last executing test programs: 4m57.921294154s ago: executing program 0 (id=606): syz_usb_connect$uac2(0x5, 0x98, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100100000008ca15010140000102030109028600030180000e080b0101010a207609040000000101200009060000000000000011240906060000020002005df5ef9603000c2403fd0101a80306f9ff01090401"], 0x0) r0 = gettid() timer_create(0x4, &(0x7f0000000180)={0x0, 0x23, 0x800000000004, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) fcntl$setsig(r2, 0xa, 0x1f) 4m57.172468415s ago: executing program 0 (id=609): syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4008094) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) r3 = fanotify_init(0x0, 0x0) r4 = open$dir(&(0x7f0000001000)='.\x00', 0x20000, 0x50) fanotify_mark(r3, 0x641, 0x48001018, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r5, &(0x7f00000040c0)={0x2020}, 0x2020) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000040)=0x2) readv(r6, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}], 0x20) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(0x0) socket$rds(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='mtd0\x00', &(0x7f0000000600), &(0x7f0000000640)='mtd0\x00', 0x5, 0x0) mkdirat(r2, &(0x7f0000000580)='./file0\x00', 0x20) 4m56.331055052s ago: executing program 0 (id=613): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mydomain / 64\n', 0xe) 4m56.217886993s ago: executing program 0 (id=614): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000040)='./file0\x00', 0x10507e, 0xa6) io_setup(0x7d, &(0x7f0000000600)=0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x30a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0xc8, 0x5, "", [{{0x9, 0x4, 0x0, 0xfa, 0x2, 0x3, 0x1, 0x2, 0x94, {0x9, 0x21, 0x2, 0x73, 0x1, {0x22, 0xfcf}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0xf8, 0x8}}}}}]}}]}}, 0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r1}]) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1aae, 0x0, 0x0, 0x0, 0xe}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}]}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0xa3, &(0x7f0000000280)=""/163, 0x41100, 0x18, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[r0], &(0x7f00000003c0)=[{0x0, 0x5, 0xe}, {0x3, 0x4, 0xc, 0x4}, {0x1, 0x5, 0x6, 0x8}], 0x10, 0xff}, 0x94) 4m55.351948976s ago: executing program 0 (id=618): r0 = socket(0x2, 0x80805, 0x9) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x280, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x3f5) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0x9}, 0xc) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b000100000300090400"], 0x0) 4m54.831025054s ago: executing program 0 (id=621): r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000340)="be177dbe", 0x4}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}}], 0x2, 0x40) 4m54.582512276s ago: executing program 32 (id=621): r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000340)="be177dbe", 0x4}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}}], 0x2, 0x40) 4m34.199261827s ago: executing program 4 (id=709): bind$inet(0xffffffffffffffff, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000440)) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x40002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005c40)=""/102400, 0x19000) syz_open_dev$video4linux(0x0, 0x6, 0x62c203) socket(0x11, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041091}, 0x844) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x9f00, 0x0) 4m32.567250538s ago: executing program 4 (id=716): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0xa, 0x2) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES8=r4], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x7e, &(0x7f0000000400)=ANY=[@ANYBLOB="7e0369fc3cd40c816cfda821fbea89d20a00fd79ca2421d2019429ab2de1c360928883a73009d40800000034871242a4f2eb4965290f4719d7780297a8a991f5a173f4b1b8e570c0e3c552a4a5a3522b1d7ed20da2efa1b7db7d07ba90f08e5414202ca50a66e9f32374474d8d4908804b27f2b081bbac941005e3a9c49d"]}, {0xf1, &(0x7f00000005c0)=@string={0xf1, 0x3, "0399f57912df1e796419f915572cf62478067cc2fa8f00ea8976d5a67080625b411dd884cbe2bae496c468499bbbd87eb8115b9d6850eb0c60d0ee1dfcab457b9593e6d2a67dd4612228cd80f55a6107f6622ec355c2a703624e1109914c09bbfad2515164d87f9bb70c51ef5d8ad6bee8fa35234a9c130b08293c4c7e0453035a2519b9c6a788e5bcfc0b205c8a6611f070b19871dc0517e2951421c6a19fa161e42a390be967587bfdff554fcecb88745dcb56d2f7885ddad45dcd086cbf2fdba0b9b44aff1f6cc6d5141cedceecc66e3eaff927279f9934aab184dde996e91a20ffd59fd6f362184eecfb72fb79"}}]}) io_uring_enter(0xffffffffffffffff, 0x5280, 0x87e8, 0x24, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x48, 0x2, 0x4, 0x0, 0xdb}) r5 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) r6 = getpid() mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x100000c, 0x80010, 0xffffffffffffffff, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r7, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="78000000000000001001000001000000342cecefc0f7bdba31812d482af4776935c381b4207c78678dda100d60df7a0c3d08e316ff5d95a7873b20cf3125b68630a6c6e9e5b53d32c39163ca4972e4b1fa3365fcacc6e3320d7900000100f40000348ddafcaa02b6c97d6695189541e432d4fc761d15b700"], 0x78}, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r8, &(0x7f0000001f80)={0x8, 0x120, 0xfa00, {0x1, {0x7, 0xfffffff8, "e1161e0ff364167e154e26433b94949403f569c8ffc81c0a597becf442052e6450662b1784ddaddbf8e02987e27908eabb7d7ce2d458229b2535f5e7a92618e88f7555cd9eb253208eb6a8a560eda9e3f3f30bb5a0d138478349de0ff90a95a897b5c8bc58c5ebb00210a18eed2373a8932334dad16a5dc508024846cde4e9431e4c941be3f55b0d6e685b39fca72c0ceabec561d2e46ba3cec654f1de6492e64cae89d6df365c86c7ea54cb8156fb618c21ffcbbc808b16b1f05780d1ab40ff4546aff35d6fc4471461b29c772a53300c5dde3487e5e8f5c0040c4a4f8654e6bf4d43436b8e643a67069554df61d1d701599a01d32d0a25d5515a69a8e0bf57", 0x7f, 0x0, 0x5, 0x3, 0x8, 0x0, 0x9}}}, 0x128) tgkill(r6, r5, 0xf) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0xe14fe1afe8ab4915, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x200001}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x34, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@handle={0x73682a85, 0x100b, 0x1}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @increfs_done], 0x0, 0x0, 0x0}) 4m29.472956688s ago: executing program 4 (id=735): r0 = socket(0x29, 0x4, 0x7) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000600)='U3', 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000280)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @icmp={{0x13, 0x4, 0x0, 0x0, 0x68, 0x0, 0x20, 0xfc, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1=0xe0000300, {[@timestamp={0x44, 0x1c, 0x98, 0x0, 0x5, [0x3, 0x9, 0x2, 0x5, 0xb441, 0x3]}, @cipso={0x86, 0xa, 0x3, [{0x7, 0xe, "aa4a2ece4b673795ef58a2df"}]}, @ssrr={0x89, 0x7, 0x45, [@multicast1]}]}}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @multicast2, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101005, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x8f, "c74c4d6a99b69f2adddcac87a2bb37d851c97848733bb7cfcbbf3704c6e3c97ad5b2b8effbaaeda958e6a946a07e5e5a64661cd0ee65b4764d8205d64f68b9bbe4e7d5b009dd54a1d19de628b622c221116be81b7b2e4426c7eb133ca0b604e58ba1fd25e903300c9094d8bc46351a4130f17ec485090ef60442d13024683eb64d08f0032a2b3b33286ae71dc06a63"}, &(0x7f0000000140)=0x97) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r3, 0x3, 0x9, 0x1, 0x2, 0x7}, &(0x7f00000001c0)=0x14) 4m29.102629732s ago: executing program 4 (id=737): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='mpol=bind:', @ANYRESOCT]) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB="00000000000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xad5, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) fdatasync(r3) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x9, 0x9184, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x58200, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) r10 = syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r10, 0x4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r7, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x6}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) 4m27.112401119s ago: executing program 4 (id=748): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x30, &(0x7f0000000400)={&(0x7f0000000180)={0x18, 0x2f, 0x9, 0x70bd27, 0x7000000, {0x4}, [@typed={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x20042884}, 0x10) 4m25.139210232s ago: executing program 4 (id=761): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18) socket(0x23, 0xa, 0x5) 4m24.825157021s ago: executing program 33 (id=761): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18) socket(0x23, 0xa, 0x5) 4m24.596538439s ago: executing program 2 (id=767): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prlimit64(r0, 0x5, &(0x7f0000000780)={0x8, 0x9}, 0x0) mlockall(0x7) socket$xdp(0x2c, 0x3, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46, 0x50, 0x50]}, 0x2c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) syz_ublk_setup_io_uring(0x595c, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) chdir(&(0x7f0000000000)='./file0\x00') socket$inet6_sctp(0xa, 0x5, 0x84) 4m24.119414361s ago: executing program 2 (id=770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324900007f00000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x40000, 0x0, 0x0, 0x5, 0xb80, 0x0, 0x7ffffdff], [0x10000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0xfffffffd], [0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x800, 0xffffffff]], '\x00', [{0x0, 0x400}, {0xfffffffd}, {}, {0x0, 0xfffffffc, 0x0, 0x1, 0x1}, {0x80000009, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}, {}, {0x0, 0x1}, {}, {0x8000000}], '\x00', 0x1000}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r4) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r2}, 0x38) 4m23.370888303s ago: executing program 2 (id=772): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000500)={{0x2, 0x4e24, @local}, {0x0, @broadcast}, 0x0, {0x2, 0x4e23, @empty}, 'team0\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a602, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) unshare(0x1e060c80) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setrlimit(0x0, &(0x7f0000000200)={0xb0, 0x2}) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f0000000280)={0xb, 0x0}) fsopen(&(0x7f0000000000)='ntfs\x00', 0x1) openat$hwrng(0xffffffffffffff9c, 0x0, 0xd01, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000604}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x7c, 0x1, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5ac1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xa4}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfdb}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000004) r5 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) acct(&(0x7f00000000c0)='./file1\x00') syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) 4m21.590646627s ago: executing program 2 (id=776): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1000, 0x200000) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x3e, 0xda, 0x2}) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000140)={0x1000000d, 0xfffffffd, 0xfffffffa}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1000, 0x200000) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x3e, 0xda, 0x2}) (async) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000140)={0x1000000d, 0xfffffffd, 0xfffffffa}) (async) 4m21.371818482s ago: executing program 2 (id=777): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sndctrl(&(0x7f0000000580), 0xc290, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300), 0x12) sendfile(r4, r4, 0x0, 0x10001) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/self/fail-nth\x00', 0x2, 0x0) preadv(r7, &(0x7f0000003480)=[{&(0x7f00000002c0)=""/23, 0x17}], 0x1, 0x9, 0x3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x80, 0x20, 0x8, 0xbe, {{0x38, 0x4, 0x1, 0x38, 0xe0, 0x68, 0x0, 0x1, 0x2f, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0x3c, 0xdf, 0x1, 0x6, [{@broadcast, 0x7fffffff}, {@multicast1, 0xe}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x4}, {@loopback, 0xa}, {@empty, 0x1000}, {@empty, 0xf89}]}, @rr={0x7, 0x23, 0x90, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local, @private=0xa010102, @broadcast, @local, @broadcast]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x12, 0x2, [{0x0, 0xc, "3e03941910c3d0c3af8d"}]}, @generic={0x94, 0x11, "ac0cb9e702809ccf79d908d1e4c92b"}, @cipso={0x86, 0x34, 0x0, [{0x5, 0xd, "f6d5111956390971d4eabc"}, {0x6, 0x10, "4a9734510fadea41a435f3ced481"}, {0x5, 0x11, "1eff6c78fda734fe6a217c742da980"}]}, @lsrr={0x83, 0xb, 0xda, [@remote, @multicast1]}, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000001000080ff0700000d00000004020000", @ANYRES32=r6, @ANYBLOB="0400"/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB="00000000001d0000000000000a0048b109bf00"/28], 0x50) 4m19.463857143s ago: executing program 2 (id=783): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50040, 0x70) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xaf9ba000) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000240)=""/249) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8000002, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x142682, 0x0) r2 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 4m4.014694706s ago: executing program 34 (id=783): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50040, 0x70) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xaf9ba000) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000240)=""/249) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8000002, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x142682, 0x0) r2 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 3m59.025337693s ago: executing program 1 (id=855): socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = open(&(0x7f0000000140)='./file0\x00', 0x42a80, 0x28) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x195) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="3f0ad0c30200005c3a0000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x9, @private1, 0x8}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000040)="81", 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000100)={0x9}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r4, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000001a00)=0x1000000000000014, 0x12) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) syz_open_dev$sndctrl(&(0x7f0000000180), 0x104a, 0x28900) 3m58.751146587s ago: executing program 1 (id=857): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4040) 3m58.635781368s ago: executing program 1 (id=858): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x214680, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000240)={0x10, 0x1000000}) 3m58.452581201s ago: executing program 1 (id=860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') io_setup(0x9, &(0x7f0000000240)=0x0) r5 = eventfd2(0x7, 0x0) io_submit(r4, 0x3, &(0x7f0000000800)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xff45, r3, &(0x7f0000000340)="d100", 0x2, 0x6, 0x0, 0x5, r5}, 0x0, 0x0]) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x24040880) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e22, @remote}}}, &(0x7f0000000040)=0x84) getsockopt$sock_buf(r0, 0x1, 0x1f, 0xfffffffffffffffd, &(0x7f00000003c0)) 3m57.661318926s ago: executing program 1 (id=866): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/intel_xhci_usb_sw/uevent\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='add\x00', 0x4) sendmsg$rds(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x44, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@mcast2}]}, 0xfe9a}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 3m57.334906444s ago: executing program 1 (id=867): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4040) 3m57.013426596s ago: executing program 35 (id=867): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4040) 14.154639474s ago: executing program 3 (id=1876): syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x2c00, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0xf5ff, @private=0xfffffffd, @local, {[@lsrr={0x83, 0x3}, @cipso={0x86, 0x3a, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0x12, "2100505c09a000"/16}, {0x0, 0xf, "ffd11634eea26b0faffa0dea2e"}]}]}}}}}}}, 0x0) 13.939244693s ago: executing program 3 (id=1877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a00000000000000640101000000000000000000000000002c003000859bacfcbe38a9cbb1"], 0x38}}, 0x40408c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r4, &(0x7f00000001c0)='functionfs', 0xa) read(r3, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r5, &(0x7f0000000300)="031b0000330000000700000001000000", 0x33) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324900007f00000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r6}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r7}, 0x38) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f0000000380)={{0x81, 0x1, 0x9, 0x81, 0x400}, &(0x7f0000000400)}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_connect$uac3(0x7, 0x0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4) write$tun(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000286dd6d002000006c11ff00000000000000000004000020000000ff0200000000000000000000000000010c000000000000004f194e2000649078020000000200000002000000ae6619ace81056b6752e41c384102235de52f0d04178a125bb0d7cf114e38efca483545d5516297f757e8711e087316482b0262b950278e08b229053a25219237bf250f092f0d166eb1533231acb5d7b4de05a24f57f19b54e"], 0xa6) 13.094910229s ago: executing program 3 (id=1884): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000004400010029bd70000400000002000000043f3ffe00010000427d5fd7db25b5f59166afa517a46f282035f99263f5005f5af5faf8ca73a8e878ea117144c673ecb9515e9532db83a9c209041b8cfd28b4e9000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x21) r6 = dup(r5) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x81) r7 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000000c0)='source', 0x0, r3) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000dfe86bc0d908422984835f59772d1c78682fc70c4276a113fe479d07a750295e0c87e07a465849", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0xeefd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r8, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c9547a", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18ab", 0x2}], 0x1}}], 0x4, 0x40480c0) 11.891176194s ago: executing program 3 (id=1887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000a, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x2d, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r7}}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x100, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0xfff3, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x170, 0x24, 0xd0f, 0x200003, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x4, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x2917dccc, 0x5, 0x400, 0x9, 0x81, 0x101, 0x6, 0xc40, 0x40, 0xfffffffd, 0x20, 0xb, 0x1d, 0x6, 0xca11, 0x10000}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) socket$alg(0x26, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) 11.523716031s ago: executing program 5 (id=1889): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) prlimit64(r2, 0x8, 0x0, &(0x7f0000000100)) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000fdff19ff0a000e001c"], 0x34}}, 0x10) 11.037067733s ago: executing program 5 (id=1894): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r0, &(0x7f0000001140)='\x00', 0x1) r1 = socket(0xa, 0x3, 0x3a) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e24, @local}, 0x63) 9.506809961s ago: executing program 5 (id=1895): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xe, 0x4, 0x4, 0x7}, 0x50) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x2, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r2, 0x58, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r5], &(0x7f00000055c0), 0x0, 0x0}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e1301", @ANYRES16=r3, @ANYRESDEC=0x0, @ANYRES16=r1, @ANYBLOB="d80902a245af0cb0b7cb53e019125fd7dffff60174ef5cc1302863c5cd0af106992b752edc20dcf9bb57ec0051431b"], 0x16) 6.825477893s ago: executing program 5 (id=1900): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_bond\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x65c0846f6d25d8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x885}, 0x60000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r4, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r5 = inotify_init1(0x0) inotify_add_watch(r5, 0x0, 0x10001400) getsockopt$inet6_buf(0xffffffffffffffff, 0x3a, 0x20, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r6, 0x0, 0x0, 0x40000121, 0x0) socket$kcm(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x90903, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x49815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 6.683333258s ago: executing program 8 (id=1901): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x54, r1, 0x113, 0x0, 0x400, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x87}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x3f000000}, 0x800) 6.658945128s ago: executing program 3 (id=1902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x24040000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = fsopen(&(0x7f0000000280)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000000000000008, 0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0xfffffffa, 0x0, 0x100000, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r10 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x1, 0x0) r11 = syz_open_dev$MSR(&(0x7f0000000180), 0x2, 0x0) read$msr(r11, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r10, 0x8, &(0x7f0000000100)=0x3) unshare(0x68040000) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 6.43873761s ago: executing program 7 (id=1904): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f0000000080)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3d7}, 0x20044818) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) 6.371227507s ago: executing program 8 (id=1905): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) sched_setattr(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x3) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_emit_ethernet(0xbe, 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464e"}, 0xad) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) unshare(0xa000080) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbtest/new_id\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='0=', 0x2) r5 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x42) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) 6.015109183s ago: executing program 6 (id=1906): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000100)={0xffffffffffffffff, 0x40}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x54c, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xff90, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf4, 0xb, 0xfe}}}}}]}}]}}, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x10c}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="200028000000200af70ba381038de583bb48fd16a2cb4fdca0560fb30dc66cba43dfd07ac838d32b99a35254f3e5"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.007861961s ago: executing program 7 (id=1907): setns(0xc9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f) socket$inet(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) tgkill(0xffffffffffffffff, r0, 0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000240), 0x1001) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x3, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) 5.693548742s ago: executing program 7 (id=1908): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x3, 0x8, 0x7, 0x0, 0x9, 0x0, 0x57c73f36, 0xfa11, 0xfffffbff}, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000500)={0xffff, 0x0, "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"}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffe, 0x8000, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000002000000"], 0x0, 0x2a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f0000000900)=ANY=[@ANYRES8=r4], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r6, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000980), 0x10}, 0x94) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x340, 0x0, &(0x7f0000000180)=[0x1, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9024, 0x0, 0x7, 0x5, 0x8, 0x49, 0x400, 0x5, 0x800000, 0x9, 0x3ff, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x80000000, 0x4, 0x7, 0x23b, 0x3, 0x6, 0x888f, 0x4, 0xb, 0x6, 0x7fffffff, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffefffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x0, 0xe3, 0x200000000002101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x40000000000009, 0xe8, 0x80000000, 0xfffffffffffffc01, 0xfffffffffffffffe, 0x4, 0x4, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x3, 0x4, 0x6, 0xab6, 0x9, 0x4, 0xfff, 0xfdffffffffffff81, 0x9, 0x4, 0x2000000000000006, 0x1, 0x5, 0x400000000008061e, 0x5, 0x8, 0xf6, 0x4, 0x6, 0xffffffffffffffff, 0x7, 0xe53e, 0x80000001, 0x8, 0x22933329, 0x6, 0x5, 0x0, 0xd, 0x3, 0x8, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x0, 0x6, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcd, 0x8, 0x3]}) syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 5.239430092s ago: executing program 6 (id=1909): syz_usb_connect$uac1(0x6, 0x79, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000408205a30040000102030109026700030109c00009047900000100000a240178000a00020102090401000001020000090401010101020000090501091000087f050725010407060009e02e9ea84649c338e6d0eeea6e930bf3c5cd00"], 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000070a0102000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x4044) (async) r2 = fcntl$dupfd(r0, 0x0, r0) (async) syz_usb_connect$uac1(0x2, 0xc6, &(0x7f0000000440)={{0x12, 0x1, 0x88, 0x0, 0x0, 0x0, 0x20, 0x133e, 0x815, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x3, 0x1, 0x9, 0xe0, 0x11, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x20}, [@selector_unit={0x8, 0x24, 0x5, 0x1, 0x59, "a4ef6a"}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0x8}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x5, 0x1, [0x3], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x2f82, 0x100, 0x2, "80785a2b91"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xa, 0x3, 0x2, 0x5b, "4a974c3e02ea"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x3, 0x1, 0x6, "04", "e8"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0x8, 0x6, "f154a221c6"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x2, 0xa8, 0xf8, '\v', 'A'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0xb6, 0x5, {0x7, 0x25, 0x1, 0xc, 0xfd, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xc0, 0x8, 0x58, {0x7, 0x25, 0x1, 0xc, 0xe, 0x3}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0x8, 0x7, 0xf3, 0xff, 0x9}, 0x66, &(0x7f0000000580)={0x5, 0xf, 0x66, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x4, 0xc, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x62, 0x3, 0x9e, 0x7, 0x2}, @ssp_cap={0x24, 0x10, 0xa, 0x83, 0x6, 0x10, 0xf, 0x85, [0xf, 0xff0030, 0x0, 0x1c6d39e1e93dedd, 0x0, 0xc000]}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x100, 0xf000, 0x1ff, [0x30]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "2ff56acec7d1f37f1648bb0ca1ad9198"}]}, 0x4, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1407}}, {0x0, 0xfffffffffffffffd}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x285f}}]}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) 4.549433646s ago: executing program 6 (id=1910): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000180)={0x320, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x0, 0x8, 0xfffffffd}, {0x10, 0xb, 0xfffdfffd}, 0x0, 0x10, 0x0, 0x4, 0x0, 0x80, 0xffff, 0x0, 0xb, 0x400009, 0x6, 0x0, 0x17, 0x200, 0x2, 0x5}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x60, r5, 0x1, 0x70bd37, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_MGMT_A_DOMAIN={0x1a, 0x1, '\b\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x8bd\xea!\xc4\xed1\x05\x00'}]}, 0x60}}, 0x0) r6 = syz_io_uring_setup(0xf06, &(0x7f0000000400)={0x0, 0x5b62, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r10 = socket(0x18, 0x1, 0x2) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x68, 0x0, r10, 0x0, &(0x7f0000000580)="a1ef853cbe1b", 0x6}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0x3219e91853c57851) r11 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r11, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 4.210669691s ago: executing program 7 (id=1911): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x78, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x3e4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x894b, 0x0) 4.075365437s ago: executing program 6 (id=1912): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=@getqdisc={0x24, 0x26, 0x301}, 0x24}, 0x1, 0x0, 0x1000000}, 0x0) 3.52405435s ago: executing program 6 (id=1913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a0103000000001c000300010000040900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a010400000000000000000100000008000b4000000000400004803c0001800b00010065787468647200002c000280080001400000000c08000340000000010800044000000022050002000700000008000640000000040900010073797a30"], 0xdc}}, 0x0) 3.519294312s ago: executing program 7 (id=1914): r0 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x90, 0x48, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5f467d72, 0x5, 0x9, 0x5}, {0x6, 0x24, 0x1a, 0x8, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x83, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0x2, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x2, 0xd}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000ffffffff000000000300000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000008500000007000000950000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r3}, 0xc) syz_usb_disconnect(r0) r4 = syz_usb_connect(0x0, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902450002010080fa080b0002010020000904000000010120000924010002080900000904010001ff0000000705"], 0x0) syz_usb_ep_write(r4, 0x81, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.307370538s ago: executing program 5 (id=1915): syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4008094) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x2) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}], 0xe0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(0x0) socket$rds(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='mtd0\x00', &(0x7f0000000600), &(0x7f0000000640)='mtd0\x00', 0x5, 0x0) mkdirat(r1, &(0x7f0000000580)='./file0\x00', 0x20) 3.047093302s ago: executing program 6 (id=1916): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/222) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) write$sequencer(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000000000000"], 0x8) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000540)=ANY=[], 0x8c}}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x4) memfd_create(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x13}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x111}, 0x20008000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b0000000200000009000100"], 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000000180)=ANY=[], 0x24c4}, 0x1, 0x0, 0x0, 0x8}, 0xc0) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000003780), r3) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 2.868330885s ago: executing program 8 (id=1917): r0 = socket(0x40000000015, 0x5, 0x0) syz_usb_connect(0x1, 0x3ab, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x6a, 0x8c, 0xd2, 0x40, 0x9022, 0xd662, 0x8500, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x399, 0x1, 0x1, 0x6, 0x30, 0x7, "", [{{0x9, 0x4, 0xdd, 0x9, 0xd, 0x37, 0x84, 0xbb, 0x6, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x5, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1000, 0x6, 0x0, 0x8}]}], [{{0x9, 0x5, 0x8, 0x1, 0x630, 0x9b, 0x5, 0xfd}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x7f, 0x80, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xf86}]}}, {{0x9, 0x5, 0x4, 0x8, 0x20, 0x1, 0xd, 0xd6}}, {{0x9, 0x5, 0xc, 0x18, 0x200, 0x9, 0x6, 0x6}}, {{0x9, 0x5, 0x6, 0x10, 0x0, 0xd7, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x5, 0x9, 0x3, [@generic={0x80, 0x21, "f48da4598bcd8c6d07d48bb2409ded1cc9b6e67f8034a878577b600643704bf655faacde3b00918b3e1a47717fab13882aaafecafb5d1776cb7cdb771f73ee795f9c35a29f1a7761f546600c12e1eb0c9472e5213ec1063c6f255ce3838fa6e7bc968f47d6ea8f6c9dc7415268c24942fa882040f0e82ec9393c1d94170a"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0x4, 0x5, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x5f9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xbc, 0xb}]}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0x80, 0x7f, 0xfd}}, {{0x9, 0x5, 0xf, 0x18, 0x20, 0x3, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0xf8, 0x9, 0x6, [@generic={0x3a, 0x22, "177d448fd836e78b6b52407794c08920c42a24bae1e67cd97067543e2b3b280034937ec9aa6c2c078bee5937a3b94ede0a0cab9a3b2e849d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x1000}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x5, 0x7, 0xc4, [@generic={0x7, 0x8, "562ab2d060"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0x5, 0xfa, 0x5, [@generic={0x5e, 0xa, "6f1dc3bf1b3305acf448c5bbe3252f4ffe8729d52074d80178f0bd6784730329083085f69a4245fa359480099c8ac7d6e26d8dce851935beb1afc9cb8c6637e4e579c8e1d4ba0871615f24dd4e7f86f2f599bf62bd7105b8109fbe51"}, @generic={0xbf, 0xf, "57c5e5b476a5d681e787a9a682a16629718bf8ca6272206b351ffba3a79e391c7c8f7258f8bf474c2072cabeb246ed70c866fd0d18dfabb98b416c717f89d4c4574a67071d7a9752ea2acd891d95d5443af87ffb47bddb967e882624615e85c1b0e7234bbdddec18344b98ffd14c583c7ede37234ace59ea8f5d71ef2d32c13cc0844bb23de7f3f2f423c9106da3ce999debf364fcfe3763f2181f7c05d1641482078c709bfb197a8553edfad5b23481000d46ad90c19667e46f95eca7"}]}}, {{0x9, 0x5, 0x8, 0x19, 0x400, 0x40, 0x4, 0x8, [@generic={0xf2, 0xf, "69151d2959c0f879a6be3a615fc3c02713fa4c388daf3205fa74e8a68524227223c6e051e80e4118145fe13b51c1222cea9b7c753ecf89712357871629a6f6a0d8851539683ffea8a32bc7703915adb4ed9519c787563fa3f3e81d4c83ffa4a503985ce5135523399838ac351c6db3138dfff6afcd53a0a469f036bba83b53758b3572aca25510c2248b2e3fb9574e9e7889f995129091046ef7dd2d68c7103a0b758aac40d32dd5bb07dffd1d3b1b3b7416a0476aa38b04a22a4caa97b34d08676dcf5800a3392ebe9f4af17b6251d89755f3105545f7e1f14e172852acf430e496651a5cd6b186ffe9a74a5955b077"}]}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x300, 0x1, 0x3, 0x5, 0x40, 0xc}, 0xf, &(0x7f00000004c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x3a, 0x9}]}, 0x1, [{0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="0d032485a12d67b341638d85e13e0000000000"]}]}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @remote, 0xe79}, 0x1c) 2.103322898s ago: executing program 7 (id=1918): setns(0xc9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f) socket$inet(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) tgkill(0xffffffffffffffff, r0, 0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000240), 0x1001) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x3, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) 1.571252184s ago: executing program 8 (id=1919): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f00)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x3, 0x4, 0x9, 0x9, 0x1, 0x6, 0x3, 0xe, 0x0, 0x0, 0xe, 0x0, 0x9, 0xffffff32, 0x5, 0xf, 0x2, 0x3, 0x7, 0x80000000, 0x80, 0x8000, 0x1000, 0x7, 0x200, 0xae, 0xffff, 0x5, 0x4f67, 0x4, 0x8, 0xcd, 0xffffffff, 0x8, 0x4, 0x2, 0x9, 0x7ff, 0x0, 0x10000, 0xe385, 0xff, 0x3ff, 0x9107, 0x2, 0x9, 0x81, 0x6, 0x6, 0x9, 0xfffffffa, 0x8, 0x100, 0x4, 0xd, 0x5, 0x6, 0xffffdaac, 0xf, 0x3, 0x9, 0x8, 0xffffffff, 0x0, 0x0, 0xfc, 0x7, 0x9, 0x1, 0x0, 0x401, 0xc6cb1260, 0x8001, 0x3, 0x5, 0x480e, 0x8000, 0xb, 0x7, 0x5, 0x0, 0xfffffff9, 0x4, 0x1, 0x1, 0x9, 0x3, 0x1, 0x8, 0x1, 0x4, 0x7fff, 0x6, 0xff, 0x0, 0x9, 0x8, 0x8001, 0x101, 0x515f, 0x377, 0x4, 0x2, 0x4, 0x6b, 0x1aa13142, 0x1, 0x7, 0x0, 0x5, 0x91e, 0xfffffff7, 0x2, 0x9, 0x6, 0x8e3, 0xd7c9, 0x2, 0x2, 0xfffffffe, 0x81, 0xa4bf, 0x1, 0x3, 0x400, 0x8, 0x1ff, 0x4, 0x7, 0x4, 0x5256, 0xe3, 0x8, 0xa, 0x538, 0x37c1, 0x7, 0x9, 0x1000, 0x9, 0x631d, 0x1c, 0xa, 0x3, 0x100, 0x7, 0x81, 0x8, 0x1, 0x45, 0x1, 0x6, 0x8, 0x484, 0x7, 0x9, 0x17, 0x68000, 0x5, 0xa, 0x2, 0x10001, 0x7ff, 0x2fb, 0x4, 0xfffffff8, 0x8, 0x29, 0x0, 0x1, 0x4, 0xffffd481, 0x4, 0xc7, 0x5, 0x800, 0x3, 0x1, 0xcf03, 0x7, 0xdd2, 0x2, 0xcde, 0x1, 0x2, 0x7fffffff, 0x5, 0x6, 0x10001, 0xf30, 0x6, 0xb84, 0x80, 0x6f0ab25b, 0x10, 0xfffffbff, 0x0, 0x1, 0x4, 0xff000000, 0x4, 0x4, 0x0, 0x2, 0xfffffffd, 0x2, 0xa1b, 0x1, 0x5, 0x203, 0xb, 0x1, 0xd67, 0x2, 0x2, 0x4, 0xfffffff3, 0x2, 0x2790, 0x5, 0xfffff23c, 0x8, 0xffff7fff, 0x3, 0x4fa, 0x401, 0x3, 0x5, 0xba4, 0x7146, 0x0, 0x4, 0xc, 0x9, 0x2, 0x4, 0x6, 0x6, 0x7fffffff, 0x2eb, 0x68b0afbf, 0x15181a07, 0x54, 0x8, 0x7, 0x0, 0x9, 0x4, 0x7, 0x0, 0x43, 0x7f, 0x5, 0xf700000, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) r4 = socket$kcm(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0xfa15, 0x10000, 0x0, 0x3a3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000040)=0x2) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}], 0x11) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000080)={r4, 0x4, 0xfffffff8, 0xf, 0x2}, 0x1) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x4001004) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/devices/pcspkr/uevent\x00', 0x1, 0x0) write(r10, &(0x7f0000000280)='add', 0x3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r10) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendmsg$inet(r4, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x110}}], 0x18}, 0x0) 1.460959101s ago: executing program 5 (id=1920): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) pipe(&(0x7f0000002680)={0xffffffffffffffff}) r2 = fsopen(0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ftruncate(r3, 0xfffffffffffffeff) capset(0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r4, 0x4b44, 0x0) write$FUSE_DIRENT(r3, 0x0, 0x198) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) read(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000001280)={0x1c, &(0x7f0000001080)=ANY=[], 0x0, 0x0}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x1006) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000001040)={{0x1, 0x1, 0x18, r3, {r6}}, './file0\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980), 0x0, 0x20008000) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000009c0)=[@acquire], 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 803.265878ms ago: executing program 3 (id=1921): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) tgkill(0xffffffffffffffff, r1, 0x3) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) sigaltstack(&(0x7f0000000080)={0x0, 0x80000001}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x3, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000003700)={0x0, 0xfffffff9}, &(0x7f0000003740)=0x8) 281.891919ms ago: executing program 8 (id=1922): clock_gettime(0x3, &(0x7f00000002c0)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="00005200060005000100000008000800", @ANYRES16], 0x2c}}, 0x20008000) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000140)=""/233, 0xe9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.time\x00', 0x275a, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000080)={0x57}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$nfc_llcp(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x27, r2, 0x1, 0x1, 0x5, 0x0, "134cc66cc555932dd464cb3452e56339244298987f17f672adc171aeb633e8b0131c087c4e6f28a7b478a705b28ec0c4b713de5627eb844db5f63f7e29f613", 0x9}, 0x60, &(0x7f00000002c0), 0x0, &(0x7f0000000300)={0xf0, 0x119, 0x2, "6f776b1413789c111310ba4d78b4663107bce812cc50b9e5717ce7b0f14ac9ffcf2f4eb12d87455faf3ac31de726638a8b78745c8f4b38642770f3b1785fa14b67d6e00b7876a376b8144f24feed85be15ec61a416e8dca20470c24880529c7dfa3d28ef6eed31f4c15edadef659dc8b2917dab7605977535da252cf029db8d3761ef69095d7115f9ce183f4caa996fdd6407836a309094d2bb7d95fbdf015161cf1885cb48788b632113c821a0824defba88c7bea86b189a176306748c782f33c3813ec2357ccefeef7f9518d339c9e82ce6612a0ec54f5256ae1887dd6"}, 0xf0, 0x20004841}, 0x1) 0s ago: executing program 8 (id=1923): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), r1, 0x2}}, 0x18) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$xdp(0x2c, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0xc01, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000480), 0xf, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @raw_data=[0x49, 0x3, 0x100b, 0x2, 0xfffffff7, 0x2, 0x4004, 0x0, 0x5, 0x4, 0xffffffff, 0x4, 0x8, 0xda7, 0x3, 0x4]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000180)={@remote}, 0x14) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config\x00', 0x300000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') write(r7, &(0x7f0000000040)='`u', 0x2) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r9 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0) write$selinux_load(r8, &(0x7f0000000000)=ANY=[], 0x190ec) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, 0x0) kernel console output (not intermixed with test programs): ogle Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 364.025277][T11034] Call Trace: [ 364.025281][T11034] [ 364.025286][T11034] dump_stack_lvl+0x100/0x190 [ 364.025305][T11034] should_fail_ex.cold+0x5/0xa [ 364.025320][T11034] should_failslab+0xc2/0x120 [ 364.025335][T11034] __kmalloc_noprof+0xfc/0x820 [ 364.025349][T11034] ? tomoyo_encode2+0xfb/0x3c0 [ 364.025431][T11034] tomoyo_encode2+0xfb/0x3c0 [ 364.025444][T11034] tomoyo_encode+0x29/0x50 [ 364.025454][T11034] tomoyo_realpath_from_path+0x18c/0x690 [ 364.025468][T11034] tomoyo_path_number_perm+0x23c/0x580 [ 364.025495][T11034] ? tomoyo_path_number_perm+0x22e/0x580 [ 364.025512][T11034] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 364.025529][T11034] ? ring_buffer_lock_reserve+0x48b/0x11c0 [ 364.025551][T11034] ? find_held_lock+0x2b/0x80 [ 364.025561][T11034] ? __fget_files+0x215/0x3d0 [ 364.025589][T11034] ? hook_file_ioctl_common+0x140/0x440 [ 364.025618][T11034] ? __fget_files+0x215/0x3d0 [ 364.025631][T11034] ? __fget_files+0x21f/0x3d0 [ 364.025644][T11034] security_file_ioctl+0xd3/0x230 [ 364.025681][T11034] __x64_sys_ioctl+0xb7/0x210 [ 364.025708][T11034] do_syscall_64+0x115/0x870 [ 364.025722][T11034] ? clear_bhb_loop+0x40/0x90 [ 364.025735][T11034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.025746][T11034] RIP: 0033:0x7f62fcf9e0d9 [ 364.025756][T11034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.025767][T11034] RSP: 002b:00007f62fdee4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.025777][T11034] RAX: ffffffffffffffda RBX: 00007f62fd225fa0 RCX: 00007f62fcf9e0d9 [ 364.025784][T11034] RDX: 0000200000000540 RSI: 00000000c4c85513 RDI: 0000000000000003 [ 364.025790][T11034] RBP: 00007f62fdee4090 R08: 0000000000000000 R09: 0000000000000000 [ 364.025796][T11034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.025802][T11034] R13: 00007f62fd226038 R14: 00007f62fd225fa0 R15: 00007ffe93363718 [ 364.025816][T11034] [ 364.025826][T11034] ERROR: Out of memory at tomoyo_realpath_from_path. [ 364.256364][ T5717] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.316092][ T5717] usb 9-1: config 0 descriptor?? [ 364.345647][T11041] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1173'. [ 364.355859][T11042] fuse: fd is not a fuse device [ 364.404978][ T30] audit: type=1400 audit(1786047033.859:1415): avc: denied { getopt } for pid=11040 comm="syz.3.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 364.429929][ T5717] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 364.498751][ T30] audit: type=1400 audit(1786047033.859:1416): avc: denied { mounton } for pid=11040 comm="syz.3.1172" path="/294/file0" dev="tmpfs" ino=1625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 364.545053][T11051] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1175'. [ 365.974884][ T30] audit: type=1400 audit(1786047035.469:1417): avc: denied { write } for pid=11022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.221220][T11069] team0: Device gtp0 is up. Set it down before adding it as a team port [ 366.318574][ T30] audit: type=1400 audit(1786047035.809:1418): avc: denied { write } for pid=11070 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.789483][T11078] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 366.878614][T11081] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1181'. [ 368.216376][ T5717] usb 9-1: USB disconnect, device number 12 [ 368.255628][ T5717] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 368.519408][T11091] netlink: 'syz.5.1183': attribute type 2 has an invalid length. [ 368.608677][ T30] audit: type=1400 audit(1786047038.099:1419): avc: denied { write } for pid=11089 comm="syz.5.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 368.683939][T10999] can0 (unregistered): slcan off ttyS3. [ 368.780110][ T30] audit: type=1400 audit(1786047038.249:1420): avc: denied { name_bind } for pid=11097 comm="syz.6.1184" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 368.888040][T11100] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1185'. [ 369.166114][ T30] audit: type=1400 audit(1786047038.659:1421): avc: denied { read write } for pid=11110 comm="syz.8.1188" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 369.378586][ T30] audit: type=1400 audit(1786047038.689:1422): avc: denied { open } for pid=11110 comm="syz.8.1188" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 369.515695][ T5717] hid_parser_main: 373 callbacks suppressed [ 369.562215][ T5717] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 369.580541][ T30] audit: type=1400 audit(1786047038.709:1423): avc: denied { write } for pid=11087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 369.780018][ T5717] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 369.799899][ T30] audit: type=1400 audit(1786047039.109:1424): avc: denied { write } for pid=11116 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 369.863907][T11125] scsi_nl_rcv_msg: discarding partial skb [ 370.038917][ T30] audit: type=1400 audit(1786047039.339:1425): avc: denied { create } for pid=11105 comm="syz.6.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 370.093460][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1191'. [ 371.134905][ T30] audit: type=1400 audit(1786047039.349:1426): avc: denied { write } for pid=11105 comm="syz.6.1187" path="socket:[31966]" dev="sockfs" ino=31966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 372.635465][T11158] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1198'. [ 372.856515][ T30] audit: type=1400 audit(1786047042.349:1427): avc: denied { write } for pid=11130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.076823][ T30] audit: type=1400 audit(1786047042.539:1428): avc: denied { set_context_mgr } for pid=11170 comm="syz.6.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 373.428351][ T5726] IPVS: starting estimator thread 0... [ 373.686976][T11200] IPVS: dh: FWM 3 0x00000003 - no destination available [ 373.726259][T11195] IPVS: using max 78 ests per chain, 187200 per kthread [ 373.782524][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 373.782535][ T30] audit: type=1400 audit(1786047043.269:1431): avc: denied { write } for pid=11190 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.888269][T11208] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1211'. [ 373.988090][ T30] audit: type=1400 audit(1786047043.479:1432): avc: denied { write } for pid=11211 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.022032][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1210'. [ 374.404838][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1215'. [ 374.415460][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1215'. [ 374.424586][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1215'. [ 374.433882][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1215'. [ 374.442889][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1215'. [ 374.827287][T11238] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[9098] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11238] [ 374.913336][ T30] audit: type=1400 audit(1786047044.399:1433): avc: denied { write } for pid=11223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.032100][ T30] audit: type=1400 audit(1786047044.519:1434): avc: denied { write } for pid=11246 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.316820][ T6671] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.362102][ T6671] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.448167][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1219'. [ 375.480088][ T6671] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.517534][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1219'. [ 376.086816][ T6682] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.245217][ T30] audit: type=1400 audit(1786047045.429:1435): avc: denied { listen } for pid=11255 comm="syz.6.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 376.594649][ T6682] netdevsim netdevsim1 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.623932][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1219'. [ 376.679560][ T6682] netdevsim netdevsim1 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.699187][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1219'. [ 376.804662][T11268] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1223'. [ 376.823283][ T6682] netdevsim netdevsim4 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.843167][T11271] virtio-fs: tag not found [ 376.973397][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.979893][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.142568][T11273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 377.151136][ T30] audit: type=1400 audit(1786047046.629:1436): avc: denied { accept } for pid=11267 comm="syz.8.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 377.171429][ T6672] netdevsim netdevsim1 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.239750][ T6672] netdevsim netdevsim1 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.299396][T11278] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1226'. [ 377.364906][ T6256] netdevsim netdevsim4 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.437693][ T6256] netdevsim netdevsim4 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.534775][ T6256] netdevsim netdevsim2 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.386099][ T6256] netdevsim netdevsim2 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.420211][ T30] audit: type=1400 audit(1786047047.889:1437): avc: denied { setattr } for pid=11269 comm="syz.6.1225" name="NETLINK" dev="sockfs" ino=32525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 378.476410][ T6256] netdevsim netdevsim2 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.626218][ T6256] netdevsim netdevsim2 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.699157][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1234'. [ 378.724821][ T6256] netdevsim netdevsim4 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.497878][T11303] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 379.672297][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1234'. [ 379.738153][T11303] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 379.766400][T11303] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 379.879720][T11303] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 379.943048][T11319] FAULT_INJECTION: forcing a failure. [ 379.943048][T11319] name failslab, interval 1, probability 0, space 0, times 0 [ 379.956017][T11319] CPU: 0 UID: 0 PID: 11319 Comm: syz.7.1236 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.956036][T11319] Tainted: [L]=SOFTLOCKUP [ 379.956040][T11319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 379.956045][T11319] Call Trace: [ 379.956049][T11319] [ 379.956053][T11319] dump_stack_lvl+0x100/0x190 [ 379.956071][T11319] should_fail_ex.cold+0x5/0xa [ 379.956086][T11319] should_failslab+0xc2/0x120 [ 379.956100][T11319] kmem_cache_alloc_noprof+0x91/0x6a0 [ 379.956113][T11319] ? trace_kmem_cache_alloc+0xdd/0x100 [ 379.956127][T11319] ? security_file_alloc+0x34/0x2c0 [ 379.956168][T11319] security_file_alloc+0x34/0x2c0 [ 379.956178][T11319] init_file+0x95/0x480 [ 379.956192][T11319] alloc_empty_file+0x79/0x1c0 [ 379.956206][T11319] path_openat+0xe7/0x4280 [ 379.956217][T11319] ? __kasan_slab_alloc+0x89/0x90 [ 379.956230][T11319] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 379.956242][T11319] ? do_getname+0x35/0x390 [ 379.956254][T11319] ? do_sys_openat2+0xc7/0x1e0 [ 379.956267][T11319] ? __x64_sys_openat+0x12d/0x210 [ 379.956279][T11319] ? do_syscall_64+0x115/0x870 [ 379.956293][T11319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.956308][T11319] ? __pfx_path_openat+0x10/0x10 [ 379.956322][T11319] do_file_open+0x20e/0x430 [ 379.956335][T11319] ? __pfx_do_file_open+0x10/0x10 [ 379.956355][T11319] ? alloc_fd+0x471/0x7a0 [ 379.956368][T11319] ? do_getname+0x191/0x390 [ 379.956383][T11319] do_sys_openat2+0x10f/0x1e0 [ 379.956396][T11319] ? __pfx_do_sys_openat2+0x10/0x10 [ 379.956410][T11319] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 379.956430][T11319] __x64_sys_openat+0x12d/0x210 [ 379.956444][T11319] ? __pfx___x64_sys_openat+0x10/0x10 [ 379.956457][T11319] ? find_held_lock+0x2b/0x80 [ 379.956468][T11319] ? trace_syscall_enter+0xd9/0x110 [ 379.956486][T11319] do_syscall_64+0x115/0x870 [ 379.956499][T11319] ? clear_bhb_loop+0x40/0x90 [ 379.956512][T11319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.956522][T11319] RIP: 0033:0x7f53bc19e0d9 [ 379.956532][T11319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.956542][T11319] RSP: 002b:00007f53bd0f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 379.956553][T11319] RAX: ffffffffffffffda RBX: 00007f53bc425fa0 RCX: 00007f53bc19e0d9 [ 379.956559][T11319] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 379.956566][T11319] RBP: 00007f53bd0f0090 R08: 0000000000000000 R09: 0000000000000000 [ 379.956572][T11319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.956578][T11319] R13: 00007f53bc426038 R14: 00007f53bc425fa0 R15: 00007ffc9f36ead8 [ 379.956591][T11319] [ 380.311497][T11303] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 380.444789][T11325] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1238'. [ 380.475501][T11327] netlink: zone id is out of range [ 380.480654][T11327] netlink: zone id is out of range [ 380.485802][T11327] netlink: zone id is out of range [ 380.490934][T11327] netlink: del zone limit has 8 unknown bytes [ 380.520682][ T30] audit: type=1400 audit(1786047049.919:1438): avc: denied { write } for pid=11277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.608795][ T30] audit: type=1400 audit(1786047050.099:1439): avc: denied { write } for pid=11330 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.683863][T11303] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 380.744182][T11303] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 380.760761][T11303] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 380.769681][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 380.840631][T11303] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 380.861461][ T30] audit: type=1400 audit(1786047050.349:1440): avc: denied { nlmsg_read } for pid=11336 comm="syz.3.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 381.124643][ T5717] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 381.204531][ T5726] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 381.284284][ T5717] usb 7-1: Using ep0 maxpacket: 8 [ 381.291489][T11348] binder: BINDER_SET_CONTEXT_MGR already set [ 381.298403][T11348] binder: 11346:11348 ioctl 4018620d 200000004a80 returned -16 [ 381.307133][ T5717] usb 7-1: unable to get BOS descriptor or descriptor too short [ 381.315505][T11348] binder: 11346:11348 ioctl 8010661b 0 returned -22 [ 381.329059][ T5717] usb 7-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 381.340978][ T5717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.350085][ T5717] usb 7-1: Product: syz [ 381.354346][ T5726] usb 9-1: device descriptor read/64, error -71 [ 381.360970][ T5717] usb 7-1: Manufacturer: syz [ 381.365745][ T5717] usb 7-1: SerialNumber: syz [ 381.594362][ T5726] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 381.692177][T11354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1247'. [ 381.734294][ T5726] usb 9-1: device descriptor read/64, error -71 [ 381.785854][ T5717] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 381.792989][ T5717] usb 7-1: MIDIStreaming interface descriptor not found [ 381.804370][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 381.846219][ T5726] usb usb9-port1: attempt power cycle [ 381.884864][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 382.037318][ T5815] usb 7-1: USB disconnect, device number 12 [ 382.728022][T11358] Invalid ELF header magic: != ELF [ 382.776635][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 382.845603][ T5726] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 382.885850][ T5726] usb 9-1: device descriptor read/8, error -71 [ 382.943404][T11365] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1250'. [ 383.099286][T11370] overlayfs: failed to clone upperpath [ 383.164686][ T5726] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 383.194663][ T5726] usb 9-1: device descriptor read/8, error -71 [ 383.373600][ T5726] usb usb9-port1: unable to enumerate USB device [ 383.594295][ T5815] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 383.884478][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 383.964280][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 384.671538][T11379] : renamed from vcan0 (while UP) [ 385.644091][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 385.666892][ T5815] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 385.692682][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.906928][T11392] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1260'. [ 385.922108][T11393] 9p: Bad value for 'rfdno' [ 385.928806][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1259'. [ 386.044537][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 386.228936][ T5815] gud 6-1:1.0: probe with driver gud failed with error -71 [ 386.246857][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 386.292779][ T5815] usb 6-1: USB disconnect, device number 18 [ 386.454629][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 386.471971][ T9] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 386.502688][ T30] audit: type=1400 audit(1786047055.989:1441): avc: denied { bind } for pid=11406 comm="syz.3.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 386.536960][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 386.566173][ T9] usb 7-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 386.584428][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.600279][T11407] netlink: 'syz.3.1266': attribute type 23 has an invalid length. [ 386.631043][ T9] usb 7-1: config 0 descriptor?? [ 387.724590][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 387.936988][T11394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.046427][T11414] xt_policy: output policy not valid in PREROUTING and INPUT [ 388.070474][T11394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.183324][T11394] SELinux: syz.6.1259 (11394) wrote to user. This is no longer supported. [ 388.347554][ T30] audit: type=1400 audit(1786047057.839:1442): avc: denied { listen } for pid=11413 comm="syz.3.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 388.378445][T11417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.389882][T11417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.398641][ T30] audit: type=1400 audit(1786047057.869:1443): avc: denied { accept } for pid=11413 comm="syz.3.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 388.454464][ T5726] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 388.615556][ T5726] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 388.643090][ T5726] usb 6-1: config 0 has no interface number 0 [ 388.673782][ T5726] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 388.740631][ T5726] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 388.765733][ T6672] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.794059][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.811908][ T6672] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.838543][ T5726] usb 6-1: Product: syz [ 388.854798][ T6672] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.864448][ T5726] usb 6-1: Manufacturer: syz [ 388.886607][ T5726] usb 6-1: SerialNumber: syz [ 388.900546][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 388.916501][ T6672] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.928238][ T5726] usb 6-1: config 0 descriptor?? [ 388.936865][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 388.969421][ T6672] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.990151][ T5726] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 389.004665][ T9] usb 7-1: USB disconnect, device number 13 [ 389.016140][ T6672] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.075141][ T6672] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.094515][ T6672] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.177416][T11426] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1270'. [ 389.330483][T11446] netlink: 'syz.7.1276': attribute type 1 has an invalid length. [ 389.415964][T11446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.435369][ T5815] usb 6-1: USB disconnect, device number 19 [ 389.481409][ T5815] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 390.609931][T11465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1281'. [ 390.767556][T11472] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 390.826952][T11475] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 392.962049][ T30] audit: type=1400 audit(1786047062.449:1444): avc: denied { write } for pid=11461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.067205][ T5815] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 393.110939][T11498] netlink: 1988 bytes leftover after parsing attributes in process `syz.6.1289'. [ 393.126910][T11496] FAULT_INJECTION: forcing a failure. [ 393.126910][T11496] name failslab, interval 1, probability 0, space 0, times 0 [ 393.195318][T11496] CPU: 0 UID: 0 PID: 11496 Comm: syz.8.1288 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.195337][T11496] Tainted: [L]=SOFTLOCKUP [ 393.195341][T11496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 393.195348][T11496] Call Trace: [ 393.195352][T11496] [ 393.195356][T11496] dump_stack_lvl+0x100/0x190 [ 393.195375][T11496] should_fail_ex.cold+0x5/0xa [ 393.195389][T11496] should_failslab+0xc2/0x120 [ 393.195404][T11496] __kmalloc_noprof+0xfc/0x820 [ 393.195417][T11496] ? rcu_is_watching+0x12/0xc0 [ 393.195433][T11496] ? tomoyo_realpath_from_path+0xb6/0x690 [ 393.195448][T11496] tomoyo_realpath_from_path+0xb6/0x690 [ 393.195462][T11496] tomoyo_path_number_perm+0x23c/0x580 [ 393.195477][T11496] ? tomoyo_path_number_perm+0x22e/0x580 [ 393.195494][T11496] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 393.195511][T11496] ? ring_buffer_lock_reserve+0x48b/0x11c0 [ 393.195533][T11496] ? find_held_lock+0x2b/0x80 [ 393.195543][T11496] ? __fget_files+0x215/0x3d0 [ 393.195554][T11496] ? hook_file_ioctl_common+0x140/0x440 [ 393.195567][T11496] ? __fget_files+0x215/0x3d0 [ 393.195580][T11496] ? __fget_files+0x21f/0x3d0 [ 393.195593][T11496] security_file_ioctl+0xd3/0x230 [ 393.195610][T11496] __x64_sys_ioctl+0xb7/0x210 [ 393.195628][T11496] do_syscall_64+0x115/0x870 [ 393.195641][T11496] ? clear_bhb_loop+0x40/0x90 [ 393.195654][T11496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.195665][T11496] RIP: 0033:0x7fee74d9e0d9 [ 393.195674][T11496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.195685][T11496] RSP: 002b:00007fee75ba8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.195697][T11496] RAX: ffffffffffffffda RBX: 00007fee75025fa0 RCX: 00007fee74d9e0d9 [ 393.195703][T11496] RDX: 0000200000000400 RSI: 00000000c040aed5 RDI: 0000000000000009 [ 393.195710][T11496] RBP: 00007fee75ba8090 R08: 0000000000000000 R09: 0000000000000000 [ 393.195715][T11496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.195722][T11496] R13: 00007fee75026038 R14: 00007fee75025fa0 R15: 00007fff80a654c8 [ 393.195735][T11496] [ 393.195739][T11496] ERROR: Out of memory at tomoyo_realpath_from_path. [ 393.486511][ T30] audit: type=1400 audit(1786047062.939:1445): avc: denied { write } for pid=11499 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.643967][ T5815] usb 6-1: Using ep0 maxpacket: 16 [ 393.736138][ T5815] usb 6-1: unable to get BOS descriptor or descriptor too short [ 393.778214][ T5815] usb 6-1: config 16 has an invalid interface number: 154 but max is 0 [ 393.801203][ T5815] usb 6-1: config 16 contains an unexpected descriptor of type 0x1, skipping [ 393.819600][ T5815] usb 6-1: config 16 contains an unexpected descriptor of type 0x2, skipping [ 393.837085][T11509] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1292'. [ 393.846594][ T5815] usb 6-1: config 16 has no interface number 0 [ 393.864561][ T5815] usb 6-1: config 16 interface 154 altsetting 10 has a duplicate endpoint with address 0xC, skipping [ 393.903434][ T5815] usb 6-1: config 16 interface 154 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 393.922372][T11512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.941468][ T5815] usb 6-1: config 16 interface 154 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 393.982951][ T5815] usb 6-1: config 16 interface 154 altsetting 10 has a duplicate endpoint with address 0x7, skipping [ 394.016611][ T5815] usb 6-1: config 16 interface 154 altsetting 10 bulk endpoint 0x3 has invalid maxpacket 64 [ 394.034432][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 394.052298][ T5815] usb 6-1: config 16 interface 154 has no altsetting 0 [ 394.107899][ T5815] usb 6-1: language id specifier not provided by device, defaulting to English [ 394.118405][T11517] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1294'. [ 394.131598][ T5815] usb 6-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=c8.d1 [ 394.141463][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.155558][ T5815] usb 6-1: Product: 樘⟠瘑奅茛㳝⨻캴岕閱陽艍⟅곐빌作穀첶赡갗齞廏䐪瀬䲜䛦㵷蝧⋟囮㏀ɬ嬽ᅄ鞶䕥ꛤ⹀벭 [ 394.210136][ T5815] usb 6-1: Manufacturer: 뇃䧘퐡肋簌༣㬫܃败쨖⽅扛Ⱉᶢᵷ事挪䟊ꚱ፾퍫ⴤഛ긭䛰瘐꽂씻샑쫘㸁᥇宙Ź㱕댙鄗膸Ꚑ䰯鈁둝绝蔛䵖엍毡类侘駐鋮蟉ⲫ䷍ｈ쳕掏ꗘ㞊⒌㾤⒉Ȧꭗ夑躷࣍ಳŸ䁤큊뛼导Đﰌퟀ﹇ꎖ숏ᦎℿ扻⿪֐䩆㾊㰝遖㥖鞶‡ [ 394.242367][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.259819][ T30] audit: type=1400 audit(1786047063.749:1446): avc: denied { ioctl } for pid=11519 comm="syz.3.1295" path="socket:[33644]" dev="sockfs" ino=33644 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 394.289745][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 394.309158][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 394.349778][ T5815] usb 6-1: SerialNumber:   [ 394.357350][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 394.380811][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.391028][T11490] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 394.413333][ T9] usb 7-1: Product: syz [ 394.431881][ T9] usb 7-1: Manufacturer: syz [ 394.446662][ T9] usb 7-1: SerialNumber: syz [ 394.565848][ T9] cdc_ncm 7-1:1.0: NCM or ECM functional descriptors missing [ 394.589378][ T9] cdc_ncm 7-1:1.0: bind() failure [ 395.176213][T11527] xt_TPROXY: Can be used only with -p tcp or -p udp [ 395.410983][T11530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.455832][T11530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.714125][ T5815] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 395.760896][ T5815] usb 6-1: selecting invalid altsetting 0 [ 395.799680][ T2363] pvrusb2: Invalid write control endpoint [ 395.822631][ T5815] usb 6-1: USB disconnect, device number 20 [ 395.844449][ T9] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 395.907096][ T2363] usb 6-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 396.454268][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 397.050374][ T5726] usb 7-1: USB disconnect, device number 14 [ 397.057224][ T2363] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 397.066317][ T9] usb 9-1: config 166 has an invalid interface number: 177 but max is 1 [ 397.125766][ T9] usb 9-1: config 166 has an invalid interface number: 34 but max is 1 [ 397.230405][ T9] usb 9-1: config 166 has no interface number 0 [ 397.277568][ T9] usb 9-1: config 166 has no interface number 1 [ 397.314074][ T9] usb 9-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 397.377230][ T9] usb 9-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 397.438736][ T9] usb 9-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 397.499090][ T9] usb 9-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 397.573007][ T9] usb 9-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 397.649354][ T9] usb 9-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 397.708249][ T9] usb 9-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 397.785280][ T9] usb 9-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 397.804154][ T30] audit: type=1400 audit(1786047067.299:1447): avc: denied { write } for pid=11555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.872094][ T9] usb 9-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 397.942991][ T9] usb 9-1: config 166 interface 177 has no altsetting 0 [ 397.988127][ T9] usb 9-1: config 166 interface 34 has no altsetting 0 [ 398.026386][ T30] audit: type=1400 audit(1786047067.519:1448): avc: denied { write } for pid=11598 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 398.066488][ T9] usb 9-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 398.119708][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.181823][ T9] usb 9-1: Product: syz [ 398.213074][ T9] usb 9-1: Manufacturer: syz [ 398.246561][ T9] usb 9-1: SerialNumber: syz [ 398.565237][ T9] ums-realtek 9-1:166.177: USB Mass Storage device detected [ 398.625217][ T9] ums-realtek 9-1:166.34: USB Mass Storage device detected [ 398.667313][ T9] ums-realtek 9-1:166.34: probe with driver ums-realtek failed with error -5 [ 398.697860][ T9] uvcvideo 9-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 398.725579][ T9] uvcvideo 9-1:166.34: No valid video chain found. [ 398.749721][ T9] usb 9-1: USB disconnect, device number 17 [ 398.942202][ T30] audit: type=1326 audit(1786047068.429:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.7.1319" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bc19e0d9 code=0x7ffc0000 [ 398.977143][ T50] Bluetooth: hci5: ACL packet too small [ 399.176561][ T30] audit: type=1326 audit(1786047068.469:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.7.1319" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bc19e0d9 code=0x7ffc0000 [ 399.462605][ T30] audit: type=1326 audit(1786047068.469:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.7.1319" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bc19e0d9 code=0x7ffc0000 [ 400.641322][T11654] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1324'. [ 400.677939][ T30] audit: type=1326 audit(1786047068.469:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.7.1319" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f53bc19e0d9 code=0x7ffc0000 [ 400.884182][T11654] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1324'. [ 401.670132][T11654] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1324'. [ 401.792562][ T30] audit: type=1326 audit(1786047068.469:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.7.1319" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bc19e0d9 code=0x7ffc0000 [ 401.984716][ T30] audit: type=1326 audit(1786047068.469:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.7.1319" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bc19e0d9 code=0x7ffc0000 [ 402.145822][ T30] audit: type=1326 audit(1786047068.469:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.7.1319" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bc19e0d9 code=0x7ffc0000 [ 402.276371][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 402.307972][ T30] audit: type=1326 audit(1786047068.469:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.7.1319" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bc19e0d9 code=0x7ffc0000 [ 402.507049][ T9] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 402.604275][ T5726] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 403.399422][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.434106][ T30] audit: type=1326 audit(1786047068.469:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.7.1319" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f53bc15e90e code=0x7ffc0000 [ 403.574834][ T5726] usb 9-1: Using ep0 maxpacket: 16 [ 403.599024][ T5726] usb 9-1: config 9 has an invalid interface number: 189 but max is 0 [ 403.622570][ T30] audit: type=1326 audit(1786047068.469:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.7.1319" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bc19e0d9 code=0x7ffc0000 [ 403.662751][ T5726] usb 9-1: config 9 has no interface number 0 [ 403.720497][T11663] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=50331658 (100663316 ns) > initial count (9856 ns). Using initial count to start timer. [ 403.737976][ T5726] usb 9-1: New USB device found, idVendor=19d2, idProduct=fffc, bcdDevice=ac.a6 [ 403.773789][ T5726] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.816926][ T5726] usb 9-1: Product: syz [ 403.825226][ T30] audit: type=1326 audit(1786047068.469:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.7.1319" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bc19e0d9 code=0x7ffc0000 [ 403.869552][ T5726] usb 9-1: Manufacturer: syz [ 403.889688][ T5726] usb 9-1: SerialNumber: syz [ 404.007826][ T30] audit: type=1326 audit(1786047068.469:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.7.1319" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bc19e0d9 code=0x7ffc0000 [ 404.115893][ T9] gud 7-1:1.0: Failed to add properties (error=-5) [ 404.147512][ T5726] usb 9-1: No union descriptors [ 404.165684][ T9] gud 7-1:1.0: probe with driver gud failed with error -5 [ 404.178108][ T30] audit: type=1326 audit(1786047068.469:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.7.1319" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bc19e0d9 code=0x7ffc0000 [ 404.222314][ T5726] usb 9-1: USB disconnect, device number 18 [ 404.294040][T11709] lo speed is unknown, defaulting to 1000 [ 404.347433][ T30] audit: type=1326 audit(1786047068.469:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.7.1319" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bc19e0d9 code=0x7ffc0000 [ 404.500918][ T30] audit: type=1326 audit(1786047068.469:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.7.1319" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f53bc19e0d9 code=0x7ffc0000 [ 404.617429][ T30] audit: type=1326 audit(1786047068.519:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.7.1319" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f53bc15e90e code=0x7ffc0000 [ 404.737475][ T30] audit: type=1326 audit(1786047068.529:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.7.1319" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f53bc15e90e code=0x7ffc0000 [ 404.857542][ T30] audit: type=1326 audit(1786047068.529:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.7.1319" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f53bc15e90e code=0x7ffc0000 [ 404.923285][T11721] lo speed is unknown, defaulting to 1000 [ 406.160018][ T5716] usb 7-1: USB disconnect, device number 15 [ 408.036771][ T5716] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 408.212868][ T5716] usb 9-1: device descriptor read/64, error -71 [ 409.356117][ T5716] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 409.501151][T11792] No source specified [ 409.545118][ T5716] usb 9-1: device descriptor read/64, error -71 [ 410.268414][T11793] input: syz1 as /devices/virtual/input/input23 [ 410.523916][T11795] fuse: fd is not a fuse device [ 410.565263][ T5716] usb usb9-port1: attempt power cycle [ 410.608396][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 410.608409][ T30] audit: type=1400 audit(1786047080.099:1483): avc: denied { watch } for pid=11794 comm="syz.3.1363" path="/345/file1" dev="tmpfs" ino=1898 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 411.075485][ T5716] usb usb9-port1: Cannot enable. Maybe the USB cable is bad? [ 411.244460][ T5716] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 411.285961][ T5716] usb 9-1: Using ep0 maxpacket: 32 [ 411.301494][ T5716] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 411.330991][ T5716] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.366655][ T5716] usb 9-1: config 0 descriptor?? [ 411.636173][ T5716] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 411.654777][ T5716] usb 9-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 411.673979][ T5716] usb 9-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 412.386159][T11814] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 412.860056][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1373'. [ 414.002793][ T30] audit: type=1400 audit(1786047083.489:1484): avc: denied { checkpoint_restore } for pid=11829 comm="syz.6.1376" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 414.334654][ T30] audit: type=1400 audit(1786047083.819:1485): avc: denied { ioctl } for pid=11845 comm="syz.6.1381" path="socket:[35146]" dev="sockfs" ino=35146 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 415.291177][T11855] netlink: 16399 bytes leftover after parsing attributes in process `syz.6.1384'. [ 415.941495][T11868] netlink: 'syz.6.1384': attribute type 39 has an invalid length. [ 417.585430][T11885] 9p: p9: multiple sources not supported [ 417.631234][ T30] audit: type=1326 audit(1786047087.119:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11888 comm="syz.8.1394" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee74d9e0d9 code=0x0 [ 417.671613][T11890] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1390'. [ 417.743463][T11893] device-mapper: ioctl: Unable to rename non-existent device, to B [ 417.981883][ T30] audit: type=1400 audit(1786047087.469:1487): avc: denied { map } for pid=11896 comm="syz.3.1397" path="socket:[35274]" dev="sockfs" ino=35274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 418.179044][T11900] veth0: entered promiscuous mode [ 419.070520][T11896] veth0: left promiscuous mode [ 419.151576][T11911] syzkaller0: entered promiscuous mode [ 419.174711][T11911] syzkaller0: entered allmulticast mode [ 419.195065][T11911] tipc: Started in network mode [ 419.210837][T11911] tipc: Node identity 16b3becf4aaf, cluster identity 4711 [ 419.235345][T11911] tipc: Enabled bearer , priority 0 [ 419.265608][T11911] tipc: Resetting bearer [ 419.314879][T11910] tipc: Resetting bearer [ 419.372150][T11910] tipc: Disabling bearer [ 419.563519][T11923] netlink: 'syz.8.1406': attribute type 1 has an invalid length. [ 419.602482][T11923] 8021q: adding VLAN 0 to HW filter on device bond2 [ 419.646484][T11923] vlan2: entered promiscuous mode [ 419.661849][T11923] bond2: entered promiscuous mode [ 419.670171][T11923] vlan2: entered allmulticast mode [ 419.684329][T11923] bond2: entered allmulticast mode [ 419.700261][T11925] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1406'. [ 419.727651][T11925] team0 (unregistering): Port device xfrm0 removed [ 421.142821][ T30] audit: type=1400 audit(1786047090.629:1488): avc: denied { name_bind } for pid=11928 comm="syz.6.1403" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 421.296518][ T30] audit: type=1400 audit(1786047090.699:1489): avc: denied { map_create } for pid=11928 comm="syz.6.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 421.418611][ T30] audit: type=1400 audit(1786047090.699:1490): avc: denied { map_read map_write } for pid=11928 comm="syz.6.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 421.501107][ T30] audit: type=1400 audit(1786047090.769:1491): avc: denied { mmap_zero } for pid=11932 comm="syz.3.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 421.623596][ T30] audit: type=1400 audit(1786047090.779:1492): avc: denied { prog_load } for pid=11932 comm="syz.3.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 421.726886][ T30] audit: type=1400 audit(1786047090.779:1493): avc: denied { bpf } for pid=11932 comm="syz.3.1409" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 421.854117][ T30] audit: type=1400 audit(1786047090.829:1494): avc: denied { perfmon } for pid=11935 comm="syz.8.1410" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 421.907754][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1418'. [ 421.976816][ T30] audit: type=1400 audit(1786047090.839:1495): avc: denied { prog_run } for pid=11935 comm="syz.8.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 422.120823][T11958] fuse: fd is not a fuse device [ 422.168677][T11959] fuse: fd is not a fuse device [ 422.199885][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1415'. [ 424.652976][T11998] netlink: 'syz.7.1433': attribute type 4 has an invalid length. [ 424.726996][ T10] lo speed is unknown, defaulting to 1000 [ 424.758348][ T10] syz2: Port: 1 Link DOWN [ 424.781131][ T10] lo speed is unknown, defaulting to 1000 [ 425.084411][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 425.235632][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.246825][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.257485][ T10] usb 7-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 425.268912][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.280075][ T10] usb 7-1: config 0 descriptor?? [ 425.358090][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 425.358102][ T30] audit: type=1400 audit(1786047094.849:1498): avc: denied { read } for pid=12012 comm="syz.3.1439" path="socket:[36133]" dev="sockfs" ino=36133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 425.719644][ T10] stadia 0003:18D1:9400.000E: unbalanced collection at end of report description [ 425.768430][ T10] stadia 0003:18D1:9400.000E: parse failed [ 425.776190][ T10] stadia 0003:18D1:9400.000E: probe with driver stadia failed with error -22 [ 425.950527][ T10] usb 7-1: USB disconnect, device number 16 [ 426.433416][T12023] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1443'. [ 426.458670][T12023] netlink: 'syz.7.1443': attribute type 7 has an invalid length. [ 426.475178][T12023] netlink: 'syz.7.1443': attribute type 8 has an invalid length. [ 426.497781][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1443'. [ 426.512090][T12023] ip6gretap0: entered promiscuous mode [ 426.518632][T12023] syz_tun: entered promiscuous mode [ 426.525758][T12023] erspan0: entered promiscuous mode [ 427.166279][T12036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.179549][T12036] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1449'. [ 427.228356][ T30] audit: type=1400 audit(1786047096.719:1499): avc: denied { read } for pid=12037 comm="syz.7.1450" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 427.261973][ T30] audit: type=1400 audit(1786047096.719:1500): avc: denied { open } for pid=12037 comm="syz.7.1450" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 427.308769][ T30] audit: type=1400 audit(1786047096.799:1501): avc: denied { ioctl } for pid=12037 comm="syz.7.1450" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 428.465318][T12042] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1451'. [ 428.679092][T12049] fuse: fd is not a fuse device [ 428.720902][T12053] jffs2: notice: (12053) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 428.793153][T12053] trusted_key: syz.6.1456 sent an empty control message without MSG_MORE. [ 428.804922][T12062] netlink: 65185 bytes leftover after parsing attributes in process `syz.7.1457'. [ 428.819793][T12062] veth0_to_bond: default FDB implementation only supports local addresses [ 429.778944][T12068] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 429.793822][T12068] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 430.920281][ T30] audit: type=1400 audit(1786047100.409:1502): avc: denied { create } for pid=12073 comm="syz.5.1461" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 431.107971][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 431.954042][T12094] Line length is too long: Should be less than 4094 [ 432.054880][ T10] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 432.054902][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.054914][ T10] usb 7-1: Product: syz [ 432.054923][ T10] usb 7-1: Manufacturer: syz [ 432.054932][ T10] usb 7-1: SerialNumber: syz [ 433.012149][T12099] FAULT_INJECTION: forcing a failure. [ 433.012149][T12099] name failslab, interval 1, probability 0, space 0, times 0 [ 433.012188][T12099] CPU: 0 UID: 0 PID: 12099 Comm: syz.7.1466 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.012203][T12099] Tainted: [L]=SOFTLOCKUP [ 433.012207][T12099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 433.012213][T12099] Call Trace: [ 433.012218][T12099] [ 433.012222][T12099] dump_stack_lvl+0x100/0x190 [ 433.012241][T12099] should_fail_ex.cold+0x5/0xa [ 433.012256][T12099] should_failslab+0xc2/0x120 [ 433.012270][T12099] __kmalloc_noprof+0xfc/0x820 [ 433.012284][T12099] ? tomoyo_encode2+0xfb/0x3c0 [ 433.012298][T12099] tomoyo_encode2+0xfb/0x3c0 [ 433.012310][T12099] tomoyo_encode+0x29/0x50 [ 433.012320][T12099] tomoyo_realpath_from_path+0x18c/0x690 [ 433.012334][T12099] tomoyo_path_number_perm+0x23c/0x580 [ 433.012349][T12099] ? tomoyo_path_number_perm+0x22e/0x580 [ 433.012366][T12099] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 433.012383][T12099] ? ring_buffer_lock_reserve+0x48b/0x11c0 [ 433.012405][T12099] ? find_held_lock+0x2b/0x80 [ 433.012416][T12099] ? __fget_files+0x215/0x3d0 [ 433.012426][T12099] ? hook_file_ioctl_common+0x140/0x440 [ 433.012439][T12099] ? __fget_files+0x215/0x3d0 [ 433.012452][T12099] ? __fget_files+0x21f/0x3d0 [ 433.012465][T12099] security_file_ioctl+0xd3/0x230 [ 433.012483][T12099] __x64_sys_ioctl+0xb7/0x210 [ 433.012500][T12099] do_syscall_64+0x115/0x870 [ 433.012520][T12099] ? clear_bhb_loop+0x40/0x90 [ 433.012533][T12099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.012544][T12099] RIP: 0033:0x7f53bc19e0d9 [ 433.012554][T12099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.012567][T12099] RSP: 002b:00007f53bd0f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.012579][T12099] RAX: ffffffffffffffda RBX: 00007f53bc425fa0 RCX: 00007f53bc19e0d9 [ 433.012586][T12099] RDX: 0000200000000000 RSI: 00000000c138fd0d RDI: 0000000000000003 [ 433.012592][T12099] RBP: 00007f53bd0f0090 R08: 0000000000000000 R09: 0000000000000000 [ 433.012598][T12099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.012604][T12099] R13: 00007f53bc426038 R14: 00007f53bc425fa0 R15: 00007ffc9f36ead8 [ 433.012618][T12099] [ 433.012650][T12099] ERROR: Out of memory at tomoyo_realpath_from_path. [ 433.215130][ T10] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 433.271926][ T30] audit: type=1400 audit(1786047102.769:1503): avc: denied { read } for pid=12100 comm="syz.7.1467" name="file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 433.271989][ T30] audit: type=1400 audit(1786047102.769:1504): avc: denied { open } for pid=12100 comm="syz.7.1467" path="/120/file0/file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 433.625590][ T30] audit: type=1400 audit(1786047103.119:1505): avc: denied { setopt } for pid=12080 comm="syz.6.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 433.625899][T12082] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1462'. [ 433.626788][T12082] jffs2: notice: (12082) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 434.286076][ T10] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 434.301891][ T10] ath9k_htc: Failed to initialize the device [ 434.381327][ T10] usb 7-1: ath9k_htc: USB layer deinitialized [ 434.538441][ T50] Bluetooth: hci5: unexpected event for opcode 0x2003 [ 435.187570][ T5726] usb 7-1: USB disconnect, device number 17 [ 435.859684][T12139] RDS: rds_bind could not find a transport for ::ffff:0.0.0.45, load rds_tcp or rds_rdma? [ 436.082156][ T50] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 438.343109][ T30] audit: type=1400 audit(1786047107.839:1506): avc: denied { connect } for pid=12184 comm="syz.3.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 438.432255][ T30] audit: type=1400 audit(1786047107.889:1507): avc: denied { write } for pid=12181 comm="syz.6.1499" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 438.522754][T12193] batman_adv: batadv0: Adding interface: vlan2 [ 438.536422][T12193] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.602958][T12193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.623009][T12196] Cannot find add_set index 1 as target [ 438.629692][T12193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.642818][T12193] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 438.924516][ T9] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 439.095366][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.111246][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 439.132678][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 439.159192][ T9] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 439.180614][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.207751][ T9] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 439.249385][ T9] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 439.285081][ T9] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 439.308903][ T9] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 439.338319][ T9] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 439.363896][ T9] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 439.392686][ T9] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 439.413824][ T30] audit: type=1400 audit(1786047108.899:1508): avc: denied { ioctl } for pid=12212 comm="syz.8.1509" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 439.649128][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.658400][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.360469][T12234] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1513'. [ 440.382066][T12234] bond_slave_0: entered promiscuous mode [ 440.393440][T12232] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:19999 [ 440.411137][T12232] IPVS: set_ctl: invalid protocol: 60 10.1.1.3:7 [ 440.560616][T12207] kexec: Could not allocate control_code_buffer [ 440.715653][ T10] IPVS: starting estimator thread 0... [ 440.834434][T12244] IPVS: using max 78 ests per chain, 187200 per kthread [ 440.908989][T12250] fuse: fd is not a fuse device [ 441.023863][ T30] audit: type=1326 audit(1786047110.509:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.3.1519" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d499e0d9 code=0x7ffc0000 [ 441.107803][ T30] audit: type=1326 audit(1786047110.509:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.3.1519" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d499e0d9 code=0x7ffc0000 [ 441.139531][T12252] syz.5.1520: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 441.174583][T12252] CPU: 0 UID: 0 PID: 12252 Comm: syz.5.1520 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.174605][T12252] Tainted: [L]=SOFTLOCKUP [ 441.174610][T12252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 441.174617][T12252] Call Trace: [ 441.174621][T12252] [ 441.174627][T12252] dump_stack_lvl+0x100/0x190 [ 441.174646][T12252] warn_alloc.cold+0x94/0xa8 [ 441.174657][T12252] ? __pfx_warn_alloc+0x10/0x10 [ 441.174671][T12252] ? policy_nodemask+0xed/0x4f0 [ 441.174688][T12252] ? alloc_pages_mpol+0x25a/0x540 [ 441.174704][T12252] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 441.174720][T12252] ? find_held_lock+0x2b/0x80 [ 441.174731][T12252] ? rcu_read_unlock+0x17/0x60 [ 441.174750][T12252] __vmalloc_node_range_noprof+0x13f6/0x1630 [ 441.174772][T12252] ? kvm_dev_ioctl+0x154/0x1b50 [ 441.174793][T12252] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 441.174808][T12252] ? __pfx_vsnprintf+0x10/0x10 [ 441.174824][T12252] ? rcu_is_watching+0x12/0xc0 [ 441.174843][T12252] __kvmalloc_node_noprof+0x3d3/0x970 [ 441.174857][T12252] ? kvm_dev_ioctl+0x154/0x1b50 [ 441.174872][T12252] ? alloc_fd+0x471/0x7a0 [ 441.174885][T12252] ? kvm_dev_ioctl+0x154/0x1b50 [ 441.174905][T12252] kvm_dev_ioctl+0x154/0x1b50 [ 441.174926][T12252] ? hook_file_ioctl_common+0x140/0x440 [ 441.174940][T12252] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 441.174959][T12252] ? selinux_file_ioctl+0x13b/0x290 [ 441.174976][T12252] ? selinux_file_ioctl+0xb6/0x290 [ 441.174993][T12252] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 441.175011][T12252] __x64_sys_ioctl+0x18e/0x210 [ 441.175028][T12252] do_syscall_64+0x115/0x870 [ 441.175041][T12252] ? clear_bhb_loop+0x40/0x90 [ 441.175055][T12252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.175066][T12252] RIP: 0033:0x7f62fcf9e0d9 [ 441.175077][T12252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.175087][T12252] RSP: 002b:00007f62fdee4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.175098][T12252] RAX: ffffffffffffffda RBX: 00007f62fd225fa0 RCX: 00007f62fcf9e0d9 [ 441.175105][T12252] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000009 [ 441.175112][T12252] RBP: 00007f62fd035024 R08: 0000000000000000 R09: 0000000000000000 [ 441.175117][T12252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.175123][T12252] R13: 00007f62fd226038 R14: 00007f62fd225fa0 R15: 00007ffe93363718 [ 441.175137][T12252] [ 441.175141][T12252] Mem-Info: [ 441.456020][ T30] audit: type=1326 audit(1786047110.509:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.3.1519" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fa8d499e0d9 code=0x7ffc0000 [ 441.547225][ T30] audit: type=1326 audit(1786047110.509:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.3.1519" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d499e0d9 code=0x7ffc0000 [ 441.619335][ T30] audit: type=1326 audit(1786047110.509:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.3.1519" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d499e0d9 code=0x7ffc0000 [ 441.692871][ T30] audit: type=1326 audit(1786047110.509:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.3.1519" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8d499e0d9 code=0x7ffc0000 [ 441.731153][ T10] usb 7-1: USB disconnect, device number 18 [ 441.841187][ T30] audit: type=1326 audit(1786047110.509:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.3.1519" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d499e0d9 code=0x7ffc0000 [ 441.885454][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 441.937286][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 441.972680][ T10] keyspan 7-1:1.0: device disconnected [ 442.177051][T12273] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1528'. [ 442.220168][T12252] active_anon:58689 inactive_anon:1485 isolated_anon:0 [ 442.220168][T12252] active_file:3932 inactive_file:62460 isolated_file:0 [ 442.220168][T12252] unevictable:1536 dirty:397 writeback:0 [ 442.220168][T12252] slab_reclaimable:12513 slab_unreclaimable:104292 [ 442.220168][T12252] mapped:35496 shmem:49254 pagetables:1866 [ 442.220168][T12252] sec_pagetables:0 bounce:0 [ 442.220168][T12252] kernel_misc_reclaimable:0 [ 442.220168][T12252] free:1204292 free_pcp:34525 free_cma:0 [ 442.271182][T12252] Node 0 active_anon:234756kB inactive_anon:5940kB active_file:15728kB inactive_file:249624kB unevictable:4608kB isolated(anon):0kB isolated(file):0kB mapped:141968kB dirty:1588kB writeback:0kB shmem:195480kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13408kB pagetables:7336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 442.324677][ T10] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 442.363674][T12252] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 442.440640][T12252] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 442.485019][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 442.515035][ T10] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 442.530102][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.543194][ T10] usb 7-1: config 0 descriptor?? [ 442.554526][T12252] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 442.565051][T12252] Node 0 DMA32 free:877764kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:234716kB inactive_anon:5920kB active_file:15708kB inactive_file:238156kB unevictable:4608kB writepending:1592kB zspages:4kB present:3129332kB managed:2532144kB mlocked:0kB bounce:0kB free_pcp:125368kB local_pcp:125368kB free_cma:0kB [ 442.603185][T12252] lowmem_reserve[]: 0 0 0 0 0 [ 442.609862][T12252] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 442.643756][T12252] lowmem_reserve[]: 0 0 0 0 0 [ 442.648974][T12252] Node 1 Normal free:3946592kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:216kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB [ 442.689874][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1530'. [ 442.710872][T12252] lowmem_reserve[]: 0 0 0 0 0 [ 442.721863][T12252] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 442.756563][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 442.776731][T12252] Node 0 DMA32: 1961*4kB (UME) 636*8kB (UME) 800*16kB (UME) 669*32kB (UME) 251*64kB (UME) 244*128kB (UME) 115*256kB (UM) 54*512kB (UM) 15*1024kB (UM) 5*2048kB (UME) 171*4096kB (M) = 877540kB [ 442.802565][T12252] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 442.815761][T12252] Node 1 Normal: 2*4kB (U) 5*8kB (UM) 11*16kB (UM) 4*32kB (UM) 10*64kB (UM) 5*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 962*4096kB (UM) = 3946592kB [ 442.834328][T12252] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 442.844058][T12252] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 442.859912][T12252] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 442.869926][T12252] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 442.879441][T12252] 112760 total pagecache pages [ 442.884565][T12252] 0 pages in swap cache [ 442.888751][T12252] Free swap = 124996kB [ 442.893041][T12252] Total swap = 124996kB [ 442.897762][T12252] 2097051 pages RAM [ 442.901688][T12252] 0 pages HighMem/MovableOnly [ 442.906770][T12252] 432306 pages reserved [ 442.911088][T12252] 0 pages cma reserved [ 443.041879][T12288] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1531'. [ 443.294147][T12293] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 444.223648][T12321] geneve2: entered promiscuous mode [ 444.229275][T12321] geneve2: entered allmulticast mode [ 444.254675][ T6680] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 444.287382][ T6680] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 444.351832][ T6680] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 444.408506][ T6680] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 446.958189][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 446.958199][ T30] audit: type=1400 audit(1786047116.449:1554): avc: denied { ioctl } for pid=12345 comm="syz.5.1550" path="socket:[37702]" dev="sockfs" ino=37702 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 447.115931][ T30] audit: type=1400 audit(1786047116.609:1555): avc: denied { read write } for pid=12349 comm="syz.5.1551" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 447.146217][T12350] CacheFiles: Failed to register: -95 [ 447.183515][T12352] Invalid ELF header type: 3 != 1 [ 447.277176][ T30] audit: type=1400 audit(1786047116.609:1556): avc: denied { open } for pid=12349 comm="syz.5.1551" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 447.385533][T12357] MTD: Couldn't look up './dev/mtdblock0': -2 [ 449.861690][T12378] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 451.043393][T12409] dlm: no local IP address has been set [ 451.123769][T12409] dlm: cannot start dlm midcomms -107 [ 451.238061][ T30] audit: type=1400 audit(1786047120.719:1557): avc: denied { getopt } for pid=12408 comm="syz.7.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 451.299278][T12417] fuse: fd is not a fuse device [ 452.327911][T12422] Option 'dnserror' to dns_resolver key: bad/missing value [ 452.408343][T12424] loop6: detected capacity change from 0 to 2640 [ 453.371590][T12424] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.385246][ T30] audit: type=1400 audit(1786047122.879:1558): avc: denied { listen } for pid=12420 comm="syz.3.1572" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 453.449430][T12423] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 453.459192][T12423] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 453.470030][T12423] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 453.480085][T12423] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 453.490744][T12423] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 1 [ 453.500529][T12423] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 1 [ 453.510419][T12423] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 1 [ 453.520246][T12423] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 1 [ 453.567820][T12424] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.598537][ T30] audit: type=1400 audit(1786047123.059:1559): avc: denied { mount } for pid=12421 comm="syz.7.1573" name="/" dev="rpc_pipefs" ino=38078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 453.626608][T12424] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.670026][T12424] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.715042][T12424] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.742646][T12424] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.774418][T12424] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.801128][T12424] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.829125][T12424] ldm_validate_partition_table(): Disk read failed. [ 453.867983][T12424] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.898927][T12424] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.933667][T12424] Dev loop6: unable to read RDB block 0 [ 454.035044][T12440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1579'. [ 454.045202][T12424] loop6: unable to read partition table [ 454.058515][T12424] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 454.197495][T12419] hsr0: entered promiscuous mode [ 454.347502][ T30] audit: type=1400 audit(1786047123.839:1560): avc: denied { unmount } for pid=9462 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 454.777755][ T30] audit: type=1400 audit(1786047124.269:1561): avc: denied { read } for pid=12460 comm="syz.7.1584" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 455.046507][ T30] audit: type=1400 audit(1786047124.269:1562): avc: denied { open } for pid=12460 comm="syz.7.1584" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 455.227691][T12477] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1588'. [ 455.733692][ T30] audit: type=1400 audit(1786047124.379:1563): avc: denied { create } for pid=12456 comm="syz.5.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 456.154560][T12477] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 456.437721][ T30] audit: type=1400 audit(1786047124.389:1564): avc: denied { read write } for pid=9586 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 456.476199][T12477] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 456.569700][T12458] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 456.671910][ T30] audit: type=1400 audit(1786047124.389:1565): avc: denied { open } for pid=9586 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 456.860411][ T30] audit: type=1400 audit(1786047124.389:1566): avc: denied { ioctl } for pid=9586 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 456.938627][T12492] audit: audit_backlog=65 > audit_backlog_limit=64 [ 456.954861][T12494] binder: BINDER_SET_CONTEXT_MGR already set [ 456.978293][T12494] binder: 12493:12494 ioctl 4018620d 200000000040 returned -16 [ 457.033550][T12500] binder: 12493:12500 ioctl c0306201 0 returned -14 [ 457.175897][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1594'. [ 457.226732][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1594'. [ 457.275540][T12494] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1592'. [ 457.491435][T12521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.897766][T12535] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 457.947212][T12533] netlink: 'syz.5.1598': attribute type 3 has an invalid length. [ 458.049596][T12533] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1598'. [ 458.126347][T12546] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1602'. [ 458.357261][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1603'. [ 458.405293][ T30] kauditd_printk_skb: 117 callbacks suppressed [ 458.405304][ T30] audit: type=1400 audit(1786047127.889:1658): avc: denied { mount } for pid=12548 comm="syz.6.1603" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 458.442869][ T30] audit: type=1400 audit(1786047127.929:1659): avc: denied { create } for pid=12555 comm="syz.3.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 458.468637][ T30] audit: type=1400 audit(1786047127.929:1660): avc: denied { ioctl } for pid=12555 comm="syz.3.1606" path="socket:[38747]" dev="sockfs" ino=38747 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 458.777114][ T30] audit: type=1400 audit(1786047128.279:1661): avc: denied { ioctl } for pid=12558 comm="syz.7.1607" path="socket:[38827]" dev="sockfs" ino=38827 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 458.816280][ T30] audit: type=1400 audit(1786047128.299:1662): avc: denied { write } for pid=12558 comm="syz.7.1607" path="socket:[38827]" dev="sockfs" ino=38827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 458.879322][ T30] audit: type=1400 audit(1786047128.369:1663): avc: denied { read write } for pid=12563 comm="syz.7.1608" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 458.958919][ T30] audit: type=1400 audit(1786047128.399:1664): avc: denied { open } for pid=12563 comm="syz.7.1608" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 458.993680][T12566] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1609'. [ 459.053950][ T30] audit: type=1400 audit(1786047128.399:1665): avc: denied { write } for pid=12563 comm="syz.7.1608" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 459.121834][ T30] audit: type=1400 audit(1786047128.479:1666): avc: denied { create } for pid=12565 comm="syz.7.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 459.171210][T12573] jffs2: notice: (12573) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 459.212229][ T30] audit: type=1400 audit(1786047128.479:1667): avc: denied { write } for pid=12565 comm="syz.7.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 460.386671][ T2363] pvrusb2: request_firmware fatal error with code=-110 [ 460.446243][ T2363] pvrusb2: Failure uploading firmware1 [ 460.484613][ T2363] pvrusb2: Device initialization was not successful. [ 460.556092][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 460.591438][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 460.612629][ T5815] pvrusb2: Device being rendered inoperable [ 460.742405][T12593] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1618'. [ 460.886026][T12593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1618'. [ 461.026104][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1622'. [ 461.080785][T12605] gtp1: entered allmulticast mode [ 461.441096][T12619] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1628'. [ 461.554455][ T5778] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 461.756767][ T5778] usb 6-1: unable to get BOS descriptor or descriptor too short [ 461.778903][ T5778] usb 6-1: not running at top speed; connect to a high speed hub [ 461.807925][ T5778] usb 6-1: config 7 has an invalid interface number: 251 but max is 0 [ 461.834672][ T5778] usb 6-1: config 7 has no interface number 0 [ 461.853366][ T5778] usb 6-1: config 7 interface 251 has no altsetting 0 [ 461.879685][ T5778] usb 6-1: New USB device found, idVendor=0df6, idProduct=0072, bcdDevice=f8.4f [ 461.902272][ T5778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.927514][ T5778] usb 6-1: Product: syz [ 461.942935][ T5778] usb 6-1: Manufacturer: syz [ 461.958850][ T5778] usb 6-1: SerialNumber: syz [ 462.197367][T12615] random: crng reseeded on system resumption [ 462.361513][ T5778] ax88179_178a 6-1:7.251: probe with driver ax88179_178a failed with error -22 [ 462.408162][ T5778] usb 6-1: USB disconnect, device number 21 [ 462.550504][T12625] syz_tun: left allmulticast mode [ 463.553251][T12643] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1637'. [ 463.577448][T12643] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1637'. [ 463.682465][T12645] netlink: 508 bytes leftover after parsing attributes in process `syz.7.1637'. [ 463.747537][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 463.747549][ T30] audit: type=1400 audit(1786047133.239:1707): avc: denied { mount } for pid=12644 comm="syz.6.1638" name="/" dev="configfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 463.925403][ T30] audit: type=1400 audit(1786047133.419:1708): avc: denied { read append } for pid=12651 comm="syz.5.1640" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 464.046949][ T30] audit: type=1400 audit(1786047133.449:1709): avc: denied { open } for pid=12651 comm="syz.5.1640" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 464.163735][ T30] audit: type=1400 audit(1786047133.449:1710): avc: denied { getopt } for pid=12651 comm="syz.5.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 464.269917][ T30] audit: type=1400 audit(1786047133.479:1711): avc: denied { name_bind } for pid=12653 comm="syz.8.1641" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 464.402892][ T30] audit: type=1400 audit(1786047133.509:1712): avc: denied { getopt } for pid=12653 comm="syz.8.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 464.597475][ T30] audit: type=1400 audit(1786047133.509:1713): avc: denied { setopt } for pid=12653 comm="syz.8.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 464.694707][ T30] audit: type=1400 audit(1786047133.679:1714): avc: denied { create } for pid=12664 comm="syz.3.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 464.774594][T12419] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 464.793366][ T30] audit: type=1400 audit(1786047133.689:1715): avc: denied { connect } for pid=12664 comm="syz.3.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 464.880449][ T30] audit: type=1400 audit(1786047133.699:1716): avc: denied { write } for pid=12664 comm="syz.3.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 464.975511][T12419] usb 6-1: Using ep0 maxpacket: 16 [ 464.991760][T12419] usb 6-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 465.021938][T12419] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 465.073862][T12419] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 465.127360][T12419] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 465.179476][T12419] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 465.212132][T12419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.249722][T12419] usb 6-1: Product: syz [ 465.269247][T12419] usb 6-1: Manufacturer: syz [ 465.293727][T12419] usb 6-1: SerialNumber: syz [ 465.324653][T12419] usb 6-1: config 0 descriptor?? [ 465.489372][T12699] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1652'. [ 465.562431][T12675] netlink: 'syz.5.1649': attribute type 10 has an invalid length. [ 465.590661][T12675] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1649'. [ 465.616024][T12419] appledisplay 6-1:0.0: Error while getting initial brightness: -110 [ 465.641914][T12675] dummy0: entered promiscuous mode [ 465.690841][T12419] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110 [ 465.847845][T12419] usb 6-1: USB disconnect, device number 22 [ 466.130803][T12717] lo speed is unknown, defaulting to 1000 [ 466.356019][T12720] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1654'. [ 466.414694][T12720] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 466.428967][T12720] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 466.446360][T12720] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 466.460043][T12720] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 467.946194][T12740] fuse: fd is not a fuse device [ 469.448100][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 469.448111][ T30] audit: type=1400 audit(1786047138.939:1740): avc: denied { write } for pid=12765 comm="syz.8.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 469.535231][T12766] netlink: 280 bytes leftover after parsing attributes in process `syz.8.1669'. [ 469.740616][ T30] audit: type=1400 audit(1786047138.979:1741): avc: denied { read } for pid=12765 comm="syz.8.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 469.900868][T12774] syzkaller0: entered promiscuous mode [ 469.906455][T12774] syzkaller0: entered allmulticast mode [ 470.331154][ T30] audit: type=1400 audit(1786047139.029:1742): avc: denied { connect } for pid=12765 comm="syz.8.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 470.483984][T12780] lo speed is unknown, defaulting to 1000 [ 470.545575][ T30] audit: type=1400 audit(1786047139.409:1743): avc: denied { write } for pid=12768 comm="syz.6.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 470.707859][ T30] audit: type=1400 audit(1786047139.899:1744): avc: denied { unmount } for pid=12779 comm="syz.8.1672" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 470.795258][T12786] loop5: detected capacity change from 0 to 7 [ 470.850466][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 470.860157][ C0] buffer_io_error: 6 callbacks suppressed [ 470.860167][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 470.974814][ T30] audit: type=1400 audit(1786047139.929:1745): avc: denied { mount } for pid=12779 comm="syz.8.1672" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 471.146976][T12792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1674'. [ 471.161594][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.171270][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 471.186926][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.196666][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 471.207168][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.216796][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 471.229611][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.239287][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 471.252202][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.261878][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 471.285203][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.294905][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 471.303039][T12786] ldm_validate_partition_table(): Disk read failed. [ 471.343098][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.352972][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 471.366266][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.376281][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 471.388602][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.398242][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 471.414287][T12786] Dev loop5: unable to read RDB block 0 [ 471.442253][T12792] bond3: entered promiscuous mode [ 471.447393][ T30] audit: type=1400 audit(1786047139.929:1746): avc: denied { write } for pid=12744 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.488683][T12786] loop5: unable to read partition table [ 471.507413][T12792] 8021q: adding VLAN 0 to HW filter on device bond3 [ 471.530014][T12786] loop5: partition table beyond EOD, truncated [ 471.558180][T12786] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 471.618553][ T30] audit: type=1400 audit(1786047139.949:1747): avc: denied { kexec_image_load } for pid=12746 comm="syz.3.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 471.747646][ T30] audit: type=1400 audit(1786047140.499:1748): avc: denied { write } for pid=12788 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.809900][T12803] openvswitch: netlink: Key 6 has unexpected len 5 expected 2 [ 473.003969][T12815] openvswitch: netlink: Tunnel attr 335 out of range max 16 [ 473.186707][ T30] audit: type=1400 audit(1786047142.569:1749): avc: denied { write } for pid=12811 comm="syz.5.1678" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 473.679423][ T5778] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 473.948865][ T5778] usb 6-1: New USB device found, idVendor=413c, idProduct=81d7, bcdDevice=ed.a6 [ 473.999623][ T5778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.052498][ T5778] usb 6-1: Product: syz [ 474.082481][ T5778] usb 6-1: Manufacturer: syz [ 474.122827][ T5778] usb 6-1: SerialNumber: syz [ 474.311396][T12832] comedi comedi3: dac02: I/O base address or length out of range [ 474.417680][T12828] syz.3.1681 (12828) used greatest stack depth: 19768 bytes left [ 474.481817][T12834] jffs2: notice: (12834) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 474.716379][T12835] FAULT_INJECTION: forcing a failure. [ 474.716379][T12835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.782742][T12835] CPU: 0 UID: 0 PID: 12835 Comm: syz.8.1683 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.782761][T12835] Tainted: [L]=SOFTLOCKUP [ 474.782764][T12835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 474.782771][T12835] Call Trace: [ 474.782775][T12835] [ 474.782779][T12835] dump_stack_lvl+0x100/0x190 [ 474.782797][T12835] should_fail_ex.cold+0x5/0xa [ 474.782812][T12835] _copy_to_user+0x32/0xd0 [ 474.782829][T12835] simple_read_from_buffer+0xcb/0x170 [ 474.782842][T12835] proc_fail_nth_read+0x1af/0x230 [ 474.782859][T12835] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 474.782877][T12835] ? rw_verify_area+0xce/0x6d0 [ 474.782892][T12835] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 474.782908][T12835] vfs_read+0x1e4/0xb40 [ 474.782926][T12835] ? __pfx_vfs_read+0x10/0x10 [ 474.782942][T12835] ? __fget_files+0x215/0x3d0 [ 474.782956][T12835] ? __fget_files+0x21f/0x3d0 [ 474.782970][T12835] ksys_read+0x12a/0x250 [ 474.782987][T12835] ? __pfx_ksys_read+0x10/0x10 [ 474.783004][T12835] ? trace_syscall_enter+0xd9/0x110 [ 474.783023][T12835] do_syscall_64+0x115/0x870 [ 474.783037][T12835] ? clear_bhb_loop+0x40/0x90 [ 474.783051][T12835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.783062][T12835] RIP: 0033:0x7fee74d5e90e [ 474.783071][T12835] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 474.783081][T12835] RSP: 002b:00007fee75b86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 474.783092][T12835] RAX: ffffffffffffffda RBX: 00007fee75b876c0 RCX: 00007fee74d5e90e [ 474.783098][T12835] RDX: 000000000000000f RSI: 00007fee75b870a0 RDI: 0000000000000008 [ 474.783105][T12835] RBP: 00007fee75b87090 R08: 0000000000000000 R09: 0000000000000000 [ 474.784631][T12835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.784643][T12835] R13: 00007fee75026128 R14: 00007fee75026090 R15: 00007fff80a654c8 [ 474.784664][T12835] [ 475.199002][T12845] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1687'. [ 475.211139][T12845] netlink: 'syz.3.1687': attribute type 7 has an invalid length. [ 475.218980][T12845] netlink: 'syz.3.1687': attribute type 8 has an invalid length. [ 475.226845][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1687'. [ 475.275697][T12845] gretap0: entered promiscuous mode [ 475.306187][T12845] gretap0: left promiscuous mode [ 475.913764][ T10] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 476.525633][ T5778] usb 6-1: USB disconnect, device number 23 [ 476.621297][ T10] dvb_usb_az6027 7-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 476.768455][ T5716] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 477.502112][T12861] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 477.515682][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1693'. [ 477.599959][ T10] usb 7-1: USB disconnect, device number 19 [ 477.691183][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 477.691195][ T30] audit: type=1400 audit(1786047147.189:1756): avc: denied { bind } for pid=12873 comm="syz.7.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 477.723172][ T5716] dvb_usb_az6027 9-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 477.768355][ T5716] usb 9-1: USB disconnect, device number 22 [ 477.780555][T12877] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1699'. [ 477.807231][T12878] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[9462] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12878] [ 477.845097][ T30] audit: type=1400 audit(1786047147.219:1757): avc: denied { node_bind } for pid=12873 comm="syz.7.1698" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 477.902743][T12882] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1700'. [ 477.921067][ T30] audit: type=1400 audit(1786047147.269:1758): avc: denied { nlmsg_read } for pid=12876 comm="syz.3.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 477.997752][ T30] audit: type=1400 audit(1786047147.329:1759): avc: denied { read } for pid=12876 comm="syz.3.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 478.070378][ T30] audit: type=1400 audit(1786047147.519:1760): avc: denied { ioctl } for pid=12881 comm="syz.6.1700" path="socket:[40087]" dev="sockfs" ino=40087 ioctlcmd=0x586d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 478.097773][ T5716] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 478.276175][ T5716] usb 9-1: Using ep0 maxpacket: 16 [ 478.285047][ T5716] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 478.317122][ T5716] usb 9-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 478.350665][ T5716] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.389118][ T5716] usb 9-1: config 0 descriptor?? [ 478.494771][ T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 478.541941][ T30] audit: type=1400 audit(1786047148.029:1761): avc: denied { write } for pid=12899 comm="syz.3.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 478.655082][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 478.676522][ T10] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 478.716703][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.759362][ T10] usb 7-1: config 0 descriptor?? [ 478.861063][ T5716] apple 0003:05AC:027D.000F: unknown main item tag 0x0 [ 478.900954][ T5716] apple 0003:05AC:027D.000F: unknown main item tag 0x0 [ 478.933735][ T5716] apple 0003:05AC:027D.000F: unknown main item tag 0x0 [ 478.954399][ T5716] apple 0003:05AC:027D.000F: unknown main item tag 0x0 [ 478.974628][ T5716] apple 0003:05AC:027D.000F: unknown main item tag 0x0 [ 478.991688][ T5716] apple 0003:05AC:027D.000F: unknown main item tag 0x0 [ 479.001201][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 479.014755][ T5716] apple 0003:05AC:027D.000F: unknown main item tag 0x0 [ 479.038418][ T5716] apple 0003:05AC:027D.000F: unknown main item tag 0x0 [ 479.053441][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 479.070533][ T5716] apple 0003:05AC:027D.000F: unknown main item tag 0x0 [ 479.112047][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 479.125450][ T5716] apple 0003:05AC:027D.000F: unknown main item tag 0x0 [ 479.148667][ T10] usb 7-1: media controller created [ 479.173765][ T5716] apple 0003:05AC:027D.000F: hidraw0: USB HID v7e.ff Device [HID 05ac:027d] on usb-dummy_hcd.8-1/input0 [ 479.220920][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 479.258978][ T5716] usb 9-1: USB disconnect, device number 23 [ 479.298835][ T10] az6027: usb out operation failed. (-71) [ 479.327172][ T10] az6027: usb out operation failed. (-71) [ 479.338104][T12915] fido_id[12915]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 479.364053][ T10] stb0899_attach: Driver disabled by Kconfig [ 479.381742][ T10] az6027: no front-end attached [ 479.381742][ T10] [ 480.337539][ T10] az6027: usb out operation failed. (-71) [ 480.393733][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 480.456104][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input27 [ 480.501868][ T30] audit: type=1400 audit(1786047149.979:1762): avc: denied { bind } for pid=12921 comm="syz.3.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 480.582910][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 480.641065][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 480.783301][ T30] audit: type=1400 audit(1786047149.979:1763): avc: denied { name_bind } for pid=12921 comm="syz.3.1714" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 481.639458][ T10] usb 7-1: USB disconnect, device number 20 [ 482.847470][ T5815] IPVS: starting estimator thread 0... [ 483.016636][ T30] audit: type=1400 audit(1786047149.979:1764): avc: denied { node_bind } for pid=12921 comm="syz.3.1714" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 483.098522][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 483.214522][T12938] IPVS: using max 78 ests per chain, 187200 per kthread [ 483.265997][ T30] audit: type=1326 audit(1786047149.979:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12924 comm="syz.8.1715" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee74d9e0d9 code=0x7ffc0000 [ 483.539979][T12951] xt_l2tp: v2 doesn't support IP mode [ 484.282739][ T30] audit: type=1326 audit(1786047149.979:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12924 comm="syz.8.1715" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee74d9e0d9 code=0x7ffc0000 [ 485.092188][T12957] audit: audit_backlog=65 > audit_backlog_limit=64 [ 485.098778][T12957] audit: audit_lost=10 audit_rate_limit=0 audit_backlog_limit=64 [ 485.107035][T12957] audit: backlog limit exceeded [ 485.111891][T12957] audit: audit_backlog=65 > audit_backlog_limit=64 [ 485.118415][T12957] audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64 [ 485.126139][T12957] audit: backlog limit exceeded [ 485.131045][T12957] audit: audit_backlog=65 > audit_backlog_limit=64 [ 485.584254][ T5778] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 485.727433][ T5778] usb 6-1: device descriptor read/64, error -71 [ 486.043588][ T5778] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 486.874454][ T5778] usb 6-1: device descriptor read/64, error -71 [ 486.994785][ T5778] usb usb6-port1: attempt power cycle [ 487.020257][T12979] Invalid source name [ 488.014752][ T5778] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 488.056918][ T5778] usb 6-1: device descriptor read/8, error -71 [ 488.344501][ T5778] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 488.412912][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 488.412925][ T30] audit: type=1400 audit(1786047157.899:1838): avc: denied { read } for pid=12992 comm="syz.6.1736" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 488.595084][ T5778] usb 6-1: device not accepting address 27, error -71 [ 488.621638][ T30] audit: type=1400 audit(1786047157.939:1839): avc: denied { open } for pid=12992 comm="syz.6.1736" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 488.675767][ T5778] usb usb6-port1: unable to enumerate USB device [ 488.868717][ T30] audit: type=1400 audit(1786047157.939:1840): avc: denied { ioctl } for pid=12992 comm="syz.6.1736" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 489.080657][ T30] audit: type=1404 audit(1786047158.159:1841): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 489.110543][T12996] mac80211_hwsim hwsim18 wlan0: left promiscuous mode [ 489.138544][ T30] audit: type=1400 audit(1786047158.239:1842): avc: denied { read } for pid=13002 comm="syz.6.1739" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 489.183013][T12996] 8021q: adding VLAN 0 to HW filter on device eth0 [ 489.214302][ T30] audit: type=1400 audit(1786047158.239:1843): avc: denied { shutdown } for pid=12999 comm="syz.7.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=0 [ 489.246914][T12996] vlan2: left promiscuous mode [ 489.268233][T12996] bond2: left promiscuous mode [ 489.286751][ T30] audit: type=1400 audit(1786047158.239:1844): avc: denied { write } for pid=12999 comm="syz.7.1738" path="socket:[40562]" dev="sockfs" ino=40562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 489.321798][T12996] vlan2: left allmulticast mode [ 489.339841][T12996] bond2: left allmulticast mode [ 489.369758][ T30] audit: type=1400 audit(1786047158.239:1845): avc: denied { read } for pid=12999 comm="syz.7.1738" dev="nsfs" ino=4026532785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 489.485169][ T30] audit: type=1400 audit(1786047158.239:1846): avc: denied { append } for pid=13002 comm="syz.6.1739" name="cec6" dev="devtmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 489.630277][ T30] audit: type=1400 audit(1786047158.239:1847): avc: denied { read } for pid=13002 comm="syz.6.1739" name="cec6" dev="devtmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 490.242010][T13038] lo speed is unknown, defaulting to 1000 [ 490.251830][T13045] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1753'. [ 490.630909][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1757'. [ 491.668401][T13064] batman_adv: batadv0: Interface deactivated: wlan0 [ 491.968819][ T6256] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.174981][ T6680] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.304704][ T6680] netdevsim netdevsim10 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.353901][ T6680] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.396023][ T6680] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.343740][T13120] lo speed is unknown, defaulting to 1000 [ 493.419659][ T30] kauditd_printk_skb: 4747 callbacks suppressed [ 493.419670][ T30] audit: type=1400 audit(1786047162.899:6595): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 493.512908][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 493.533558][ T9586] audit: audit_backlog=65 > audit_backlog_limit=64 [ 493.540320][T13129] audit: audit_backlog=65 > audit_backlog_limit=64 [ 493.561641][ T5274] audit: audit_lost=24 audit_rate_limit=0 audit_backlog_limit=64 [ 493.583213][T13130] audit: audit_backlog=65 > audit_backlog_limit=64 [ 493.592264][ T9586] audit: audit_lost=25 audit_rate_limit=0 audit_backlog_limit=64 [ 493.610285][ T5274] audit: backlog limit exceeded [ 493.624273][ T30] audit: type=1400 audit(1786047162.919:6596): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 493.647903][T13129] audit: audit_lost=26 audit_rate_limit=0 audit_backlog_limit=64 [ 493.863888][T13139] netlink: 'syz.7.1789': attribute type 1 has an invalid length. [ 493.972772][T13143] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1789'. [ 494.025581][T13147] netlink: 'syz.7.1789': attribute type 10 has an invalid length. [ 494.046390][T13146] FAULT_INJECTION: forcing a failure. [ 494.046390][T13146] name failslab, interval 1, probability 0, space 0, times 0 [ 494.075936][T13147] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1789'. [ 494.143233][T13139] 8021q: adding VLAN 0 to HW filter on device bond2 [ 494.191695][T13147] dummy0: entered promiscuous mode [ 494.221813][T13146] CPU: 0 UID: 0 PID: 13146 Comm: syz.6.1791 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.221832][T13146] Tainted: [L]=SOFTLOCKUP [ 494.221843][T13146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 494.221849][T13146] Call Trace: [ 494.221852][T13146] [ 494.221857][T13146] dump_stack_lvl+0x100/0x190 [ 494.221876][T13146] should_fail_ex.cold+0x5/0xa [ 494.221890][T13146] should_failslab+0xc2/0x120 [ 494.221905][T13146] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 494.221918][T13146] ? __alloc_skb+0x5b7/0x710 [ 494.221932][T13146] ? __alloc_skb+0x140/0x710 [ 494.221947][T13146] __alloc_skb+0x140/0x710 [ 494.221959][T13146] ? __alloc_skb+0x5b7/0x710 [ 494.221971][T13146] ? __pfx___alloc_skb+0x10/0x10 [ 494.221985][T13146] ? lockdep_init_map_type+0x5c/0x250 [ 494.222001][T13146] audit_log_start+0x350/0x930 [ 494.222013][T13146] ? __pfx_audit_log_start+0x10/0x10 [ 494.222025][T13146] ? rcu_read_lock_any_held+0x6a/0xa0 [ 494.222036][T13146] ? find_held_lock+0x2b/0x80 [ 494.222045][T13146] ? ksys_write+0x190/0x250 [ 494.222054][T13146] ? ksys_write+0x190/0x250 [ 494.222065][T13146] audit_seccomp+0x61/0x1f0 [ 494.222082][T13146] __seccomp_filter+0x896/0x1140 [ 494.222100][T13146] ? __pfx___seccomp_filter+0x10/0x10 [ 494.222118][T13146] ? __might_fault+0xc5/0x140 [ 494.222132][T13146] __secure_computing+0x221/0x2e0 [ 494.222149][T13146] do_syscall_64+0x5e2/0x870 [ 494.222162][T13146] ? clear_bhb_loop+0x40/0x90 [ 494.222175][T13146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.222186][T13146] RIP: 0033:0x7efc4c99e0d9 [ 494.222196][T13146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.222206][T13146] RSP: 002b:00007efc4d7e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 494.222219][T13146] RAX: ffffffffffffffda RBX: 00007efc4cc25fa0 RCX: 00007efc4c99e0d9 [ 494.222226][T13146] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 494.222232][T13146] RBP: 00007efc4d7e9090 R08: 0000000000000000 R09: 0000000000000000 [ 494.222238][T13146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.222244][T13146] R13: 00007efc4cc26038 R14: 00007efc4cc25fa0 R15: 00007fff372c4f28 [ 494.222257][T13146] [ 495.203842][T13170] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1798'. [ 495.477479][T13179] FAULT_INJECTION: forcing a failure. [ 495.477479][T13179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.647711][T13179] CPU: 0 UID: 0 PID: 13179 Comm: syz.7.1800 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.647730][T13179] Tainted: [L]=SOFTLOCKUP [ 495.647734][T13179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 495.647743][T13179] Call Trace: [ 495.647746][T13179] [ 495.647751][T13179] dump_stack_lvl+0x100/0x190 [ 495.647770][T13179] should_fail_ex.cold+0x5/0xa [ 495.647790][T13179] _copy_from_user+0x2e/0xd0 [ 495.647806][T13179] do_ip6t_set_ctl+0x9b8/0xd00 [ 495.647820][T13179] ? nf_sockopt_find.isra.0+0x222/0x290 [ 495.647834][T13179] ? nf_sockopt_find.isra.0+0x222/0x290 [ 495.647853][T13179] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 495.647866][T13179] ? __mutex_unlock_slowpath+0x35d/0x930 [ 495.647883][T13179] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 495.647902][T13179] ? nf_sockopt_find.isra.0+0x222/0x290 [ 495.647917][T13179] nf_setsockopt+0x8d/0xf0 [ 495.647932][T13179] ipv6_setsockopt+0x135/0x170 [ 495.647947][T13179] udpv6_setsockopt+0x64/0xb0 [ 495.647963][T13179] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 495.647981][T13179] do_sock_setsockopt+0xf3/0x1d0 [ 495.647999][T13179] __sys_setsockopt+0x195/0x220 [ 495.648015][T13179] __x64_sys_setsockopt+0xbd/0x160 [ 495.648029][T13179] ? trace_syscall_enter+0xe3/0x110 [ 495.648044][T13179] do_syscall_64+0x115/0x870 [ 495.648057][T13179] ? clear_bhb_loop+0x40/0x90 [ 495.648070][T13179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.648081][T13179] RIP: 0033:0x7f53bc19e0d9 [ 495.648091][T13179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.648102][T13179] RSP: 002b:00007f53bd0cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 495.648113][T13179] RAX: ffffffffffffffda RBX: 00007f53bc426090 RCX: 00007f53bc19e0d9 [ 495.648120][T13179] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000008 [ 495.648126][T13179] RBP: 00007f53bd0cf090 R08: 00000000000005b8 R09: 0000000000000000 [ 495.648132][T13179] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 495.648138][T13179] R13: 00007f53bc426128 R14: 00007f53bc426090 R15: 00007ffc9f36ead8 [ 495.648152][T13179] [ 496.143475][T13196] syzkaller0: entered promiscuous mode [ 496.149173][T13196] syzkaller0: entered allmulticast mode [ 496.734060][ T5815] lo speed is unknown, defaulting to 1000 [ 496.763790][ T5815] syz2: Port: 1 Link ACTIVE [ 496.820810][ T9] lo speed is unknown, defaulting to 1000 [ 497.012122][T13219] netlink: 'syz.6.1814': attribute type 4 has an invalid length. [ 497.078735][T13219] netlink: 'syz.6.1814': attribute type 4 has an invalid length. [ 497.751361][T13244] 8021q: VLANs not supported on gre0 [ 498.424578][ T30] kauditd_printk_skb: 6789 callbacks suppressed [ 498.424591][ T30] audit: type=1400 audit(1786047167.909:12000): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 498.509271][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 498.519225][ T9098] audit: audit_backlog=65 > audit_backlog_limit=64 [ 498.533893][T13271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 498.554829][ T5274] audit: audit_lost=489 audit_rate_limit=0 audit_backlog_limit=64 [ 498.564612][ T9098] audit: audit_lost=490 audit_rate_limit=0 audit_backlog_limit=64 [ 498.573900][ T8473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 498.581024][T13271] audit: audit_lost=491 audit_rate_limit=0 audit_backlog_limit=64 [ 498.600359][ T9586] audit: audit_backlog=65 > audit_backlog_limit=64 [ 498.607481][ T5274] audit: backlog limit exceeded [ 501.465741][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.481859][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.036420][T13345] FAULT_INJECTION: forcing a failure. [ 503.036420][T13345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.089161][T13344] ip6erspan0: entered allmulticast mode [ 503.197173][T13345] CPU: 0 UID: 0 PID: 13345 Comm: syz.6.1861 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.197193][T13345] Tainted: [L]=SOFTLOCKUP [ 503.197196][T13345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 503.197203][T13345] Call Trace: [ 503.197226][T13345] [ 503.197231][T13345] dump_stack_lvl+0x100/0x190 [ 503.197249][T13345] should_fail_ex.cold+0x5/0xa [ 503.197264][T13345] _copy_from_user+0x2e/0xd0 [ 503.197280][T13345] kstrtouint_from_user+0xd6/0x1d0 [ 503.197293][T13345] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 503.197304][T13345] ? __lock_acquire+0x49f/0x1a40 [ 503.197324][T13345] proc_fail_nth_write+0x83/0x220 [ 503.197342][T13345] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 503.197363][T13345] vfs_write+0x2aa/0x1050 [ 503.197381][T13345] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 503.197399][T13345] ? __pfx_vfs_write+0x10/0x10 [ 503.197415][T13345] ? __fget_files+0x215/0x3d0 [ 503.197450][T13345] ? __fget_files+0x21f/0x3d0 [ 503.197465][T13345] ksys_write+0x12a/0x250 [ 503.197474][T13345] ? __pfx_ksys_write+0x10/0x10 [ 503.197483][T13345] ? trace_syscall_enter+0xd9/0x110 [ 503.197502][T13345] do_syscall_64+0x115/0x870 [ 503.197516][T13345] ? clear_bhb_loop+0x40/0x90 [ 503.197530][T13345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.197541][T13345] RIP: 0033:0x7efc4c95e90e [ 503.197551][T13345] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 503.197562][T13345] RSP: 002b:00007efc4d7e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 503.197573][T13345] RAX: ffffffffffffffda RBX: 00007efc4d7e96c0 RCX: 00007efc4c95e90e [ 503.197580][T13345] RDX: 0000000000000001 RSI: 00007efc4d7e90a0 RDI: 0000000000000004 [ 503.197586][T13345] RBP: 00007efc4d7e9090 R08: 0000000000000000 R09: 0000000000000000 [ 503.197592][T13345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.197598][T13345] R13: 00007efc4cc26038 R14: 00007efc4cc25fa0 R15: 00007fff372c4f28 [ 503.197611][T13345] [ 503.714228][ T30] kauditd_printk_skb: 2619 callbacks suppressed [ 503.714241][ T30] audit: type=1400 audit(1786047172.161:14530): avc: denied { read write } for pid=9462 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 504.051391][ T30] audit: type=1400 audit(1786047172.171:14531): avc: denied { read write } for pid=9098 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 504.243386][T13358] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1870'. [ 504.282637][ T30] audit: type=1400 audit(1786047172.181:14532): avc: denied { create } for pid=13348 comm="syz.5.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 504.464208][ T30] audit: type=1400 audit(1786047172.181:14533): avc: denied { create } for pid=13348 comm="syz.5.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 504.646011][ T30] audit: type=1400 audit(1786047172.201:14534): avc: denied { create } for pid=13348 comm="syz.5.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 504.711042][T13374] audit: audit_backlog=65 > audit_backlog_limit=64 [ 504.731797][T13377] audit: audit_backlog=65 > audit_backlog_limit=64 [ 504.767353][T13375] audit: audit_backlog=66 > audit_backlog_limit=64 [ 504.792985][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1875'. [ 504.821948][T13374] audit: audit_lost=522 audit_rate_limit=0 audit_backlog_limit=64 [ 504.830012][ T30] audit: type=1400 audit(1786047172.201:14535): avc: denied { read } for pid=13348 comm="syz.5.1864" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 507.073483][T13400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.244038][ T5815] lo speed is unknown, defaulting to 1000 [ 507.244080][ T5815] syz2: Port: 1 Link DOWN [ 507.251403][ T5815] lo speed is unknown, defaulting to 1000 [ 507.821757][T13423] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1891'. [ 507.923554][T13423] netlink: 'syz.6.1891': attribute type 7 has an invalid length. [ 508.233537][T13428] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1891'. [ 508.471526][T13423] netlink: 'syz.6.1891': attribute type 8 has an invalid length. [ 508.730368][ T30] kauditd_printk_skb: 1236 callbacks suppressed [ 508.730381][ T30] audit: type=1400 audit(1786047177.221:15749): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 508.874773][T13428] netlink: 'syz.6.1891': attribute type 7 has an invalid length. [ 509.186599][T13423] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1891'. [ 509.283467][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 509.376988][ T8473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 509.413697][T13428] netlink: 'syz.6.1891': attribute type 8 has an invalid length. [ 509.445111][ T5274] audit: audit_lost=531 audit_rate_limit=0 audit_backlog_limit=64 [ 509.553579][ T9462] audit: audit_backlog=65 > audit_backlog_limit=64 [ 509.561050][ T30] audit: type=1400 audit(1786047177.221:15750): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 509.626431][T13428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1891'. [ 509.663008][ T5274] audit: backlog limit exceeded [ 509.693561][ T8473] audit: audit_lost=532 audit_rate_limit=0 audit_backlog_limit=64 [ 509.770582][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 509.804194][ T9462] audit: audit_lost=533 audit_rate_limit=0 audit_backlog_limit=64 [ 509.881425][T13423] erspan0: entered promiscuous mode [ 510.153345][T13423] gretap0: entered promiscuous mode [ 510.668544][T13423] erspan0: left promiscuous mode [ 510.738099][T13423] gretap0: left promiscuous mode [ 511.359670][T13428] erspan0: entered promiscuous mode [ 511.460033][T13428] gretap0: entered promiscuous mode [ 511.988512][T13428] erspan0: left promiscuous mode [ 512.084452][T13428] gretap0: left promiscuous mode [ 513.357885][T13464] orangefs_mount: mount request failed with -4 [ 513.734265][ T30] kauditd_printk_skb: 1897 callbacks suppressed [ 513.734278][ T30] audit: type=1400 audit(1786047182.221:17176): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 513.884106][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 513.909167][T13478] audit: audit_backlog=65 > audit_backlog_limit=64 [ 513.960966][T13475] audit: audit_backlog=65 > audit_backlog_limit=64 [ 513.995313][ T5274] audit: audit_lost=691 audit_rate_limit=0 audit_backlog_limit=64 [ 514.003869][T13479] audit: audit_backlog=65 > audit_backlog_limit=64 [ 514.042372][T13475] audit: audit_lost=692 audit_rate_limit=0 audit_backlog_limit=64 [ 514.094458][T13478] audit: audit_lost=693 audit_rate_limit=0 audit_backlog_limit=64 [ 514.106881][ T5274] audit: backlog limit exceeded [ 514.128387][ T30] audit: type=1400 audit(1786047182.221:17177): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 514.817107][T13453] batman_adv: batadv0: Interface activated: vlan2 [ 514.998608][T13453] erspan0: entered promiscuous mode [ 515.476972][T13458] lo speed is unknown, defaulting to 1000 [ 518.760674][ T30] kauditd_printk_skb: 3428 callbacks suppressed [ 518.760687][ T30] audit: type=1400 audit(1786047187.251:19498): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 518.893319][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.951459][ T10] [ 518.953809][ T10] ============================================ [ 518.959943][ T10] WARNING: possible recursive locking detected [ 518.966089][ T10] syzkaller #0 Tainted: G L [ 518.972046][ T10] -------------------------------------------- [ 518.978179][ T10] kworker/0:1/10 is trying to acquire lock: [ 518.984060][ T10] ffff8880336ec928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 518.993799][ T10] [ 518.993799][ T10] but task is already holding lock: [ 519.001152][ T10] ffff888034f68128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 519.011683][ T10] [ 519.011683][ T10] other info that might help us debug this: [ 519.019750][ T10] Possible unsafe locking scenario: [ 519.019750][ T10] [ 519.027196][ T10] CPU0 [ 519.030465][ T10] ---- [ 519.033729][ T10] lock(&grp->list_lock); [ 519.038180][ T10] lock(&grp->list_lock); [ 519.042598][ T10] [ 519.042598][ T10] *** DEADLOCK *** [ 519.042598][ T10] [ 519.050733][ T10] May be due to missing lock nesting notation [ 519.050733][ T10] [ 519.059032][ T10] 3 locks held by kworker/0:1/10: [ 519.064027][ T10] #0: ffff88801bc0f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 519.074797][ T10] #1: ffffc900000f7d08 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 519.086717][ T10] #2: ffff888034f68128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 519.096913][ T10] [ 519.096913][ T10] stack backtrace: [ 519.102791][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.102808][ T10] Tainted: [L]=SOFTLOCKUP [ 519.102812][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 519.102822][ T10] Workqueue: events snd_rawmidi_input_event_work [ 519.102847][ T10] Call Trace: [ 519.102854][ T10] [ 519.102860][ T10] dump_stack_lvl+0x100/0x190 [ 519.102876][ T10] print_deadlock_bug.cold+0xbd/0xca [ 519.102895][ T10] __lock_acquire+0x1256/0x1a40 [ 519.102912][ T10] lock_acquire+0x1b9/0x370 [ 519.102925][ T10] ? snd_seq_deliver_event+0x230/0x860 [ 519.102944][ T10] ? do_raw_read_unlock+0x3f/0x70 [ 519.102961][ T10] _raw_read_lock+0x5f/0x70 [ 519.102974][ T10] ? snd_seq_deliver_event+0x230/0x860 [ 519.102991][ T10] snd_seq_deliver_event+0x230/0x860 [ 519.103008][ T10] ? do_raw_spin_lock+0x128/0x260 [ 519.103025][ T10] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 519.103043][ T10] ? mark_held_locks+0x40/0x70 [ 519.103056][ T10] ? lockdep_hardirqs_on+0x78/0x100 [ 519.103070][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 519.103083][ T10] ? client_use_ptr+0x107/0x4b0 [ 519.103099][ T10] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 519.103119][ T10] queue_broadcast_event.isra.0+0x143/0x1b0 [ 519.103134][ T10] ? __pfx_queue_broadcast_event.isra.0+0x10/0x10 [ 519.103148][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 519.103161][ T10] ? snd_seq_timer_start+0x1f0/0x2a0 [ 519.103176][ T10] snd_seq_control_queue+0x709/0xb70 [ 519.103189][ T10] ? __pfx_event_input_timer+0x10/0x10 [ 519.103205][ T10] __snd_seq_deliver_single_event+0x127/0x1c0 [ 519.103223][ T10] snd_seq_deliver_single_event+0x31f/0x8c0 [ 519.103242][ T10] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 519.103260][ T10] ? __lock_acquire+0x49f/0x1a40 [ 519.103276][ T10] snd_seq_deliver_event+0x44b/0x860 [ 519.103293][ T10] ? do_raw_spin_lock+0x128/0x260 [ 519.103310][ T10] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 519.103327][ T10] ? mark_held_locks+0x40/0x70 [ 519.103340][ T10] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 519.103352][ T10] ? lockdep_hardirqs_on+0x78/0x100 [ 519.103366][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 519.103378][ T10] ? client_use_ptr+0x107/0x4b0 [ 519.103394][ T10] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 519.103413][ T10] send_timer_event.isra.0+0x130/0x190 [ 519.103431][ T10] ? __pfx_send_timer_event.isra.0+0x10/0x10 [ 519.103449][ T10] ? lockdep_hardirqs_on+0x78/0x100 [ 519.103462][ T10] ? snd_seq_queue_timer_set_tempo+0x199/0x510 [ 519.103477][ T10] snd_seq_oss_timer_start+0x1db/0x320 [ 519.103495][ T10] ? __pfx_snd_seq_oss_timer_start+0x10/0x10 [ 519.103513][ T10] ? snd_seq_oss_readq_put_timestamp+0xd1/0x260 [ 519.103529][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 519.103541][ T10] ? find_slot+0x166/0x1b0 [ 519.103553][ T10] snd_seq_oss_midi_input+0x467/0xa30 [ 519.103567][ T10] ? __pfx_snd_seq_oss_midi_input+0x10/0x10 [ 519.103582][ T10] ? find_held_lock+0x2b/0x80 [ 519.103591][ T10] ? snd_seq_port_use_ptr+0x128/0x190 [ 519.103608][ T10] snd_seq_oss_event_input+0x194/0x250 [ 519.103619][ T10] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 519.103631][ T10] __snd_seq_deliver_single_event+0x127/0x1c0 [ 519.103650][ T10] snd_seq_deliver_single_event+0x31f/0x8c0 [ 519.103668][ T10] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 519.103686][ T10] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 519.103698][ T10] ? lockdep_hardirqs_on+0x78/0x100 [ 519.103711][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 519.103723][ T10] ? snd_seq_timer_get_cur_tick+0x50/0x70 [ 519.103740][ T10] snd_seq_deliver_event+0x2c1/0x860 [ 519.103764][ T10] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 519.103782][ T10] ? mark_held_locks+0x40/0x70 [ 519.103795][ T10] ? lockdep_hardirqs_on+0x78/0x100 [ 519.103808][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 519.103821][ T10] ? client_use_ptr+0x107/0x4b0 [ 519.103837][ T10] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 519.103856][ T10] snd_midi_input_event+0x32f/0x470 [ 519.103872][ T10] ? __pfx_snd_midi_input_event+0x10/0x10 [ 519.103890][ T10] ? __pfx_snd_midi_input_event+0x10/0x10 [ 519.103905][ T10] snd_rawmidi_input_event_work+0x61/0x80 [ 519.103923][ T10] process_one_work+0xa23/0x1940 [ 519.103939][ T10] ? __pfx_process_one_work+0x10/0x10 [ 519.103952][ T10] ? __pfx_snd_rawmidi_input_event_work+0x10/0x10 [ 519.103972][ T10] worker_thread+0x5ef/0xe50 [ 519.103985][ T10] ? __pfx_worker_thread+0x10/0x10 [ 519.103997][ T10] ? kthread+0x13a/0x450 [ 519.104008][ T10] ? __pfx_worker_thread+0x10/0x10 [ 519.104019][ T10] kthread+0x370/0x450 [ 519.104030][ T10] ? __pfx_kthread+0x10/0x10 [ 519.104041][ T10] ret_from_fork+0x72b/0xd50 [ 519.104057][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 519.104073][ T10] ? __switch_to+0x800/0x10f0 [ 519.104085][ T10] ? __pfx_kthread+0x10/0x10 [ 519.104096][ T10] ret_from_fork_asm+0x1a/0x30 [ 519.104116][ T10] [ 519.608844][ T8473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 519.615539][ T8473] audit: audit_lost=1063 audit_rate_limit=0 audit_backlog_limit=64 [ 519.623559][ T8473] audit: backlog limit exceeded [ 519.657189][T13517] audit: audit_backlog=65 > audit_backlog_limit=64 [ 519.663740][T13517] audit: audit_lost=1064 audit_rate_limit=0 audit_backlog_limit=64 [ 519.671735][T13517] audit: backlog limit exceeded [ 519.677994][T13517] audit: audit_backlog=65 > audit_backlog_limit=64 [ 519.684602][T13517] audit: audit_lost=1065 audit_rate_limit=0 audit_backlog_limit=64 [ 523.764551][ T30] kauditd_printk_skb: 4301 callbacks suppressed [ 523.764563][ T30] audit: type=1400 audit(1786047192.261:23737): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 523.846690][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.864046][ T5274] audit: audit_lost=1087 audit_rate_limit=0 audit_backlog_limit=64 [ 523.876131][ T30] audit: type=1400 audit(1786047192.291:23738): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 523.903315][ T5274] audit: backlog limit exceeded [ 523.922258][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.946210][ T5274] audit: audit_lost=1088 audit_rate_limit=0 audit_backlog_limit=64 [ 523.958525][ T30] audit: type=1400 audit(1786047192.291:23739): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 523.985465][ T5274] audit: backlog limit exceeded [ 523.996467][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 528.774306][ T30] kauditd_printk_skb: 9341 callbacks suppressed [ 528.774317][ T30] audit: type=1400 audit(1786047197.271:32575): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 528.843296][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 528.867146][ T5274] audit: audit_lost=1258 audit_rate_limit=0 audit_backlog_limit=64 [ 528.888663][ T30] audit: type=1400 audit(1786047197.301:32576): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 528.916451][ T5274] audit: backlog limit exceeded [ 528.928030][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 528.943380][ T5274] audit: audit_lost=1259 audit_rate_limit=0 audit_backlog_limit=64 [ 528.964351][ T30] audit: type=1400 audit(1786047197.301:32577): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0