 [ 1290.290265][ C1] irq_exit_rcu+0x9/0x30 [ 1290.294506][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1290.300143][ C1] [ 1290.303068][ C1] [ 1290.306001][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1290.311976][ C1] RIP: 0010:write_comp_data+0x10/0x90 [ 1290.317364][ C1] Code: 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 8b 05 d9 aa 59 12 49 89 f8 49 89 f1 49 89 d2 <65> 48 8b 3d b0 aa 59 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 [ 1290.336962][ C1] RSP: 0018:ffffc90005617870 EFLAGS: 00000202 [ 1290.343021][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81fd46fd [ 1290.350996][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005 [ 1290.358955][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 1290.366923][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1290.374882][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 1290.382856][ C1] ? smp_call_function_many_cond+0x5ad/0x16c0 [ 1290.388926][ C1] smp_call_function_many_cond+0x5ad/0x16c0 [ 1290.394819][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1290.399854][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1290.406175][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1290.411552][ C1] ? __pfx___text_poke+0x10/0x10 [ 1290.416495][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1290.421523][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1290.426638][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 1290.432527][ C1] smp_text_poke_batch_finish+0x337/0xc60 [ 1290.438247][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 1290.444141][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1290.450398][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1290.456644][ C1] ? find_held_lock+0x2b/0x80 [ 1290.461328][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1290.467303][ C1] jump_label_update+0x37a/0x550 [ 1290.472245][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 1290.478144][ C1] static_key_enable+0x1a/0x20 [ 1290.482909][ C1] toggle_allocation_gate+0xfe/0x2d0 [ 1290.488193][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1290.494089][ C1] ? rcu_is_watching+0x12/0xc0 [ 1290.498857][ C1] process_one_work+0xa23/0x1940 [ 1290.503806][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1290.509182][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1290.515160][ C1] worker_thread+0x5ef/0xe50 [ 1290.519751][ C1] ? kthread+0x13a/0x450 [ 1290.523995][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1290.529101][ C1] kthread+0x370/0x450 [ 1290.533172][ C1] ? __pfx_kthread+0x10/0x10 [ 1290.537764][ C1] ret_from_fork+0x72b/0xd50 [ 1290.542354][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1290.547468][ C1] ? __switch_to+0x800/0x10f0 [ 1290.552163][ C1] ? __pfx_kthread+0x10/0x10 [ 1290.556770][ C1] ret_from_fork_asm+0x1a/0x30 [ 1290.561552][ C1] [ 1291.665595][ C1] Shutting down cpus with NMI [ 1291.670561][ C1] Kernel Offset: disabled [ 1291.674871][ C1] Rebooting in 86400 seconds..