last executing test programs: 9m53.24149662s ago: executing program 3 (id=1015): socket(0xa, 0x3, 0xff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40086}, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 9m52.241711893s ago: executing program 3 (id=1016): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x80203, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x9, 0x0, 0x4, 0x10003, 0x9, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x2, 0x5, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8004000000000000) 9m51.618991762s ago: executing program 3 (id=1018): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000780)={0x38, r2, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x20048814) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r3, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x3, 0xfd}, {}, @raw32={[0x5, 0x5, 0x9]}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x4}, {}, {0x5}, @quote={{0x6, 0x73}, 0x401}}, {0x4, 0x0, 0xfe, 0x0, @tick=0x100, {}, {}, @connect={{0x5, 0x5f}, {0x2, 0xf}}}, {0x1, 0x0, 0x1, 0x0, @tick=0xffffffff, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) ioctl$I2C_RDWR(r0, 0x707, 0x0) fsync(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4919, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r5, &(0x7f00000010c0)=[{&(0x7f0000000380)=""/245, 0xf5}], 0x1, 0x40000004, 0x6) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x3a, 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x98010) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x9, {{0xa, 0x4e23, 0x21, @remote}}}, 0x88) 9m49.890461146s ago: executing program 3 (id=1022): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x9a, &(0x7f0000000480)={0x0, 0x5c46, 0x100, 0x7ffd, 0x1e3, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x24a0, 0x4c1, 0x43, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) accept4(r5, 0x0, 0x0, 0x0) r6 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xd, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x11, 0x0, @tid=r6}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="2e010000ed454210cd0c99009bf4000203010902120001000000000904"], 0x0) statx(r1, 0x0, 0x100, 0x100, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000940)=0x707987cd) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(r6, 0xd, &(0x7f0000000140)={0x3, 0x5}, &(0x7f0000000180)) 9m46.109540417s ago: executing program 3 (id=1028): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) close_range(r0, 0xffffffffffffffff, 0x0) 9m45.657473633s ago: executing program 3 (id=1031): openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default}, [@null, @bcast, @null, @remote, @default, @rose, @netrom, @rose]}, &(0x7f00000000c0)=0x48) futex(0x0, 0xd, 0x1, &(0x7f0000000440), 0x0, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000080)=0x1000, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2245, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)) unshare(0x8040480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) fstat(0xffffffffffffffff, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0x7, 0x7}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000002000000", @ANYRES32, @ANYBLOB='\x00 '], 0x50) mount$overlay(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@uuid_on}, {@verity_on}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 9m30.194384571s ago: executing program 32 (id=1031): openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default}, [@null, @bcast, @null, @remote, @default, @rose, @netrom, @rose]}, &(0x7f00000000c0)=0x48) futex(0x0, 0xd, 0x1, &(0x7f0000000440), 0x0, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000080)=0x1000, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2245, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)) unshare(0x8040480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) fstat(0xffffffffffffffff, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0x7, 0x7}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000002000000", @ANYRES32, @ANYBLOB='\x00 '], 0x50) mount$overlay(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@uuid_on}, {@verity_on}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 9m28.847059655s ago: executing program 2 (id=1079): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800201000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000150001030ec00000fcdbdf2505"], 0x14}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x28}}, 0x80) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f00000004c0)=""/247}, {&(0x7f0000000980)=""/236}]}, 0x0) 9m27.469035792s ago: executing program 2 (id=1081): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800201000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000150001030ec00000fcdbdf2505"], 0x14}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x28}}, 0x80) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f00000004c0)=""/247}, {&(0x7f0000000980)=""/236}]}, 0x0) 9m21.394240863s ago: executing program 2 (id=1089): prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x3}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = getpgrp(0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) get_robust_list(r6, &(0x7f0000000180)=&(0x7f0000000100)={&(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000240)=0x18) 9m17.102712081s ago: executing program 2 (id=1103): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800201000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000150001030ec00000fcdbdf2505"], 0x14}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x28}}, 0x80) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f00000004c0)=""/247}, {&(0x7f0000000980)=""/236}]}, 0x0) 9m15.137078751s ago: executing program 2 (id=1106): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x9a, &(0x7f0000000480)={0x0, 0x5c46, 0x100, 0x7ffd, 0x1e3, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x24a0, 0x4c1, 0x43, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) accept4(r5, 0x0, 0x0, 0x0) r6 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xd, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x11, 0x0, @tid=r6}, &(0x7f0000bbdffc)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) statx(r1, 0x0, 0x100, 0x100, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000940)=0x707987cd) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(r6, 0xd, &(0x7f0000000140)={0x3, 0x5}, &(0x7f0000000180)) 9m8.978483641s ago: executing program 2 (id=1115): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$tipc(0x1e, 0x5, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000280)={0x2, 0x0, 0x44d, 0xfbfffffffffffffd}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000002c0)=[{&(0x7f0000002440)='-', 0x1}], 0x1, 0x1) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) pselect6(0x31, &(0x7f0000000380), &(0x7f0000000600)={0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f00000004c0)={&(0x7f0000000480), 0x8}) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r5, &(0x7f0000000100), 0x0, 0x24000044) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000f744c59e4bc031fd00000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffaff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0xc, 0x4, 0x0, 0x3c, 0x5c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2]}, @ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x5, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x66, 0x0, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}]}, 0x28}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500202000902710002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d1524120004a317a88b045e4f01a607c0ffcb7e392a09058103000258057f0904010000020d00000904010102020d"], 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r7, 0x6, 0xd, 0x0, &(0x7f00000001c0)) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 8m53.840848249s ago: executing program 33 (id=1115): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$tipc(0x1e, 0x5, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000280)={0x2, 0x0, 0x44d, 0xfbfffffffffffffd}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000002c0)=[{&(0x7f0000002440)='-', 0x1}], 0x1, 0x1) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) pselect6(0x31, &(0x7f0000000380), &(0x7f0000000600)={0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f00000004c0)={&(0x7f0000000480), 0x8}) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r5, &(0x7f0000000100), 0x0, 0x24000044) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000f744c59e4bc031fd00000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffaff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0xc, 0x4, 0x0, 0x3c, 0x5c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2]}, @ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x5, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x66, 0x0, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}]}, 0x28}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500202000902710002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d1524120004a317a88b045e4f01a607c0ffcb7e392a09058103000258057f0904010000020d00000904010102020d"], 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r7, 0x6, 0xd, 0x0, &(0x7f00000001c0)) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 7m36.764416302s ago: executing program 1 (id=1341): socket$packet(0x11, 0x2, 0x300) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x4000010, r0, 0x6a6fd000) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x26, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x2, r2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') 7m34.324557458s ago: executing program 1 (id=1350): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x23, 0x803, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704004008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00001621000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r2], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f0000000240)={0x100202000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x9}, &(0x7f0000000340)=""/233, 0xe9, &(0x7f0000000140)=""/73, &(0x7f0000000200)=[0x0]}, 0x58) sched_setaffinity(r6, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000022b80)=""/102392, 0x18ff8) socket$inet(0x2, 0x4000000000000001, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000214010028bd7000fcdbdf25906f73ad", @ANYRES32, @ANYBLOB="08000100020000000800010000000000080001000000000005005400010000000800010000000000"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40) read$FUSE(r8, &(0x7f0000004280)={0x2020}, 0x203e) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 7m33.015218693s ago: executing program 1 (id=1352): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0xf, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@private2, 0x27, 0x14, 0x10}, @sadb_x_policy={0x8, 0x12, 0xfffe, 0x1, 0x0, 0x6e6bbd, 0x0, {0x6, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x22}, @in6=@private1}}, @sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xc4f}, @in6={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}]}, 0xd8}}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x400088d9}, 0x20000000) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000003c0)={0x9, &(0x7f0000000340)=[{0x8, 0x7, 0x9, 0x6}, {0x25, 0x8, 0x18, 0xfffffffb}, {0x7083, 0x8, 0x60, 0x6}, {0x7, 0x2, 0x3, 0x4}, {0x4, 0x4, 0x9}, {0x8001, 0x1, 0x2, 0xffff}, {0x176, 0xfc, 0x9, 0x5}, {0x2000, 0x1, 0x7, 0x5}, {0xe0, 0xc, 0x5, 0x3edd}]}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x20000800) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x2, 0x8}, {0x200, 0x1, 0x2, 0x6}}}}, 0x15) 7m31.892096131s ago: executing program 1 (id=1357): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x18) r6 = dup3(r1, r2, 0x0) ioctl$int_out(r2, 0x5462, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e00"], 0x48) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20040001) sendto$inet(r6, &(0x7f0000000240)="8df8cc7bbd046072ffc0f2330f1ae5893d40fbaaab6aabc9dd8e0dd0529967fa6cadb4fde7ef4650cd00c056a2b4b06f1a7124ff28a845cf6945a83189722e084a73bcc6de947e030fb9a4bfaf2205d9d70bfefca03b310744434c5ae4444c1fbe6729ab44e295145a15600d59762cb29ac57feabc2aa920370e86970f25bc7059ae56193f0ada89f917af788ab43cb9332ab75b20377f8817c495dbb6031f2c3f423f9b3b59939d719447da4f26bec2b733c359462b7a51e1524b60a95b2c479abde87e0766d584a857cac70e3959c948cb7805d4dd", 0xd6, 0x20044001, &(0x7f0000000340)={0x2, 0x4e24, @multicast1}, 0x10) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1}) 7m30.801846145s ago: executing program 1 (id=1360): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x4902, 0x0) 7m25.128577902s ago: executing program 1 (id=1383): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev, @broadcast}, &(0x7f0000000180)=0xc) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000200ffffffff", 0x58}], 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x3ff, 0x39, @loopback, @dev={0xfe, 0x80, '\x00', 0x31}, 0x40, 0x8000, 0xcbc7, 0x7}}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@can_newroute={0x15c, 0x18, 0x2, 0x70bd26, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_SRC_IF={0x8, 0x9, r1}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0x6, 0x1, 0x0, 0x0, "cf946a9f3e31d2c5"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x36, 0x23, 0x34, 0x80, 0xa, "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", 0x3, "ddb54b0f66c569dd708db80c974f2fa1e4532c04"}}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x15c}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) move_pages(0x0, 0x90249c01dd736e4b, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r7 = userfaultfd(0x80801) ppoll(&(0x7f0000000280)=[{r7, 0x300}], 0x1, 0x0, 0x0, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0, 0x18}], 0x2) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x800002000000) 7m9.631228248s ago: executing program 34 (id=1383): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev, @broadcast}, &(0x7f0000000180)=0xc) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000200ffffffff", 0x58}], 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x3ff, 0x39, @loopback, @dev={0xfe, 0x80, '\x00', 0x31}, 0x40, 0x8000, 0xcbc7, 0x7}}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@can_newroute={0x15c, 0x18, 0x2, 0x70bd26, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_SRC_IF={0x8, 0x9, r1}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0x6, 0x1, 0x0, 0x0, "cf946a9f3e31d2c5"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x36, 0x23, 0x34, 0x80, 0xa, "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", 0x3, "ddb54b0f66c569dd708db80c974f2fa1e4532c04"}}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x15c}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) move_pages(0x0, 0x90249c01dd736e4b, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r7 = userfaultfd(0x80801) ppoll(&(0x7f0000000280)=[{r7, 0x300}], 0x1, 0x0, 0x0, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0, 0x18}], 0x2) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x800002000000) 2m47.901600958s ago: executing program 5 (id=2210): openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x1b8) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x6, 0xfffffffffffffffe, 0xfffffffffffffff0}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x800, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r4, 0x3516, 0x7dd6, 0x8, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x4004, 0x5}, {0x3, 0x7}, {0x8, 0x6}, {0x20d, 0x2}, {0x2, 0x1}]}) 2m46.904520118s ago: executing program 5 (id=2214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r0, r0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000380)=0x5, 0x4) r7 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x69, 0x0, 0x2, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x25}}}}}}, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000200)={0x7, @output={0x1000, 0x0, {0x9, 0x55c84a63}, 0x6, 0xfffffffe}}) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r8, 0x40246f4c, &(0x7f00000003c0)={0x8000002, 0x1, @ofdm={0x1, 0x0, 0xcf3971b0e60ae577, 0x4, 0x8, 0x5, 0x1}}) 2m45.674003583s ago: executing program 5 (id=2217): openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x1b8) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x6, 0xfffffffffffffffe, 0xfffffffffffffff0}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x800, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r4, 0x3516, 0x7dd6, 0x8, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x4004, 0x5}, {0x3, 0x7}, {0x8, 0x6}, {0x20d, 0x2}, {0x2, 0x1}]}) 2m44.638575175s ago: executing program 5 (id=2219): syslog(0x3, &(0x7f0000000080)=""/164, 0xfffffffffffffe74) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x30, 0x1, @in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}, 0x80000001}}}, 0xa0) 2m44.462625659s ago: executing program 5 (id=2220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2f01, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f00000000c0)='./file0\x00') syz_usb_connect(0x2, 0x51, &(0x7f0000000180)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f0000000000000905"], &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) 2m42.831262093s ago: executing program 5 (id=2223): sync() sync() sync() 2m27.230998745s ago: executing program 35 (id=2223): sync() sync() sync() 15.367399857s ago: executing program 8 (id=2611): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4, &(0x7f0000000340)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f000002eff0)={0x20d, &(0x7f0000000000)=[{0x4, 0xd, 0x8, 0x7fff}, {0x9000, 0x2, 0x12, 0x8}]}, 0x10) 14.41419779s ago: executing program 6 (id=2613): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0'}, 0x33) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xd4bb, 0x0, 0xfffffffd, 0x0, 0x0, r1}, &(0x7f0000000380)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r6) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) 14.349245165s ago: executing program 7 (id=2614): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000380)={0x1, 0x0, [{0x4, 0x0, 0x0}]}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000006c0)=""/192, &(0x7f0000000140)=""/92, 0x80e3001}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x3e9, 0x128, 0x70bd26, 0x25dfdbfc, {0x20, 0x1, 0x2, r0, 0x4, 0x0, 0x3dd1, 0xe, 0x0, 0x6}, [""]}, 0x3c}}, 0x40001) setitimer(0x1, 0x0, 0x0) getitimer(0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="10d04908c5dc30eea4020c1378535f00ff030000000000"], 0x0, 0x1, 0xe3, &(0x7f0000000440)=""/227, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x809, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000180)=[{0x1, 0x3, 0x5, 0x3}], 0x10, 0x18d}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x6) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="00042dbd7000fd30ef789a1bab89bbeb31646c37d59f669087fd09700d7b69fe10a681e2f9083e4724464a1a020b9a63"], 0x14}, 0x1, 0x0, 0x0, 0x2000}, 0x4001) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f) openat$cgroup_ro(r3, &(0x7f00000001c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) syz_usb_connect$uac1(0x4, 0xa8, &(0x7f0000000600)=ANY=[@ANYBLOB="12013103000000006b1d01014000010203010902960003010390350904000000010100000a242b3c4e59d202bfdf01000040000201020724080601008009240305070306040f0c240202020407020d00d707052404010a0b24080675390904010000010200000904010101010200000905010900000000000725010000000009040200000902000009040201010102000009058209000000060007250100000000"], 0x0) 13.871846686s ago: executing program 6 (id=2617): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x101800, 0x0) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_MM_EXE_FILE(0x22, 0xd, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1802000043000701fefffffffcdbdf25037c00000400458000020180c701dc8094010980900138801400af00fe8000000000000000000000000000bb08003f00ffffffffd5a3df40eeb7d415ff473c34cb2b6dd0c29840acd6dfa86df7b02e3023989945a5fa39f0b13ef7ade41ca39d380d95ad5db58bee6284df857440af8b4e1a364157fb5a754a76c4cfda397861fc0e7030a9aa82f362671bf539cf54a2f3bc9ddf78f58fee10032113f0b392bb6d6d83b641a7156ee5217b24c5f253c18f1827539889051d553c5f217f338038c112fc2b339147ebba41b3561b30734948ffe3bdbda9aa3d50c5a45221d1d8f1a36d4e09036761fa396a4c3e0452acfa640e3092ca778418ba65c448b02a5b"], 0x218}}, 0xc000) sendfile(r2, r2, 0x0, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="440000001000010400f69b000200000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x841, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 13.119219689s ago: executing program 6 (id=2618): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800201000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000150001030ec00000fcdbdf2505"], 0x14}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x28}}, 0x80) 12.012568011s ago: executing program 6 (id=2619): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x80, 0x8, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x4, 0x5, 0xe}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xb, 0x1, 0x4}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x8, 0x7f, 0x89, 0x8, 0x88}, 0x20, &(0x7f0000000140)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x2, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "867d8d7fca35590ce1fb04cf59dc999d"}]}, 0x9, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x61b}}, {0xee, &(0x7f0000000540)=@string={0xee, 0x3, "152cac097b8c0fd61eaae379a4787983841386db050de73effdc7629112c22aef702772cc0da859dd8135b06df7d44f5b6a20c86a3b5c65da5bfc3917d1ae9198f867e25a67158d241c6b7094ba23ffb1693498000ad1c0ed7fca67ed093a34e1e38bd356832c84a34fdc7a33e03aea6b51e5b2600c80610fc06cafed620bfa445025ff3c672720dca091eaf9770b9644063d7aef5aeba7360658cc284548a9814935bd38ec48c3ca1aafe9bf0a5a3756ad09c58285c8e1b2ae58a49a89e3550fc21fb85c1d5fe7688221b84a74ef64df6ee96468eeb8167ef2e23f26af44bdb4e5b3bf0d6889fb5ec966340"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x5e, &(0x7f00000003c0)=@string={0x5e, 0x3, "251e9cc812218780a14bcea4ae655f407b7ab59fd2e1310472ae753b4fd0215916108bd6a48076433edc954c2dc65e8edb4493228008b09b0e1093e8728ffa46f95aac819eeacf50bed47e12334b9a9e7bcf21968986ae6a36ba4dc1"}}]}) syz_usb_disconnect(r0) 11.118845059s ago: executing program 7 (id=2621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) syz_emit_ethernet(0x8a, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) (async) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, &(0x7f0000000100)=0x808c) (async) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x1, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) (async) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r9, 0x0, &(0x7f0000c2c000/0x1000)=nil, 0x1000}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) 10.70760206s ago: executing program 7 (id=2622): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e12090021", 0x2b}], 0x1}, 0x4840) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x2, 0x202000) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000340)=0x4020, 0x4) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000580)=ANY=[@ANYBLOB]) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4004}}}, 0x24}, 0x1, 0xf0}, 0x40) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x9000000) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @random="150bcd9001f3"}, 0x4a, {}, 'lo\x00'}) 9.47853751s ago: executing program 0 (id=2625): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f00009ef000/0x4000)=nil, 0x403f, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x3454, &(0x7f00000003c0)={0x0, 0x0, 0x40, 0x0, 0xa7}) mmap(&(0x7f0000a82000/0x3000)=nil, 0x3000, 0x300000a, 0xa3b749903f41249d, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x380, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xdd, 0x6, "441992d89c3b98c0713cb8f9af7717496326f5c0ec0af1401698e90e1027609e292218ae78441ac9da949d49014f98e7ef41f5e6e0ee1e363feec8e13d5fdb53653ed526dc2f099f234ecd85159c8f6d876ee5ee2d827e10e28d695c0c5a3d91dd8c6e6e221fa218b843e8938188bae4148b36506fa7c4796e24d0cf706a3a8d6298760e9eb3d468449dd7059f2b695060d54ca2096e507d1ce343f25887df668eb3a1821f7797a55009d9be760c7d1764fc1c492b0a46ecd41ddbaf8777dae24a814b1a0b5fad7a799ecffae7590ecbfe545475b9a6174489"}, @NFTA_TABLE_USERDATA={0xbd, 0x6, "fc27c08c99e7d373914ac488b1cb859a6d463ce624fa5d76546b51326f8a4c299bd40bd4e605a47cf979a515582d3becfa92be67e766d353199200e42b5b8998c93860f84bd12addc2711f9b69e5df0fd344c0530af04d50320107ca45cbf801c4842e82afd9787b4a806b5e6a7173722cb53dc42ac99755dadf54bfae03e595860022d3ace737ad11c99749794c8a681f1e9b8bb2f48ae5becece2422e63c8c85e6df06b5e9ed95a4a859ab1d75d55dcdac241ffd5226587a"}, @NFTA_TABLE_USERDATA={0xd1, 0x6, "104365bb884260dd402b5f2bcd6b53868bd8a79e8eefeb245b62ab67ec5a2c4ea21ee06028a8267d72718cfc13b4cb5a4967b16de6f54a31a87cb97bedc8e17419d7d0623ed88f1db217bdf3fcbf09a291b674bbcebd9ff449053f4794004f372276cc3aabf2a6e7094186ddb067f552854bf72bf47865856c0c206f75256ce8f8201fd9f6190a68352730315ae21730d6c5f92d7d5c6ee1826fe9c8e587c97e52edd1a6ab52af2bf84add0f5e5bbeb11b194dcaf5db26bb91f38e0c1554681d075b8ea2917ed3e7b80db7fc4b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "f140f0e99d14f4f292fe9706fd0776899293ae3ea555d6dfd818e443773c3f52a703c395d63614ceb3d6f38c5033e8d5fc8459f6db2515fcb7a7cd8ff72f30740cb1f0f7d5a232cde3b65fcb42016526aea8697a62e0df1ddf5eb240d53f8aa9bc5e680925c1818faca08d99283957e174f8d3441dac25be36e038777c09a795a5dfc32c6eab5fc62ed4cba9a99ffee4bcab0de5de24b11acf500d626e8f2ae71c3b4b222ec9bfd30a55ddfa97039b1e610d0050a312ef37d3f543399f6cee30bdfd7c92fd9fe3fa8a2ad02f8bfa66196b3c1ef48b6cd5e0a33f21eb5b"}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3f4}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001680)=@newtaction={0x7b8, 0x30, 0xb, 0x5, 0x0, {}, [{0x114, 0x1, [@m_skbedit={0x110, 0x9, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x101, 0x6, 0xda31, 0x7}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0xa, 0xffffffffffffffff, 0x8, 0xfc3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xd}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xffe0}}]}, {0x99, 0x6, "845d154c829aa13b5c38ad32d0ea6d3b9131f396cd3842e753824883a5ae679c07d897dd631c04db91aeb1d68825c168aa263214a4e7a9203d9fb5a1fec4e9789ea19ff1d1a0af98e3fcae6363461c865a064a2913e2a317a9f5b8fcde7840880daa692f7668140f4375bff53527207afc7c37bae2c814947f6953bf412ac4a20e3a48c2ab64317e2e0a5ab5c4ba7d2ed11115c681"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x3d4, 0x1, [@m_mpls={0x174, 0x10, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6001}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc520}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88f8}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x755, 0x1, 0x5, 0x7ff}, 0x3}}]}, {0xea, 0x6, "08200fd6e3efa7fee8247a04764487f7616fc131e28e517adbc938e361f6d5922bef9b63f15aa221a7dd90d59bb4bb918f83d912bc9cde165f83fbb39ff9a102a99d8f0b24d4bd16d387213edacd126d6a1fdf91da4bde091e04b6bdd353fbbde226b586137f48c8920e42a8fd81fb6abb6e18148c581f691b80113a54af985a98116e57037c0c61a2a3d54dff0b0424d0479963154dbb320cd85df0766e01aa210860c501581a51e2e175dd57a9537c0b0da007b98be19bfebd69dd886a1cabd7f4336e0d52d0b8edf22ea7543b310d41b386e2b262b8337babcc6d077cf1650d6aa4c5aec7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x120, 0x6, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x8, 0x4, 0x7, 0x82a0}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xd4, 0x6, "26a2d4f6a3e512cb5db86a047a1d381ad916bcfe7c94584e6693499525c1f9b935e2c17733ab09d4808f9e3457a8bfa3a88f740293a1ded418e9599cce2299586cbbe0241214b02714f30598a777c5e940b0bcc4a89d0dd0638c2b9c865d1fdb902fc71f99a4399a58a440125d404721209cdaa080d92c62158abbd64923f3f63c5ed8e875b00a44c3f832dd29f5476e4f970d55e94b0584dca46154adcd5d49621405e5cd341091eeffb3f9c51f50bb2359ee7e606bcaf158c3191b9222d2fd01f03511ff0fcbb6d800bf920a166c36"}, {0xc, 0x7, {0x88d0b9749e5e4cf8}}, {0xc, 0x8, {0x6, 0x3}}}}, @m_skbedit={0x13c, 0x0, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x0, 0x7, 0x4, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x4, 0x1, 0x3, 0x1}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0xd5, 0x6, "1bf82a7278893a52be6e452d19f4384a416f0d7e5db55e413589b983cb74a4824a3062f704f473979882a68eb27695d2836857659bf4bd5943a3e4c91ed01c189cf9aa0681c2ff3068eefbb95d8859b0c2f751a3aa496d182ab514cd73a73cbae5069e7d4131925a98a069cb90f2b0dd6afd7397b054aa43b11c0cb0d36f64e15b91c87f4abee002a2b069c63972055cf9cfb1ecb3c3ab384c02834e949106704f16fe219fb432dddf7e60700ab98107f0eb4d67d586b48c92195b6e57c76c656cd7813f8a05e01cfe02b8c4d42a5f346a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x2bc, 0x1, [@m_ctinfo={0x148, 0x4, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}]}, {0xf3, 0x6, "059f9369762a39617ba69bcf32a1a602b0d257d5e26c57540bde12d5b4bf13be9447327fc3d805fccb1deab3f5371f162d33d9108cb1ceefaf2617e84e18264dbf9ddd0c32da71cccbe11bae87278df16ad30f2d93b862275073cca1420b51d837cfe1cc36ebeeb6eda2ddd3590ac62dfb4ec7c991068112153d9445ff366e66b945f9a2b13e4b4952c8ced29c9912be4a68c5bcc58ba1e512465786ff708244b8b570fcb89191cd1d775f6b41f42816e45c19709865ddbe72e5aedde888848b2eac5dd90f8a4927c6876e6a9ea5c3da88bfb5f14b881ef3511f7d53a6eb204bf075b281de82fe9d395b58f553d82d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x6c, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7c}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0x1f, 0x6, "46166a51ba23cb9a337e7b1d52b41174a4b581007f4177ed31f07e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x104, 0xe, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x5, 0xffffffffeffffffd, 0x4, 0x3}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x3, 0x0, 0x8}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x1, 0x1, 0xf}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0x30000, 0x0, 0x1, 0x1000}, 0x45}}]}, {0x68, 0x6, "b95391f7b2c6c2ff24a4f8ce0c52b35a689026a8f8551536a475266e80bce61e889fde16fda61b11a98fd7f22ec6e43373d6c98ba80a58f744a350fa4a9f8c7991ea3b20b2c5fd29f1c5b567899db0554992c136ca759da5c8675154948985f8092fac1e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x7b8}}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000067c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd8000000960203"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r4 = io_uring_setup(0xbbc, 0x0) io_uring_enter(r4, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r5) socket$netlink(0x10, 0x3, 0x14) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x800) openat$comedi(0xffffffffffffff9c, 0x0, 0x38400, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 9.234673898s ago: executing program 4 (id=2626): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800201000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000150001030ec00000fcdbdf2505"], 0x14}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x28}}, 0x80) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f00000004c0)=""/247}, {&(0x7f0000000980)=""/236}]}, 0x0) 8.822697607s ago: executing program 7 (id=2627): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) kexec_load(0x2, 0x0, 0x0, 0x80000) writev(r5, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}], 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="b74014"], 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(r6) 7.686561478s ago: executing program 4 (id=2628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x0, 0x0, 0xb}, 0x18) r0 = socket(0x15, 0x5, 0x0) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000010c0), 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000646000/0x2000)=nil, 0x2000, 0x1000018, 0xc831, r1, 0x6053f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r6, 0x8030ae7c, &(0x7f0000000280)) syz_usbip_server_init(0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) 6.934888968s ago: executing program 8 (id=2629): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x443, 0x1fe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x78) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x3aa04) syz_usb_connect(0x6, 0x3d, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x308, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast1, @rand_addr=0x64010102, 0xff000000, 0xffffff00, 0xc, 0x9, {@mac=@random="8a6a2cdac3a2", {[0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x31a9038765f64d59]}}, 0x43, 0x6, 0x4, 0x1, 0xc, 0xe87, 'vlan0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x0, 0x128}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, 0x2, 0x1}}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xffffff00, 0x3, 0x3, {@empty, {[0x1fe, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="a5cddc490123", {[0x0, 0xff, 0xff, 0xff]}}, 0x3, 0x2, 0xd9e7, 0x1, 0x2, 0x1000, 'vxcan1\x00', 'xfrm0\x00', {}, {0xff}, 0x0, 0xd0a9a00a8d77fbbc}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @private=0xa010102, @empty, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000006040)=[{{&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000005c0)='6', 0x1}], 0x1}}, {{&(0x7f0000001e00)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000003300)=[{&(0x7f0000001e40)="15", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0xfbff, 0x0, 0x5, 0x3, r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)=r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) r6 = socket(0x2d, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$alg(0x26, 0x5, 0x0) recvmsg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="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", 0x1a7) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r8, 0xc1105511, &(0x7f0000000040)={0x3, 0x6, 0x40, 0x10000, 'syz1\x00', 0x4000041}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x138, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x2, {0x0, 0x0, 0x0, r10, {}, {0xfff7, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xb2}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xa1a}, @qdisc_kind_options=@q_gred={{0x9}, {0xe4, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x7, 0xe09, 0x4, 0xe, 0x7, 0x5, 0x0, 0x1, 0x1, 0x97, 0xc, 0x1a, 0xf, 0x5b, 0x6, 0x9}}, @TCA_GRED_PARMS={0x38, 0x1, {0x6, 0x7, 0x2, 0x6, 0x9, 0x1, 0x6, 0x7fff, 0x8001, 0x7fffffff, 0x19, 0x1f, 0x12, 0x0, 0x5, 0x1}}, @TCA_GRED_PARMS={0x38, 0x1, {0xfffffff9, 0x1, 0x7, 0x9, 0x4, 0x2, 0xef5, 0x66, 0x3, 0x5, 0x19, 0xd, 0x18, 0x4, 0x1003, 0x1}}, @TCA_GRED_PARMS={0x38, 0x1, {0x7, 0x0, 0x8, 0xb, 0x7, 0x3, 0x1, 0x5, 0x49580c44, 0x8001, 0x1b, 0x13, 0xa, 0x81, 0x7, 0x80000001}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 6.895875086s ago: executing program 0 (id=2630): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000500), &(0x7f0000000040)=@tcp, 0x5d99d7b0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 5.922867735s ago: executing program 8 (id=2631): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800201000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000150001030ec00000fcdbdf2505"], 0x14}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x28}}, 0x80) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f00000004c0)=""/247}, {&(0x7f0000000980)=""/236}]}, 0x0) 5.855463602s ago: executing program 0 (id=2632): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xab6, 0x20000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x2a, 0x0, &(0x7f0000000040)) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0xc, 0x1}, 0x6, 0xc0, &(0x7f00000000c0)="28ad088bbfdb8fd45d84137152027999377ffb2ff4697069b1cdf9b513e8f011b6e404c491877d20b37c689e240bef33191debf81daac686c22337a4f9d39ea9265f394c3f569e7e9ad30ffb2e815e4fd8a152a246016559b40ad9d660fac1ebfbb0e83cc7d66fca78844205ab29d3ffd464085b70d09d745eb334131a40dfbdcc66450375181748d5d9", 0x8a, 0x398, 0x800, 0x7fffffff, 0x0, 0xb, &(0x7f0000000180)="9172ee9226e796421b90d9dc599709b1c2beaa818bedc6b9312916c65569e34c5bd4b2828997e217ba12dfe67f6ed6fc56fcdce298fdec043b5e23b31d83331118ff5a0bb4006a1a5a1226bfb0654f0af3d1a075abc15a1138d6a9ff7f54a478427f9c0f2a9b2daad045b2d72ff67c885cef9fe3bf3f1a4e3889f8afa98dde4d55dec47d9b1e866b2c947419f694d07682a05fb50cb4f1c1ec1ed05ba717b0e9425de109624bdb3e6b11b12bf93436e416776948015b1cbc005fcc2b235c4e6d837e2f5ccd7cfbbfe037dddff63fcbf7c6afc5c43573221bdc7501c70c20a81ac265cc6170aa662860a8675daf"}) 5.165320151s ago: executing program 4 (id=2633): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000180)=0x2cf7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r2, &(0x7f0000000180)='./file0\x00', r2, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0xa, 0xa, 0x303, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}, @NFTA_SET_POLICY={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x44011) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRESHEX], 0xffdd) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x2dbdfedb, 0x80000) syz_usb_control_io$uac1(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x1, 0xffffffffffffffff, 0x30, 0x2, @in6={0xa, 0x4e20, 0xfffffffe, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0xa0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2084030000e2ff49f93791e98168541057a26d77362b2198ab6b1a676020b5b937766ec23735b3a69a916e00fb3d29866b3830109e785c537a0728ea1b9e06d9cf9194ca47edaaf806bf6a55d859e7654f9ac92c389594e77cc83365911ba780d6ccfd77219c7a977150b2eca026ce67420f3250db6e5330ac42"], &(0x7f0000000440)={0x20, 0x85, 0x3, "2423cf"}}) 5.097067915s ago: executing program 8 (id=2634): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000000000000000"], 0x7c}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r1 = syz_open_procfs(0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500, 0x37}}], 0x600, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x1000000000) 4.899074123s ago: executing program 7 (id=2635): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800201000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000150001030ec00000fcdbdf2505"], 0x14}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x28}}, 0x80) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f00000004c0)=""/247}, {&(0x7f0000000980)=""/236}]}, 0x0) 4.819377952s ago: executing program 6 (id=2636): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000580)={'pcl812\x00', [0x8001, 0x6, 0x2, 0x4, 0x1, 0xcc7, 0x8, 0x7, 0x4, 0x7fff, 0x60, 0x1, 0x8, 0x40000002, 0x6, 0x9, 0x1, 0x9, 0x43, 0x40000003, 0x89, 0x10d, 0xf27, 0x4, 0xc, 0x8, 0x5, 0x40000006, 0x6, 0x10000, 0xfffffff4]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x2, 0x6, 0xfffa}, 0x3b, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0xe, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x47, 0x4c74, 0x80000000, 0x242, 0x1000, 0x4, 0x0, 0x80008071, 0x7, 0x8, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x3, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x7, 0x209, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0xb, 0x6, 0x8000047, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x24f, 0x42, 0x3], [0x7, 0x408, 0x2, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0xc0000, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x0, 0x4, 0x2950bfaf, 0x1000, 0x4b2760ed, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x1, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x0, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x98, 0x5, 0x6, 0x1, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x201, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x6b, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x9, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x400007, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) socket$packet(0x11, 0x3, 0x300) io_setup(0x5, &(0x7f0000000180)=0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x0) r4 = syz_io_uring_setup(0x49d, &(0x7f0000000400)={0x0, 0x79af, 0x1000, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r4, 0x1, 0x0, 0x0, 0x2}) io_uring_enter(r4, 0x4c6e, 0xc67a, 0xc, 0x0, 0x0) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0xffffffff, "421ae3753785251500e9e29b00", 0xffffffffffffffff}) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) 4.780938426s ago: executing program 8 (id=2637): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x2, 0x141240) fcntl$setstatus(r1, 0x4, 0x2000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$usbmon(&(0x7f0000000080), 0x13dd, 0xc01) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x5, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x400000000002) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x2900, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) accept4(r4, 0x0, 0x0, 0x80000) 3.476556542s ago: executing program 7 (id=2638): r0 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x5) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0xb) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/202, 0xca) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000340)={0x64c9, "0357b6e14b9b2e7170efdaa62f3969bb11b493e38164877ae04773c22209d0b8", 0x3, 0x10, 0x92d2, 0xe, 0x8, 0x4, 0x2, 0x5}) 1.529898616s ago: executing program 0 (id=2639): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000300)={0x2be, 0x81, 0xffff8e34}, 0xc) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, 0x0, &(0x7f0000001b80)) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r4 = fcntl$getown(r2, 0x9) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) tgkill(r4, r5, 0x1d) pipe2$watch_queue(0x0, 0x80) request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\x00', 0xfffffffffffffffc) semtimedop(0x0, &(0x7f0000000040), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f00000011c0)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=@newqdisc={0x650, 0x24, 0x20, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff9}, {0xfff3, 0x4}, {0xffed, 0x2}}, [@TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0x7, 0x62, 0x0, 0x8, 0x81, 0xa}}, {0x18, 0x2, [0x2, 0x63, 0x136, 0x8, 0x3, 0x5, 0x1, 0x1, 0x81, 0x7ff]}}, {{0x1c, 0x1, {0x6, 0x6, 0x4, 0xf, 0x0, 0xf0, 0x100, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x4, 0x81, 0x7f, 0xffff5b2c, 0x2, 0x80000001, 0x6, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x7, 0x800, 0xff, 0x0, 0x8, 0x9]}}, {{0x1c, 0x1, {0xe, 0x7f, 0x9, 0x0, 0x1, 0xf4b9, 0x4c, 0xa}}, {0x18, 0x2, [0x7fff, 0x8, 0x2, 0x4, 0xa6, 0x8, 0x3, 0x1, 0xffff, 0x1]}}, {{0x1c, 0x1, {0x2, 0x6, 0x7, 0x8, 0x0, 0x7, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x7, 0xf5, 0x6, 0x1, 0x5, 0xa, 0x7}}, {0x12, 0x2, [0x7, 0x7fff, 0x9, 0x5, 0xfafb, 0x1, 0x2]}}, {{0x1c, 0x1, {0xc2, 0x9, 0xfff9, 0x3, 0x2, 0x8001, 0xfffffff8, 0x9}}, {0x16, 0x2, [0x3, 0x2, 0x3, 0x0, 0xfffa, 0x101, 0x7fe4, 0xfffd, 0x2]}}, {{0x1c, 0x1, {0x2, 0x80, 0x9, 0x6, 0x1, 0xc9, 0x800, 0x8}}, {0x14, 0x2, [0xffff, 0x61c8, 0xfff, 0x2a, 0x7fff, 0xfe01, 0x5, 0xff]}}, {{0x1c, 0x1, {0x4a, 0xe5, 0x3ff, 0x101, 0x2, 0x9, 0x6, 0x2}}, {0x8, 0x2, [0x8, 0x8]}}]}, @qdisc_kind_options=@q_tbf={{0x8}, {0x458, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PBURST={0x8, 0x7, 0x15ba}, @TCA_TBF_PBURST={0x8, 0x7, 0x1744}, @TCA_TBF_BURST={0x8, 0x6, 0x1000}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x0, 0x8, 0x9, 0x1, 0x6}, {0x0, 0x1, 0x6, 0x6c, 0x0, 0x4}, 0x8, 0x1, 0x144c}}, @TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_PTAB={0x404, 0x3, [0x9, 0x6525, 0x9, 0x80000000, 0x948, 0x0, 0x0, 0x3, 0xa, 0x3ff, 0x6, 0x3, 0x1000, 0x2, 0x4, 0x9, 0x0, 0x7, 0x7, 0x2, 0x8, 0x2, 0x3, 0x86, 0x8, 0x3be, 0x9, 0x9, 0xffffffff, 0xf, 0x8, 0x9, 0xb, 0x0, 0x101, 0xc09, 0x8, 0x100, 0x10, 0x7, 0x1, 0x3, 0xb8aa, 0xa, 0x7, 0x7, 0x6000, 0x4, 0x1, 0xff, 0x1cfe, 0x6, 0x9, 0xfffffff7, 0xa1, 0x4, 0x6, 0x6, 0x1ff, 0xffff, 0x3ff, 0x6, 0x7, 0x7fffffff, 0x0, 0x101, 0x4, 0x3, 0x6, 0x2c1, 0x7, 0x3, 0x7, 0x1, 0x6, 0x3ce743c4, 0x4, 0xfffffff6, 0xc0000000, 0x6, 0x0, 0x2b47, 0x1, 0x1, 0x2, 0x5, 0x4, 0xffffffff, 0x43, 0x8, 0x7, 0x800, 0x9, 0x6, 0x8, 0x5, 0xf9de, 0x8, 0x9, 0x5, 0x9, 0x7fffffff, 0x80000000, 0x27, 0x6, 0x0, 0x1, 0x2, 0x1, 0x9, 0x7, 0x5, 0x6, 0xd494, 0x1, 0x4, 0x8f32, 0x5, 0x2d10371, 0xffff8000, 0x8d9, 0xffff, 0x6eaefb83, 0xf1800, 0x8, 0xfdd5, 0x8, 0x80, 0x2, 0x2, 0x5, 0x8000, 0x20ea, 0x35, 0x6, 0x5, 0x3, 0x9, 0x2, 0xa08, 0x0, 0x6c8, 0x800, 0x9, 0xffffffff, 0x7, 0x6, 0xda, 0x7ee, 0x400, 0x0, 0xc9, 0x7203, 0x2, 0x3, 0x1, 0xa, 0x1, 0x8, 0xd, 0x4b, 0xbb1, 0x10000, 0x90, 0x9, 0xb, 0x1, 0xfffff4a7, 0x5, 0x6, 0x5, 0x0, 0x0, 0xd5ee8796, 0xb206, 0x7d43, 0x1, 0x8619, 0x8, 0x7fffffff, 0x3, 0x9, 0x3, 0x8, 0xf, 0xef72, 0xb54, 0x9, 0x401, 0x3, 0x5, 0x5925, 0x1, 0x80000000, 0x4, 0x1, 0x9, 0x20009, 0x1ff, 0xffffffff, 0x400, 0xc, 0x9, 0x3, 0x7, 0x5, 0x6, 0xb1, 0x8, 0x0, 0xff, 0x7, 0x1f, 0xf, 0x3, 0x5, 0x401, 0x2, 0x6, 0xffff8000, 0xeee, 0x1, 0x5, 0x963, 0xffffffff, 0x7fff, 0x4c3, 0x10, 0xc8, 0x2, 0x4, 0x1000, 0x3, 0x5, 0x1b, 0x401, 0x3, 0xbb, 0x4, 0x7f, 0x2, 0x363, 0xd51e, 0x0, 0x100, 0x9, 0x9c8, 0x7, 0x0, 0xdb5261b, 0x800, 0x9, 0xf0000000, 0x10001, 0x3ff, 0x6]}]}}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xba, 0x7, 0x0, 0x5, 0x8, 0x9, 0x8227, 0xffffff26, 0xec60}}}}]}, 0x650}}, 0x0) 1.525816522s ago: executing program 8 (id=2640): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4, &(0x7f0000000340)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f000002eff0)={0x20d, &(0x7f0000000000)=[{0x4, 0xd, 0x8, 0x7fff}, {0x9000, 0x2, 0x12, 0x8}]}, 0x10) 1.494725775s ago: executing program 4 (id=2641): r0 = syz_open_dev$video(0x0, 0x9, 0x1e3a00) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/202, 0xca) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000340)={0x64c9, "0357b6e14b9b2e7170efdaa62f3969bb11b493e38164877ae04773c22209d0b8", 0x3, 0x10, 0x92d2, 0xe, 0x8, 0x4, 0x2, 0x5}) 1.175095799s ago: executing program 6 (id=2642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) getuid() syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a900007b446be008300"], 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000004c0)={0x0, 0x200, 0x84, 0x20203843, 0x2, [0x2], [0x7fc, 0x0, 0x0, 0x45], [0x4], [0x3]}) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r1, 0x1, 0xff1f0000, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1f}]}]}, 0x28}}, 0x0) 967.235352ms ago: executing program 4 (id=2643): r0 = add_key$fscrypt_v1(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r0, 0xffffffffffffffff) (async) socketpair(0xa, 0x3, 0x9, &(0x7f0000000700)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0x10) 913.50579ms ago: executing program 0 (id=2644): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0'}, 0x33) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xd4bb, 0x0, 0xfffffffd, 0x0, 0x0, r1}, &(0x7f0000000380)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r6) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) 898.356158ms ago: executing program 4 (id=2645): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="102bf827b75bd5875a84f407573d336890e09fa9fe3888f860afbe3d064a982fdda6dd0a781fe58e5394fbb866523a0cc1c6d0368f78dc6788481df224785dffe880367b54ba8ae4de37567e94518ed60d2d17fdef9cf6488c441a", 0x5b}], 0x1}}], 0x1, 0x40010) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f00000003c0)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000100)="cf", 0x1}], 0x1) 0s ago: executing program 0 (id=2646): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @loopback}, 0x81}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)='\x00\x00\x00', 0x3}], 0x1}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRESDEC], 0x0, 0x2b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f00000000c0)={0x0, "d8d7531c1c6054b6b70257ec47e25dc91f003f19004f6ceb55fb98d58dccd7f0fe41ae63a0df07926f45a38667304ab9b9b98347fbe76528e77e751fd98d62be", {0x2}}) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) r3 = socket(0x15, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x20008000) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r6) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r6) keyctl$chown(0x4, r7, 0xee01, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r7, 0x0, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_init_net_socket$ax25(0x3, 0x3, 0xca) kernel console output (not intermixed with test programs): 858458][T14294] netlink: zone id is out of range [ 797.863808][T14294] netlink: zone id is out of range [ 797.869178][T14294] netlink: zone id is out of range [ 797.874927][T14294] netlink: zone id is out of range [ 797.880166][T14294] netlink: zone id is out of range [ 797.885849][T14294] netlink: zone id is out of range [ 797.935244][T14294] netlink: zone id is out of range [ 797.940661][T14294] netlink: zone id is out of range [ 800.436609][ T30] audit: type=1400 audit(2000000043.042:1342): avc: denied { setopt } for pid=14324 comm="syz.5.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 802.062574][ T5177] block nbd1: Possible stuck request ffff888027f40000: control (read@0,1024B). Runtime 90 seconds [ 802.073534][ T5177] block nbd1: Possible stuck request ffff888027f40200: control (read@1024,1024B). Runtime 90 seconds [ 802.085500][ T5177] block nbd1: Possible stuck request ffff888027f40400: control (read@2048,1024B). Runtime 90 seconds [ 802.102684][ T5177] block nbd1: Possible stuck request ffff888027f40600: control (read@3072,1024B). Runtime 90 seconds [ 804.269273][T14360] netlink: 32 bytes leftover after parsing attributes in process `$-\'. [ 804.288329][T14363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2051'. [ 804.445631][T14363] 9p: Bad value for 'wfdno' [ 804.525558][T14363] afs: Unknown parameter 'ÄãÐf&DÂß&Y>ýÉJ–c(ý‡9ڞγŽH]¾Ô9(?B0ÝœÅ%Ê[l‰Ýcüœé*]–GÖ’$ä4nѹë¶VÊZ\Å' [ 805.778025][T14373] netlink: 'syz.7.2052': attribute type 29 has an invalid length. [ 808.430728][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.024396][ T5180] udevd[5180]: worker [12031] /devices/virtual/block/nbd1 is taking a long time [ 809.127580][T14411] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2065'. [ 809.184978][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2065'. [ 811.162877][T14423] binder: 14422:14423 ioctl c0306201 200000000640 returned -22 [ 811.441653][T14427] FAULT_INJECTION: forcing a failure. [ 811.441653][T14427] name failslab, interval 1, probability 0, space 0, times 0 [ 811.472581][T14427] CPU: 1 UID: 0 PID: 14427 Comm: syz.4.2070 Tainted: G L syzkaller #0 PREEMPT(full) [ 811.472611][T14427] Tainted: [L]=SOFTLOCKUP [ 811.472617][T14427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 811.472626][T14427] Call Trace: [ 811.472632][T14427] [ 811.472639][T14427] dump_stack_lvl+0x100/0x190 [ 811.472672][T14427] should_fail_ex.cold+0x5/0xa [ 811.472696][T14427] should_failslab+0xc2/0x120 [ 811.472714][T14427] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 811.472739][T14427] ? security_inode_alloc+0x3b/0x2c0 [ 811.472761][T14427] ? lockdep_init_map_type+0x5c/0x250 [ 811.472784][T14427] security_inode_alloc+0x3b/0x2c0 [ 811.472806][T14427] inode_init_always_gfp+0xced/0x1040 [ 811.472830][T14427] alloc_inode+0x8e/0x250 [ 811.472856][T14427] new_inode+0x22/0x1c0 [ 811.472878][T14427] ? avc_has_perm_noaudit+0x145/0x3b0 [ 811.472898][T14427] shmem_get_inode+0x212/0x1040 [ 811.472922][T14427] ? __pfx_selinux_vm_enough_memory+0x10/0x10 [ 811.472948][T14427] ? __pfx_shmem_get_inode+0x10/0x10 [ 811.472968][T14427] ? rcu_is_watching+0x12/0xc0 [ 811.472988][T14427] ? percpu_counter_add_batch+0xb9/0x230 [ 811.473023][T14427] __shmem_file_setup+0x3ac/0x490 [ 811.473047][T14427] ? __pfx___shmem_file_setup+0x10/0x10 [ 811.473074][T14427] ? vm_area_alloc+0x1f/0x160 [ 811.473099][T14427] shmem_zero_setup+0x96/0x1b0 [ 811.473127][T14427] __mmap_region+0x2198/0x29e0 [ 811.473155][T14427] ? __pfx___mmap_region+0x10/0x10 [ 811.473180][T14427] ? process_measurement+0x1f4/0x2350 [ 811.473209][T14427] ? find_held_lock+0x2b/0x80 [ 811.473230][T14427] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 811.473283][T14427] ? is_bpf_text_address+0x94/0x1a0 [ 811.473314][T14427] ? kernel_text_address+0x8d/0x100 [ 811.473334][T14427] ? __kernel_text_address+0xd/0x30 [ 811.473383][T14427] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 811.473412][T14427] mmap_region+0x180/0x3e0 [ 811.473442][T14427] do_mmap+0xc63/0x12f0 [ 811.473465][T14427] ? __pfx_do_mmap+0x10/0x10 [ 811.473484][T14427] ? __pfx_down_write_killable+0x10/0x10 [ 811.473516][T14427] vm_mmap_pgoff+0x29e/0x470 [ 811.473540][T14427] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 811.473561][T14427] ? __fget_files+0x215/0x3d0 [ 811.473581][T14427] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 811.473610][T14427] ksys_mmap_pgoff+0xe1/0x650 [ 811.473631][T14427] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 811.473648][T14427] ? fput+0x79/0x100 [ 811.473668][T14427] ? ksys_write+0x1ac/0x250 [ 811.473694][T14427] ? __pfx_ksys_write+0x10/0x10 [ 811.473723][T14427] __x64_sys_mmap+0x125/0x190 [ 811.473744][T14427] do_syscall_64+0x106/0xf80 [ 811.473766][T14427] ? clear_bhb_loop+0x40/0x90 [ 811.473788][T14427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.473806][T14427] RIP: 0033:0x7f585df9c799 [ 811.473822][T14427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.473838][T14427] RSP: 002b:00007f585eea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 811.473855][T14427] RAX: ffffffffffffffda RBX: 00007f585e215fa0 RCX: 00007f585df9c799 [ 811.473867][T14427] RDX: 0000000003000001 RSI: 0000000000fbe000 RDI: 0000200000000000 [ 811.473877][T14427] RBP: 00007f585eea2090 R08: ffffffffffffffff R09: 0000000000000000 [ 811.473888][T14427] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000001 [ 811.473898][T14427] R13: 00007f585e216038 R14: 00007f585e215fa0 R15: 00007ffc2ef21bb8 [ 811.473923][T14427] [ 811.564129][T14432] net_ratelimit: 10 callbacks suppressed [ 811.564143][T14432] netlink: zone id is out of range [ 811.650967][T14431] vivid-002: disconnect [ 811.692051][T14432] netlink: zone id is out of range [ 811.847527][T14432] netlink: zone id is out of range [ 811.855937][T14432] netlink: zone id is out of range [ 811.861637][T14432] netlink: zone id is out of range [ 811.870905][T14432] netlink: zone id is out of range [ 812.069361][T14429] vivid-002: reconnect [ 812.342954][T14432] netlink: zone id is out of range [ 812.376133][T14432] netlink: zone id is out of range [ 812.392264][T14432] netlink: zone id is out of range [ 812.416559][T14432] netlink: zone id is out of range [ 813.561934][ T30] audit: type=1400 audit(2000000056.173:1343): avc: denied { unlink } for pid=14442 comm="syz.6.2076" name="#31" dev="tmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 813.667609][ T30] audit: type=1400 audit(2000000056.183:1344): avc: denied { mount } for pid=14442 comm="syz.6.2076" name="/" dev="overlay" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 813.770189][ T30] audit: type=1400 audit(2000000056.283:1345): avc: denied { unmount } for pid=10608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 814.042880][ T30] audit: type=1326 audit(2000000056.663:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.5.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda88d9c799 code=0x7ffc0000 [ 814.200850][ T30] audit: type=1326 audit(2000000056.663:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.5.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda88d9c799 code=0x7ffc0000 [ 814.371190][ T30] audit: type=1326 audit(2000000056.703:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.5.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fda88d9c799 code=0x7ffc0000 [ 814.395957][ T30] audit: type=1326 audit(2000000056.703:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.5.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda88d9c799 code=0x7ffc0000 [ 814.693356][T14464] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 815.442440][ T30] audit: type=1326 audit(2000000056.703:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.5.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda88d9c799 code=0x7ffc0000 [ 815.538413][ T30] audit: type=1326 audit(2000000056.703:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.5.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda88d9c799 code=0x7ffc0000 [ 815.815103][ T1068] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.836661][ T30] audit: type=1326 audit(2000000056.703:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.5.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda88d9c799 code=0x7ffc0000 [ 816.248918][ T1068] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.267831][T14480] netlink: 'syz.6.2086': attribute type 2 has an invalid length. [ 816.539176][T14483] devpts: Bad value for 'max' [ 816.748812][T14476] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2087'. [ 817.115240][T14481] ipip0: entered promiscuous mode [ 817.158218][T14481] ipip0: entered allmulticast mode [ 817.175414][T14489] net_ratelimit: 10 callbacks suppressed [ 817.175482][T14489] netlink: zone id is out of range [ 817.187362][T14489] netlink: zone id is out of range [ 817.193435][T14489] netlink: zone id is out of range [ 817.198671][T14489] netlink: zone id is out of range [ 817.204298][T14489] netlink: zone id is out of range [ 817.209613][T14489] netlink: zone id is out of range [ 817.214878][T14489] netlink: zone id is out of range [ 817.219968][T14489] netlink: zone id is out of range [ 817.225131][T14489] netlink: zone id is out of range [ 817.230304][T14489] netlink: zone id is out of range [ 817.444286][ T1068] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.673917][ T1068] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.814345][ T29] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 817.887725][T14505] netlink: 'syz.5.2095': attribute type 29 has an invalid length. [ 818.465553][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 818.645030][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.681814][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 818.721990][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 820.088572][ T29] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 820.149212][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.220945][ T29] usb 5-1: Product: syz [ 820.231275][ T29] usb 5-1: Manufacturer: syz [ 820.630940][ T29] usb 5-1: SerialNumber: syz [ 820.676390][ T29] usb 5-1: config 0 descriptor?? [ 820.711335][ T29] usb 5-1: can't set config #0, error -71 [ 820.797513][ T29] usb 5-1: USB disconnect, device number 50 [ 820.811885][ T1068] bridge_slave_1: left allmulticast mode [ 820.861642][ T1068] bridge_slave_1: left promiscuous mode [ 820.867722][ T1068] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.966723][ T1068] bridge_slave_0: left allmulticast mode [ 821.006258][ T1068] bridge_slave_0: left promiscuous mode [ 821.081323][ T1068] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.358005][T14546] devpts: Bad value for 'max' [ 821.426192][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 821.834918][T14560] SELinux: policydb version -188086128 does not match my version range 15-35 [ 821.844477][T14560] SELinux: failed to load policy [ 821.850302][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 821.850317][ T30] audit: type=1400 audit(2000000064.463:1369): avc: denied { load_policy } for pid=14555 comm="syz.7.2106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 823.829612][ T1068] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.917607][ T1068] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.943132][T14584] net_ratelimit: 30 callbacks suppressed [ 823.943144][T14584] netlink: zone id is out of range [ 823.954292][T14584] netlink: zone id is out of range [ 823.959371][T14584] netlink: zone id is out of range [ 823.964852][T14584] netlink: zone id is out of range [ 823.969928][T14584] netlink: zone id is out of range [ 823.975440][T14584] netlink: zone id is out of range [ 823.980516][T14584] netlink: zone id is out of range [ 823.985995][T14584] netlink: zone id is out of range [ 823.991071][T14584] netlink: zone id is out of range [ 823.996606][T14584] netlink: zone id is out of range [ 824.023608][ T1068] .` (unregistering): Released all slaves [ 824.206096][ T1068] tipc: Left network mode [ 824.215808][T14590] netlink: 'syz.7.2115': attribute type 29 has an invalid length. [ 824.448269][T14594] netlink: 'syz.4.2116': attribute type 29 has an invalid length. [ 825.339395][T14614] devpts: Bad value for 'max' [ 825.409715][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 825.561738][ T30] audit: type=1400 audit(2000000068.163:1370): avc: denied { write } for pid=14612 comm="syz.6.2117" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 825.615665][ T5823] Bluetooth: Wrong link type (-57) [ 825.741280][ T30] audit: type=1400 audit(2000000068.163:1371): avc: denied { ioctl } for pid=14612 comm="syz.6.2117" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 825.831433][ T5940] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 826.128907][ T5940] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 826.153392][ T30] audit: type=1400 audit(2000000068.783:1372): avc: denied { accept } for pid=14619 comm="syz.0.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 826.185765][ T5940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.204097][ T5940] usb 7-1: Product: syz [ 826.214182][ T5940] usb 7-1: Manufacturer: syz [ 826.231367][ T5940] usb 7-1: SerialNumber: syz [ 826.249278][ T5940] usb 7-1: config 0 descriptor?? [ 826.669678][ T5940] usb 7-1: Firmware: major: 50, minor: 195, hardware type: UNKNOWN (85) [ 826.870915][ T5940] usb 7-1: Read permanent extended address f2:dd:00:f0:0f:e2:c0:e3 from device [ 826.933260][ T5940] usb 7-1: atusb_probe: initialization failed, error = -524 [ 827.021686][ T5940] atusb 7-1:0.0: probe with driver atusb failed with error -524 [ 827.593400][ T1068] hsr_slave_0: left promiscuous mode [ 827.631693][ T1068] hsr_slave_1: left promiscuous mode [ 827.953860][ T1068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 828.009377][ T1068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.069096][ T1068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 828.118941][ T1068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.195007][ T5940] usb 7-1: USB disconnect, device number 17 [ 828.203063][ T1068] veth1_macvtap: left promiscuous mode [ 828.222287][ T1068] veth0_macvtap: left promiscuous mode [ 828.247130][ T1068] veth1_vlan: left promiscuous mode [ 828.268013][ T30] audit: type=1400 audit(2000000070.893:1373): avc: denied { read } for pid=14642 comm="syz.4.2126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 828.278236][ T1068] veth0_vlan: left promiscuous mode [ 829.645780][ T1068] team0 (unregistering): Port device team_slave_1 removed [ 829.724036][ T1068] team0 (unregistering): Port device team_slave_0 removed [ 830.313308][ T30] audit: type=1400 audit(2000000072.924:1374): avc: denied { getopt } for pid=14657 comm="syz.4.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 830.451928][ T30] audit: type=1400 audit(2000000072.984:1375): avc: denied { getopt } for pid=14657 comm="syz.4.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 830.691629][T14667] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=14667 comm=syz.4.2130 [ 830.906219][ T30] audit: type=1400 audit(2000000073.534:1376): avc: denied { read write } for pid=14672 comm="syz.6.2134" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 831.021515][ T30] audit: type=1400 audit(2000000073.534:1377): avc: denied { open } for pid=14672 comm="syz.6.2134" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 831.178915][ T30] audit: type=1400 audit(2000000073.594:1378): avc: denied { ioctl } for pid=14672 comm="syz.6.2134" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 831.504312][T14680] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 831.511621][T14680] IPv6: NLM_F_CREATE should be set when creating new route [ 831.518815][T14680] IPv6: NLM_F_CREATE should be set when creating new route [ 831.526022][T14680] IPv6: NLM_F_CREATE should be set when creating new route [ 831.707399][ T30] audit: type=1400 audit(2000000074.334:1379): avc: denied { write } for pid=14677 comm="syz.7.2135" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 831.737130][T14681] 0xfffffffffffffffd-0x000000020000 : "" [ 831.743112][T14681] mtd: partition "" is out of reach -- disabled [ 831.785735][T14681] ftl_cs: FTL header not found. [ 831.912311][ T1068] IPVS: stop unused estimator thread 0... [ 831.996975][T14685] net_ratelimit: 50 callbacks suppressed [ 831.997007][T14685] netlink: zone id is out of range [ 832.008412][T14685] netlink: zone id is out of range [ 832.013953][T14685] netlink: zone id is out of range [ 832.019147][T14685] netlink: zone id is out of range [ 832.024588][T14685] netlink: zone id is out of range [ 832.029775][T14685] netlink: zone id is out of range [ 832.035983][T14685] netlink: zone id is out of range [ 832.041309][T14685] netlink: zone id is out of range [ 832.051174][T14685] netlink: zone id is out of range [ 832.056508][T14685] netlink: zone id is out of range [ 832.250959][ T5177] block nbd1: Possible stuck request ffff888027f40000: control (read@0,1024B). Runtime 120 seconds [ 832.312202][ T5177] block nbd1: Possible stuck request ffff888027f40200: control (read@1024,1024B). Runtime 120 seconds [ 832.326765][ T5177] block nbd1: Possible stuck request ffff888027f40400: control (read@2048,1024B). Runtime 120 seconds [ 832.350776][ T5177] block nbd1: Possible stuck request ffff888027f40600: control (read@3072,1024B). Runtime 120 seconds [ 832.355353][ T30] audit: type=1400 audit(2000000074.334:1380): avc: denied { open } for pid=14677 comm="syz.7.2135" path="/118/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 832.611601][ T30] audit: type=1400 audit(2000000074.364:1381): avc: denied { ioctl } for pid=14677 comm="syz.7.2135" path="/118/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 832.906937][ T30] audit: type=1400 audit(2000000075.534:1382): avc: denied { mounton } for pid=14695 comm="syz.6.2140" path="/file0" dev="ramfs" ino=45283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 834.105717][T14726] netlink: 'syz.7.2146': attribute type 1 has an invalid length. [ 834.135705][T14726] netlink: 15334 bytes leftover after parsing attributes in process `syz.7.2146'. [ 836.363455][ T30] audit: type=1400 audit(2000000078.914:1383): avc: denied { connect } for pid=14738 comm="syz.5.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 836.835813][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2157'. [ 836.993695][T14762] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2151'. [ 838.149319][T14758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2157'. [ 838.169461][T14765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14765 comm=syz.0.2157 [ 838.222551][T14758] netlink: 'syz.0.2157': attribute type 1 has an invalid length. [ 839.535033][T14791] dummy0: entered allmulticast mode [ 839.551215][ T29] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 839.643489][T14791] dummy0: left allmulticast mode [ 839.742712][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 839.800169][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 839.875925][ T29] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 839.928257][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.984601][ T29] usb 8-1: Product: syz [ 840.005847][ T29] usb 8-1: Manufacturer: syz [ 840.033465][ T29] usb 8-1: SerialNumber: syz [ 840.069917][ T29] usb 8-1: config 0 descriptor?? [ 840.962107][T14813] syzkaller0: entered promiscuous mode [ 840.975981][T14813] syzkaller0: entered allmulticast mode [ 841.017417][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2168'. [ 842.850513][T14833] net_ratelimit: 50 callbacks suppressed [ 842.850531][T14833] netlink: zone id is out of range [ 842.861577][T14833] netlink: zone id is out of range [ 842.866718][T14833] netlink: zone id is out of range [ 842.871958][T14833] netlink: zone id is out of range [ 842.877088][T14833] netlink: zone id is out of range [ 842.882360][T14833] netlink: zone id is out of range [ 842.887500][T14833] netlink: zone id is out of range [ 842.892707][T14833] netlink: zone id is out of range [ 842.897854][T14833] netlink: zone id is out of range [ 842.909018][T14833] netlink: zone id is out of range [ 843.191762][ T29] usb 8-1: USB disconnect, device number 15 [ 843.465923][ T30] audit: type=1400 audit(2000000086.094:1384): avc: denied { create } for pid=14839 comm="syz.7.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 844.743716][T14823] netlink: 'syz.4.2172': attribute type 29 has an invalid length. [ 845.275349][ T30] audit: type=1400 audit(2000000087.864:1385): avc: denied { shutdown } for pid=14842 comm="syz.5.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 846.622433][ T30] audit: type=1400 audit(2000000089.255:1386): avc: denied { listen } for pid=14857 comm="syz.5.2180" lport=48653 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 846.742825][ T30] audit: type=1400 audit(2000000089.255:1387): avc: denied { accept } for pid=14857 comm="syz.5.2180" lport=48653 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 846.827678][ T30] audit: type=1400 audit(2000000089.255:1388): avc: denied { getopt } for pid=14857 comm="syz.5.2180" lport=48653 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 846.962103][T14860] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2181'. [ 847.040761][T14860] vlan2: entered promiscuous mode [ 847.063294][T14860] gretap0: entered promiscuous mode [ 847.240887][T14869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2182'. [ 852.331639][T14913] binder: BINDER_SET_CONTEXT_MGR already set [ 852.339960][T14913] binder: 14912:14913 ioctl 4018620d 200000004a80 returned -16 [ 852.549169][ T30] audit: type=1400 audit(2000000095.065:1389): avc: denied { mounton } for pid=14912 comm="syz.7.2187" path="/128/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 854.050707][T14919] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2186'. [ 854.114645][T14907] netlink: 'syz.4.2192': attribute type 29 has an invalid length. [ 854.233956][T14922] net_ratelimit: 30 callbacks suppressed [ 854.233992][T14922] netlink: zone id is out of range [ 854.244972][T14922] netlink: zone id is out of range [ 854.256378][T14922] netlink: zone id is out of range [ 854.262632][T14922] netlink: zone id is out of range [ 854.267816][T14922] netlink: zone id is out of range [ 854.273107][T14922] netlink: zone id is out of range [ 854.278297][T14922] netlink: zone id is out of range [ 854.300069][T14922] netlink: zone id is out of range [ 854.305547][T14922] netlink: zone id is out of range [ 854.311361][T14922] netlink: zone id is out of range [ 857.295979][T14967] netlink: 'syz.5.2202': attribute type 2 has an invalid length. [ 857.336779][T14967] ipip1: entered promiscuous mode [ 857.342262][T14967] ipip1: entered allmulticast mode [ 857.348239][T14967] team0: Device ipip1 is of different type [ 857.533470][T14976] netlink: 'syz.6.2204': attribute type 29 has an invalid length. [ 859.034297][T14991] overlay: Bad value for 'workdir' [ 860.802091][T14992] syz_tun: entered allmulticast mode [ 860.812879][T14992] syz_tun: left allmulticast mode [ 860.823557][T14993] syz_tun: entered allmulticast mode [ 862.194238][T15025] overlayfs: missing 'lowerdir' [ 862.819246][ T5177] block nbd1: Possible stuck request ffff888027f40000: control (read@0,1024B). Runtime 150 seconds [ 862.830006][ T5177] block nbd1: Possible stuck request ffff888027f40200: control (read@1024,1024B). Runtime 150 seconds [ 862.841011][ T5177] block nbd1: Possible stuck request ffff888027f40400: control (read@2048,1024B). Runtime 150 seconds [ 862.852026][ T5177] block nbd1: Possible stuck request ffff888027f40600: control (read@3072,1024B). Runtime 150 seconds [ 863.311170][T15049] net_ratelimit: 10 callbacks suppressed [ 863.311190][T15049] netlink: zone id is out of range [ 863.322573][T15049] netlink: zone id is out of range [ 863.327683][T15049] netlink: zone id is out of range [ 863.333212][T15049] netlink: zone id is out of range [ 863.338333][T15049] netlink: zone id is out of range [ 863.344093][T15049] netlink: zone id is out of range [ 863.349300][T15049] netlink: zone id is out of range [ 863.354443][T15049] netlink: zone id is out of range [ 863.359590][T15049] netlink: zone id is out of range [ 863.364731][T15049] netlink: zone id is out of range [ 866.849459][ T30] audit: type=1400 audit(2000000109.476:1390): avc: denied { getopt } for pid=15092 comm="syz.7.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 867.138290][T15105] xt_hashlimit: size too large, truncated to 1048576 [ 867.578847][ T5890] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 868.074161][T15118] ipvlan2: entered promiscuous mode [ 868.085452][T15118] ipvlan2: entered allmulticast mode [ 868.091558][T15118] vlan1: entered allmulticast mode [ 868.096864][T15118] veth0_vlan: entered allmulticast mode [ 868.108549][ T5890] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 868.118470][ T5890] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.122418][T15118] team0: Device ipvlan2 is up. Set it down before adding it as a team port [ 868.136961][ T5890] usb 8-1: config 0 descriptor?? [ 868.151864][ T5890] cp210x 8-1:0.0: cp210x converter detected [ 869.319822][ T5890] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 869.327326][ T5890] cp210x 8-1:0.0: querying part number failed [ 869.466913][ T5890] usb 8-1: cp210x converter now attached to ttyUSB0 [ 869.476819][ T5890] usb 8-1: USB disconnect, device number 16 [ 869.499432][T15125] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2232'. [ 869.503571][ T5890] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 869.548639][ T5890] cp210x 8-1:0.0: device disconnected [ 869.653946][T15127] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2234'. [ 869.764866][ T30] audit: type=1400 audit(2000000112.396:1391): avc: denied { getopt } for pid=15128 comm="syz.0.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 869.879621][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.939343][ T793] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 870.099731][ T793] usb 7-1: Using ep0 maxpacket: 16 [ 870.106333][ T793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.120137][ T30] audit: type=1400 audit(2000000112.736:1392): avc: denied { shutdown } for pid=15134 comm="syz.7.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 870.159915][ T793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.179417][ T793] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 870.189227][ T30] audit: type=1400 audit(2000000112.776:1393): avc: denied { read write } for pid=15134 comm="syz.7.2238" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 870.225520][T15138] netlink: 5256 bytes leftover after parsing attributes in process `syz.7.2238'. [ 870.234890][T15138] nbd: must specify at least one socket [ 870.242730][ T793] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 870.296251][ T793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.421860][ T793] usb 7-1: config 0 descriptor?? [ 870.422966][ T30] audit: type=1400 audit(2000000112.776:1394): avc: denied { open } for pid=15134 comm="syz.7.2238" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 870.656272][T15141] net_ratelimit: 10 callbacks suppressed [ 870.656369][T15141] netlink: zone id is out of range [ 870.667376][T15141] netlink: zone id is out of range [ 870.672641][T15141] netlink: zone id is out of range [ 870.677925][T15141] netlink: zone id is out of range [ 870.683219][T15141] netlink: zone id is out of range [ 870.688384][T15141] netlink: zone id is out of range [ 870.693581][T15141] netlink: zone id is out of range [ 870.698746][T15141] netlink: zone id is out of range [ 870.704897][T15141] netlink: zone id is out of range [ 870.715078][T15141] netlink: zone id is out of range [ 870.951664][ T793] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 870.979429][ T793] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max [ 871.007717][ T793] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0011/input/input23 [ 871.105597][ T793] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 871.347461][ T30] audit: type=1400 audit(2000000113.976:1395): avc: denied { append } for pid=15144 comm="syz.4.2240" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 872.339300][ T29] usb 7-1: reset high-speed USB device number 18 using dummy_hcd [ 873.622830][ T793] usb 7-1: USB disconnect, device number 18 [ 874.629514][T15189] devpts: Bad value for 'max' [ 875.692257][T15210] netlink: 'syz.4.2255': attribute type 2 has an invalid length. [ 875.986693][T15211] ipip0: entered promiscuous mode [ 875.992704][T15211] ipip0: entered allmulticast mode [ 876.003893][T15211] team0: Device ipip0 is of different type [ 878.228597][T15226] tipc: Enabled bearer , priority 0 [ 878.316000][T15226] syzkaller0: entered promiscuous mode [ 878.324997][T15226] syzkaller0: entered allmulticast mode [ 878.348673][T15226] tipc: Resetting bearer [ 878.379447][T15225] tipc: Resetting bearer [ 879.145699][T15236] FAULT_INJECTION: forcing a failure. [ 879.145699][T15236] name failslab, interval 1, probability 0, space 0, times 0 [ 879.169255][T15236] CPU: 1 UID: 0 PID: 15236 Comm: syz.7.2261 Tainted: G L syzkaller #0 PREEMPT(full) [ 879.169288][T15236] Tainted: [L]=SOFTLOCKUP [ 879.169294][T15236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 879.169312][T15236] Call Trace: [ 879.169319][T15236] [ 879.169326][T15236] dump_stack_lvl+0x100/0x190 [ 879.169360][T15236] should_fail_ex.cold+0x5/0xa [ 879.169383][T15236] should_failslab+0xc2/0x120 [ 879.169401][T15236] __kmalloc_cache_noprof+0x7a/0x6f0 [ 879.169423][T15236] ? vhost_task_create+0xee/0x370 [ 879.169447][T15236] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 879.169471][T15236] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 879.169500][T15236] vhost_task_create+0xee/0x370 [ 879.169519][T15236] ? __pfx_vhost_task_create+0x10/0x10 [ 879.169537][T15236] ? trace_contention_end+0x140/0x180 [ 879.169562][T15236] ? __pfx_vhost_task_fn+0x10/0x10 [ 879.169583][T15236] ? __pfx___mutex_lock+0x10/0x10 [ 879.169603][T15236] ? kasan_quarantine_put+0x104/0x240 [ 879.169625][T15236] ? lockdep_hardirqs_on+0x78/0x100 [ 879.169649][T15236] kvm_mmu_post_init_vm+0x1b3/0x370 [ 879.169670][T15236] kvm_arch_vcpu_ioctl_run+0x66/0x1830 [ 879.169690][T15236] ? kvm_vcpu_ioctl+0x155c/0x1730 [ 879.169721][T15236] kvm_vcpu_ioctl+0x730/0x1730 [ 879.169748][T15236] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 879.169771][T15236] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 879.169794][T15236] ? do_vfs_ioctl+0x226/0x13e0 [ 879.169818][T15236] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 879.169840][T15236] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 879.169879][T15236] ? __fget_files+0x215/0x3d0 [ 879.169897][T15236] ? hook_file_ioctl_common+0x146/0x410 [ 879.169933][T15236] ? selinux_file_ioctl+0x139/0x290 [ 879.169952][T15236] ? selinux_file_ioctl+0xb4/0x290 [ 879.169974][T15236] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 879.169997][T15236] __x64_sys_ioctl+0x18e/0x210 [ 879.170022][T15236] do_syscall_64+0x106/0xf80 [ 879.170043][T15236] ? clear_bhb_loop+0x40/0x90 [ 879.170064][T15236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.170080][T15236] RIP: 0033:0x7f83b959c799 [ 879.170096][T15236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.170111][T15236] RSP: 002b:00007f83ba504028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 879.170128][T15236] RAX: ffffffffffffffda RBX: 00007f83b9815fa0 RCX: 00007f83b959c799 [ 879.170138][T15236] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 879.170148][T15236] RBP: 00007f83ba504090 R08: 0000000000000000 R09: 0000000000000000 [ 879.170158][T15236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.170167][T15236] R13: 00007f83b9816038 R14: 00007f83b9815fa0 R15: 00007ffe0f1d3568 [ 879.170189][T15236] [ 879.219533][ T30] audit: type=1400 audit(2000000121.816:1396): avc: denied { create } for pid=15237 comm="syz.6.2260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 879.521145][ T30] audit: type=1400 audit(2000000121.816:1397): avc: denied { ioctl } for pid=15237 comm="syz.6.2260" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 880.700848][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2266'. [ 881.804454][T11752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 881.827422][T11752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 881.837152][T11752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 881.846561][T11752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 881.862740][T11752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 881.965776][ T30] audit: type=1400 audit(2000000124.586:1398): avc: denied { mounton } for pid=15251 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 882.666443][T15225] tipc: Disabling bearer [ 883.111421][T15261] net_ratelimit: 10 callbacks suppressed [ 883.111453][T15261] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 883.444376][T15264] tipc: Enabled bearer , priority 0 [ 883.589967][T15266] syzkaller0: entered promiscuous mode [ 883.596543][T15266] syzkaller0: entered allmulticast mode [ 883.603817][T15266] tipc: Resetting bearer [ 883.717002][T15255] tipc: Resetting bearer [ 884.731769][T11752] Bluetooth: hci1: command tx timeout [ 884.854966][T15283] netlink: 'syz.7.2273': attribute type 2 has an invalid length. [ 886.818511][T11752] Bluetooth: hci1: command tx timeout [ 887.118767][T15255] tipc: Disabling bearer [ 887.169096][T15280] syz_tun: entered allmulticast mode [ 887.174536][T15280] syz_tun: left allmulticast mode [ 887.236264][T15285] ipip0: entered promiscuous mode [ 887.276862][T15285] ipip0: entered allmulticast mode [ 887.290340][T15287] netlink: 'syz.0.2276': attribute type 2 has an invalid length. [ 887.331850][T15285] team0: Device ipip0 is of different type [ 887.566505][T15287] ipip0: entered promiscuous mode [ 887.572077][T15287] ipip0: entered allmulticast mode [ 887.578515][T15287] team0: Device ipip0 is of different type [ 888.232472][T15251] chnl_net:caif_netlink_parms(): no params data found [ 888.901274][T11752] Bluetooth: hci1: command tx timeout [ 888.929827][T15251] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.949359][T15251] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.956542][T15251] bridge_slave_0: entered allmulticast mode [ 889.035365][T15251] bridge_slave_0: entered promiscuous mode [ 889.075832][T15251] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.127758][T15251] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.148010][T15251] bridge_slave_1: entered allmulticast mode [ 889.176121][T15251] bridge_slave_1: entered promiscuous mode [ 889.395618][T15251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.444397][T15251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.515876][T15329] netlink: 'syz.7.2287': attribute type 2 has an invalid length. [ 889.852415][T15331] ipip0: entered promiscuous mode [ 889.857730][T15331] ipip0: entered allmulticast mode [ 889.885383][T15331] team0: Device ipip0 is of different type [ 890.518087][T15251] team0: Port device team_slave_0 added [ 890.585429][T15251] team0: Port device team_slave_1 added [ 890.619998][T15323] nfs: Unknown parameter 'ÿÿÿÿ' [ 890.998219][T11752] Bluetooth: hci1: command tx timeout [ 891.226345][T15251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.244411][T15251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.348048][T15251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.439494][T15251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.472599][T15251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.506055][T15251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.668951][T15348] netlink: zone id is out of range [ 891.674266][T15348] netlink: zone id is out of range [ 891.679880][T15348] netlink: zone id is out of range [ 891.685079][T15348] netlink: zone id is out of range [ 891.690597][T15348] netlink: zone id is out of range [ 891.697798][T15348] netlink: zone id is out of range [ 891.702978][T15348] netlink: zone id is out of range [ 891.713502][T15348] netlink: zone id is out of range [ 891.728021][T15251] hsr_slave_0: entered promiscuous mode [ 891.733887][T15348] netlink: zone id is out of range [ 891.750890][T15348] netlink: zone id is out of range [ 891.818504][T15251] hsr_slave_1: entered promiscuous mode [ 891.990033][ T30] audit: type=1400 audit(2000000134.627:1399): avc: denied { map } for pid=15350 comm="syz.0.2293" path="socket:[47651]" dev="sockfs" ino=47651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 892.306380][ T30] audit: type=1400 audit(2000000134.627:1400): avc: denied { accept } for pid=15350 comm="syz.0.2293" path="socket:[47651]" dev="sockfs" ino=47651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 892.608045][ T30] audit: type=1400 audit(2000000135.127:1401): avc: denied { setopt } for pid=15355 comm="syz.0.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 892.949929][ T5177] block nbd1: Possible stuck request ffff888027f40000: control (read@0,1024B). Runtime 180 seconds [ 892.963204][ T5177] block nbd1: Possible stuck request ffff888027f40200: control (read@1024,1024B). Runtime 180 seconds [ 892.974351][ T5177] block nbd1: Possible stuck request ffff888027f40400: control (read@2048,1024B). Runtime 180 seconds [ 892.987374][ T5177] block nbd1: Possible stuck request ffff888027f40600: control (read@3072,1024B). Runtime 180 seconds [ 894.643871][T11752] Bluetooth: Wrong link type (-57) [ 895.024715][T15251] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 895.078987][T15251] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 895.142146][T15251] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 895.204212][T15251] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 895.488210][T15251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.530400][T15251] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.561842][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.569074][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.664853][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.672172][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.840359][T15386] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2301'. [ 896.851878][T15404] net_ratelimit: 51 callbacks suppressed [ 896.851898][T15404] netlink: zone id is out of range [ 896.877175][T15404] netlink: zone id is out of range [ 896.883652][T15404] netlink: zone id is out of range [ 896.895292][T15404] netlink: zone id is out of range [ 896.904855][T15404] netlink: zone id is out of range [ 896.920613][T15404] netlink: zone id is out of range [ 896.927161][T15404] netlink: zone id is out of range [ 896.937151][T15404] netlink: zone id is out of range [ 896.947027][T15404] netlink: zone id is out of range [ 896.957120][T15404] netlink: zone id is out of range [ 897.470605][T15251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.440963][ T30] audit: type=1400 audit(2000000142.077:1402): avc: denied { mount } for pid=15421 comm="syz.0.2309" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 899.560252][T15423] overlayfs: failed to resolve '/¾8 *ói«FO«N‡~Üy–+£Û': -2 [ 900.065461][ T30] audit: type=1400 audit(2000000142.698:1403): avc: denied { getopt } for pid=15441 comm="syz.4.2313" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 900.138904][T15251] veth0_vlan: entered promiscuous mode [ 900.159106][T15251] veth1_vlan: entered promiscuous mode [ 900.212786][T15251] veth0_macvtap: entered promiscuous mode [ 900.352284][T15251] veth1_macvtap: entered promiscuous mode [ 900.808024][T15251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 900.828513][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2315'. [ 900.865978][T15251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 900.906715][ T1156] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.930223][ T1156] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.946464][ T1156] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.963235][ T1156] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.313357][T15461] netlink: 'syz.0.2319': attribute type 2 has an invalid length. [ 901.330909][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.351382][T15461] ipip0: entered promiscuous mode [ 901.356576][T15461] ipip0: entered allmulticast mode [ 901.365731][T15461] team0: Device ipip0 is of different type [ 901.399246][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.493549][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.507107][ T5890] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 901.534318][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.723291][ T30] audit: type=1400 audit(2000000145.358:1404): avc: denied { ioctl } for pid=15466 comm="syz.6.2322" path="socket:[49241]" dev="sockfs" ino=49241 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 902.773755][ T30] audit: type=1400 audit(2000000145.358:1405): avc: denied { mounton } for pid=15251 comm="syz-executor" path="/root/syzkaller.GfY83g/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 902.822896][ T5890] usb 5-1: unable to get BOS descriptor or descriptor too short [ 902.847374][ T5890] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.879225][ T5890] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 902.924197][ T30] audit: type=1400 audit(2000000145.358:1406): avc: denied { mounton } for pid=15251 comm="syz-executor" path="/root/syzkaller.GfY83g/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 903.271078][T15470] overlayfs: failed to clone upperpath [ 903.307979][ T5890] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 903.317227][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.325255][ T5890] usb 5-1: Product: syz [ 903.331111][ T30] audit: type=1400 audit(2000000145.358:1407): avc: denied { mounton } for pid=15251 comm="syz-executor" path="/root/syzkaller.GfY83g/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=48730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 903.359064][ T5890] usb 5-1: Manufacturer: syz [ 903.363820][ T5890] usb 5-1: SerialNumber: syz [ 903.370655][ T30] audit: type=1400 audit(2000000145.398:1408): avc: denied { mounton } for pid=15251 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 903.405065][ T5890] usb 5-1: selecting invalid altsetting 1 [ 903.417321][ T5890] usb 5-1: unit 6 not found! [ 903.473365][ T30] audit: type=1400 audit(2000000145.408:1409): avc: denied { mount } for pid=15251 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 903.520081][ T5890] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 903.528079][ T30] audit: type=1400 audit(2000000145.408:1410): avc: denied { mounton } for pid=15251 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 903.832989][T11823] udevd[11823]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 904.188517][ T793] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 904.453306][ T793] usb 7-1: config 0 has an invalid interface number: 83 but max is 0 [ 904.569030][ T793] usb 7-1: config 0 has no interface number 0 [ 904.576136][T15490] 9p: Bad value for 'rfdno' [ 904.578684][ T793] usb 7-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 904.679920][ T5940] usb 5-1: USB disconnect, device number 51 [ 904.750510][ T793] usb 7-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 904.760833][ T793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.788864][ T793] usb 7-1: config 0 descriptor?? [ 904.797896][ T793] ttusbir 7-1:0.83: cannot find expected altsetting [ 906.037902][T15502] overlayfs: failed to resolve '/¾8 *ói«FO«N‡~Üy–+£Û': -2 [ 906.206183][ T30] audit: type=1400 audit(2000000147.798:1411): avc: denied { read } for pid=15493 comm="syz.4.2327" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 906.397529][ T30] audit: type=1400 audit(2000000148.668:1412): avc: denied { mounton } for pid=15481 comm="syz.6.2325" path="/197/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 907.845530][ T30] audit: type=1400 audit(2000000150.458:1413): avc: denied { bind } for pid=15516 comm="syz.8.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 907.947026][ T30] audit: type=1400 audit(2000000150.478:1414): avc: denied { name_bind } for pid=15516 comm="syz.8.2333" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 908.030487][ T30] audit: type=1400 audit(2000000150.478:1415): avc: denied { node_bind } for pid=15516 comm="syz.8.2333" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 908.097725][ T30] audit: type=1400 audit(2000000150.618:1416): avc: denied { connect } for pid=15516 comm="syz.8.2333" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 908.144538][T15522] FAULT_INJECTION: forcing a failure. [ 908.144538][T15522] name failslab, interval 1, probability 0, space 0, times 0 [ 908.157633][T15522] CPU: 1 UID: 0 PID: 15522 Comm: syz.7.2335 Tainted: G L syzkaller #0 PREEMPT(full) [ 908.157653][T15522] Tainted: [L]=SOFTLOCKUP [ 908.157657][T15522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 908.157664][T15522] Call Trace: [ 908.157668][T15522] [ 908.157673][T15522] dump_stack_lvl+0x100/0x190 [ 908.157696][T15522] should_fail_ex.cold+0x5/0xa [ 908.157711][T15522] should_failslab+0xc2/0x120 [ 908.157724][T15522] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 908.157741][T15522] ? __d_alloc+0x34/0xa80 [ 908.157757][T15522] __d_alloc+0x34/0xa80 [ 908.157772][T15522] d_alloc_pseudo+0x1c/0xc0 [ 908.157789][T15522] alloc_file_pseudo+0xcf/0x230 [ 908.157805][T15522] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 908.157819][T15522] ? inode_init_always_gfp+0xd0e/0x1040 [ 908.157835][T15522] sock_alloc_file+0x50/0x210 [ 908.157852][T15522] do_accept+0x242/0x530 [ 908.157864][T15522] ? do_raw_spin_lock+0x128/0x260 [ 908.157878][T15522] ? __pfx_do_accept+0x10/0x10 [ 908.157897][T15522] __sys_accept4+0x108/0x200 [ 908.157909][T15522] ? __pfx___sys_accept4+0x10/0x10 [ 908.157922][T15522] ? __pfx_ksys_write+0x10/0x10 [ 908.157941][T15522] __x64_sys_accept4+0x96/0x100 [ 908.157953][T15522] ? lockdep_hardirqs_on+0x78/0x100 [ 908.157969][T15522] do_syscall_64+0x106/0xf80 [ 908.157983][T15522] ? clear_bhb_loop+0x40/0x90 [ 908.157997][T15522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.158009][T15522] RIP: 0033:0x7f83b959c799 [ 908.158019][T15522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.158030][T15522] RSP: 002b:00007f83ba4e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 908.158042][T15522] RAX: ffffffffffffffda RBX: 00007f83b9816090 RCX: 00007f83b959c799 [ 908.158049][T15522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 908.158058][T15522] RBP: 00007f83ba4e3090 R08: 0000000000000000 R09: 0000000000000000 [ 908.158065][T15522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.158071][T15522] R13: 00007f83b9816128 R14: 00007f83b9816090 R15: 00007ffe0f1d3568 [ 908.158085][T15522] [ 908.212109][T15523] net_ratelimit: 50 callbacks suppressed [ 908.212126][T15523] netlink: zone id is out of range [ 908.428989][T15523] netlink: zone id is out of range [ 908.477466][T15523] netlink: zone id is out of range [ 908.513950][T15523] netlink: zone id is out of range [ 908.521472][T15523] netlink: zone id is out of range [ 908.529068][T15523] netlink: zone id is out of range [ 908.535296][T15523] netlink: zone id is out of range [ 908.541547][T15523] netlink: zone id is out of range [ 908.546947][T15523] netlink: zone id is out of range [ 908.552362][T15523] netlink: zone id is out of range [ 910.121523][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2338'. [ 910.130862][T15537] netlink: 'syz.4.2338': attribute type 30 has an invalid length. [ 910.138994][T15537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2338'. [ 910.215648][ T7847] usb 7-1: USB disconnect, device number 19 [ 910.250075][ T30] audit: type=1400 audit(2000000152.888:1417): avc: denied { unmount } for pid=10608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 911.470268][ T5940] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 911.485484][ T5890] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 911.676501][ T5940] usb 9-1: Using ep0 maxpacket: 16 [ 911.684355][ T5890] usb 8-1: config 0 has an invalid interface number: 83 but max is 0 [ 911.697131][ T5940] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 911.856881][ T30] audit: type=1400 audit(2000000154.408:1418): avc: denied { name_bind } for pid=15549 comm="syz.0.2332" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 912.038449][ T5890] usb 8-1: config 0 has no interface number 0 [ 912.044770][ T5890] usb 8-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 912.055047][ T5940] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.073731][ T5940] usb 9-1: Product: syz [ 912.079054][ T5940] usb 9-1: Manufacturer: syz [ 912.083663][ T5940] usb 9-1: SerialNumber: syz [ 912.097944][ T5890] usb 8-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 912.140256][ T5940] usb 9-1: config 0 descriptor?? [ 912.152928][ T5890] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.192695][ T5940] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 912.210718][ T5890] usb 8-1: config 0 descriptor?? [ 912.231962][ T5940] usb 9-1: Detected FT-X [ 912.253933][ T5890] ttusbir 8-1:0.83: cannot find expected altsetting [ 912.394732][ T5940] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 912.452270][ T5940] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 912.498462][ T5940] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71 [ 912.531790][ T30] audit: type=1400 audit(2000000155.168:1419): avc: denied { connect } for pid=15568 comm="syz.0.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 912.552042][ T5940] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 912.618802][ T5940] usb 9-1: USB disconnect, device number 2 [ 912.632055][ T5940] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 912.642209][ T5940] ftdi_sio 9-1:0.0: device disconnected [ 912.725234][T15580] overlayfs: failed to resolve '/¾8 *ói«FO«N‡~Üy–+£Û': -2 [ 913.483646][T15585] overlayfs: failed to clone upperpath [ 914.644834][T11752] Bluetooth: Wrong link type (-57) [ 914.967143][ T793] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 915.014098][ T5913] usb 8-1: USB disconnect, device number 17 [ 915.173906][ T793] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 915.903183][ T793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.088176][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 916.411241][ T793] usb 7-1: Product: syz [ 916.415426][ T793] usb 7-1: Manufacturer: syz [ 916.443273][ T793] usb 7-1: SerialNumber: syz [ 916.464525][ T793] usb 7-1: config 0 descriptor?? [ 916.517460][ T9] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 916.550853][ T9] usb 5-1: config 0 has no interface number 0 [ 916.579548][ T9] usb 5-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 916.639911][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 916.682516][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.725927][ T9] usb 5-1: config 0 descriptor?? [ 916.753820][ T9] ttusbir 5-1:0.83: cannot find expected altsetting [ 917.031909][T15620] overlayfs: failed to resolve '/¾8 *ói«FO«N‡~Üy–+£Û': -2 [ 917.082322][T15621] devpts: Bad value for 'max' [ 917.097638][ T793] usb 7-1: Firmware: major: 227, minor: 192, hardware type: UNKNOWN (226) [ 917.328519][T15623] netlink: 'syz.0.2355': attribute type 1 has an invalid length. [ 917.553069][T15625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2355'. [ 917.609812][T15623] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 917.680905][T15625] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 917.733665][T15625] bond2 (unregistering): Released all slaves [ 917.748930][ T9] usb 5-1: USB disconnect, device number 52 [ 917.863671][T15628] net_ratelimit: 10 callbacks suppressed [ 917.863757][T15628] netlink: zone id is out of range [ 917.875873][T15628] netlink: zone id is out of range [ 917.881226][T15628] netlink: zone id is out of range [ 917.886596][T15628] netlink: zone id is out of range [ 917.891814][T15628] netlink: zone id is out of range [ 917.897198][T15628] netlink: zone id is out of range [ 917.902386][T15628] netlink: zone id is out of range [ 917.910100][T15628] netlink: zone id is out of range [ 917.915261][T15628] netlink: zone id is out of range [ 917.922537][T15628] netlink: zone id is out of range [ 918.178399][ T793] usb 7-1: failed to fetch extended address, random address set [ 918.186892][ T793] usb 7-1: atusb_probe: initialization failed, error = -524 [ 918.194360][ T793] atusb 7-1:0.0: probe with driver atusb failed with error -524 [ 918.326651][ T5940] usb 7-1: USB disconnect, device number 20 [ 918.725143][T15638] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 918.748596][T15638] netlink: 388 bytes leftover after parsing attributes in process `syz.6.2360'. [ 919.756629][T15661] netlink: 'syz.0.2368': attribute type 2 has an invalid length. [ 919.945881][ T5940] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 920.046393][ T29] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 920.140589][ T5940] usb 9-1: unable to get BOS descriptor or descriptor too short [ 920.159449][ T5940] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 920.181984][ T5940] usb 9-1: can't read configurations, error -71 [ 920.209802][ T29] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 920.219652][ T29] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 920.232661][ T29] usb 8-1: Product: syz [ 920.237509][ T29] usb 8-1: Manufacturer: syz [ 920.242405][ T29] usb 8-1: SerialNumber: syz [ 920.289851][ T29] usb 8-1: config 0 descriptor?? [ 921.237459][T15686] netlink: 'syz.0.2374': attribute type 2 has an invalid length. [ 921.254229][T15686] ipip0: entered promiscuous mode [ 921.259872][T15686] ipip0: entered allmulticast mode [ 921.268410][T15686] team0: Device ipip0 is of different type [ 922.262525][T15696] devpts: Bad value for 'max' [ 922.278039][T11752] Bluetooth: hci2: unexpected event for opcode 0x200f [ 922.401045][T15697] netlink: 'syz.8.2377': attribute type 25 has an invalid length. [ 922.419582][T15697] netlink: 'syz.8.2377': attribute type 3 has an invalid length. [ 922.430156][T15697] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2377'. [ 922.721457][T15705] netlink: 260 bytes leftover after parsing attributes in process `syz.8.2381'. [ 922.891445][ T29] usb 8-1: USB disconnect, device number 18 [ 922.986148][ T793] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 923.024655][ T5177] block nbd1: Possible stuck request ffff888027f40000: control (read@0,1024B). Runtime 210 seconds [ 923.035533][ T5177] block nbd1: Possible stuck request ffff888027f40200: control (read@1024,1024B). Runtime 210 seconds [ 923.078956][T15711] veth1_macvtap: left promiscuous mode [ 923.084489][T15711] macsec0: entered promiscuous mode [ 923.115083][ T5177] block nbd1: Possible stuck request ffff888027f40400: control (read@2048,1024B). Runtime 210 seconds [ 923.126862][ T5177] block nbd1: Possible stuck request ffff888027f40600: control (read@3072,1024B). Runtime 210 seconds [ 923.146935][T15711] veth1_macvtap: entered promiscuous mode [ 923.153836][T15711] macsec0: left promiscuous mode [ 923.187209][ T793] usb 9-1: config 0 has an invalid interface number: 113 but max is 0 [ 923.218881][ T793] usb 9-1: config 0 has no interface number 0 [ 923.224971][ T793] usb 9-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 923.283088][ T793] usb 9-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 923.329487][ T793] usb 9-1: config 0 interface 113 has no altsetting 0 [ 923.348522][ T29] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 923.381741][ T793] usb 9-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 923.416092][ T793] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.451511][ T793] usb 9-1: Product: syz [ 923.473430][ T793] usb 9-1: Manufacturer: syz [ 923.495867][ T793] usb 9-1: SerialNumber: syz [ 923.521848][ T793] usb 9-1: config 0 descriptor?? [ 923.557943][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.571117][ C1] usb 9-1: NFC: Urb failure (status -71) [ 923.607295][ T793] usb 9-1: NFC: Unable to get FW version [ 923.617183][ T29] usb 8-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 923.670627][ T793] pn533_usb 9-1:0.113: probe with driver pn533_usb failed with error -90 [ 923.693327][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.750088][ T29] usb 8-1: config 0 descriptor?? [ 923.800357][ T29] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 923.882264][ T30] audit: type=1400 audit(2000000166.489:1420): avc: denied { ioctl } for pid=15716 comm="syz.0.2385" path="socket:[49626]" dev="sockfs" ino=49626 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 924.035489][T15713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.084791][T15713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.126106][T15721] netlink: 'syz.0.2386': attribute type 29 has an invalid length. [ 924.257687][T15723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.286042][T15723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.455001][T15725] netlink: 'syz.6.2387': attribute type 29 has an invalid length. [ 924.463775][ T29] usb 8-1: USB disconnect, device number 19 [ 925.029781][T15727] netlink: 'syz.6.2387': attribute type 29 has an invalid length. [ 925.600793][T15721] netlink: 'syz.0.2386': attribute type 29 has an invalid length. [ 925.747179][T12267] usb 9-1: USB disconnect, device number 5 [ 926.002636][ T30] audit: type=1400 audit(2000000168.629:1421): avc: denied { watch watch_reads } for pid=15737 comm="syz.0.2390" path="/565/file0" dev="tmpfs" ino=3063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 926.531218][ T30] audit: type=1400 audit(2000000169.139:1422): avc: denied { rename } for pid=15742 comm="syz.8.2391" name="file0" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 927.588831][T15760] net_ratelimit: 30 callbacks suppressed [ 927.588861][T15760] netlink: zone id is out of range [ 927.619400][T15760] netlink: zone id is out of range [ 927.709248][T15760] netlink: zone id is out of range [ 927.717378][T15760] netlink: zone id is out of range [ 927.735475][T15760] netlink: zone id is out of range [ 927.751355][T15760] netlink: zone id is out of range [ 927.759290][T15760] netlink: zone id is out of range [ 927.782609][T15760] netlink: zone id is out of range [ 927.789396][T15760] netlink: zone id is out of range [ 927.799187][T15760] netlink: zone id is out of range [ 928.456145][T15767] devpts: Bad value for 'max' [ 928.479727][T11752] Bluetooth: hci2: unexpected event for opcode 0x200f [ 930.099891][T15777] netlink: 'syz.6.2401': attribute type 29 has an invalid length. [ 930.683185][T15784] netlink: 'syz.6.2401': attribute type 29 has an invalid length. [ 930.990296][T15790] FAULT_INJECTION: forcing a failure. [ 930.990296][T15790] name failslab, interval 1, probability 0, space 0, times 0 [ 931.055298][T15790] CPU: 0 UID: 0 PID: 15790 Comm: syz.7.2406 Tainted: G L syzkaller #0 PREEMPT(full) [ 931.055329][T15790] Tainted: [L]=SOFTLOCKUP [ 931.055335][T15790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 931.055345][T15790] Call Trace: [ 931.055351][T15790] [ 931.055358][T15790] dump_stack_lvl+0x100/0x190 [ 931.055390][T15790] should_fail_ex.cold+0x5/0xa [ 931.055411][T15790] ? tomoyo_encode2+0xfb/0x3c0 [ 931.055434][T15790] should_failslab+0xc2/0x120 [ 931.055451][T15790] __kmalloc_noprof+0xe0/0x850 [ 931.055474][T15790] ? d_absolute_path+0x136/0x1b0 [ 931.055503][T15790] tomoyo_encode2+0xfb/0x3c0 [ 931.055531][T15790] tomoyo_encode+0x29/0x50 [ 931.055553][T15790] tomoyo_realpath_from_path+0x18c/0x690 [ 931.055583][T15790] tomoyo_path_number_perm+0x23c/0x580 [ 931.055603][T15790] ? tomoyo_path_number_perm+0x22e/0x580 [ 931.055625][T15790] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 931.055670][T15790] ? find_held_lock+0x2b/0x80 [ 931.055691][T15790] ? __fget_files+0x215/0x3d0 [ 931.055708][T15790] ? hook_file_ioctl_common+0x146/0x410 [ 931.055740][T15790] ? __fget_files+0x21f/0x3d0 [ 931.055761][T15790] security_file_ioctl+0xd3/0x230 [ 931.055785][T15790] __x64_sys_ioctl+0xb7/0x210 [ 931.055812][T15790] do_syscall_64+0x106/0xf80 [ 931.055833][T15790] ? clear_bhb_loop+0x40/0x90 [ 931.055854][T15790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.055871][T15790] RIP: 0033:0x7f83b959c799 [ 931.055886][T15790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.055902][T15790] RSP: 002b:00007f83ba504028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 931.055919][T15790] RAX: ffffffffffffffda RBX: 00007f83b9815fa0 RCX: 00007f83b959c799 [ 931.055937][T15790] RDX: 0000200000000500 RSI: 00000000c0485619 RDI: 0000000000000003 [ 931.055948][T15790] RBP: 00007f83ba504090 R08: 0000000000000000 R09: 0000000000000000 [ 931.055958][T15790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.055969][T15790] R13: 00007f83b9816038 R14: 00007f83b9815fa0 R15: 00007ffe0f1d3568 [ 931.055994][T15790] [ 931.056487][T15790] ERROR: Out of memory at tomoyo_realpath_from_path. [ 931.311939][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.411269][ T5890] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 931.646177][ T5890] usb 7-1: Using ep0 maxpacket: 16 [ 931.654985][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 931.692804][ T5890] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 931.725294][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.795696][ T5890] usb 7-1: Product: syz [ 931.819700][ T5890] usb 7-1: Manufacturer: syz [ 931.824427][ T5890] usb 7-1: SerialNumber: syz [ 931.950803][ T5890] usb 7-1: config 0 descriptor?? [ 932.020610][ T5890] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 932.229513][T15788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.236758][ T30] audit: type=1400 audit(2000000174.839:1423): avc: denied { read } for pid=15809 comm="syz.0.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 932.385641][T15788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.560466][ T1161] usb 7-1: Failed to submit usb control message: -71 [ 932.573505][ T5890] usb 7-1: USB disconnect, device number 21 [ 933.042357][ T1161] usb 7-1: unable to send the bmi data to the device: -71 [ 933.122007][ T1161] usb 7-1: unable to get target info from device [ 933.465318][ T1161] usb 7-1: could not get target info (-71) [ 933.471399][ T1161] usb 7-1: could not probe fw (-71) [ 933.873048][T15825] Can't find a SQUASHFS superblock on nullb0 [ 933.879579][ T30] audit: type=1400 audit(2000000176.479:1424): avc: denied { mounton } for pid=15824 comm="syz.4.2416" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 933.933538][T15829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40720 sclass=netlink_route_socket pid=15829 comm=syz.0.2414 [ 934.029161][T15831] netlink: 'syz.8.2417': attribute type 2 has an invalid length. [ 934.206252][ T30] audit: type=1400 audit(2000000176.829:1425): avc: denied { append } for pid=15820 comm="syz.6.2415" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 935.789118][T15839] ipip0: entered promiscuous mode [ 935.794187][T15839] ipip0: entered allmulticast mode [ 935.814463][T15839] team0: Device ipip0 is of different type [ 936.155250][ T30] audit: type=1400 audit(2000000178.730:1426): avc: denied { read } for pid=15824 comm="syz.4.2416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 936.984652][T15852] net_ratelimit: 30 callbacks suppressed [ 936.984672][T15852] netlink: zone id is out of range [ 937.125729][T15852] netlink: zone id is out of range [ 937.855957][T15852] netlink: zone id is out of range [ 937.871484][T15852] netlink: zone id is out of range [ 937.895515][T15852] netlink: zone id is out of range [ 937.909703][T15852] netlink: zone id is out of range [ 937.936152][ T793] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 938.047320][T15852] netlink: zone id is out of range [ 938.081577][T15847] x_tables: duplicate underflow at hook 3 [ 938.095495][T15852] netlink: zone id is out of range [ 938.115509][T15852] netlink: zone id is out of range [ 938.120670][T15852] netlink: zone id is out of range [ 938.207252][ T793] usb 9-1: config 0 has an invalid interface number: 83 but max is 0 [ 938.250565][ T793] usb 9-1: config 0 has no interface number 0 [ 938.297750][ T793] usb 9-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 938.358415][ T793] usb 9-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 938.410275][ T30] audit: type=1400 audit(2000000181.040:1427): avc: denied { setopt } for pid=15860 comm="syz.6.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 938.480724][ T793] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.531899][ T793] usb 9-1: config 0 descriptor?? [ 938.589555][ T793] ttusbir 9-1:0.83: cannot find expected altsetting [ 938.917436][T15867] overlayfs: failed to resolve '/¾8 *ói«FO«N‡~Üy–+£Û': -2 [ 939.525281][T15879] netlink: 5256 bytes leftover after parsing attributes in process `syz.4.2428'. [ 939.534920][T15879] nbd: must specify at least one socket [ 939.981781][ T5890] usb 9-1: USB disconnect, device number 6 [ 941.580896][T15896] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2431'. [ 941.636866][T15898] netlink: 'syz.6.2433': attribute type 2 has an invalid length. [ 941.645224][ T793] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 942.030831][T15902] net_ratelimit: 30 callbacks suppressed [ 942.030845][T15902] netlink: zone id is out of range [ 942.042007][T15902] netlink: zone id is out of range [ 942.047511][T15902] netlink: zone id is out of range [ 942.052589][T15902] netlink: zone id is out of range [ 942.058117][T15902] netlink: zone id is out of range [ 942.063221][T15902] netlink: zone id is out of range [ 942.068754][T15902] netlink: zone id is out of range [ 942.073842][T15902] netlink: zone id is out of range [ 942.079353][T15902] netlink: zone id is out of range [ 942.084442][T15902] netlink: zone id is out of range [ 942.095182][ T793] usb 5-1: unable to get BOS descriptor or descriptor too short [ 942.130384][ T793] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 942.178416][ T793] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 943.275599][ T793] usb 5-1: config 1 interface 0 has no altsetting 0 [ 943.328574][ T793] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 943.396501][ T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.446782][ T793] usb 5-1: Product: syz [ 943.469158][ T793] usb 5-1: Manufacturer: syz [ 943.513559][ T793] usb 5-1: SerialNumber: syz [ 943.752827][T15916] netlink: 5256 bytes leftover after parsing attributes in process `syz.6.2439'. [ 943.762718][T15916] nbd: must specify at least one socket [ 944.102445][ T793] smsusb:smsusb_probe: board id=8, interface number 0 [ 944.139943][ T793] smsusb:smsusb_probe: Device initialized with return code -19 [ 944.629482][ T793] usb 5-1: USB disconnect, device number 53 [ 944.743510][ T30] audit: type=1400 audit(2000000187.370:1428): avc: denied { open } for pid=15925 comm="syz.4.2442" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 944.794364][ T30] audit: type=1400 audit(2000000187.400:1429): avc: denied { ioctl } for pid=15925 comm="syz.4.2442" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 944.824521][ T30] audit: type=1400 audit(2000000187.410:1430): avc: denied { read } for pid=15925 comm="syz.4.2442" path="socket:[50476]" dev="sockfs" ino=50476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 944.864943][ T5940] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 945.056321][ T5940] usb 7-1: config 0 has an invalid interface number: 83 but max is 0 [ 945.065111][ T5940] usb 7-1: config 0 has no interface number 0 [ 945.071281][ T5940] usb 7-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 945.085604][ T30] audit: type=1400 audit(2000000187.720:1431): avc: denied { name_bind } for pid=15931 comm="syz.8.2444" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 945.107113][ T5940] usb 7-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 945.124898][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.173274][ T5940] usb 7-1: config 0 descriptor?? [ 945.193173][ T5940] ttusbir 7-1:0.83: cannot find expected altsetting [ 946.393764][T15943] lo: Caught tx_queue_len zero misconfig [ 946.425974][T15943] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 946.545393][T15945] overlayfs: failed to resolve '/¾8 *ói«FO«N‡~Üy–+£Û': -2 [ 947.183729][ T30] audit: type=1400 audit(2000000000.000:1432): avc: denied { connect } for pid=15953 comm="syz.0.2449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 947.460061][ T30] audit: type=1400 audit(2000000000.030:1433): avc: denied { mount } for pid=15955 comm="syz.7.2450" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 947.744045][ T30] audit: type=1400 audit(2000000000.030:1434): avc: denied { setopt } for pid=15953 comm="syz.0.2449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 947.829031][T15967] nft_compat: unsupported protocol 5 [ 948.166260][ T30] audit: type=1400 audit(2000000000.030:1435): avc: denied { write } for pid=15955 comm="syz.7.2450" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 948.189942][ T30] audit: type=1400 audit(2000000000.030:1436): avc: denied { remount } for pid=15955 comm="syz.7.2450" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 948.213870][ T30] audit: type=1400 audit(2000000000.270:1437): avc: denied { unmount } for pid=11899 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 948.379903][T15973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15973 comm=syz.4.2455 [ 948.661941][T15973] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 948.706753][T15979] net_ratelimit: 124 callbacks suppressed [ 948.706768][T15979] netlink: zone id is out of range [ 948.756719][T15979] netlink: zone id is out of range [ 948.773236][T15979] netlink: zone id is out of range [ 948.785998][T15980] netlink: zone id is out of range [ 948.791116][T15980] netlink: zone id is out of range [ 948.796657][T15980] netlink: zone id is out of range [ 948.801770][T15980] netlink: zone id is out of range [ 948.807320][T15980] netlink: zone id is out of range [ 948.812400][T15980] netlink: zone id is out of range [ 948.817959][T15980] netlink: zone id is out of range [ 948.833955][T15973] batman_adv: batadv0: Adding interface: ip6gretap1 [ 948.853006][ T793] usb 7-1: USB disconnect, device number 22 [ 948.853426][T15973] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.169255][T15973] batman_adv: batadv0: Interface activated: ip6gretap1 [ 949.413803][T15990] FAULT_INJECTION: forcing a failure. [ 949.413803][T15990] name failslab, interval 1, probability 0, space 0, times 0 [ 949.426494][T15990] CPU: 0 UID: 0 PID: 15990 Comm: syz.7.2460 Tainted: G L syzkaller #0 PREEMPT(full) [ 949.426512][T15990] Tainted: [L]=SOFTLOCKUP [ 949.426517][T15990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 949.426523][T15990] Call Trace: [ 949.426527][T15990] [ 949.426531][T15990] dump_stack_lvl+0x100/0x190 [ 949.426553][T15990] should_fail_ex.cold+0x5/0xa [ 949.426568][T15990] should_failslab+0xc2/0x120 [ 949.426581][T15990] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 949.426597][T15990] ? do_getname+0x35/0x390 [ 949.426611][T15990] ? fput+0x79/0x100 [ 949.426626][T15990] do_getname+0x35/0x390 [ 949.426642][T15990] __x64_sys_mkdirat+0x78/0xc0 [ 949.426655][T15990] do_syscall_64+0x106/0xf80 [ 949.426670][T15990] ? clear_bhb_loop+0x40/0x90 [ 949.426683][T15990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.426695][T15990] RIP: 0033:0x7f83b959c799 [ 949.426705][T15990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.426716][T15990] RSP: 002b:00007f83ba504028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 949.426728][T15990] RAX: ffffffffffffffda RBX: 00007f83b9815fa0 RCX: 00007f83b959c799 [ 949.426735][T15990] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 949.426742][T15990] RBP: 00007f83ba504090 R08: 0000000000000000 R09: 0000000000000000 [ 949.426748][T15990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.426755][T15990] R13: 00007f83b9816038 R14: 00007f83b9815fa0 R15: 00007ffe0f1d3568 [ 949.426768][T15990] [ 949.862921][T15991] netlink: 'syz.4.2461': attribute type 1 has an invalid length. [ 950.031336][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 950.031407][ T30] audit: type=1400 audit(2000000002.830:1441): avc: denied { create } for pid=16004 comm="syz.7.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 950.324171][ T30] audit: type=1400 audit(2000000003.130:1442): avc: denied { connect } for pid=16004 comm="syz.7.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 950.445034][ T30] audit: type=1400 audit(2000000003.180:1443): avc: denied { read } for pid=16010 comm="syz.8.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 952.343192][T16042] FAULT_INJECTION: forcing a failure. [ 952.343192][T16042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.400087][T16042] CPU: 1 UID: 0 PID: 16042 Comm: syz.8.2473 Tainted: G L syzkaller #0 PREEMPT(full) [ 952.400107][T16042] Tainted: [L]=SOFTLOCKUP [ 952.400111][T16042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 952.400118][T16042] Call Trace: [ 952.400122][T16042] [ 952.400127][T16042] dump_stack_lvl+0x100/0x190 [ 952.400149][T16042] should_fail_ex.cold+0x5/0xa [ 952.400162][T16042] ? folio_alloc_mpol_noprof+0x1a7/0x340 [ 952.400177][T16042] _copy_from_user+0x2e/0xd0 [ 952.400190][T16042] shmem_mfill_atomic_pte+0x684/0xb20 [ 952.400211][T16042] mfill_atomic_copy+0xc94/0x1de0 [ 952.400227][T16042] ? __might_fault+0xc5/0x140 [ 952.400242][T16042] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 952.400259][T16042] userfaultfd_ioctl+0x2ac2/0x3b60 [ 952.400275][T16042] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 952.400287][T16042] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 952.400309][T16042] ? __fget_files+0x215/0x3d0 [ 952.400320][T16042] ? hook_file_ioctl_common+0x146/0x410 [ 952.400342][T16042] ? selinux_file_ioctl+0x139/0x290 [ 952.400357][T16042] ? selinux_file_ioctl+0xb4/0x290 [ 952.400372][T16042] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 952.400385][T16042] ? __x64_sys_ioctl+0x18e/0x210 [ 952.400402][T16042] __x64_sys_ioctl+0x18e/0x210 [ 952.400421][T16042] do_syscall_64+0x106/0xf80 [ 952.400435][T16042] ? clear_bhb_loop+0x40/0x90 [ 952.400450][T16042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.400462][T16042] RIP: 0033:0x7fdbda99c799 [ 952.400471][T16042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.400482][T16042] RSP: 002b:00007fdbdb85b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 952.400495][T16042] RAX: ffffffffffffffda RBX: 00007fdbdac15fa0 RCX: 00007fdbda99c799 [ 952.400506][T16042] RDX: 0000200000000200 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 952.400516][T16042] RBP: 00007fdbdb85b090 R08: 0000000000000000 R09: 0000000000000000 [ 952.400526][T16042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.400536][T16042] R13: 00007fdbdac16038 R14: 00007fdbdac15fa0 R15: 00007ffc693bf2e8 [ 952.400557][T16042] [ 952.851784][T16047] netlink: 'syz.8.2475': attribute type 29 has an invalid length. [ 953.153327][T16050] netlink: 'syz.8.2475': attribute type 29 has an invalid length. [ 953.970309][ T5177] block nbd1: Possible stuck request ffff888027f40000: control (read@0,1024B). Runtime 240 seconds [ 953.981696][ T5177] block nbd1: Possible stuck request ffff888027f40200: control (read@1024,1024B). Runtime 240 seconds [ 953.992741][ T5177] block nbd1: Possible stuck request ffff888027f40400: control (read@2048,1024B). Runtime 240 seconds [ 954.004036][ T5177] block nbd1: Possible stuck request ffff888027f40600: control (read@3072,1024B). Runtime 240 seconds [ 954.314506][T16064] net_ratelimit: 85 callbacks suppressed [ 954.314610][T16064] netlink: zone id is out of range [ 954.325896][T16064] netlink: zone id is out of range [ 954.331433][T16064] netlink: zone id is out of range [ 954.337986][T16064] netlink: zone id is out of range [ 954.343643][T16064] netlink: zone id is out of range [ 954.349596][T16064] netlink: zone id is out of range [ 954.355352][T16064] netlink: zone id is out of range [ 954.362754][T16064] netlink: zone id is out of range [ 954.386339][T16064] netlink: zone id is out of range [ 954.392131][T16064] netlink: zone id is out of range [ 955.577394][ T793] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 956.216987][ T793] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 956.279933][T16084] fido_id[16084]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 956.398968][ T30] audit: type=1400 audit(2000000009.210:1444): avc: denied { setopt } for pid=16086 comm="syz.8.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 958.504433][T12267] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 958.734637][T12267] usb 5-1: device descriptor read/64, error -71 [ 958.974953][T11752] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 958.997187][T12267] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 959.254514][T12267] usb 5-1: device descriptor read/64, error -71 [ 959.479001][T11752] Bluetooth: Wrong link type (-57) [ 959.807427][T12267] usb usb5-port1: attempt power cycle [ 960.644023][T12267] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 960.664460][T12267] usb 5-1: device descriptor read/8, error -71 [ 960.780646][ T5940] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 960.904782][T12267] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 960.964059][ T5940] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 960.965689][T12267] usb 5-1: device descriptor read/8, error -71 [ 960.976632][ T5940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.993451][ T5940] usb 7-1: Product: syz [ 960.998897][ T5940] usb 7-1: Manufacturer: syz [ 961.004021][ T5940] usb 7-1: SerialNumber: syz [ 961.018307][ T5940] usb 7-1: config 0 descriptor?? [ 961.115919][T12267] usb usb5-port1: unable to enumerate USB device [ 961.124140][ T30] audit: type=1400 audit(2000000013.930:1445): avc: denied { execute } for pid=16135 comm="syz.4.2498" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=50977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 961.497409][T12267] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 961.777384][ T5940] usb 7-1: Firmware: major: 50, minor: 195, hardware type: UNKNOWN (85) [ 961.895716][ T793] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 961.970179][T12267] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 962.618716][ T30] audit: type=1400 audit(2000000015.420:1446): avc: denied { create } for pid=16139 comm="syz.4.2499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 962.640388][ T5940] usb 7-1: Read permanent extended address f2:dd:00:f0:0f:e2:c0:e3 from device [ 962.649522][ T5940] usb 7-1: atusb_probe: initialization failed, error = -524 [ 962.658946][ T5940] atusb 7-1:0.0: probe with driver atusb failed with error -524 [ 962.810907][T16147] fido_id[16147]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 964.008127][ T29] usb 7-1: USB disconnect, device number 23 [ 964.086765][ T30] audit: type=1400 audit(2000000016.840:1447): avc: denied { recv } for pid=16127 comm="syz.6.2495" saddr=10.128.0.169 src=39668 daddr=10.128.1.134 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 964.218884][ T30] audit: type=1400 audit(2000000017.030:1448): avc: denied { ioctl } for pid=16157 comm="syz.8.2502" path="socket:[51617]" dev="sockfs" ino=51617 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 965.432959][ T793] usb 5-1: device descriptor read/all, error -71 [ 965.655388][T16173] netlink: 5256 bytes leftover after parsing attributes in process `syz.6.2504'. [ 965.666420][T16173] nbd: must specify at least one socket [ 965.929222][ T30] audit: type=1400 audit(2000000018.711:1449): avc: denied { bind } for pid=16169 comm="syz.8.2506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 967.124815][T16185] SELinux: failed to load policy [ 967.253448][T16185] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2509'. [ 968.323768][ T7847] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 968.481263][ T7847] usb 8-1: device descriptor read/64, error -71 [ 968.822330][ T7847] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 968.978747][ T7847] usb 8-1: device descriptor read/64, error -71 [ 969.244580][ T7847] usb usb8-port1: attempt power cycle [ 969.393878][ T793] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 970.295101][ T793] usb 7-1: config 0 has an invalid interface number: 83 but max is 0 [ 970.322401][ T793] usb 7-1: config 0 has no interface number 0 [ 970.354114][ T793] usb 7-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 970.453746][ T793] usb 7-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 970.462912][ T793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.487632][ T793] usb 7-1: config 0 descriptor?? [ 970.501425][ T793] ttusbir 7-1:0.83: cannot find expected altsetting [ 970.618942][ T30] audit: type=1400 audit(2000000023.401:1450): avc: denied { setopt } for pid=16209 comm="syz.7.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 971.091745][T16216] overlayfs: failed to resolve '/¾8 *ói«FO«N‡~Üy–+£Û': -2 [ 973.539588][T16208] usb 7-1: USB disconnect, device number 24 [ 973.634071][ T793] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 973.663646][ T7847] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 973.713732][T16246] net_ratelimit: 30 callbacks suppressed [ 973.713760][T16246] netlink: zone id is out of range [ 973.724655][T16246] netlink: zone id is out of range [ 973.730948][T16246] netlink: zone id is out of range [ 973.736390][T16246] netlink: zone id is out of range [ 973.741565][T16246] netlink: zone id is out of range [ 973.747650][T16246] netlink: zone id is out of range [ 973.752859][T16246] netlink: zone id is out of range [ 973.758002][T16246] netlink: zone id is out of range [ 973.763370][T16246] netlink: zone id is out of range [ 973.793214][T16246] netlink: zone id is out of range [ 973.795291][ T793] usb 9-1: unable to get BOS descriptor or descriptor too short [ 973.978536][ T793] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 973.992272][ T793] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 974.007780][ T793] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 974.019113][ T793] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.030023][ T793] usb 9-1: Product: syz [ 974.035486][ T7847] usb 5-1: device descriptor read/64, error -71 [ 974.043736][ T793] usb 9-1: Manufacturer: syz [ 974.048355][ T793] usb 9-1: SerialNumber: syz [ 974.085706][ T793] usb 9-1: selecting invalid altsetting 1 [ 974.094039][ T793] usb 9-1: unit 6 not found! [ 974.136979][ T30] audit: type=1400 audit(2000000026.951:1451): avc: denied { getopt } for pid=16248 comm="syz.6.2526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 974.303542][ T7847] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 974.312149][ T793] usb 9-1: 2:0: failed to get current value for ch 0 (-32) [ 974.452848][ T7847] usb 5-1: device descriptor read/64, error -71 [ 974.587145][ T793] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 975.130927][ T7847] usb usb5-port1: attempt power cycle [ 975.158319][ T793] usb 9-1: USB disconnect, device number 7 [ 975.204467][T11823] udevd[11823]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 975.547836][ T9968] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 975.609626][ T9968] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 975.993172][ T7847] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 976.292775][T16260] fido_id[16260]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 976.761480][ T7847] usb 5-1: device descriptor read/8, error -71 [ 978.263723][T11752] Bluetooth: Wrong link type (-57) [ 978.289262][T16282] netlink: 'syz.8.2535': attribute type 2 has an invalid length. [ 978.604196][T16284] ipip0: entered promiscuous mode [ 978.609502][T16284] ipip0: entered allmulticast mode [ 978.634820][T16284] team0: Device ipip0 is of different type [ 978.853606][ T7847] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 978.896855][ T7847] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 978.913465][ T7847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.936308][ T7847] usb 5-1: Product: syz [ 978.940529][ T7847] usb 5-1: Manufacturer: syz [ 978.956093][ T7847] usb 5-1: SerialNumber: syz [ 978.977442][ T7847] usb 5-1: config 0 descriptor?? [ 979.876275][ T793] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 979.886207][ T7847] usb 5-1: Firmware: major: 50, minor: 195, hardware type: UNKNOWN (85) [ 980.033940][T16299] netlink: 5256 bytes leftover after parsing attributes in process `syz.8.2542'. [ 980.044125][T16299] nbd: must specify at least one socket [ 980.096257][ T793] usb 8-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 980.143598][ T7847] usb 5-1: Read permanent extended address f2:dd:00:f0:0f:e2:c0:e3 from device [ 980.320824][ T793] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.338540][ T7847] usb 5-1: atusb_probe: initialization failed, error = -524 [ 980.369787][ T793] usb 8-1: Product: syz [ 980.379929][ T7847] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 980.401345][ T793] usb 8-1: Manufacturer: syz [ 980.441634][ T793] usb 8-1: SerialNumber: syz [ 980.838490][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 980.851175][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 980.865709][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 980.874985][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 980.885456][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 980.970551][ T793] usb 8-1: BAAD MICROPHONE c_chmask mismatch [ 981.251162][ T793] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 981.338218][ T5913] usb 5-1: USB disconnect, device number 63 [ 981.397471][ T793] usb 8-1: USB disconnect, device number 23 [ 981.588709][T11823] udevd[11823]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 981.850479][ T8558] syz_tun (unregistering): left promiscuous mode [ 982.116386][ T793] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 982.642866][ T793] usb 8-1: device descriptor read/64, error -71 [ 982.897121][ T793] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 982.961358][T16309] chnl_net:caif_netlink_parms(): no params data found [ 982.972432][ T5823] Bluetooth: hci3: command tx timeout [ 983.087147][ T793] usb 8-1: device descriptor read/64, error -71 [ 983.433762][ T793] usb usb8-port1: attempt power cycle [ 983.873427][ T793] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 984.578811][ T5177] block nbd1: Possible stuck request ffff888027f40000: control (read@0,1024B). Runtime 270 seconds [ 984.589835][ T5177] block nbd1: Possible stuck request ffff888027f40200: control (read@1024,1024B). Runtime 270 seconds [ 984.600787][ T5177] block nbd1: Possible stuck request ffff888027f40400: control (read@2048,1024B). Runtime 270 seconds [ 984.611727][ T5177] block nbd1: Possible stuck request ffff888027f40600: control (read@3072,1024B). Runtime 270 seconds [ 985.042743][ T793] usb 8-1: device not accepting address 26, error -71 [ 985.305770][ T5823] Bluetooth: hci3: command tx timeout [ 985.329891][ T30] audit: type=1400 audit(2000000038.132:1452): avc: denied { map } for pid=16345 comm="syz.7.2549" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 985.335496][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 986.280259][ T30] audit: type=1400 audit(2000000038.132:1453): avc: denied { execute } for pid=16345 comm="syz.7.2549" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 986.407609][T16309] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.455933][T16309] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.500086][T16309] bridge_slave_0: entered allmulticast mode [ 986.513809][T16309] bridge_slave_0: entered promiscuous mode [ 986.544453][T16309] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.568220][T16309] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.642765][T16360] binder: 16358:16360 ioctl c0306201 0 returned -14 [ 986.884963][T16309] bridge_slave_1: entered allmulticast mode [ 986.932785][T16309] bridge_slave_1: entered promiscuous mode [ 986.997187][T16309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.011985][T16309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 987.249261][ T9968] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 987.252641][ T793] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 987.383720][ T5823] Bluetooth: hci3: command tx timeout [ 987.421503][T16309] team0: Port device team_slave_0 added [ 987.446284][ T9968] usb 5-1: unable to get BOS descriptor or descriptor too short [ 987.457106][T16309] team0: Port device team_slave_1 added [ 987.464056][ T793] usb 8-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 987.478108][ T793] usb 8-1: config 1 interface 0 has no altsetting 0 [ 987.478631][ T9968] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.487342][ T793] usb 8-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.40 [ 987.521229][ T793] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.536300][ T793] usb 8-1: Product: syz [ 987.540941][ T793] usb 8-1: Manufacturer: syz [ 987.542201][ T9968] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 987.549344][ T793] usb 8-1: SerialNumber: syz [ 987.573985][ T9968] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 987.601657][T16309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.610970][ T9968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.619742][T16309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.647897][ T9968] usb 5-1: Product: syz [ 987.652805][ T9968] usb 5-1: Manufacturer: syz [ 987.657407][ T9968] usb 5-1: SerialNumber: syz [ 987.664687][T16309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.679605][ T9968] usb 5-1: selecting invalid altsetting 1 [ 987.686592][ T9968] usb 5-1: unit 6 not found! [ 987.697651][T16309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.704994][T16309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.731756][T16309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.743572][ T36] bridge_slave_1: left allmulticast mode [ 987.752622][ T36] bridge_slave_1: left promiscuous mode [ 987.760254][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.782278][ T5940] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 987.785238][ T36] bridge_slave_0: left allmulticast mode [ 987.798406][ T36] bridge_slave_0: left promiscuous mode [ 987.805953][T16362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.814608][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.822369][T16362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.923224][ T5940] usb 7-1: device descriptor read/64, error -71 [ 988.022572][T16375] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 988.172772][ T5940] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 988.184789][ T9968] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 988.194381][T16375] usb 9-1: Using ep0 maxpacket: 32 [ 988.210104][T16375] usb 9-1: unable to get BOS descriptor or descriptor too short [ 988.240312][T16375] usb 9-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 988.256937][T16375] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.271072][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 988.274589][T11826] udevd[11826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 988.281087][T16375] usb 9-1: Product: syz [ 988.304935][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 988.316445][ T36] bond0 (unregistering): Released all slaves [ 988.318236][T16375] usb 9-1: Manufacturer: syz [ 988.336602][ T5940] usb 7-1: device descriptor read/64, error -71 [ 988.344270][ T36] bond1 (unregistering): Released all slaves [ 988.348215][ T9968] usb 5-1: USB disconnect, device number 64 [ 988.356823][T16375] usb 9-1: SerialNumber: syz [ 988.389909][ T793] usbhid 8-1:1.0: can't add hid device: -71 [ 988.400379][ T793] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 988.437572][ T793] usb 8-1: USB disconnect, device number 28 [ 988.464633][ T5940] usb usb7-port1: attempt power cycle [ 988.486869][ T36] : left promiscuous mode [ 988.525485][T16309] hsr_slave_0: entered promiscuous mode [ 988.535409][T16309] hsr_slave_1: entered promiscuous mode [ 988.541578][T16309] debugfs: 'hsr0' already exists in 'hsr' [ 988.551260][T16309] Cannot create hsr debugfs directory [ 988.582649][ T36] tipc: Left network mode [ 988.587362][T16375] usb 9-1: unit 4 not found! [ 988.605531][T16375] usb 9-1: unit 0 not found! [ 988.812778][ T5940] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 988.864523][ T5940] usb 7-1: device descriptor read/8, error -71 [ 988.935499][ T36] hsr_slave_0: left promiscuous mode [ 988.954293][ T36] hsr_slave_1: left promiscuous mode [ 988.964209][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.983506][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.069469][ T36] team0 (unregistering): Port device batadv1 removed [ 989.080423][T16375] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 989.109944][ T36] pim6reg (unregistering): left allmulticast mode [ 989.127666][T16375] usb 9-1: unit 4 not found! [ 989.132492][T16375] usb 9-1: unit 0 not found! [ 989.140176][T16375] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 989.151974][ T5940] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 989.164529][T16375] usb 9-1: unit 4 not found! [ 989.182490][ T5940] usb 7-1: device descriptor read/8, error -71 [ 989.197993][T16375] usb 9-1: unit 0 not found! [ 989.269475][T16375] snd-usb-audio 9-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 989.303459][ T5940] usb usb7-port1: unable to enumerate USB device [ 989.316088][T16375] usb 9-1: USB disconnect, device number 8 [ 989.364218][T13877] udevd[13877]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 989.452908][ T5823] Bluetooth: hci3: command tx timeout [ 989.889817][ T36] team0 (unregistering): Port device team_slave_1 removed [ 989.917858][ T36] team0 (unregistering): Port device team_slave_0 removed [ 992.531863][T16375] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 992.711989][T16375] usb 9-1: device descriptor read/64, error -71 [ 992.739550][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.979249][T16434] mkiss: ax0: crc mode is auto. [ 992.985336][T16375] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 993.171787][T16375] usb 9-1: device descriptor read/64, error -71 [ 993.264006][ T36] IPVS: stop unused estimator thread 0... [ 993.301937][T16375] usb usb9-port1: attempt power cycle [ 993.364630][T16445] netlink: 'syz.7.2569': attribute type 33 has an invalid length. [ 993.418952][T16445] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2569'. [ 993.594789][T16447] tipc: Started in network mode [ 993.599830][T16447] tipc: Node identity 4004, cluster identity 4711 [ 993.606365][T16447] tipc: Node number set to 16388 [ 993.681731][T16375] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 993.730765][T16375] usb 9-1: device descriptor read/8, error -71 [ 993.871192][T16309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 993.923343][T16309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 993.991422][T16309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 994.001775][T16375] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 994.061188][T16309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 994.076829][T16375] usb 9-1: device descriptor read/8, error -71 [ 994.208266][T16375] usb usb9-port1: unable to enumerate USB device [ 994.646785][T16309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.775558][T16309] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.826216][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.833370][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.894244][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.901392][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 996.502309][T16375] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 996.742506][T16375] usb 9-1: device descriptor read/64, error -71 [ 997.051735][T16375] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 997.231781][T16375] usb 9-1: device descriptor read/64, error -71 [ 997.377735][T16375] usb usb9-port1: attempt power cycle [ 997.821486][T16375] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 998.747754][T16505] overlayfs: statfs failed on './file0' [ 998.817122][T16375] usb 9-1: device descriptor read/8, error -71 [ 999.194861][T16309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.387471][T16375] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 999.626741][T16515] batman_adv: batadv0: Adding interface: gretap1 [ 999.669116][T16375] usb 9-1: device not accepting address 16, error -71 [ 999.677928][T16515] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.738566][T16375] usb usb9-port1: unable to enumerate USB device [ 999.914146][T16515] batman_adv: batadv0: Interface activated: gretap1 [ 1000.092375][T16309] veth0_vlan: entered promiscuous mode [ 1000.203397][T16309] veth1_vlan: entered promiscuous mode [ 1000.607424][T16309] veth0_macvtap: entered promiscuous mode [ 1000.732342][T16309] veth1_macvtap: entered promiscuous mode [ 1001.502636][T16309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.631481][T16309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.824989][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.889709][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.949946][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.015902][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.221562][ T5890] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1003.438972][ T5890] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1003.458202][T10850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.472671][ T5890] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.607411][ T5890] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1003.613630][T10850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.671405][ T5890] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1003.712516][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.720674][ T5890] usb 8-1: Product: syz [ 1003.751526][ T5890] usb 8-1: Manufacturer: syz [ 1003.816325][T16552] net_ratelimit: 10 callbacks suppressed [ 1003.816342][T16552] netlink: zone id is out of range [ 1003.827252][T16552] netlink: zone id is out of range [ 1003.833757][T16552] netlink: zone id is out of range [ 1003.838919][T16552] netlink: zone id is out of range [ 1003.844101][T16552] netlink: zone id is out of range [ 1003.849247][T16552] netlink: zone id is out of range [ 1003.854479][T16552] netlink: zone id is out of range [ 1003.859587][T16552] netlink: zone id is out of range [ 1003.864798][T16552] netlink: zone id is out of range [ 1003.889107][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.890827][T16552] netlink: zone id is out of range [ 1003.999599][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.033097][ T5890] usb 8-1: SerialNumber: syz [ 1004.118267][ T5890] usb 8-1: selecting invalid altsetting 1 [ 1004.127424][ T5890] usb 8-1: unit 6 not found! [ 1004.636675][ T5940] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1004.791870][ T5940] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1005.131074][T11752] Bluetooth: hci1: command 0x0406 tx timeout [ 1006.084063][ T5890] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1006.234053][T16566] fido_id[16566]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1006.382340][ T5890] usb 8-1: USB disconnect, device number 29 [ 1006.476783][T11823] udevd[11823]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1007.008637][ T30] audit: type=1400 audit(2000000059.373:1454): avc: denied { getopt } for pid=16570 comm="syz.0.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1007.962284][T16582] tipc: Enabling of bearer rejected, failed to enable media [ 1008.882936][T16625] netlink: 'syz.6.2598': attribute type 2 has an invalid length. [ 1009.284080][ T793] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1009.366168][ T793] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1009.651678][T16632] netlink: 'syz.6.2600': attribute type 2 has an invalid length. [ 1011.609433][T16648] netlink: 'syz.6.2604': attribute type 29 has an invalid length. [ 1012.363738][T16657] net_ratelimit: 30 callbacks suppressed [ 1012.363788][T16657] netlink: zone id is out of range [ 1012.374696][T16657] netlink: zone id is out of range [ 1012.379910][T16657] netlink: zone id is out of range [ 1012.385127][T16657] netlink: zone id is out of range [ 1012.390294][T16657] netlink: zone id is out of range [ 1012.395900][T16657] netlink: zone id is out of range [ 1012.401591][T16657] netlink: zone id is out of range [ 1012.406853][T16657] netlink: zone id is out of range [ 1012.412512][T16657] netlink: zone id is out of range [ 1012.431863][T16657] netlink: zone id is out of range [ 1012.799582][T16650] netlink: 'syz.6.2604': attribute type 29 has an invalid length. [ 1013.078200][T16663] loop2: detected capacity change from 0 to 7 [ 1013.359582][T16663] Dev loop2: unable to read RDB block 7 [ 1013.367894][T16663] loop2: unable to read partition table [ 1013.398392][T16663] loop2: partition table beyond EOD, truncated [ 1013.428518][T16663] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1014.873276][ T30] audit: type=1400 audit(2000000067.603:1455): avc: denied { accept } for pid=16687 comm="syz.0.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1014.925998][T16689] syz.7.2614 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1014.937879][T16689] ubi31: attaching mtd0 [ 1014.943491][T16689] ubi31: scanning is finished [ 1014.948161][T16689] ubi31: empty MTD device detected [ 1014.989843][ T30] audit: type=1400 audit(2000000067.603:1456): avc: denied { nlmsg_read } for pid=16687 comm="syz.0.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1015.192795][ T5177] block nbd1: Possible stuck request ffff888027f40000: control (read@0,1024B). Runtime 300 seconds [ 1015.207742][T16689] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1015.233175][T16689] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1015.241543][T16689] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1015.248767][T16689] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1015.256427][T16689] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1015.263845][T16689] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1015.272176][T16689] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3885894068 [ 1015.283353][T16689] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1015.371253][ T5177] block nbd1: Possible stuck request ffff888027f40200: control (read@1024,1024B). Runtime 300 seconds [ 1015.380394][T16696] ubi31: background thread "ubi_bgt31d" started, PID 16696 [ 1015.382403][ T5177] block nbd1: Possible stuck request ffff888027f40400: control (read@2048,1024B). Runtime 300 seconds [ 1015.434187][ T5177] block nbd1: Possible stuck request ffff888027f40600: control (read@3072,1024B). Runtime 300 seconds [ 1015.534129][ T30] audit: type=1400 audit(2000000067.753:1457): avc: denied { append } for pid=16684 comm="syz.7.2614" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1018.028884][T16710] netlink: 5256 bytes leftover after parsing attributes in process `syz.4.2620'. [ 1018.060182][T16710] nbd: must specify at least one socket [ 1018.288765][T16718] netlink: 'syz.7.2622': attribute type 33 has an invalid length. [ 1018.339214][T16718] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2622'. [ 1019.230499][ T793] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1019.415454][ T793] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1019.437778][ T793] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1019.467113][ T30] audit: type=1400 audit(2000000072.264:1458): avc: denied { map } for pid=16730 comm="syz.0.2625" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1019.497018][ T793] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1019.568421][ T793] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1019.622963][ T793] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1020.098641][ T793] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1021.178613][ T793] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1021.213176][ T793] usb 7-1: Product: syz [ 1021.233359][ T793] usb 7-1: Manufacturer: syz [ 1021.261262][ T793] cdc_wdm 7-1:1.0: skipping garbage [ 1021.266500][ T793] cdc_wdm 7-1:1.0: skipping garbage [ 1021.280793][T16208] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1021.309433][T16733] netlink: 'syz.0.2625': attribute type 1 has an invalid length. [ 1021.317480][T16733] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2625'. [ 1021.338281][ T793] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1021.367004][ T793] cdc_wdm 7-1:1.0: Unknown control protocol [ 1021.499849][T16208] usb 8-1: Using ep0 maxpacket: 32 [ 1021.562204][T16208] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1021.598689][T16208] usb 8-1: config 0 has no interface number 0 [ 1021.629105][T16208] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1021.648193][T16208] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.698563][T16208] usb 8-1: Product: syz [ 1021.720310][T16208] usb 8-1: Manufacturer: syz [ 1021.724923][T16208] usb 8-1: SerialNumber: syz [ 1021.783061][T16208] usb 8-1: config 0 descriptor?? [ 1021.857525][ T30] audit: type=1400 audit(2000000074.654:1459): avc: denied { read write } for pid=16728 comm="syz.6.2619" name="cdc-wdm0" dev="devtmpfs" ino=3554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1021.953002][T16740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.970965][ T30] audit: type=1400 audit(2000000074.654:1460): avc: denied { open } for pid=16728 comm="syz.6.2619" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1022.021149][T16740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.150846][ C1] cdc_wdm 7-1:1.0: Unexpected error -71 [ 1022.156667][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1022.163335][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1022.170977][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1022.177787][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1022.190355][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1022.197112][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1022.210551][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1022.217344][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1022.230296][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1022.237005][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1022.250371][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1022.257126][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1022.270630][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1022.277556][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1022.283980][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1022.290698][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1022.297653][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1022.304304][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1022.320193][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1022.326921][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1022.954633][T16750] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1022.961267][T16750] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1022.969351][T16750] vhci_hcd vhci_hcd.0: Device attached [ 1022.990956][T16751] vhci_hcd: connection closed [ 1023.007143][ T793] usb 7-1: USB disconnect, device number 29 [ 1023.007207][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1023.018494][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1023.080327][ T12] vhci_hcd vhci_hcd.4: release socket [ 1023.085995][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1023.087764][T16754] netlink: 'syz.8.2631': attribute type 29 has an invalid length. [ 1023.382558][T16758] netlink: 'syz.8.2631': attribute type 29 has an invalid length. [ 1023.483489][ T5913] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1023.761427][T16208] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1023.797162][T16208] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1023.835625][T16208] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1023.861309][ T5913] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.872427][T16208] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 1023.894293][ T5913] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1023.912795][T16208] usb 8-1: USB disconnect, device number 30 [ 1023.934785][ T5913] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1023.962987][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.972249][ T5913] usb 1-1: Product: syz [ 1023.993148][ T5913] usb 1-1: Manufacturer: syz [ 1024.007270][ T5913] usb 1-1: SerialNumber: syz [ 1024.040231][ T5940] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1024.060955][ T5913] cdc_mbim 1-1:1.0: skipping garbage [ 1025.375668][T16757] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1025.437043][ T5940] usb 5-1: Using ep0 maxpacket: 32 [ 1025.457916][ T5940] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1025.479926][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.830849][ T30] audit: type=1400 audit(2000000078.324:1461): avc: denied { append } for pid=16771 comm="syz.8.2637" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1027.043089][ T5940] usb 5-1: Product: syz [ 1027.095185][ T5180] udevd[5180]: worker [12031] /devices/virtual/block/nbd1 timeout; kill it [ 1027.121454][ T5180] udevd[5180]: seq 16843 '/devices/virtual/block/nbd1' killed [ 1027.160248][ T5940] usb 5-1: Manufacturer: syz [ 1027.189335][ T5940] usb 5-1: SerialNumber: syz [ 1027.189384][ T5913] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 1027.201427][ T5913] cdc_mbim 1-1:1.0: bind() failure [ 1027.228221][ T5913] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1027.242134][ T5913] cdc_ncm 1-1:1.1: bind() failure [ 1027.244961][ T5940] usb 5-1: config 0 descriptor?? [ 1027.251501][ T5913] usb 1-1: USB disconnect, device number 39 [ 1027.283739][ T5940] usb 5-1: can't set config #0, error -71 [ 1027.320008][ T5940] usb 5-1: USB disconnect, device number 65 [ 1028.069848][ T5940] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1028.143193][ T5913] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1028.251312][ T5913] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1029.011563][ T5940] usb 7-1: Using ep0 maxpacket: 16 [ 1029.021684][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.052320][T16803] hub 9-0:1.0: USB hub found [ 1029.090019][T16803] hub 9-0:1.0: 1 port detected [ 1029.108709][ T5940] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1029.181263][ T5940] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1029.213534][ T31] INFO: task syz.5.2223:15088 blocked for more than 143 seconds. [ 1029.241886][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.241892][ T31] Tainted: G L syzkaller #0 [ 1029.263176][ T5940] usb 7-1: config 0 descriptor?? [ 1029.284940][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1029.314077][ T31] task:syz.5.2223 state:D stack:28136 pid:15088 tgid:15087 ppid:10326 task_flags:0x400040 flags:0x00080002 [ 1029.355783][ T31] Call Trace: [ 1029.364550][ T31] [ 1029.377356][ T31] __schedule+0xfee/0x6120 [ 1029.390334][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1029.409486][ T31] ? __pfx___schedule+0x10/0x10 [ 1029.427204][ T31] ? find_held_lock+0x2b/0x80 [ 1029.448799][ T31] ? schedule+0x2bf/0x390 [ 1029.463161][ T31] schedule+0xdd/0x390 [ 1029.480381][ T31] schedule_preempt_disabled+0x13/0x30 [ 1029.498023][ T31] __mutex_lock+0xc9a/0x1b90 [ 1029.515738][ T31] ? sync_bdevs+0x153/0x480 [ 1029.530346][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1029.547083][ T31] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1029.567642][ T31] ? iput.part.0+0x1a0/0xf50 [ 1029.580775][ T31] ? sync_bdevs+0x153/0x480 [ 1029.594879][ T31] sync_bdevs+0x153/0x480 [ 1029.609176][ T31] ksys_sync+0xb0/0xf0 [ 1029.625507][T16797] hid-generic 0000:0000:0000.0017: pid 16797 passed too short report [ 1029.627193][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1029.653150][ T31] ? kcov_ioctl+0x16a/0x720 [ 1029.666801][ T31] ? do_syscall_64+0x95/0xf80 [ 1029.681438][ T31] __do_sys_sync+0xe/0x20 [ 1029.706672][ T31] do_syscall_64+0x106/0xf80 [ 1029.723800][ T5940] usbhid 7-1:0.0: can't add hid device: -71 [ 1029.725263][ T31] ? clear_bhb_loop+0x40/0x90 [ 1029.768742][ T5940] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1029.790822][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.809532][ T31] RIP: 0033:0x7fda88d9c799 [ 1029.818448][ T5940] usb 7-1: USB disconnect, device number 30 [ 1029.834586][ T31] RSP: 002b:00007fda89b77028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1029.870932][ T31] RAX: ffffffffffffffda RBX: 00007fda89015fa0 RCX: 00007fda88d9c799 [ 1029.921613][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1029.954645][ T31] RBP: 00007fda89015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1029.991609][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1030.036652][ T31] R13: 00007fda89016038 R14: 00007fda89015fa0 R15: 00007fff69fc0f38 [ 1030.064288][ T31] [ 1030.073416][ T31] INFO: task syz.5.2223:15091 blocked for more than 144 seconds. [ 1030.090906][ T31] Tainted: G L syzkaller #0 [ 1030.107666][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1030.127500][ T31] task:syz.5.2223 state:D stack:28136 pid:15091 tgid:15087 ppid:10326 task_flags:0x400040 flags:0x00080002 [ 1030.159092][ T31] Call Trace: [ 1030.168445][ T31] [ 1030.176359][ T31] __schedule+0xfee/0x6120 [ 1030.187438][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1030.193143][ T31] ? __pfx___schedule+0x10/0x10 [ 1030.199671][ T31] ? find_held_lock+0x2b/0x80 [ 1030.209237][ T31] ? schedule+0x2bf/0x390 [ 1030.213663][ T31] schedule+0xdd/0x390 [ 1030.217882][ T31] schedule_preempt_disabled+0x13/0x30 [ 1030.223435][ T31] __mutex_lock+0xc9a/0x1b90 [ 1030.228179][ T31] ? sync_bdevs+0x153/0x480 [ 1030.233197][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1030.238291][ T31] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1030.244023][ T31] ? iput.part.0+0x1a0/0xf50 [ 1030.249171][ T31] ? sync_bdevs+0x153/0x480 [ 1030.267420][ T31] sync_bdevs+0x153/0x480 [ 1030.282627][ T31] ksys_sync+0xb0/0xf0 [ 1030.294338][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1030.306797][ T31] ? kcov_ioctl+0x16a/0x720 [ 1030.316784][ T31] ? do_syscall_64+0x95/0xf80 [ 1030.325792][ T31] __do_sys_sync+0xe/0x20 [ 1030.335535][ T31] do_syscall_64+0x106/0xf80 [ 1030.346671][ T31] ? clear_bhb_loop+0x40/0x90 [ 1030.359743][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.369730][ T31] RIP: 0033:0x7fda88d9c799 [ 1030.374167][ T31] RSP: 002b:00007fda86ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1030.399248][ T31] RAX: ffffffffffffffda RBX: 00007fda89016090 RCX: 00007fda88d9c799 [ 1030.421942][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1030.444676][ T31] RBP: 00007fda89016090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.467454][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1030.486059][ T31] R13: 00007fda89016128 R14: 00007fda89016090 R15: 00007fff69fc0f38 [ 1030.512527][ T31] [ 1030.532063][ T31] INFO: task syz.5.2223:15094 blocked for more than 144 seconds. [ 1030.559539][ T31] Tainted: G L syzkaller #0 [ 1030.566593][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1030.592079][ T31] task:syz.5.2223 state:D stack:28136 pid:15094 tgid:15087 ppid:10326 task_flags:0x400040 flags:0x00080002 [ 1030.621626][ T31] Call Trace: [ 1030.629651][ T31] [ 1030.635969][ T31] __schedule+0xfee/0x6120 [ 1030.649420][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1030.661480][ T31] ? __pfx___schedule+0x10/0x10 [ 1030.675270][ T31] ? find_held_lock+0x2b/0x80 [ 1030.689146][ T31] ? schedule+0x2bf/0x390 [ 1030.699793][ T31] schedule+0xdd/0x390 [ 1030.704011][ T31] schedule_preempt_disabled+0x13/0x30 [ 1030.709534][ T31] __mutex_lock+0xc9a/0x1b90 [ 1030.741249][ T31] ? sync_bdevs+0x153/0x480 [ 1030.748891][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1030.766303][ T31] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1030.782676][ T31] ? iput.part.0+0x1a0/0xf50 [ 1030.787474][ T31] ? sync_bdevs+0x153/0x480 [ 1030.810300][ T31] sync_bdevs+0x153/0x480 [ 1030.814670][ T31] ksys_sync+0xb0/0xf0 [ 1030.818738][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1030.844772][ T31] ? kcov_ioctl+0x16a/0x720 [ 1030.852347][ T31] ? do_syscall_64+0x95/0xf80 [ 1030.857047][ T31] __do_sys_sync+0xe/0x20 [ 1030.877059][ T31] do_syscall_64+0x106/0xf80 [ 1030.891189][ T31] ? clear_bhb_loop+0x40/0x90 [ 1030.895901][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.921537][ T31] RIP: 0033:0x7fda88d9c799 [ 1030.925986][ T31] RSP: 002b:00007fda86fd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1030.954217][ T31] RAX: ffffffffffffffda RBX: 00007fda89016180 RCX: 00007fda88d9c799 [ 1030.974437][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1030.990873][ T31] RBP: 00007fda89016180 R08: 0000000000000000 R09: 0000000000000000 [ 1030.998867][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1031.025431][ T31] R13: 00007fda89016218 R14: 00007fda89016180 R15: 00007fff69fc0f38 [ 1031.042587][ T31] [ 1031.049186][ T31] [ 1031.049186][ T31] Showing all locks held in the system: [ 1031.078803][ T31] 1 lock held by khungtaskd/31: [ 1031.083816][ T31] #0: ffffffff8e7e76a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1031.097357][ T31] 2 locks held by getty/5568: [ 1031.103304][ T31] #0: ffff888038fe20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1031.113111][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1031.123293][ T31] 1 lock held by udevd/12031: [ 1031.127952][ T31] #0: ffff888027e9f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1031.146134][ T31] 3 locks held by kworker/1:0/12267: [ 1031.153343][ T31] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1031.164901][ T31] #1: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 1031.174658][ T31] #2: ffff8880217c91a0 (&r->consumer_lock#2){+.+.}-{3:3}, at: wg_packet_handshake_receive_worker+0x1a5/0x370 [ 1031.189462][ T31] 1 lock held by syz.5.2223/15088: [ 1031.196587][ T31] #0: ffff888027e9f358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1031.209912][ T31] 1 lock held by syz.5.2223/15091: [ 1031.215019][ T31] #0: ffff888027e9f358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1031.231243][ T31] 1 lock held by syz.5.2223/15094: [ 1031.237731][ T31] #0: ffff888027e9f358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1031.251760][ T31] [ 1031.254279][ T31] ============================================= [ 1031.254279][ T31] [ 1031.263514][ T31] NMI backtrace for cpu 1 [ 1031.263532][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1031.263555][ T31] Tainted: [L]=SOFTLOCKUP [ 1031.263561][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1031.263570][ T31] Call Trace: [ 1031.263577][ T31] [ 1031.263584][ T31] dump_stack_lvl+0x100/0x190 [ 1031.263617][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1031.263636][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1031.263664][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1031.263697][ T31] sys_info+0x141/0x190 [ 1031.263721][ T31] watchdog+0xd25/0x1050 [ 1031.263752][ T31] ? __pfx_watchdog+0x10/0x10 [ 1031.263782][ T31] ? __kthread_parkme+0x18c/0x230 [ 1031.263808][ T31] ? kthread+0x13a/0x450 [ 1031.263823][ T31] ? __pfx_watchdog+0x10/0x10 [ 1031.263844][ T31] kthread+0x370/0x450 [ 1031.263860][ T31] ? __pfx_kthread+0x10/0x10 [ 1031.263878][ T31] ret_from_fork+0x754/0xd80 [ 1031.263897][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1031.263916][ T31] ? __switch_to+0x7b4/0x1120 [ 1031.263938][ T31] ? __pfx_kthread+0x10/0x10 [ 1031.263956][ T31] ret_from_fork_asm+0x1a/0x30 [ 1031.263988][ T31] [ 1031.263997][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1031.393141][ C0] NMI backtrace for cpu 0 [ 1031.393192][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1031.393220][ C0] Tainted: [L]=SOFTLOCKUP [ 1031.393227][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1031.393241][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1031.393309][ C0] Code: 78 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 61 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1031.393329][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 1031.393351][ C0] RAX: 00000000045dc44d RBX: ffffffff8e4975c0 RCX: ffffffff8b902c75 [ 1031.393363][ C0] RDX: 0000000000000000 RSI: ffffffff8de77143 RDI: ffffffff8c1b0a20 [ 1031.393372][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 1031.393381][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 1031.393390][ C0] R13: 0000000000000000 R14: ffffffff90d99410 R15: 0000000000000000 [ 1031.393403][ C0] FS: 0000000000000000(0000) GS:ffff888124342000(0000) knlGS:0000000000000000 [ 1031.393420][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1031.393429][ C0] CR2: 0000561e2ce1be08 CR3: 000000002cf95000 CR4: 00000000003526f0 [ 1031.393444][ C0] Call Trace: [ 1031.393458][ C0] [ 1031.393465][ C0] default_idle+0x9/0x10 [ 1031.393490][ C0] default_idle_call+0x6c/0xb0 [ 1031.393507][ C0] do_idle+0x43a/0x550 [ 1031.393533][ C0] ? __pfx_do_idle+0x10/0x10 [ 1031.393552][ C0] cpu_startup_entry+0x4f/0x60 [ 1031.393572][ C0] rest_init+0x251/0x260 [ 1031.393590][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1031.393612][ C0] start_kernel+0x47f/0x480 [ 1031.393630][ C0] x86_64_start_reservations+0x24/0x30 [ 1031.393645][ C0] x86_64_start_kernel+0x12b/0x130 [ 1031.393658][ C0] common_startup_64+0x13e/0x148 [ 1031.393687][ C0] [ 1031.583491][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1031.590408][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1031.601077][ T31] Tainted: [L]=SOFTLOCKUP [ 1031.605380][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1031.615413][ T31] Call Trace: [ 1031.618721][ T31] [ 1031.621661][ T31] dump_stack_lvl+0x100/0x190 [ 1031.626363][ T31] vpanic+0x552/0x970 [ 1031.630326][ T31] ? __pfx_vpanic+0x10/0x10 [ 1031.634813][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1031.641004][ T31] panic+0xd1/0xe0 [ 1031.644753][ T31] ? __pfx_panic+0x10/0x10 [ 1031.649209][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1031.655363][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1031.661509][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1031.667650][ T31] ? watchdog.cold+0x198/0x1ca [ 1031.672415][ T31] ? watchdog+0xd35/0x1050 [ 1031.676818][ T31] watchdog.cold+0x1a9/0x1ca [ 1031.681394][ T31] ? __pfx_watchdog+0x10/0x10 [ 1031.686056][ T31] ? __kthread_parkme+0x18c/0x230 [ 1031.691069][ T31] ? kthread+0x13a/0x450 [ 1031.695291][ T31] ? __pfx_watchdog+0x10/0x10 [ 1031.699949][ T31] kthread+0x370/0x450 [ 1031.703998][ T31] ? __pfx_kthread+0x10/0x10 [ 1031.708568][ T31] ret_from_fork+0x754/0xd80 [ 1031.713138][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1031.718230][ T31] ? __switch_to+0x7b4/0x1120 [ 1031.722888][ T31] ? __pfx_kthread+0x10/0x10 [ 1031.727457][ T31] ret_from_fork_asm+0x1a/0x30 [ 1031.732211][ T31] [ 1031.735405][ T31] Kernel Offset: disabled [ 1031.739704][ T31] Rebooting in 86400 seconds..