last executing test programs: 7m8.59886011s ago: executing program 1 (id=218): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x10000, 0xfffffff5, 0x100, 0x100, 0x6, 0x7}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8410, 0x0) r1 = open$dir(&(0x7f0000000200)='./mnt\x00', 0x0, 0x2) r2 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000380)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffd) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc3}, 0x6, r2, '\x00', @auto=[0x20, 0x26, 0x1d, 0x2e, 0x3a, 0x38]}) 7m7.771067177s ago: executing program 1 (id=222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000180)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f0000000280)="e1483f4367ab", 0xfdea}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x80001) openat$autofs(0xffffff9c, 0x0, 0x200000, 0x0) recvmmsg(r4, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)=""/4096, 0xfdfa}], 0x1}}], 0x1, 0x40000141, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000895}, 0x4044000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000400)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7m7.154300956s ago: executing program 1 (id=225): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1e, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000340)='\x00', 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000006c0)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./sys_mount\x00', &(0x7f0000000740)='sysfs\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0), 0xa40, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000800)=@v={0x93, 0xd, 0x90, 0x1d, @MIDI_NOTEON=@note=0xe, 0x8, 0x3}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000840)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000880)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f00000008c0), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000900)={0xfffd, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @dev}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r4, &(0x7f00000009c0)='bfq', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r5, &(0x7f0000000a40)='1\n', 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c00000007060500000000e1ffffff0001000005050001000700000228"], 0x1c}, 0x1, 0x0, 0x0, 0x4000814}, 0x48810) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000c00)=""/7, 0x7, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES8=r5], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m3.767765108s ago: executing program 1 (id=231): munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1, 0x6000014, 0x10010, 0xffffffffffffffff, 0x20000000) r1 = syz_io_uring_setup(0x4e1b, &(0x7f0000000000)={0x0, 0xafc9, 0x2, 0x2, 0x2d4}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, 0x0, r2, &(0x7f0000001480)=@IORING_OP_FUTEX_WAIT={0x33, 0x0, 0x0, 0x1, 0x49, &(0x7f0000001400)=[{&(0x7f0000000140)="dd5301fd5cefff7f1c6967e0397c3ffae62bfa34967d0e3892c173fdab20898391c9c7bcb3f1154125f6276d56048e63c95cd9fe7b72119425265a4a750e315e97fb8211205274fe34762f4806f7848db94f5c74dbaf6e6a1e5b03afbd4574f1ba903d87", 0x64}, {&(0x7f00000001c0)="566d9b00e28a9e89fac2436994d4d5760aae1acf0769b4522c5ca9b0e9ffae47c4c148f9f9dad1b73d119f24b9cceaadbd1b6ccbee0523576d655d44fba015aa53f52c8b2be759fc9f46d204f69ca681177bbb00409024e3af2839535c14131ea3c288eb63afbdd9b1fed38a6e419696ba5d5d465955ee2a83939708141d308de1709013d53502d52299880278c66bcf333beafcade2080852973e82c084dd3bfd21d4eb598af6a216b68e534202c8a3529a20f82495", 0xb6}, {&(0x7f0000000280)="6a8f2bffbfc8f03c13efada3b6ca6e37dba8373f7e13856085277ec26accf283bd390f8718955a56c9ea176524da7a3d884075d847cbf52a5c871fd917cde9e11293e6b917a931d9c2cf546ca0a481", 0x4f}, {&(0x7f0000000300)="4c58d82ee77e725ed245e67b62b635d50f2e5bc7405fd0901a27035f82ac3747af8c10078ed618bb9fd2ec01b3254b8fae9999bcb0217f2a943168c45795ee5e17225ae64a0ab3e01aefc8590268a0c5d38d042e38c8146f93c979a87e9219e4e55e9cf318fd148674c48ef207031ee524bb3d239034896303f9aa6ea7da8165", 0x80}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="f6848cd7daf278cc8982ba6f5c28289145f2d43158cecf1fa084b1bf545329fb7947ca55688868a9a55d71305861326504801e16e16232dc664a1fc9c3c48fda30ebe429b975c6cf24c7650b2352c2bcc759413f4dc407421b73", 0x5a}], 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x6e}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000001500)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f0000001580)={0x8, r3}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000015c0)={r1, 0x2, 0x10001, 0x9}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x64, r5, 0x210, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x80, 0x74}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xf}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x10, 0x24, [{0x24}, {0x5}, {0x6c}, {}, {0x12, 0x1}, {0x3, 0x1}, {0x9}, {0x16}, {0x18, 0x1}, {0x12, 0x1}, {0x1}, {0x18}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0xe, 0x24, [{0x1c, 0x1}, {0x1}, {0x4}, {0x9}, {0x24}, {0x36, 0x1}, {0x4}, {0x6c, 0x1}, {0x4}, {0x48, 0x1}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x45e8b18263967f8e}, 0x4811) openat$iommufd(0xffffffffffffff9c, &(0x7f00000017c0), 0x90d02, 0x0) setns(r4, 0x2000000) mknod(&(0x7f0000001800)='./file0\x00', 0x2, 0x55b) getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000001840), &(0x7f0000001880)=0x8) getsockopt$inet6_buf(r4, 0x29, 0xd6, &(0x7f00000018c0)=""/43, &(0x7f0000001900)=0x2b) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000001940)={'\x00', 0x2}) mount(&(0x7f0000001980)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f00000019c0)='./file0/file0\x00', &(0x7f0000001a00)='configfs\x00', 0x1000, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x4, 0x8000) listxattr(&(0x7f0000001a40)='./file0/file0\x00', &(0x7f0000001a80)=""/224, 0xe0) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000001b80)=0x10) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000001bc0)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000001c00)={0x5, 0x9, 0x6, 0x7, 0x7, 0x69, 0x2f, 0x7, 0x4, 0x3, 0x5, 0x2c, 0x8, 0x82}, 0xe) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001c80), r4) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x1c, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f0000001d80)) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001e40)=[@text64={0x40, &(0x7f0000001dc0)="66430f38814800c4a2f9db2a65440f0057ddb9cb080000b800400000ba000000000f30f247f7b506000000b9800000c00f3235002000000f30c4627923641c5fb95e0900000f3266b8b6008ec0c744240000900000c7442402f3000000c7442406000000000f011c24", 0x69}], 0x1, 0x8, &(0x7f0000001e80), 0x0) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000001ec0)=0x3) ioctl$BLKFRAGET(r4, 0x1265, &(0x7f0000001f00)) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000001f40)=0x1000) 7m2.31419499s ago: executing program 1 (id=234): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe2$9p(&(0x7f0000000380), 0x4080) bind$inet6(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xc, 0x100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x5) syz_open_dev$video(0x0, 0x101, 0xab02) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x141102) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x11, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x800040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/devices/system/cpu/smt/control\x00', 0x80001, 0x0) write(r1, &(0x7f00000006c0)='off', 0x3) write(r1, &(0x7f0000000700)='on', 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, &(0x7f0000000200)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000002c0)={0x2, &(0x7f0000000300)=[{0x30, 0xfe, 0x0, 0x1b}, {0x6, 0x4, 0x0, 0xffff0001}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r6, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000020c0)=[{0x0}], 0x1, &(0x7f0000002140), 0x0, 0x4040800}, 0xc084) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) 7m1.4611128s ago: executing program 1 (id=239): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x9, 0x2, 0x180, 0x4, 0x10, 0x20000000000000f0, 0x7, 0x7fffffffffffe, 0x5, 0x4, 0x9, 0x7f, 0x100000000, 0x7, 0xbdb], 0x26ffc, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_open_procfs(0x0, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8047) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000811}, 0x20008000) r7 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc2604110, 0x0) 6m46.208199413s ago: executing program 32 (id=239): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x9, 0x2, 0x180, 0x4, 0x10, 0x20000000000000f0, 0x7, 0x7fffffffffffe, 0x5, 0x4, 0x9, 0x7f, 0x100000000, 0x7, 0xbdb], 0x26ffc, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_open_procfs(0x0, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8047) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000811}, 0x20008000) r7 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc2604110, 0x0) 27.219815636s ago: executing program 3 (id=1109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x20280, 0xc8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000001c0)=@x86={0x8, 0x3, 0x8, 0x0, 0x3, 0x1, 0xe, 0x2, 0x8, 0x4, 0x6, 0xfb, 0x0, 0x7, 0x8, 0x5, 0x6, 0x4, 0x5, '\x00', 0x7, 0xf54}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000002480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0xd8, 0x1403, 0x10, 0x70bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008840}, 0x4040000) 24.646219026s ago: executing program 3 (id=1113): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000780)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000019800)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000019840)={{r4, 0xffffffffffffffff}, &(0x7f0000019880), &(0x7f00000198c0)}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000019900)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000019940)={0x6, 0x4, &(0x7f0000019a00)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f0000019a40)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', r7, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000019a80)={r8, r7, 0x25, 0x2, @void}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000019ac0)={{r5}, &(0x7f0000019b00), &(0x7f0000019b40)}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r9 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c00010028bd7000fcdbdf2507000000", @ANYRES32=r11, @ANYBLOB="bc9a1dc800000000b1da983b821b00000600050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x8d1}, 0x8000) ptrace$setsig(0x4203, r9, 0x1, &(0x7f0000019b80)={0x14, 0x1, 0xfee9}) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) 23.58874605s ago: executing program 3 (id=1115): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffcd9) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000680)=@IORING_OP_READ_FIXED={0x4, 0x48, 0x2004, @fd_index=0x6, 0x1, 0x0, 0x0, 0x1c, 0x1, {0x1, 0x0, 0x2, '\x00', &(0x7f0000000700)={0x89e0, 0x5, 0x0, 0x0, 0x1}, 0x1}}) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000007c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000840), 0x0, 0x0) read$msr(r1, &(0x7f0000000880)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000019880)={0x0, 0x0, &(0x7f00000198c0)={&(0x7f0000019900)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xeb}]}}]}, 0x3c}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r3, 0x88, 0x23) ptrace$getregset(0x4204, r3, 0x1, &(0x7f0000000440)={&(0x7f0000000480)=""/512, 0x200}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x40}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x48005}, 0x0) 19.869601868s ago: executing program 4 (id=1123): fsopen(&(0x7f0000000740)='ceph\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x80000100008b}, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000880), 0x0, 0x0) read$msr(r1, &(0x7f00000008c0)=""/102392, 0x18ff8) sched_setaffinity(r0, 0x8, &(0x7f00000198c0)=0x7) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019900), 0x2982, 0x0) (fail_nth: 11) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000019940)="b73f0da6d05b38ca9cbbce709c72aa728fc8e537ff02cb691d35e2a5a0cad47127f2b5950b319ccd", 0x28) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000019980), 0x1) nanosleep(0x0, 0x0) timer_create(0x0, &(0x7f0000019a80)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000019b00)={{0x77359400}}, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) 16.991357081s ago: executing program 0 (id=1126): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1d7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, &(0x7f0000000780)=""/153, &(0x7f0000000880)="1fb91f93e90793fe6f0f66e7f2b952657e6f898a5574d800ba53620de97bcd08c6c8ab18b94a7018c19df1da84968e6fd074115c3a87a3055d47331fbe6f4cd60712ccfd6ab1043e86e72c8bc4b0ed13771f9ef91a4cf128f1495f71aa04c61611ac3f5eae61f01611df096476a05f7e89e54c00b3fa2c96edd61ab83370dc5eed9bff42dad9715fcb041d305ce5e0f89e8a2825d1bfb172b298692b67e99d57b90a5309fb2e9b319c4832886ba274b3", &(0x7f0000000a00)="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", 0x2, r0}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f0000000940), 0x4003) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) move_pages(r5, 0x4, &(0x7f00000005c0)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil], &(0x7f0000000600)=[0xff, 0x10000, 0x7, 0x8, 0x8], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x2) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000480)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x67) sendmmsg$inet(r2, &(0x7f0000001540), 0x0, 0x0) close(r3) 16.756045119s ago: executing program 4 (id=1127): socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xddddc000, 0x1, 0x0, 0xf8, 0x49, 0x0, 0x13, 0x7, 0xfe, 0x8, 0x9}, {0x6000, 0x8000000, 0xc, 0x0, 0x3, 0x0, 0xfd, 0x0, 0x7, 0xff, 0x1, 0x5}, {0x2000, 0x80c3000, 0xc, 0xff, 0x7, 0xcc, 0x91, 0x0, 0x8, 0x3, 0x3, 0x3}, {0x10000, 0xb000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x8, 0x8, 0x2b}, {0xeeef2000, 0x9000, 0xc, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x8}, {0xd001, 0x80a0000, 0x0, 0x78, 0x2, 0x1, 0xff, 0x80, 0x0, 0xff, 0x1}, {0x1ff8, 0xeeee0000, 0x8, 0x4, 0x67, 0x0, 0xa1, 0x6, 0xff, 0xa, 0xd}, {0x2, 0xffff1000, 0x0, 0x0, 0x40, 0x7, 0x1, 0x40, 0x26, 0x2, 0x1, 0x2}, {0x80a0000, 0x8}, {0x4}, 0xddf8fffb, 0x0, 0x0, 0x2507, 0x0, 0xb901, 0x58000, [0x80000005, 0x8, 0x2, 0x96]}) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0401, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000300), 0xffffffffffffffff, 0x141102) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0xf000}, {0x0}], 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000780)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000000), 0x1, 0x0) read$msr(r8, &(0x7f0000019b80)=""/102368, 0x18fe0) sched_setaffinity(r7, 0x47, &(0x7f0000019b40)=0x7) 15.726994567s ago: executing program 3 (id=1129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000c0e000/0x3000)=nil) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./trace\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./trace/set_event\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='!', 0x1) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00', 0x1c1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000001180)='./file0\x00', &(0x7f00000011c0), 0x80, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="030080001a00e68920ab0075705f4d643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f0000008dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000032c0)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000049c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006a80)={0x20, 0xfffffffffffffffe, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000006ac0)="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", 0x2000, &(0x7f0000008ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="b00000000000000003000000000000000300000000000000010000000000000000000000000000000900000000000000080000000180000000000000000000000300000000000000ff0f0000000000000000000000000000060000000000000004000000000000000200000006000000919b00000020000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="cc7800000500000000000000060000000000000009000000000000000200000008000000052700000000000096d8297bd5743058203d60b8307e10c120a2492523ebe1d56069b9bc9f90a031a6f5e14bc17ba5a7e8f259bc2bf18ff34833997b2f373820ca13d8e0090d08a94efe4b9a70f18427e80c12db7afe00288b95bff2f85c1f880fe28a0d9ea01cde8d467eed8b0c0e42aa246a4ba5d351f1aaca10db94b90c45006f128a252f798873572b405ea32962805a7c4bd8262ee8d84dd64eed3cb90d5c2030f0ee2bddfb"], 0x0, 0x0, 0x0}) 15.661876621s ago: executing program 4 (id=1130): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000002280)={0x7f, 0x4d, 0x2ba8, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000022c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002300)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002340)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000002380)={r3}) r4 = syz_open_dev$dri(&(0x7f00000023c0), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d900b80c0000000f23c00f21f83501000f000f23f8ba00e500000f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x6a}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f00000001c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0x80000000}, 0x19a) write(r8, &(0x7f0000000040)="240000001a005f0400f9f40700090401802000000000000000000000080002000000004541", 0x25) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000002400)={0x2, 0x4d, 0x2ba8}) syz_open_dev$dri(&(0x7f0000002480), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000024c0)={0xfffffff9, 0x4000052, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000002500)={r9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000002580)={r1}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002600)={0x1, &(0x7f0000002640)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002680)={0x1, 0x4, 0xe608}) close_range(r10, 0xffffffffffffffff, 0x0) 13.970382461s ago: executing program 5 (id=1131): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000b40)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019b40)=0x4000007) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = syz_open_dev$media(0x0, 0x103, 0x108002) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000400)={0x2}) 12.920880445s ago: executing program 5 (id=1132): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x6}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r3 = fspick(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ptype\x00') preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000540)=""/187, 0xbb}], 0x1, 0x25, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000600)={0x2, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x1}}, 0xff, 0x5}, 0x90) setsockopt$sock_int(r4, 0x1, 0x49, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x2000, 0x20) r5 = msgget$private(0x0, 0x20) msgctl$IPC_STAT(r5, 0x2, 0x0) msgsnd(r5, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) pipe2$watch_queue(&(0x7f0000000280), 0x80) open(&(0x7f0000000400)='./file0\x00', 0x108843, 0x98) lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.advise\x00') fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) 10.607131523s ago: executing program 2 (id=1133): r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff0000000904010102ff0000000705870240"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="2300020000000203"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000280)={0x40, 0x14, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000006c0), 0x0, 0x2) ioctl$int_in(r1, 0x5452, &(0x7f0000000740)=0x6) openat(r1, &(0x7f0000000780)='./file0\x00', 0x20000, 0xee7342310044a107) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:01.0/d3cold_allowed\x00', 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000640)='fd/3\x00') readv(r2, &(0x7f0000000680)=[{&(0x7f0000000c40)=""/4096, 0x1000}], 0x1) (async) syz_usb_control_io$uac3(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.620997962s ago: executing program 0 (id=1134): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="b7000000000000007b0af0ff00000000bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000550000001500020000000000bf01000000000000850000005600000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="090000000000000000000000fedbdf25020000000000000008000600fffffff704000b00"], 0x24}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x20, 0x4, 0x4, 0x0, 0x1, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r0, 0x0, 0xe, 0x0, &(0x7f0000000b00)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000200)={0xf0f000, 0x200000, @value}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001800090400000000000000000a0000ec650bddeb2e761600"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e00000038"], 0x6c}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x8, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x4e22, 0xe, 0xa}, {0xfffffffffffffffc, 0xffffffffffffffff, 0x10000000000}, {0x0, 0xfffffffffffffffd, 0xb5, 0x7fffffff}, 0x800, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in=@local, 0x4d6, 0x32}, 0xa, @in=@broadcast, 0x3505, 0x2, 0x3}}, 0xe4) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0) write(r9, &(0x7f0000000780)='1', 0x1) (async) sendmsg$nl_route(r8, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x24008010) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) (async, rerun: 32) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) (rerun: 32) syz_usb_control_io$hid(r10, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r10, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) (rerun: 64) syz_usb_control_io$hid(r10, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000b40)=ANY=[@ANYBLOB], 0x0, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000bc0)={0x20, 0x1, 0xf, "7a77845c6f9ce93f87b09641f13896"}, 0x0}) linkat(0xffffffffffffff9c, &(0x7f0000000c00)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000c40)='./file0/file2\x00', 0x1000) 7.562672851s ago: executing program 2 (id=1135): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, 0x0) syz_open_dev$ublk_bdev(0x0, 0x0, 0x2a001) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000140)={0x1, 0x34, "e3e76b9ca71d7b85729404f679e5361a893481242dadbc492deeb0906984e0a7c3b7a0ddea2eda5073604d6fe6bcf25b14d32515"}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x86, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x68026700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, r2}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x40000000, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000180)={r3, 0xffff, 0x0, 0x0, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019380)=0x7) timer_create(0x2, 0x0, &(0x7f00000193c0)) 7.498641401s ago: executing program 5 (id=1136): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x1c0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8840, 0xa2) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x10, 0x16, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1b, 0x10, &(0x7f0000000c80)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, 0x29, 0x10, &(0x7f0000000f80), &(0x7f0000000fc0), 0x8, 0x6c, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r3, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000001180)={0x10, 0x0, 0x0, 0x400000}, 0xc) ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x24, 0x1, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000001600)=[{&(0x7f0000001640)=""/247, 0xf7}], 0x1, &(0x7f0000001740)=[{&(0x7f0000001780)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x2cbfb000) 7.119406906s ago: executing program 4 (id=1137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2505000000280001800d0001007564a5a39993703a73"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (fail_nth: 9) 6.683568114s ago: executing program 4 (id=1138): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB='.\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="9cf62f8b8cb761b52ff8f3ddf76cb40895323c74975195ac767d6f5d60417dfb93186ba3d0776b7864528091b3e386ee73422fac33b69ffe1d7dbd3a22c6437c489c5adfb166a34b4efe3211be549c247cbfab7aba5bc2264ae68a01b8ed81dcab83a6aca6e1e14f66048e4ac9"], 0x20) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, &(0x7f00000001c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) setuid(0xee00) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) r3 = io_uring_setup(0x42df, &(0x7f00000002c0)={0x0, 0x3a2b, 0x2, 0x2, 0x13}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000340)=[{&(0x7f0000001e40)=""/4095, 0xfff}], 0x1) 6.678901958s ago: executing program 3 (id=1139): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffcd9) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000680)=@IORING_OP_READ_FIXED={0x4, 0x48, 0x2004, @fd_index=0x6, 0x1, 0x0, 0x0, 0x1c, 0x1, {0x1, 0x0, 0x2, '\x00', &(0x7f0000000700)={0x89e0, 0x5, 0x0, 0x0, 0x1}, 0x1}}) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000840), 0x0, 0x0) read$msr(r1, &(0x7f0000000880)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000019880)={0x0, 0x0, &(0x7f00000198c0)={&(0x7f0000019900)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xeb}]}}]}, 0x3c}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r3, 0x88, 0x23) ptrace$getregset(0x4204, r3, 0x1, &(0x7f0000000440)={&(0x7f0000000480)=""/512, 0x200}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x40}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x48005}, 0x0) 6.514376827s ago: executing program 2 (id=1140): getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0xffffffffffffffff, 0xd, &(0x7f0000000080)={0x7, 0x100000001}, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x800, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={0x2, 0x3}, &(0x7f0000000140)=0x8) r2 = accept4$alg(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000002980)=[{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000180)="f21001e7fe84a648b440bb27ad5606de7dab21474d9c3c21e74b79b93213c0354eed7dc2de58e910e7b5bd7ecc", 0x2d}, {&(0x7f00000001c0)="c1742c8f0e8e97571d9411754f80a7d6ccb76d018c2d812c20a2e82d063e23a1891bcdf98a58df8cb1b71a0b23c8064e698cdacda99780b7edd18fd9298eadfb163d0588a05597645d15e80269853dfc4ddd8b31d4a88be554c1937b025f1a67c67e24a7727aee6e7c95d5e6a380ae30cd4f976b1e6fdb48862fa5cbbe46f8bf639ea2870a2097647e1bbf35800616bd4c2dede86ffd8f3ade2c88f3a407cc8f8e29a8b7562a70aaf15a6db843c6a382405c769b26765dc50943e05d843f10681d", 0xc1}, {&(0x7f00000002c0)="34ec85acb97f6b3fe6724eea6a70d78c652ee9d4ebd7df0e5d142b9695a091366dda4e1016b0f981d7675f36f2971cddbaa95161ff39f20b0d1cba2eefaad93266ece3ad456c0d99076949258ebae7fccf6d4cc9793afd8e0c1a9d93c015802895bf07f002b1d1168d4e88e5eeb8af0eb7e5e5e332504f16304614338c655034f2d4fef0eb69f152928e1dfcf0912d0f71372c9ebe3a9dd0ccfce7fb8c1b165f4e0029bfc7ce0dc9e5267756597ba1c38d2e4bb6c0ec383b02edfcb3523e9c3f6668112389eaf10d9ca7a5a6dd45efbdde4158cde6a2abe143813adc40290f74a1aad0a5a9455be44f8060e4668b12171cecf6", 0xf3}, {&(0x7f00000003c0)="abc94978d02f9a06", 0x8}, {&(0x7f0000000400)="3709aeae93528ad2e8b2914db730a145b6feba55b255f48fcb68aa085cb715cfd3c1a8c10e85f9548dd600635a18c7d845ce87d6324731a1cfd594866b5e40caf7ab8291e778d9dcda7e2cbc0d63c8e8b8ce3aa92476a03c7060993275d7e29eb43141d14b2604fed2488fa4c1fd7eac3b07bc30bdd87f6c932d06910f00fcaaf307cd2fac09822af17b622009272f8cdbe5e5", 0x93}, {&(0x7f00000004c0)="bdd5514fde711d203c9d098f4a33cfb0ec5173d2b4b3f91da28dcf2d4a62affc140809c8017126742b1c6cbbfc6edbf75b03083c65402c0b45d7e61ffff518c41a9b49a2bce3e3ce8f1376a6b5e3cea51567807d87bacb5be41c2c9024673cc05e4469e827628a3384920a5a737345ee4f49f8a89d7e3171b86e6e8090de535f10d0caa7162fef3e3bc2dd1b7dd615e7d5fba689b4d7f54527125f0ea0d54a022a00201c652a0c116ef148efc0e244ea8af7455116f0fc0684b628bcb4c57145fc18ed439b22200098b46e6588ba15635d128a5bca090a023c1088891d19b05a83182968de3035", 0xe7}, {&(0x7f00000005c0)="fb4c1d6c2a3eb0e6ccca1f9daeecbba5fc54060622b7179ee5206b0cfa3c8d1b70892b52b242ef261f76de99581af0a9ead20885315ebc06ee0793ca3322b26294bf2ffb33c6896390efb6ba20342b10014fee4cbef128a2", 0x58}, {&(0x7f0000000640)="cb9060fe1ad5d70a68e66b56a8b945934d11f33fc73f1564f0809f71114f7c0aa3d02baae546eb57f37506a685bcbf41a2034ec0b3ddc11b5fab81f13d45abfadc1b70d8208092097bcf61fbb87670855b1fad1d7c1aab021f81f72a573683c9dee769e6d2e205b7e5302f52aa610582f03c232e5ae8265fc88d0d3303c874eb1c8afb9abbc0d66b4818fb17e5cb7f905352c2464eb328ba3a0f0af3287b346327c11fd110d2304b2c9eaaae11ef29cc3848fdd0b02783224fb45ce07fbc60508afceeb6b2507ee6", 0xc8}, {&(0x7f0000000740)="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", 0xfb}, {&(0x7f0000000840)="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", 0x1000}], 0xa, &(0x7f0000001900)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x1060, 0xc001}], 0x1, 0x44000) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000029c0)={0x2, [0x1000, 0x4]}, &(0x7f0000002a00)=0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000e, 0x4000010, r1, 0x396ba000) r3 = msgget$private(0x0, 0x100) msgrcv(r3, &(0x7f0000002a40)={0x0, ""/89}, 0x61, 0x2, 0x1000) r4 = semget$private(0x0, 0x4, 0x13) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002ac0)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000002bc0)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002c00)={0x9, 0x0, {0xffffffffffffffff}, {0x0}, 0x9, 0x1}) r7 = getegid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000002c40)={{0x2, r5, 0xee00, r6, r7, 0x44, 0x6}, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x120}) ioctl$NILFS_IOCTL_GET_CPINFO(r2, 0x80186e82, &(0x7f0000002d00)={&(0x7f0000002cc0)=[{0x3, 0x0, 0x2, 0x8, 0x4, 0x6, 0x1000000000000000, 0x1}], 0x1, 0x38, 0x1, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000002d40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000002d80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000002dc0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000002e00)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r8, 0xc02864c3, &(0x7f0000002e80)={&(0x7f0000002e40)=[r9, r10, r11], 0x8, 0x3, 0x2}) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000002ec0)=[0xb, 0x7]) r12 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002f00), 0x68c800, 0x0) ioctl$TIOCNXCL(r12, 0x540d) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r8, 0xc01864cd, &(0x7f0000002fc0)={&(0x7f0000002f40)=[r11, r11, r11, r10, r9, r10, r10], &(0x7f0000002f80)=[0x5, 0x100000001, 0xffffffff80000000], 0x7, 0x1}) ioctl$KDGETLED(r12, 0x4b31, &(0x7f0000003000)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000003040)={0x0, 0xbd78, 0x4, 0x3, 0xd}, &(0x7f00000030c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68f9, 0x40, 0x0, 0x29}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xee8c, 0x20000, 0x0, 0x141}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92cf, 0x0, 0x2, 0x235}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c4b, 0x20, 0x1, 0x120}}], 0x4, &(0x7f0000004340)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x7470d4cd26028baf, {0x6}, 0x0, 0x0, '\x00', {0x1, 0x4d1, 0x0, &(0x7f0000003340)=@buf_max_buf="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"}}, &(0x7f00000043c0)) io_uring_enter(r13, 0x1b71, 0xd6bd, 0x4, &(0x7f0000004400)={[0x9]}, 0x8) semctl$GETPID(r4, 0x4, 0xb, &(0x7f0000004440)=""/4096) 6.483258632s ago: executing program 5 (id=1141): mkdirat(0xffffffffffffff9c, 0x0, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x30000, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x29, 0x1, 0x10000000, 0x2, {0xf, 0x3}}, 0x14}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000000)=@file={0x1, './debug\x00'}, 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000400), 0x0, 0x24000010}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f0000000540)='ntfs3\x00', 0x221000d, 0x0) syz_open_dev$evdev(&(0x7f0000000580), 0x80000002, 0x88440) r2 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) socket$igmp(0x2, 0x3, 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0), 0x42, 0x0) write$dsp(r3, &(0x7f0000000700)="5cba91", 0x3) syz_open_dev$sndctrl(&(0x7f0000000740), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./debug\x00', &(0x7f0000000800)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./debug/tracing/options/context-info\x00', 0x800, 0x0) read(r4, 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000008c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000900)={0x1, 0x1, 0xffff4f11, 0xfffd, 0x6, 0x20000000000000b, 0x1, 0x200, 0x46, 0x28, 0x80000005, 0x2}) 5.637443014s ago: executing program 4 (id=1142): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x5, &(0x7f0000000580)=ANY=[], &(0x7f00000026c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) listen(0xffffffffffffffff, 0x20) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000040)={'full'}, 0xfffffdef) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40080c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x80800}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000000c0)={0x1, 0x34, "057d1f627ba13da75d804aefb142fc0b0d32c009cfb8802c0fdd43a47ed2635e12f57bb7f876a79e876c623b0803248659ac91b0"}, &(0x7f0000000140)=0x3c) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f00000027c0)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f000001b7c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f000001b800)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f000001b840), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f000001b880)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f000001b8c0)='bbr', 0x3) recvfrom$inet(r4, &(0x7f000001b900)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) msgget$private(0x0, 0x1) syz_io_uring_setup(0x34b8, 0x0, &(0x7f000001b940), &(0x7f000001b980), &(0x7f000001b9c0)) 5.378448407s ago: executing program 2 (id=1143): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c", 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xdb0, 0x8b}, 0x0) sched_setscheduler(r2, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x2400, 0x0) r4 = semget(0x0, 0x1, 0x101) semctl$GETALL(r4, 0x0, 0xd, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r6, &(0x7f0000000480)=""/102392, 0x18ff8) syz_open_procfs(r5, &(0x7f0000019480)='smaps\x00') sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x405, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x7, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1582, 0x3c5d, 0x9, 0x6, 0x1, 0xd, 0xffffffff, 0xc, 0x9}}}}]}, 0x58}}, 0x0) 5.346635834s ago: executing program 0 (id=1144): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYBLOB], 0x40}, 0x1, 0xba01, 0x0, 0x40000d4}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000000000001f2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r1], 0x48) syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x42) r2 = userfaultfd(0x80001) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x40eb, 0x0, 0x0, 0x0, &(0x7f0000000280)) socket(0x10, 0x803, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x1, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000880)=""/102400, 0x19000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000019880)={{0xfffffffb, 0x6, 0x0, 0x1, 'syz1\x00'}, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000199c0)) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000019a00)={'vxcan0\x00'}) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000019a40)={0x0, 0x0, &(0x7f0000019a80)={&(0x7f0000019ac0)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x7, 0xffffffff, 0x10000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4001}, 0x2400c800) 4.413556314s ago: executing program 2 (id=1145): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYBLOB], 0x40}, 0x1, 0xba01, 0x0, 0x40000d4}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000000000001f2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r1], 0x48) syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x42) r2 = userfaultfd(0x80001) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x40eb, 0x0, 0x0, 0x0, &(0x7f0000000280)) socket(0x10, 0x803, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x1, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000880)=""/102400, 0x19000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000019880)={{0xfffffffb, 0x6, 0x0, 0x1, 'syz1\x00'}, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000199c0)) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000019a00)={'vxcan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000019a40)={0x0, 0x0, &(0x7f0000019a80)={&(0x7f0000019ac0)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x7, 0xffffffff, 0x10000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4001}, 0x2400c800) 3.690554238s ago: executing program 5 (id=1146): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_usb_connect(0x0, 0x4c, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff0007058202ff"], 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000ac0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r6, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000580)="b9ff03316844268c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(r8, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="2000040000eddeaba429"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0e000000040000"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYRES16, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000980)={r10}, 0xc) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000140)={0x28, 0x0, r7, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000001c0)}) memfd_secret(0x80000) 3.677836408s ago: executing program 0 (id=1147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x800000000000002, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x800049, 0x0) 3.306532604s ago: executing program 0 (id=1148): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xc, 0x25) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000200)={0x3, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000015980)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000002e980)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.251072958s ago: executing program 0 (id=1149): fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write(r2, &(0x7f00000001c0)='dir ./f', 0x7) write(r2, &(0x7f0000000300)='bind', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 142.926818ms ago: executing program 5 (id=1150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x15, 0xfa00, {0x8000000010000000, &(0x7f00000002c0), 0x106, 0x4}}, 0x20) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x23, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000800001c06000000000100626f6e64000000000c0002800500110001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0xc, 0x4, &(0x7f00000008c0)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xbf}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff0000", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$inet(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="935d", 0x2}], 0x1}, 0x24004871) add_key(&(0x7f0000000a80)='dns_resolver\x00', 0x0, &(0x7f0000000ac0)="26c2", 0xfffff, 0xffffffffffffffff) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r10 = dup2(r3, r2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000b40)=@security={'security\x00', 0xe, 0x4, 0x4a8, 0xffffffff, 0x138, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, &(0x7f0000001080), {[{{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0x0, 0xffffff00, 0xff], [0xffffffff, 0xffffff00, 0xff000000, 0xff], 'veth1_to_batadv\x00', 'macsec0\x00', {}, {0xff}, 0x2, 0x3, 0x6}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0xffffffff, 0x7, 0x0, [0xfffa, 0x6, 0x8, 0x1, 0x101, 0xc, 0x6, 0x5000, 0xfff, 0x1b, 0x8000, 0x0, 0x2, 0x3, 0x3000, 0xbf5], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x7}}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x81fd, 0x1, 0x0, [0xfffa, 0x5, 0xfffa, 0x1, 0x7, 0xce, 0xaf54, 0x101, 0x0, 0x6, 0xb0, 0x7, 0x2, 0x10, 0x4, 0x2], 0xd}}, @common=@icmp6={{0x28}, {0x0, "ec5a"}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffff, 0xffffffff, 0xff000000], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'veth0_to_batadv\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x3b, 0xd, 0x5, 0x40}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x87, 0xf7, 0x5, 0xe, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @remote, [0xffffffff, 0x0, 0x0, 0xff], [0xffffffff], [0xff000000, 0xffffff00, 0xff, 0xffffffff], 0xa02, 0x400}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f00000010c0)=r9, 0x4) recvmsg(r2, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x2) 54.443275ms ago: executing program 2 (id=1151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x15, 0xfa00, {0x8000000010000000, &(0x7f00000002c0), 0x106, 0x4}}, 0x20) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x4000, 0x0) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x23, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000800001c06000000000100626f6e64000000000c0002800500110001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0xc, 0x4, &(0x7f00000008c0)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xbf}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff0000", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$inet(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="935d", 0x2}], 0x1}, 0x24004871) add_key(&(0x7f0000000a80)='dns_resolver\x00', 0x0, &(0x7f0000000ac0)="26c2", 0xfffff, 0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r9 = dup2(r2, r1) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b40)=@security={'security\x00', 0xe, 0x4, 0x4a8, 0xffffffff, 0x138, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, &(0x7f0000001080), {[{{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0x0, 0xffffff00, 0xff], [0xffffffff, 0xffffff00, 0xff000000, 0xff], 'veth1_to_batadv\x00', 'macsec0\x00', {}, {0xff}, 0x2, 0x3, 0x6}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0xffffffff, 0x7, 0x0, [0xfffa, 0x6, 0x8, 0x1, 0x101, 0xc, 0x6, 0x5000, 0xfff, 0x1b, 0x8000, 0x0, 0x2, 0x3, 0x3000, 0xbf5], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x7}}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x81fd, 0x1, 0x0, [0xfffa, 0x5, 0xfffa, 0x1, 0x7, 0xce, 0xaf54, 0x101, 0x0, 0x6, 0xb0, 0x7, 0x2, 0x10, 0x4, 0x2], 0xd}}, @common=@icmp6={{0x28}, {0x0, "ec5a"}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffff, 0xffffffff, 0xff000000], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'veth0_to_batadv\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x3b, 0xd, 0x5, 0x40}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x87, 0xf7, 0x5, 0xe, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @remote, [0xffffffff, 0x0, 0x0, 0xff], [0xffffffff], [0xff000000, 0xffffff00, 0xff, 0xffffffff], 0xa02, 0x400}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f00000010c0)=r8, 0x4) recvmsg(r1, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x2) 0s ago: executing program 3 (id=1152): mount(&(0x7f0000000180)=@filename='none\x00', 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x143102) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x1c3902, 0x0) r2 = fsopen(&(0x7f0000000580)='nfs\x00', 0x0) socket(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000980)=@arm64={0x4, 0x6, 0x8, '\x00', 0x7}) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x68, r6, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x7, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) syz_usb_connect(0x5, 0x59, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='source\x00', &(0x7f0000000840)='127.0.0.1:/export\x00', 0x0) writev(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x200000) kernel console output (not intermixed with test programs): em_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.180033][ T30] audit: type=1400 audit(1792919601.716:856): avc: denied { write } for pid=9174 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.356446][ T30] audit: type=1400 audit(1792919601.896:857): avc: denied { create } for pid=9182 comm="syz.4.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 388.390198][ T30] audit: type=1400 audit(1792919601.926:858): avc: denied { write } for pid=9182 comm="syz.4.765" path="socket:[24633]" dev="sockfs" ino=24633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 390.019145][ T9214] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 390.019145][ T9214] [ 390.078050][ T30] audit: type=1400 audit(1792919603.546:859): avc: denied { mounton } for pid=9207 comm="syz.4.769" path="/141/dev/mtdblock0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.722083][ T984] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 390.745334][ T9199] could not allocate digest TFM handle nhpoly1305-generic [ 390.875400][ T30] audit: type=1400 audit(1792919604.416:860): avc: denied { write } for pid=9185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.882755][ T984] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 390.885424][ T984] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 390.885465][ T984] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 390.886811][ T984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 390.886829][ T984] usb 3-1: Product: syz [ 390.886841][ T984] usb 3-1: Manufacturer: syz [ 390.927306][ T984] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 391.170414][ T30] audit: type=1400 audit(1792919604.706:861): avc: denied { write } for pid=9220 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.178263][ T9202] netlink: 'syz.2.761': attribute type 1 has an invalid length. [ 392.042081][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 392.181440][ T9233] netlink: 'syz.3.772': attribute type 1 has an invalid length. [ 392.191837][ T9232] 9pnet_fd: p9_fd_create_unix (9232): problem connecting socket: ./cgroup: -111 [ 392.197860][ T9202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.201840][ T9231] veth0_virt_wifi: entered promiscuous mode [ 392.246292][ T9231] bond1: (slave veth0_virt_wifi): making interface the new active one [ 392.250153][ T9231] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 392.423258][ T9237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.772'. [ 392.463657][ T9234] bond3 (unregistering): Released all slaves [ 392.666494][ T9231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.666901][ T9231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.730777][ T9246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.731051][ T9246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.964297][ T984] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 392.990082][ T984] usb 3-1: USB disconnect, device number 20 [ 393.005585][ T984] mos7840 3-1:1.0: device disconnected [ 393.266705][ T30] audit: type=1400 audit(1792919606.806:862): avc: denied { write } for pid=9236 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.522683][ T30] audit: type=1400 audit(1792919607.066:863): avc: denied { write } for pid=9266 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.490331][ T62] Bluetooth: hci1: Frame reassembly failed (-84) [ 394.502673][ T30] audit: type=1400 audit(1792919608.046:864): avc: denied { write } for pid=9279 comm="syz.3.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 394.504075][ T43] Bluetooth: hci1: Frame reassembly failed (-84) [ 394.604271][ T30] audit: type=1400 audit(1792919608.146:865): avc: denied { append } for pid=9277 comm="syz.2.781" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 394.607249][ T9284] random: crng reseeded on system resumption [ 394.778178][ T9285] block nbd0: NBD_DISCONNECT [ 395.590784][ T9296] bond0: (slave bond_slave_0): Releasing backup interface [ 395.634101][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.634968][ T9296] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.217182][ T9313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.790'. [ 396.845006][ T9313] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 396.897907][ T5643] Bluetooth: hci1: command 0x1003 tx timeout [ 396.898164][ T52] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 397.585736][ T9325] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 398.205677][ T9325] 8021q: adding VLAN 0 to HW filter on device bond3 [ 398.206043][ T9325] bridge0: port 3(bond3) entered blocking state [ 398.207659][ T9325] bridge0: port 3(bond3) entered disabled state [ 398.218508][ T9325] bond3: entered allmulticast mode [ 398.248241][ T9325] bond3: entered promiscuous mode [ 398.258051][ T9330] rxe_eth0 speed is unknown, defaulting to 1000 [ 398.330991][ T9330] xfrm0 speed is unknown, defaulting to 1000 [ 399.021098][ T9333] IPVS: lblc: TCP 172.20.20.170:20000 - no destination available [ 399.305969][ T9341] comedi: No check for data length of config insn id -3834 is implemented [ 399.305986][ T9341] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 399.305999][ T9341] comedi: Assuming n=13664 is correct [ 400.073143][ T30] audit: type=1400 audit(1792919613.606:866): avc: denied { load_policy } for pid=9347 comm="syz.2.799" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 400.120774][ T9348] SELinux: policydb string length 0 does not match expected length 8 [ 400.121429][ T9348] SELinux: failed to load policy [ 400.206498][ T30] audit: type=1400 audit(1792919613.746:867): avc: denied { mounton } for pid=9344 comm="syz.3.798" path="/175/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 400.206650][ T9350] kAFS: No cell specified [ 400.379386][ T30] audit: type=1400 audit(1792919613.916:868): avc: denied { read } for pid=9349 comm="syz.5.800" name="cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 400.409314][ T30] audit: type=1400 audit(1792919613.946:869): avc: denied { open } for pid=9349 comm="syz.5.800" path="/dev/cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 400.511406][ T30] audit: type=1400 audit(1792919614.046:870): avc: denied { map } for pid=9349 comm="syz.5.800" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 400.511542][ T30] audit: type=1400 audit(1792919614.046:871): avc: denied { execute } for pid=9349 comm="syz.5.800" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 401.622176][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 401.772080][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 401.773034][ T10] usb 6-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice= 0.40 [ 401.774445][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.774476][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.777488][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.777533][ T10] usb 6-1: Product: syz [ 401.777599][ T10] usb 6-1: Manufacturer: syz [ 401.777657][ T10] usb 6-1: SerialNumber: syz [ 402.755028][ T30] audit: type=1400 audit(1792919616.286:872): avc: denied { ioctl } for pid=9349 comm="syz.5.800" path="socket:[24424]" dev="sockfs" ino=24424 ioctlcmd=0xc0186449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 403.755323][ T9371] rxe_eth0 speed is unknown, defaulting to 1000 [ 404.434428][ T9371] xfrm0 speed is unknown, defaulting to 1000 [ 404.474530][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.805'. [ 404.665092][ T9372] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 404.799266][ T9381] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 404.880609][ T9383] netlink: 88 bytes leftover after parsing attributes in process `syz.2.807'. [ 405.426914][ T9391] 9pnet_fd: Insufficient options for proto=fd [ 406.397278][ T10] snd_usb_variax 6-1:1.0: Line 6 Variax Workbench found [ 406.397304][ T10] usb 6-1: selecting invalid altsetting 1 [ 406.397319][ T10] snd_usb_variax 6-1:1.0: set_interface failed [ 406.397568][ T10] snd_usb_variax 6-1:1.0: Line 6 Variax Workbench now disconnected [ 406.397822][ T10] snd_usb_variax 6-1:1.0: probe with driver snd_usb_variax failed with error -22 [ 406.408971][ T10] usb 6-1: USB disconnect, device number 15 [ 406.588488][ T9395] comedi: No check for data length of config insn id -3834 is implemented [ 406.588504][ T9395] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 406.588516][ T9395] comedi: Assuming n=13664 is correct [ 406.904564][ T1987] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 407.062334][ T1987] usb 3-1: Using ep0 maxpacket: 16 [ 407.063007][ T1987] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 407.064052][ T1987] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 407.064067][ T1987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.064077][ T1987] usb 3-1: config 0 has no interface number 0 [ 407.066835][ T1987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.066848][ T1987] usb 3-1: Product: syz [ 407.066857][ T1987] usb 3-1: Manufacturer: syz [ 407.066865][ T1987] usb 3-1: SerialNumber: syz [ 407.069197][ T1987] usb 3-1: config 0 descriptor?? [ 407.084868][ T1987] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 407.084893][ T1987] uvcvideo 3-1:0.105: No valid video chain found. [ 407.105228][ T30] audit: type=1400 audit(1792919620.636:873): avc: denied { map } for pid=9404 comm="syz.4.813" path="/149/dev/ram0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 408.088660][ T30] audit: type=1400 audit(1792919621.626:874): avc: denied { write } for pid=9412 comm="syz.3.804" name="target" dev="configfs" ino=3634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 408.669214][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.804'. [ 409.273195][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'. [ 409.699204][ T24] usb 3-1: USB disconnect, device number 21 [ 411.021475][ T9429] block nbd0: NBD_DISCONNECT [ 411.212243][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 411.310856][ T30] audit: type=1400 audit(1792919624.846:875): avc: denied { bind } for pid=9432 comm="syz.0.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 411.331307][ T30] audit: type=1400 audit(1792919624.856:876): avc: denied { listen } for pid=9432 comm="syz.0.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 411.363464][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 411.364010][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 411.364873][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 411.364895][ T10] usb 3-1: config 0 has no interface number 0 [ 411.399609][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.399634][ T10] usb 3-1: Product: syz [ 411.399649][ T10] usb 3-1: Manufacturer: syz [ 411.399662][ T10] usb 3-1: SerialNumber: syz [ 411.443806][ T10] usb 3-1: config 0 descriptor?? [ 412.381166][ T10] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 412.381193][ T10] usb 3-1: selecting invalid altsetting 1 [ 412.381209][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 412.390584][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 412.390810][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 412.390859][ T10] usb 3-1: media controller created [ 412.408332][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 412.588140][ T10] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 412.588182][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 412.592087][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 412.676669][ T10] usb 3-1: USB disconnect, device number 22 [ 412.772292][ T5739] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 412.922108][ T5739] usb 6-1: Using ep0 maxpacket: 32 [ 412.922781][ T5739] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 412.924325][ T5739] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 412.927151][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.927171][ T5739] usb 6-1: Product: syz [ 412.927184][ T5739] usb 6-1: Manufacturer: syz [ 412.927196][ T5739] usb 6-1: SerialNumber: syz [ 412.967891][ T5739] snd-ua101 6-1:1.1: sample format descriptor not found [ 412.967906][ T5739] snd-ua101 6-1:1.0: invalid num_altsetting [ 413.258791][ T5739] usb 6-1: USB disconnect, device number 16 [ 414.190583][ T9456] netlink: 2 bytes leftover after parsing attributes in process `syz.0.824'. [ 414.269732][ T9457] FAULT_INJECTION: forcing a failure. [ 414.269732][ T9457] name failslab, interval 1, probability 0, space 0, times 0 [ 414.269777][ T9457] CPU: 0 UID: 0 PID: 9457 Comm: syz.0.824 Not tainted syzkaller #0 PREEMPT(full) [ 414.269798][ T9457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 414.269808][ T9457] Call Trace: [ 414.269813][ T9457] [ 414.269820][ T9457] dump_stack_lvl+0x100/0x190 [ 414.269841][ T9457] should_fail_ex.cold+0x5/0xa [ 414.269857][ T9457] should_failslab+0xc2/0x120 [ 414.269872][ T9457] __kmalloc_noprof+0xfc/0x840 [ 414.269884][ T9457] ? trace_kmalloc+0xeb/0x110 [ 414.269897][ T9457] ? lsm_blob_alloc+0x68/0x90 [ 414.269912][ T9457] lsm_blob_alloc+0x68/0x90 [ 414.269924][ T9457] security_sk_alloc+0x2d/0x290 [ 414.269939][ T9457] sk_prot_alloc+0x12a/0x2a0 [ 414.269953][ T9457] sk_alloc+0x36/0xe80 [ 414.269970][ T9457] __netlink_create+0x5e/0x2c0 [ 414.269984][ T9457] ? __wake_up+0x3f/0x60 [ 414.269997][ T9457] netlink_create+0x293/0x610 [ 414.270013][ T9457] ? __pfx_genl_bind+0x10/0x10 [ 414.270024][ T9457] ? __pfx_genl_unbind+0x10/0x10 [ 414.270034][ T9457] ? __pfx_genl_release+0x10/0x10 [ 414.270048][ T9457] __sock_create+0x339/0x860 [ 414.270064][ T9457] __sys_socket+0x14d/0x260 [ 414.270077][ T9457] ? __pfx___sys_socket+0x10/0x10 [ 414.270095][ T9457] __x64_sys_socket+0x72/0xb0 [ 414.270108][ T9457] ? lockdep_hardirqs_on+0x7d/0x110 [ 414.270123][ T9457] do_syscall_64+0x123/0x790 [ 414.270139][ T9457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.270153][ T9457] RIP: 0033:0x7fabe5fa0dc7 [ 414.270163][ T9457] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.270174][ T9457] RSP: 002b:00007fabe6d91f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 414.270185][ T9457] RAX: ffffffffffffffda RBX: 00007fabe6226090 RCX: 00007fabe5fa0dc7 [ 414.270192][ T9457] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 414.270198][ T9457] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 414.270204][ T9457] R10: 0000200000000200 R11: 0000000000000286 R12: 0000000000000001 [ 414.270210][ T9457] R13: 00007fabe6226128 R14: 00007fabe6226090 R15: 00007fff208b37a8 [ 414.270224][ T9457] [ 434.522884][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.828961][ T9472] netlink: 2 bytes leftover after parsing attributes in process `syz.2.828'. [ 441.130098][ T9473] block nbd4: NBD_DISCONNECT [ 441.206583][ T9466] input: syz0 as /devices/virtual/input/input10 [ 443.282231][ T5739] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 443.433817][ T5739] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=30.00 [ 443.440800][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.440875][ T5739] usb 3-1: Product: syz [ 443.440889][ T5739] usb 3-1: Manufacturer: syz [ 443.440937][ T5739] usb 3-1: SerialNumber: syz [ 443.585684][ T5739] r8152-cfgselector 3-1: Unknown version 0x0000 [ 443.809913][ T5739] r8152-cfgselector 3-1: Unknown version 0x00f0 [ 443.984149][ T9503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.986873][ T9503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.991335][ T9503] blktrace: Concurrent blktraces are not allowed on loop4 [ 445.032055][ T984] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 445.168975][ T5739] r8153_ecm 3-1:1.0: probe with driver r8153_ecm failed with error -71 [ 445.182465][ T984] usb 4-1: Using ep0 maxpacket: 8 [ 445.182995][ T984] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 445.186939][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.186958][ T984] usb 4-1: Product: syz [ 445.186970][ T984] usb 4-1: Manufacturer: syz [ 445.186982][ T984] usb 4-1: SerialNumber: syz [ 445.194533][ T984] usb 4-1: config 0 descriptor?? [ 445.258241][ T5739] r8152-cfgselector 3-1: USB disconnect, device number 23 [ 445.306430][ T30] audit: type=1400 audit(1792919658.846:877): avc: denied { setopt } for pid=9509 comm="syz.5.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 445.825660][ T9517] FAULT_INJECTION: forcing a failure. [ 445.825660][ T9517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.825715][ T9517] CPU: 0 UID: 0 PID: 9517 Comm: syz.5.839 Not tainted syzkaller #0 PREEMPT(full) [ 445.825737][ T9517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 445.825750][ T9517] Call Trace: [ 445.825757][ T9517] [ 445.825765][ T9517] dump_stack_lvl+0x100/0x190 [ 445.825795][ T9517] should_fail_ex.cold+0x5/0xa [ 445.825822][ T9517] _copy_from_user+0x2e/0xd0 [ 445.825845][ T9517] copy_msghdr_from_user+0x9f/0x4c0 [ 445.825869][ T9517] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 445.825899][ T9517] ? lock_acquire+0x1d1/0x380 [ 445.825921][ T9517] ? get_pid_task+0x2a/0x250 [ 445.825948][ T9517] ___sys_sendmsg+0x106/0x1e0 [ 445.825973][ T9517] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.825996][ T9517] ? get_pid_task+0x106/0x250 [ 445.826032][ T9517] ? find_held_lock+0x2b/0x80 [ 445.826081][ T9517] __sys_sendmsg+0x160/0x210 [ 445.826110][ T9517] ? __pfx___sys_sendmsg+0x10/0x10 [ 445.826153][ T9517] do_syscall_64+0x123/0x790 [ 445.826182][ T9517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.826202][ T9517] RIP: 0033:0x7f32f819f559 [ 445.826217][ T9517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.826232][ T9517] RSP: 002b:00007f32f908f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.826251][ T9517] RAX: ffffffffffffffda RBX: 00007f32f8426360 RCX: 00007f32f819f559 [ 445.826264][ T9517] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000000000000003 [ 445.826275][ T9517] RBP: 00007f32f908f090 R08: 0000000000000000 R09: 0000000000000000 [ 445.826286][ T9517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.826296][ T9517] R13: 00007f32f84263f8 R14: 00007f32f8426360 R15: 00007ffe234fc528 [ 445.826322][ T9517] [ 446.844421][ T984] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 446.844671][ T984] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 448.327567][ T1987] usb 4-1: USB disconnect, device number 18 [ 448.434135][ T30] audit: type=1400 audit(1792919661.976:878): avc: denied { map } for pid=9524 comm="syz.0.840" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 448.434297][ T30] audit: type=1400 audit(1792919661.976:879): avc: denied { execute } for pid=9524 comm="syz.0.840" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 448.448468][ T9526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.448776][ T9526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.462091][ T30] audit: type=1400 audit(1792919661.996:880): avc: denied { ioctl } for pid=9524 comm="syz.0.840" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 448.502660][ T9528] Trying to write to read-only block-device nullb0 [ 449.576554][ T30] audit: type=1400 audit(1792919663.116:881): avc: denied { name_bind } for pid=9536 comm="syz.3.845" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 449.729809][ T9540] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 449.792124][ T30] audit: type=1400 audit(1792919663.286:882): avc: denied { write } for pid=9527 comm="syz.5.841" name="node" dev="configfs" ino=8605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 449.792330][ T30] audit: type=1400 audit(1792919663.286:883): avc: denied { write } for pid=9527 comm="syz.5.841" name="node" dev="configfs" ino=8605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 452.052051][ T29] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 452.202924][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 452.203414][ T29] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 452.204388][ T29] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 452.204408][ T29] usb 6-1: config 0 has no interface number 0 [ 452.206199][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.206219][ T29] usb 6-1: Product: syz [ 452.206231][ T29] usb 6-1: Manufacturer: syz [ 452.206239][ T29] usb 6-1: SerialNumber: syz [ 452.209668][ T29] usb 6-1: config 0 descriptor?? [ 452.227202][ T29] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 452.227224][ T29] usb 6-1: selecting invalid altsetting 1 [ 452.227238][ T29] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 452.251848][ T29] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 452.252178][ T29] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 452.252210][ T29] usb 6-1: media controller created [ 452.307002][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.425164][ T9565] block nbd2: NBD_DISCONNECT [ 453.007908][ T9570] rxe_eth0 speed is unknown, defaulting to 1000 [ 453.368356][ T9570] xfrm0 speed is unknown, defaulting to 1000 [ 453.492943][ T29] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 453.492973][ T29] zl10353_read_register: readreg error (reg=127, ret==-110) [ 454.591841][ T9576] XFS (nullb0): Invalid superblock magic number [ 454.721092][ T29] usb 6-1: USB disconnect, device number 17 [ 454.901445][ T9587] comedi: No check for data length of config insn id -3834 is implemented [ 454.901465][ T9587] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 454.901477][ T9587] comedi: Assuming n=13664 is correct [ 455.628746][ T9595] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 455.629762][ T9584] can: request_module (can-proto-0) failed. [ 457.370297][ T30] audit: type=1400 audit(1792919670.906:884): avc: denied { read } for pid=9590 comm="syz.0.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 457.424905][ T9592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.856'. [ 457.542287][ T5802] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 458.322017][ T5802] usb 6-1: Using ep0 maxpacket: 16 [ 458.322505][ T5802] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 458.323624][ T5802] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 458.323637][ T5802] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.323647][ T5802] usb 6-1: config 0 has no interface number 0 [ 458.325225][ T5802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.325238][ T5802] usb 6-1: Product: syz [ 458.325246][ T5802] usb 6-1: Manufacturer: syz [ 458.325253][ T5802] usb 6-1: SerialNumber: syz [ 458.327257][ T5802] usb 6-1: config 0 descriptor?? [ 458.401927][ T5802] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 458.409717][ T5802] uvcvideo 6-1:0.105: No valid video chain found. [ 459.890954][ T5802] usb 6-1: USB disconnect, device number 18 [ 461.326162][ T9630] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 461.345411][ T30] audit: type=1400 audit(1792919674.876:885): avc: denied { write } for pid=9623 comm="syz.5.869" name="node" dev="configfs" ino=8605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 461.345504][ T30] audit: type=1400 audit(1792919674.886:886): avc: denied { write } for pid=9623 comm="syz.5.869" name="node" dev="configfs" ino=8605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 462.422705][ T30] audit: type=1400 audit(1792919675.966:887): avc: denied { setopt } for pid=9640 comm="syz.3.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 463.279987][ T9646] ip_tables: iptables: counters copy to user failed while replacing table [ 463.310299][ T1987] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 463.472196][ T1987] usb 5-1: device descriptor read/64, error -71 [ 463.742168][ T1987] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 463.892107][ T1987] usb 5-1: device descriptor read/64, error -71 [ 464.004725][ T1987] usb usb5-port1: attempt power cycle [ 464.266757][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.864'. [ 464.352309][ T1987] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 464.376589][ T1987] usb 5-1: device descriptor read/8, error -71 [ 464.622856][ T1987] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 464.648788][ T1987] usb 5-1: device descriptor read/8, error -71 [ 464.752413][ T1987] usb usb5-port1: unable to enumerate USB device [ 465.147709][ T9653] rxe_eth0 speed is unknown, defaulting to 1000 [ 465.570630][ T9653] xfrm0 speed is unknown, defaulting to 1000 [ 466.739547][ T9659] XFS (nullb0): Invalid superblock magic number [ 466.811096][ T30] audit: type=1400 audit(1792919680.346:888): avc: denied { append } for pid=9658 comm="syz.4.876" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 467.306081][ T30] audit: type=1400 audit(1792919680.846:889): avc: denied { wake_alarm } for pid=9658 comm="syz.4.876" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 468.333412][ T9678] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 470.295836][ T9692] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 470.360194][ T30] audit: type=1400 audit(1792919684.896:890): avc: denied { ioctl } for pid=9695 comm="syz.3.884" path="socket:[27774]" dev="sockfs" ino=27774 ioctlcmd=0x4020940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 470.524084][ T30] audit: type=1400 audit(1792919685.046:891): avc: denied { read } for pid=9699 comm="syz.5.886" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 470.575794][ T9700] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 470.575997][ T9700] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 470.576177][ T9700] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 470.576344][ T9700] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 470.576508][ T9700] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 470.576585][ T9700] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 470.640079][ T9707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.640455][ T9707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.842962][ T5725] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 471.912063][ T29] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 472.032606][ T5725] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 472.033799][ T5725] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 472.033840][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.034870][ T5725] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 472.034889][ T5725] usb 5-1: Manufacturer: syz [ 472.037573][ T5725] usb 5-1: config 0 descriptor?? [ 472.153658][ T5725] rc_core: IR keymap rc-hauppauge not found [ 472.153676][ T5725] Registered IR keymap rc-empty [ 472.173017][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 472.173133][ T5725] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 472.173535][ T29] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 472.198468][ T29] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 472.198493][ T29] usb 3-1: config 0 has no interface number 0 [ 472.218503][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.218537][ T29] usb 3-1: Product: syz [ 472.218551][ T29] usb 3-1: Manufacturer: syz [ 472.218564][ T29] usb 3-1: SerialNumber: syz [ 472.219788][ T5725] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 472.244894][ T29] usb 3-1: config 0 descriptor?? [ 472.274848][ T29] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 472.274875][ T29] usb 3-1: selecting invalid altsetting 1 [ 472.274910][ T29] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 472.306487][ T29] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 472.306736][ T29] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 472.306779][ T29] usb 3-1: media controller created [ 472.345357][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 472.366219][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 472.378930][ T10] usb 5-1: USB disconnect, device number 26 [ 472.612285][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 472.612318][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 472.612338][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 472.612359][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 472.612380][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 472.658044][ T29] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 472.658088][ T29] zl10353_read_register: readreg error (reg=127, ret==-71) [ 472.659662][ T29] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 472.692615][ T30] audit: type=1400 audit(1792919687.236:892): avc: denied { write } for pid=9749 comm="syz.4.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 472.744844][ T30] audit: type=1400 audit(1792919687.286:893): avc: denied { write } for pid=9749 comm="syz.4.898" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 472.749289][ T30] audit: type=1400 audit(1792919687.286:894): avc: denied { ioctl } for pid=9749 comm="syz.4.898" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0xc02064b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 472.756256][ T30] audit: type=1400 audit(1792919687.296:895): avc: denied { map } for pid=9749 comm="syz.4.898" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 472.814236][ T29] usb 3-1: USB disconnect, device number 24 [ 472.843450][ T5643] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 472.910207][ T30] audit: type=1400 audit(1792919687.446:896): avc: denied { write } for pid=9754 comm="syz.0.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 472.933455][ T30] audit: type=1400 audit(1792919687.476:897): avc: denied { shutdown } for pid=9754 comm="syz.0.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 472.965969][ T30] audit: type=1400 audit(1792919687.506:898): avc: denied { ioctl } for pid=9754 comm="syz.0.900" path="socket:[28022]" dev="sockfs" ino=28022 ioctlcmd=0xd000941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 473.093168][ T5725] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 473.139002][ T9763] rxe_eth0 speed is unknown, defaulting to 1000 [ 473.252634][ T5725] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 473.255357][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.255377][ T5725] usb 4-1: Product: syz [ 473.255391][ T5725] usb 4-1: Manufacturer: syz [ 473.255405][ T5725] usb 4-1: SerialNumber: syz [ 473.337651][ T9770] comedi: No check for data length of config insn id -3834 is implemented [ 473.337669][ T9770] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 473.337681][ T9770] comedi: Assuming n=14681 is correct [ 473.902439][ T5725] usb 4-1: config 0 descriptor?? [ 473.982381][ T30] audit: type=1400 audit(1792919688.516:899): avc: denied { read write } for pid=9772 comm="syz.2.903" name="md0" dev="tmpfs" ino=1126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 474.129429][ T9773] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 474.129570][ T9773] block device autoloading is deprecated and will be removed. [ 474.314838][ T9763] xfrm0 speed is unknown, defaulting to 1000 [ 474.321313][ T9753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.338106][ T9753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.352979][ T9781] netlink: 'syz.5.906': attribute type 2 has an invalid length. [ 474.370902][ T9753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.371312][ T9753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.381228][ T9753] qnx6: unable to read the first superblock [ 474.381423][ T9753] qnx6: unable to read the first superblock [ 474.381430][ T9753] qnx6: unable to read the first superblock [ 474.424556][ T5725] usb 4-1: Firmware version (0.0) predates our first public release. [ 474.424587][ T5725] usb 4-1: Please update to version 0.2 or newer [ 474.608785][ T5725] usb 4-1: USB disconnect, device number 19 [ 474.682330][ T5643] Bluetooth: hci5: command 0x0406 tx timeout [ 474.708342][ T9791] block nbd5: NBD_DISCONNECT [ 476.790071][ T9798] netlink: 36 bytes leftover after parsing attributes in process `syz.4.911'. [ 476.790146][ T9798] netlink: 3 bytes leftover after parsing attributes in process `syz.4.911'. [ 479.612030][ T9830] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 479.890987][ T9836] comedi: No check for data length of config insn id -3834 is implemented [ 479.891036][ T9836] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 479.891064][ T9836] comedi: Assuming n=13664 is correct [ 481.545205][ T9854] FAULT_INJECTION: forcing a failure. [ 481.545205][ T9854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.545250][ T9854] CPU: 1 UID: 0 PID: 9854 Comm: syz.3.927 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.545276][ T9854] Tainted: [L]=SOFTLOCKUP [ 481.545282][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 481.545292][ T9854] Call Trace: [ 481.545297][ T9854] [ 481.545303][ T9854] dump_stack_lvl+0x100/0x190 [ 481.545330][ T9854] should_fail_ex.cold+0x5/0xa [ 481.545355][ T9854] copy_folio_from_iter_atomic+0x5c8/0x2000 [ 481.545382][ T9854] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 481.545398][ T9854] ? shmem_write_begin+0x1ba/0x420 [ 481.545420][ T9854] ? __pfx_shmem_write_begin+0x10/0x10 [ 481.545442][ T9854] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 481.545468][ T9854] generic_perform_write+0x4cb/0xa40 [ 481.545494][ T9854] ? __pfx_generic_perform_write+0x10/0x10 [ 481.545513][ T9854] ? mnt_put_write_access_file+0x4e/0x100 [ 481.545535][ T9854] ? file_update_time_flags+0x38c/0x520 [ 481.545554][ T9854] shmem_file_write_iter+0x10e/0x140 [ 481.545578][ T9854] do_iter_readv_writev+0x6f7/0x930 [ 481.545597][ T9854] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 481.545613][ T9854] ? lock_acquire+0x1d1/0x380 [ 481.545642][ T9854] vfs_iter_write+0x1e2/0x990 [ 481.545662][ T9854] backing_file_write_iter+0x6b2/0x890 [ 481.545685][ T9854] ? __pfx_ovl_file_end_write+0x10/0x10 [ 481.545706][ T9854] ? lockdep_hardirqs_on+0x7d/0x110 [ 481.545729][ T9854] ovl_write_iter+0x34e/0x420 [ 481.545752][ T9854] ? __pfx_ovl_write_iter+0x10/0x10 [ 481.545774][ T9854] ? ksys_write+0x12a/0x250 [ 481.545790][ T9854] ? __pfx_ovl_file_end_write+0x10/0x10 [ 481.545817][ T9854] vfs_write+0x6af/0x1050 [ 481.545835][ T9854] ? __pfx_ovl_write_iter+0x10/0x10 [ 481.545857][ T9854] ? __pfx_vfs_write+0x10/0x10 [ 481.545872][ T9854] ? find_held_lock+0x2b/0x80 [ 481.545912][ T9854] ksys_write+0x12a/0x250 [ 481.545929][ T9854] ? __pfx_ksys_write+0x10/0x10 [ 481.545950][ T9854] ? trace_hardirqs_off+0x70/0x170 [ 481.545969][ T9854] do_syscall_64+0x123/0x790 [ 481.545992][ T9854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.546007][ T9854] RIP: 0033:0x7fe01479f559 [ 481.546019][ T9854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.546035][ T9854] RSP: 002b:00007fe015629028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 481.546051][ T9854] RAX: ffffffffffffffda RBX: 00007fe014a26180 RCX: 00007fe01479f559 [ 481.546060][ T9854] RDX: 00000000000000a0 RSI: 0000200000001100 RDI: 0000000000000006 [ 481.546068][ T9854] RBP: 00007fe015629090 R08: 0000000000000000 R09: 0000000000000000 [ 481.546077][ T9854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.546085][ T9854] R13: 00007fe014a26218 R14: 00007fe014a26180 R15: 00007ffc75a752c8 [ 481.546106][ T9854] [ 482.963732][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.936'. [ 482.964193][ T9872] openvswitch: netlink: Message has 24 unknown bytes. [ 484.427977][ T9883] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.955850][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 486.042175][ T5739] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 488.965105][ T9921] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 489.102673][ T5739] usb 5-1: device descriptor read/64, error -71 [ 489.342108][ T5739] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 489.475006][ T5739] usb 5-1: device descriptor read/64, error -71 [ 489.583432][ T5739] usb usb5-port1: attempt power cycle [ 489.922542][ T5739] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 489.943670][ T5739] usb 5-1: device descriptor read/8, error -71 [ 490.192134][ T5739] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 490.214214][ T5739] usb 5-1: device descriptor read/8, error -71 [ 490.341810][ T5739] usb usb5-port1: unable to enumerate USB device [ 491.183524][ T5739] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 491.352698][ T5739] usb 3-1: Using ep0 maxpacket: 32 [ 491.354313][ T5739] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 491.359680][ T5739] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 491.359709][ T5739] usb 3-1: config 0 has no interface number 0 [ 491.420647][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.420698][ T5739] usb 3-1: Product: syz [ 491.420761][ T5739] usb 3-1: Manufacturer: syz [ 491.420819][ T5739] usb 3-1: SerialNumber: syz [ 491.487289][ T5739] usb 3-1: config 0 descriptor?? [ 491.500051][ T5739] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 491.500072][ T5739] usb 3-1: selecting invalid altsetting 1 [ 491.500085][ T5739] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 491.534673][ T5739] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 491.534907][ T5739] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 491.534946][ T5739] usb 3-1: media controller created [ 491.589569][ T5739] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 491.853253][ T5739] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 491.853298][ T5739] zl10353_read_register: readreg error (reg=127, ret==-71) [ 491.853634][ T5739] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 491.963059][ T5739] usb 3-1: USB disconnect, device number 25 [ 492.240580][ T9940] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 492.696222][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 492.696235][ T30] audit: type=1400 audit(1792919706.796:902): avc: denied { write } for pid=9931 comm="syz.3.948" name="node" dev="configfs" ino=8605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 492.696264][ T30] audit: type=1400 audit(1792919706.796:903): avc: denied { write } for pid=9931 comm="syz.3.948" name="node" dev="configfs" ino=8605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 494.482223][ T9958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.482624][ T9958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.503133][ T9975] block nbd2: NBD_DISCONNECT [ 495.785007][ T29] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 495.803199][ T9981] bond4 (unregistering): Released all slaves [ 495.852465][ T9986] netlink: 28 bytes leftover after parsing attributes in process `syz.5.962'. [ 496.012932][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.014847][ T29] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 496.015688][ T29] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.015725][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 496.015745][ T29] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 496.015764][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 496.015791][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.225907][ T30] audit: type=1400 audit(1792919710.756:904): avc: denied { write } for pid=9984 comm="syz.2.965" name="node" dev="configfs" ino=8605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 496.226109][ T30] audit: type=1400 audit(1792919710.766:905): avc: denied { write } for pid=9984 comm="syz.2.965" name="node" dev="configfs" ino=8605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 496.869115][ T9989] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 497.053131][ T29] gud 4-1:1.0: No supported pixel formats found [ 497.053160][ T29] gud 4-1:1.0: probe with driver gud failed with error -22 [ 497.900366][ T9997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.900556][ T9997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.942181][ T29] usb 4-1: USB disconnect, device number 20 [ 498.992464][T10003] netlink: 12 bytes leftover after parsing attributes in process `syz.5.970'. [ 499.008800][T10003] ip_tables: iptables: counters copy to user failed while replacing table [ 499.086935][ T30] audit: type=1400 audit(1792919713.626:906): avc: denied { bind } for pid=10004 comm="syz.4.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 499.116171][T10005] tipc: Failed to remove unknown binding: 66,0,0/33554436:1213767377/1213767379 [ 499.116198][T10005] tipc: Failed to remove unknown binding: 66,0,0/33554436:1213767377/1213767378 [ 499.117015][T10005] tipc: Failed to remove unknown binding: 66,0,0/33554436:1213767377/1213767379 [ 499.117037][T10005] tipc: Failed to remove unknown binding: 66,0,0/33554436:1213767377/1213767378 [ 499.159125][ T56] Bluetooth: hci1: Frame reassembly failed (-84) [ 499.259512][T10009] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 499.274829][T10009] bond5 (unregistering): Released all slaves [ 499.445974][T10019] block nbd3: NBD_DISCONNECT [ 499.620150][T10030] FAULT_INJECTION: forcing a failure. [ 499.620150][T10030] name failslab, interval 1, probability 0, space 0, times 0 [ 499.620174][T10030] CPU: 0 UID: 0 PID: 10030 Comm: syz.2.968 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.620191][T10030] Tainted: [L]=SOFTLOCKUP [ 499.620197][T10030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 499.620208][T10030] Call Trace: [ 499.620214][T10030] [ 499.620221][T10030] dump_stack_lvl+0x100/0x190 [ 499.620247][T10030] should_fail_ex.cold+0x5/0xa [ 499.620265][T10030] should_failslab+0xc2/0x120 [ 499.620280][T10030] kmem_cache_alloc_noprof+0x92/0x6a0 [ 499.620293][T10030] ? d_instantiate+0x8a/0xb0 [ 499.620305][T10030] ? alloc_empty_file+0x5b/0x1c0 [ 499.620324][T10030] alloc_empty_file+0x5b/0x1c0 [ 499.620341][T10030] alloc_file_pseudo+0x17e/0x290 [ 499.620359][T10030] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 499.620376][T10030] ? alloc_fd+0x471/0x7a0 [ 499.620393][T10030] sock_alloc_file+0x50/0x210 [ 499.620406][T10030] __sys_socket+0x1c0/0x260 [ 499.620419][T10030] ? __pfx___sys_socket+0x10/0x10 [ 499.620436][T10030] __x64_sys_socket+0x72/0xb0 [ 499.620449][T10030] ? lockdep_hardirqs_on+0x7d/0x110 [ 499.620465][T10030] do_syscall_64+0x123/0x790 [ 499.620481][T10030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.620493][T10030] RIP: 0033:0x7f0587ba0dc7 [ 499.620503][T10030] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.620513][T10030] RSP: 002b:00007f05889aaf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 499.620527][T10030] RAX: ffffffffffffffda RBX: 00007f0587e25fa0 RCX: 00007f0587ba0dc7 [ 499.620534][T10030] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 499.620540][T10030] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 499.620546][T10030] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000000 [ 499.620552][T10030] R13: 00007f0587e26038 R14: 00007f0587e25fa0 R15: 00007ffe01289f98 [ 499.620569][T10030] [ 499.959109][ T30] audit: type=1400 audit(1792919714.496:907): avc: denied { write } for pid=10025 comm="syz.2.968" name="functions" dev="configfs" ino=9926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 500.536974][T10035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.537390][T10035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.811117][T10040] FAULT_INJECTION: forcing a failure. [ 500.811117][T10040] name failslab, interval 1, probability 0, space 0, times 0 [ 500.812429][T10040] CPU: 0 UID: 0 PID: 10040 Comm: syz.2.982 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.812455][T10040] Tainted: [L]=SOFTLOCKUP [ 500.812461][T10040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 500.812471][T10040] Call Trace: [ 500.812477][T10040] [ 500.812484][T10040] dump_stack_lvl+0x100/0x190 [ 500.812515][T10040] should_fail_ex.cold+0x5/0xa [ 500.812543][T10040] should_failslab+0xc2/0x120 [ 500.812569][T10040] __kmalloc_cache_noprof+0x91/0x6d0 [ 500.812599][T10040] ? vhost_worker_create+0xf4/0x300 [ 500.812636][T10040] vhost_worker_create+0xf4/0x300 [ 500.812660][T10040] ? __pfx_vhost_worker_create+0x10/0x10 [ 500.812692][T10040] vhost_dev_set_owner+0x719/0xa30 [ 500.812727][T10040] vhost_net_ioctl+0xfa8/0x1910 [ 500.812751][T10040] ? do_vfs_ioctl+0x226/0x13e0 [ 500.812774][T10040] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 500.812794][T10040] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 500.812824][T10040] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 500.812849][T10040] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 500.812881][T10040] ? __fget_files+0x34/0x3d0 [ 500.812920][T10040] ? selinux_file_ioctl+0x1e7/0x290 [ 500.812948][T10040] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 500.812975][T10040] __x64_sys_ioctl+0x18e/0x210 [ 500.812999][T10040] do_syscall_64+0x123/0x790 [ 500.813028][T10040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.813047][T10040] RIP: 0033:0x7f0587b9f559 [ 500.813062][T10040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.813079][T10040] RSP: 002b:00007f058898b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 500.813097][T10040] RAX: ffffffffffffffda RBX: 00007f0587e26090 RCX: 00007f0587b9f559 [ 500.813109][T10040] RDX: 0000000000000000 RSI: 000040000000af01 RDI: 0000000000000005 [ 500.813119][T10040] RBP: 00007f058898b090 R08: 0000000000000000 R09: 0000000000000000 [ 500.813128][T10040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.813136][T10040] R13: 00007f0587e26128 R14: 00007f0587e26090 R15: 00007ffe01289f98 [ 500.813161][T10040] [ 501.456352][ T52] Bluetooth: hci1: command 0xfc11 tx timeout [ 501.456426][ T5643] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 501.871775][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.984'. [ 501.884411][T10046] ip_tables: iptables: counters copy to user failed while replacing table [ 502.372334][ T29] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 503.533673][ T29] usb 6-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 503.547589][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 503.547620][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 503.580118][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 503.580143][ T29] usb 6-1: Product: syz [ 503.580155][ T29] usb 6-1: Manufacturer: syz [ 503.594525][T10056] workqueue: name exceeds WQ_NAME_LEN. Truncating to: (h\E3~‘§˜Àϱøoˆõ£R!Fo¹?£¥Ð< [ 503.628460][ T29] mos7840 6-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 503.657257][ T30] audit: type=1400 audit(1792919718.196:908): avc: denied { setattr } for pid=10055 comm="syz.2.983" name="NETLINK" dev="sockfs" ino=29977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 504.302300][T10048] netlink: 'syz.5.985': attribute type 1 has an invalid length. [ 504.696782][T10048] 8021q: adding VLAN 0 to HW filter on device bond4 [ 504.707210][T10065] veth0_virt_wifi: entered promiscuous mode [ 504.714464][T10062] block nbd4: NBD_DISCONNECT [ 504.729122][T10065] bond4: (slave veth0_virt_wifi): making interface the new active one [ 504.730393][T10065] bond4: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 504.788725][T10068] netlink: 28 bytes leftover after parsing attributes in process `syz.2.989'. [ 504.816187][T10048] 9pnet_fd: p9_fd_create_unix (10048): problem connecting socket: ./cgroup: -111 [ 504.938205][T10073] netlink: 100 bytes leftover after parsing attributes in process `syz.4.991'. [ 505.022466][ T5643] Bluetooth: hci3: unexpected event for opcode 0x28b3 [ 505.331203][ T5643] Bluetooth: hci3: ACL packet for unknown connection handle 2491 [ 505.387565][T10048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.387915][T10048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.567595][ T29] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 505.601234][ T29] usb 6-1: USB disconnect, device number 19 [ 505.616348][ T29] mos7840 6-1:1.0: device disconnected [ 505.757113][ T30] audit: type=1800 audit(1792919720.296:909): pid=10087 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.993" name="/" dev="fuse" ino=1 res=0 errno=-5 [ 505.903004][ T30] audit: type=1400 audit(1792919720.446:910): avc: denied { write } for pid=10079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.244868][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.996'. [ 506.306195][ T30] audit: type=1400 audit(1792919720.846:911): avc: denied { listen } for pid=10098 comm="syz.4.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 506.648536][ T30] audit: type=1400 audit(1792919721.186:912): avc: denied { write } for pid=10102 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.888691][T10099] netlink: 'syz.2.995': attribute type 1 has an invalid length. [ 507.109893][T10099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.995'. [ 509.825313][T10115] 8021q: adding VLAN 0 to HW filter on device bond3 [ 509.856569][T10115] bond2: (slave bond3): making interface the new active one [ 509.884808][T10115] bond2: (slave bond3): Enslaving as an active interface with an up link [ 510.632476][T10147] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 511.112261][ T30] audit: type=1400 audit(1792919725.566:913): avc: denied { write } for pid=10114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.408947][T10157] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1005'. [ 512.409547][T10157] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1005'. [ 513.543203][ T30] audit: type=1400 audit(1792919728.086:914): avc: denied { write } for pid=10156 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 513.632407][ T5739] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 514.298689][ T30] audit: type=1400 audit(1792919728.796:915): avc: denied { write } for pid=10164 comm="syz.3.1008" name="mcfilter" dev="proc" ino=4026533364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 514.372184][ T5739] usb 3-1: Using ep0 maxpacket: 8 [ 514.379471][ T5739] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.40 [ 514.380479][ T5739] usb 3-1: config 1 interface 0 has no altsetting 0 [ 514.391335][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.391356][ T5739] usb 3-1: Product: syz [ 514.391368][ T5739] usb 3-1: Manufacturer: syz [ 514.391380][ T5739] usb 3-1: SerialNumber: syz [ 514.842261][ T30] audit: type=1400 audit(1792919729.376:916): avc: denied { getopt } for pid=10173 comm="syz.0.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 514.847216][T10174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.847554][T10174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.881890][ T30] audit: type=1400 audit(1792919729.416:917): avc: denied { getopt } for pid=10173 comm="syz.0.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 514.888436][ T5739] usbhid 3-1:1.0: can't add hid device: -71 [ 514.888516][ T5739] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 514.913143][ T5739] usb 3-1: USB disconnect, device number 26 [ 515.824192][T10181] FAULT_INJECTION: forcing a failure. [ 515.824192][T10181] name failslab, interval 1, probability 0, space 0, times 0 [ 515.824214][T10181] CPU: 0 UID: 0 PID: 10181 Comm: syz.5.1007 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.824230][T10181] Tainted: [L]=SOFTLOCKUP [ 515.824234][T10181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 515.824240][T10181] Call Trace: [ 515.824244][T10181] [ 515.824248][T10181] dump_stack_lvl+0x100/0x190 [ 515.824268][T10181] should_fail_ex.cold+0x5/0xa [ 515.824284][T10181] should_failslab+0xc2/0x120 [ 515.824299][T10181] __kmalloc_noprof+0xfc/0x840 [ 515.824311][T10181] ? constrain_params_by_rules+0x175/0xd20 [ 515.824326][T10181] constrain_params_by_rules+0x175/0xd20 [ 515.824336][T10181] ? kfree+0x22b/0x6d0 [ 515.824354][T10181] ? constrain_params_by_rules+0xa88/0xd20 [ 515.824367][T10181] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 515.824385][T10181] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 515.824404][T10181] snd_pcm_hw_refine+0x82a/0xb40 [ 515.824417][T10181] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 515.824427][T10181] ? snd_pcm_hw_refine+0x35c/0xb40 [ 515.824440][T10181] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 515.824456][T10181] snd_pcm_hw_param_first+0x2b0/0x680 [ 515.824472][T10181] snd_pcm_hw_params+0x45c/0x1cd0 [ 515.824487][T10181] ? find_held_lock+0x2b/0x80 [ 515.824503][T10181] ? __might_fault+0xc5/0x140 [ 515.824519][T10181] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 515.824536][T10181] ? _copy_from_user+0x59/0xd0 [ 515.824549][T10181] snd_pcm_common_ioctl+0x13a3/0x3490 [ 515.824565][T10181] ? do_vfs_ioctl+0x226/0x13e0 [ 515.824578][T10181] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 515.824599][T10181] ? __pfx_snd_pcm_common_ioctl+0x10/0x10 [ 515.824625][T10181] ? __fget_files+0x34/0x3d0 [ 515.824653][T10181] snd_pcm_ioctl+0x84/0xc0 [ 515.824667][T10181] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 515.824681][T10181] __x64_sys_ioctl+0x18e/0x210 [ 515.824695][T10181] do_syscall_64+0x123/0x790 [ 515.824712][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.824724][T10181] RIP: 0033:0x7f32f819f559 [ 515.824733][T10181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.824744][T10181] RSP: 002b:00007f32f90f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 515.824755][T10181] RAX: ffffffffffffffda RBX: 00007f32f8426090 RCX: 00007f32f819f559 [ 515.824762][T10181] RDX: 0000200000019640 RSI: 00000000c2604111 RDI: 0000000000000006 [ 515.824769][T10181] RBP: 00007f32f90f2090 R08: 0000000000000000 R09: 0000000000000000 [ 515.824775][T10181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.824781][T10181] R13: 00007f32f8426128 R14: 00007f32f8426090 R15: 00007ffe234fc528 [ 515.824796][T10181] [ 515.960023][T10180] FAULT_INJECTION: forcing a failure. [ 515.960023][T10180] name failslab, interval 1, probability 0, space 0, times 0 [ 515.960053][T10180] CPU: 0 UID: 0 PID: 10180 Comm: syz.3.1009 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.960077][T10180] Tainted: [L]=SOFTLOCKUP [ 515.960083][T10180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 515.960094][T10180] Call Trace: [ 515.960100][T10180] [ 515.960106][T10180] dump_stack_lvl+0x100/0x190 [ 515.960136][T10180] should_fail_ex.cold+0x5/0xa [ 515.960159][T10180] should_failslab+0xc2/0x120 [ 515.960182][T10180] __kmalloc_noprof+0xfc/0x840 [ 515.960203][T10180] ? hash_ipportip4_add+0x2109/0x2880 [ 515.960233][T10180] hash_ipportip4_add+0x2109/0x2880 [ 515.960270][T10180] ? __pfx_hash_ipportip4_add+0x10/0x10 [ 515.960294][T10180] ? rcu_is_watching+0x13/0xc0 [ 515.960318][T10180] ? trace_contention_end+0x126/0x160 [ 515.960343][T10180] hash_ipportip4_uadt+0x924/0xe80 [ 515.960368][T10180] ? __pfx_hash_ipportip4_add+0x10/0x10 [ 515.960400][T10180] ? __pfx_hash_ipportip4_uadt+0x10/0x10 [ 515.960424][T10180] ? lock_acquire+0x1d1/0x380 [ 515.960453][T10180] call_ad.isra.0+0x171/0x950 [ 515.960478][T10180] ? __pfx_hash_ipportip4_resize+0x10/0x10 [ 515.960505][T10180] ? __pfx_call_ad.isra.0+0x10/0x10 [ 515.960528][T10180] ? __pfx___nla_validate_parse+0x10/0x10 [ 515.960556][T10180] ? __nla_parse+0x40/0x60 [ 515.960574][T10180] ip_set_ad.isra.0+0x3f1/0x8b0 [ 515.960595][T10180] ? __pfx_ip_set_ad.isra.0+0x10/0x10 [ 515.960610][T10180] ? trace_contention_end+0x126/0x160 [ 515.960649][T10180] ? find_held_lock+0x2b/0x80 [ 515.960680][T10180] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 515.960709][T10180] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 515.960732][T10180] ? __lock_acquire+0x5c0/0x1f40 [ 515.960771][T10180] ? avc_has_perm_noaudit+0x145/0x470 [ 515.960796][T10180] netlink_rcv_skb+0x159/0x420 [ 515.960813][T10180] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 515.960836][T10180] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 515.960863][T10180] ? ns_capable+0xcd/0xf0 [ 515.960881][T10180] nfnetlink_rcv+0x1b3/0x440 [ 515.960902][T10180] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 515.960922][T10180] ? netlink_deliver_tap+0x1ae/0xb50 [ 515.960951][T10180] netlink_unicast+0x668/0x950 [ 515.960971][T10180] ? __pfx_netlink_unicast+0x10/0x10 [ 515.960994][T10180] netlink_sendmsg+0x9ac/0x10c0 [ 515.961013][T10180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.961035][T10180] ? selinux_socket_sendmsg+0x198/0x2f0 [ 515.961059][T10180] ? ____sys_sendmsg+0xa99/0xc30 [ 515.961077][T10180] ____sys_sendmsg+0xa99/0xc30 [ 515.961095][T10180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.961113][T10180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 515.961143][T10180] ___sys_sendmsg+0x190/0x1e0 [ 515.961164][T10180] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.961184][T10180] ? futex_wait+0x11e/0x370 [ 515.961212][T10180] ? find_held_lock+0x2b/0x80 [ 515.961250][T10180] __sys_sendmsg+0x160/0x210 [ 515.961275][T10180] ? __pfx___sys_sendmsg+0x10/0x10 [ 515.961312][T10180] do_syscall_64+0x123/0x790 [ 515.961337][T10180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.961353][T10180] RIP: 0033:0x7fe01479f559 [ 515.961368][T10180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.961387][T10180] RSP: 002b:00007fe01564a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.961405][T10180] RAX: ffffffffffffffda RBX: 00007fe014a26090 RCX: 00007fe01479f559 [ 515.961415][T10180] RDX: 0000000020004000 RSI: 0000200000000640 RDI: 0000000000000006 [ 515.961425][T10180] RBP: 00007fe014836b20 R08: 0000000000000000 R09: 0000000000000000 [ 515.961435][T10180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.961446][T10180] R13: 00007fe014a26128 R14: 00007fe014a26090 R15: 00007ffc75a752c8 [ 515.961470][T10180] [ 518.419800][T10193] block nbd3: NBD_DISCONNECT [ 519.542449][T10202] loop5: detected capacity change from 0 to 7 [ 519.585466][T10202] Dev loop5: unable to read RDB block 7 [ 519.585504][T10202] loop5: unable to read partition table [ 519.585667][T10202] loop5: partition table beyond EOD, truncated [ 519.585683][T10202] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 520.282598][ T30] audit: type=1400 audit(1792919734.826:918): avc: denied { ioctl } for pid=10211 comm="syz.0.1020" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x8008b70d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 523.405499][ T30] audit: type=1400 audit(1792919737.946:919): avc: denied { read } for pid=6992 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 523.431443][ T30] audit: type=1400 audit(1792919737.966:920): avc: denied { open } for pid=6992 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 523.457805][ T30] audit: type=1400 audit(1792919737.996:921): avc: denied { ioctl } for pid=6992 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 523.527502][T10236] block device autoloading is deprecated and will be removed. [ 523.638636][ T30] audit: type=1400 audit(1792919738.176:922): avc: denied { create } for pid=10244 comm="syz.5.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 523.642825][T10246] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.5.1026:10246 [ 523.652036][ T30] audit: type=1400 audit(1792919738.186:923): avc: denied { ioctl } for pid=10244 comm="syz.5.1026" path="socket:[30528]" dev="sockfs" ino=30528 ioctlcmd=0x400461f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 523.787779][T10249] block nbd3: NBD_DISCONNECT [ 524.189027][T10254] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1028'. [ 524.190745][T10254] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1028'. [ 525.073495][T10261] comedi: No check for data length of config insn id -3834 is implemented [ 525.073544][T10261] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 525.073572][T10261] comedi: Assuming n=14681 is correct [ 526.493210][T10269] rxe_eth0 speed is unknown, defaulting to 1000 [ 526.558147][T10269] xfrm0 speed is unknown, defaulting to 1000 [ 528.071198][ T30] audit: type=1400 audit(1792919742.606:924): avc: denied { write } for pid=10242 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.192610][ T1987] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 528.327011][ T30] audit: type=1400 audit(1792919742.866:925): avc: denied { write } for pid=10277 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.373031][ T1987] usb 4-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 528.373923][ T1987] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 528.373946][ T1987] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 528.373963][ T1987] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 528.373991][ T1987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.377388][T10274] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 528.770964][ T30] audit: type=1400 audit(1792919743.306:926): avc: denied { create } for pid=10279 comm="syz.0.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 528.883080][ T5643] Bluetooth: hci1: Reading Intel version command failed (-71) [ 528.905150][ T30] audit: type=1400 audit(1792919743.406:927): avc: denied { search } for pid=10265 comm="syz.3.1032" name="/" dev="configfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 528.905301][ T30] audit: type=1400 audit(1792919743.406:928): avc: denied { search } for pid=10265 comm="syz.3.1032" name="usb_gadget" dev="configfs" ino=3820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 528.905413][ T30] audit: type=1400 audit(1792919743.406:929): avc: denied { search } for pid=10265 comm="syz.3.1032" name="g1" dev="configfs" ino=9925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 528.905524][ T30] audit: type=1400 audit(1792919743.406:930): avc: denied { search } for pid=10265 comm="syz.3.1032" name="functions" dev="configfs" ino=9926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 530.219530][ T1987] usb 4-1: USB disconnect, device number 21 [ 530.910498][T10305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.913360][T10305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.728421][ T30] audit: type=1400 audit(1792919746.266:931): avc: denied { write } for pid=10281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.859279][T10319] block nbd5: NBD_DISCONNECT [ 531.878784][ T30] audit: type=1400 audit(1792919746.416:932): avc: denied { write } for pid=10322 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.972216][ T29] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 532.142866][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 532.149231][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 532.149396][ T29] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 532.172211][ T29] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 532.172244][ T29] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 532.172269][ T29] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 532.172342][ T29] usb 3-1: config 128 has no interface number 0 [ 532.172431][ T29] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 532.172464][ T29] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 532.172518][ T29] usb 3-1: config 128 interface 127 has no altsetting 0 [ 532.290750][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.290809][ T29] usb 3-1: Product: syz [ 532.290850][ T29] usb 3-1: Manufacturer: syz [ 532.290902][ T29] usb 3-1: SerialNumber: syz [ 533.357686][ T30] audit: type=1400 audit(1792919747.896:933): avc: denied { read write } for pid=10327 comm="syz.0.1042" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 533.361296][ T30] audit: type=1400 audit(1792919747.896:934): avc: denied { open } for pid=10327 comm="syz.0.1042" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 533.489165][ T30] audit: type=1400 audit(1792919748.026:935): avc: denied { ioctl } for pid=10327 comm="syz.0.1042" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0x4028af11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 534.169012][ T30] audit: type=1400 audit(1792919748.706:936): avc: denied { write } for pid=10328 comm="syz.5.1043" name="functions" dev="configfs" ino=9926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 534.171406][ T30] audit: type=1400 audit(1792919748.706:937): avc: denied { add_name } for pid=10328 comm="syz.5.1043" name="uac2.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 534.171446][ T30] audit: type=1400 audit(1792919748.706:938): avc: denied { read } for pid=10328 comm="syz.5.1043" name="UDC" dev="configfs" ino=29399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 534.661611][ T29] usb 3-1: USB disconnect, device number 27 [ 534.703596][T10227] udevd[10227]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 535.892146][ T29] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 536.062008][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 536.062579][ T29] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 536.063443][ T29] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 536.063464][ T29] usb 3-1: config 0 has no interface number 0 [ 536.063497][ T29] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.063532][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.065676][ T29] usb 3-1: config 0 descriptor?? [ 536.169485][T10348] cgroup: release_agent respecified [ 536.182411][T10348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.183517][T10348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.186559][ T30] audit: type=1400 audit(1792919750.726:939): avc: denied { read append } for pid=10347 comm="syz.0.1048" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 536.187092][ T30] audit: type=1400 audit(1792919750.726:940): avc: denied { ioctl open } for pid=10347 comm="syz.0.1048" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 536.505202][ T29] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input2 [ 536.752003][ T984] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 536.759295][T10363] block nbd4: NBD_DISCONNECT [ 536.902653][ T984] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 536.905066][ T984] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 536.905091][ T984] usb 6-1: config 0 has no interface number 0 [ 536.905131][ T984] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 536.905176][ T984] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 536.908206][ T984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.908227][ T984] usb 6-1: Product: syz [ 536.908236][ T984] usb 6-1: Manufacturer: syz [ 536.908244][ T984] usb 6-1: SerialNumber: syz [ 536.910878][ T984] usb 6-1: config 0 descriptor?? [ 536.923605][T10353] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 536.939369][ T1987] usb 3-1: USB disconnect, device number 28 [ 537.003180][ T984] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 537.009994][ T984] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 537.808619][ T1987] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 537.966054][ T1987] usb 4-1: Using ep0 maxpacket: 32 [ 537.971462][ T1987] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 537.976165][ T1987] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 537.976185][ T1987] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.976200][ T1987] usb 4-1: config 0 has no interface number 0 [ 537.976249][ T1987] usb 4-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 537.978092][ T1987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.978110][ T1987] usb 4-1: Product: syz [ 537.978122][ T1987] usb 4-1: Manufacturer: syz [ 537.978135][ T1987] usb 4-1: SerialNumber: syz [ 537.980045][ T1987] usb 4-1: config 0 descriptor?? [ 537.981728][ T1987] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 537.981844][ T1987] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 538.630279][T10380] blktrace: Concurrent blktraces are not allowed on loop4 [ 539.049452][ T30] audit: type=1400 audit(1792919753.586:941): avc: denied { read write } for pid=10352 comm="syz.5.1050" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 539.049490][ T30] audit: type=1400 audit(1792919753.586:942): avc: denied { open } for pid=10352 comm="syz.5.1050" path="/147/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 539.116173][ T30] audit: type=1400 audit(1792919753.656:943): avc: denied { ioctl } for pid=10352 comm="syz.5.1050" path="/147/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0xc0104d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 539.471845][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1060'. [ 539.677854][T10398] rxe_eth0 speed is unknown, defaulting to 1000 [ 539.944471][T10398] xfrm0 speed is unknown, defaulting to 1000 [ 540.966769][ T1987] usb 4-1: USB disconnect, device number 22 [ 542.107852][T10410] FAULT_INJECTION: forcing a failure. [ 542.107852][T10410] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 542.109196][T10410] CPU: 0 UID: 0 PID: 10410 Comm: syz.3.1065 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.109224][T10410] Tainted: [L]=SOFTLOCKUP [ 542.109230][T10410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 542.109240][T10410] Call Trace: [ 542.109246][T10410] [ 542.109253][T10410] dump_stack_lvl+0x100/0x190 [ 542.109284][T10410] should_fail_ex.cold+0x5/0xa [ 542.109308][T10410] ? prepare_alloc_pages+0x16d/0x5b0 [ 542.109334][T10410] should_fail_alloc_page+0xeb/0x140 [ 542.109360][T10410] prepare_alloc_pages+0x1f0/0x5b0 [ 542.109387][T10410] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 542.109410][T10410] ? trace_sched_exit_tp+0x120/0x160 [ 542.109437][T10410] ? __schedule+0x1270/0x6990 [ 542.109469][T10410] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 542.109493][T10410] ? __pfx___schedule+0x10/0x10 [ 542.109521][T10410] ? irqentry_exit+0x202/0xab0 [ 542.109546][T10410] ? lockdep_hardirqs_on+0x7d/0x110 [ 542.109583][T10410] ? alloc_pages_mpol+0xcd/0x560 [ 542.109612][T10410] alloc_pages_mpol+0x201/0x560 [ 542.109639][T10410] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 542.109663][T10410] ? __rcu_read_unlock+0x26a/0x5a0 [ 542.109685][T10410] ? rcu_is_watching+0x13/0xc0 [ 542.109719][T10410] folio_alloc_noprof+0x22/0x250 [ 542.109747][T10410] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 542.109780][T10410] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 542.109816][T10410] __filemap_get_folio_mpol+0x64e/0x1230 [ 542.109847][T10410] ioctx_alloc+0x7e1/0x21a0 [ 542.109880][T10410] ? __pfx_ioctx_alloc+0x10/0x10 [ 542.109907][T10410] __x64_sys_io_setup+0xc9/0x220 [ 542.109929][T10410] do_syscall_64+0x123/0x790 [ 542.109962][T10410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.109981][T10410] RIP: 0033:0x7fe01479f559 [ 542.109997][T10410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.110014][T10410] RSP: 002b:00007fe01564a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 542.110033][T10410] RAX: ffffffffffffffda RBX: 00007fe014a26090 RCX: 00007fe01479f559 [ 542.110045][T10410] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000006573 [ 542.110056][T10410] RBP: 00007fe01564a090 R08: 0000000000000000 R09: 0000000000000000 [ 542.110067][T10410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 542.110078][T10410] R13: 00007fe014a26128 R14: 00007fe014a26090 R15: 00007ffc75a752c8 [ 542.110102][T10410] [ 543.062123][ T5725] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 543.256372][ T5725] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 543.332209][ T5725] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 543.332265][ T5725] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 543.482122][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 543.482176][ T5725] usb 5-1: Product: syz [ 543.482190][ T5725] usb 5-1: Manufacturer: syz [ 544.319658][ T5609] usb 6-1: USB disconnect, device number 20 [ 544.518730][T10413] netlink: 'syz.4.1064': attribute type 1 has an invalid length. [ 544.693929][ T5725] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 544.883439][T10426] 9pnet_fd: p9_fd_create_unix (10426): problem connecting socket: ./cgroup: -111 [ 544.948574][ T5609] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 545.035524][ T5609] cyberjack 6-1:0.69: device disconnected [ 545.516596][T10413] 8021q: adding VLAN 0 to HW filter on device bond5 [ 545.547176][T10424] veth0_virt_wifi: entered promiscuous mode [ 545.773975][T10424] bond5: (slave veth0_virt_wifi): making interface the new active one [ 545.849570][T10424] bond5: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 546.026810][ T5725] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 546.032912][ T5725] usb 5-1: USB disconnect, device number 31 [ 546.060603][ T5725] mos7840 5-1:1.0: device disconnected [ 546.198499][T10431] FAULT_INJECTION: forcing a failure. [ 546.198499][T10431] name failslab, interval 1, probability 0, space 0, times 0 [ 546.198533][T10431] CPU: 0 UID: 0 PID: 10431 Comm: syz.5.1070 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.198561][T10431] Tainted: [L]=SOFTLOCKUP [ 546.198568][T10431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 546.198586][T10431] Call Trace: [ 546.198594][T10431] [ 546.198601][T10431] dump_stack_lvl+0x100/0x190 [ 546.198632][T10431] should_fail_ex.cold+0x5/0xa [ 546.198660][T10431] should_failslab+0xc2/0x120 [ 546.198688][T10431] kmem_cache_alloc_noprof+0x92/0x6a0 [ 546.198710][T10431] ? do_getname+0x35/0x390 [ 546.198734][T10431] do_getname+0x35/0x390 [ 546.198755][T10431] do_sys_openat2+0xc3/0x1d0 [ 546.198785][T10431] ? __pfx_do_sys_openat2+0x10/0x10 [ 546.198810][T10431] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 546.198842][T10431] __x64_sys_openat+0x12d/0x210 [ 546.198879][T10431] ? __pfx___x64_sys_openat+0x10/0x10 [ 546.198919][T10431] do_syscall_64+0x123/0x790 [ 546.198949][T10431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.198969][T10431] RIP: 0033:0x7f32f815fd8e [ 546.198985][T10431] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 546.199006][T10431] RSP: 002b:00007f32f9112b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 546.199025][T10431] RAX: ffffffffffffffda RBX: 00007f32f91136c0 RCX: 00007f32f815fd8e [ 546.199038][T10431] RDX: 0000000000141102 RSI: 00007f32f9112c00 RDI: ffffffffffffff9c [ 546.199050][T10431] RBP: 00007f32f9112c00 R08: 0000000000000000 R09: 0000000000000000 [ 546.199062][T10431] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 546.199073][T10431] R13: 00007f32f8426038 R14: 00007f32f8425fa0 R15: 00007ffe234fc528 [ 546.199099][T10431] [ 546.272045][ T5643] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 546.694149][ T1987] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 547.090190][ T1987] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 547.129846][ T1987] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 547.129878][ T1987] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 547.246695][ T1987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 547.246723][ T1987] usb 4-1: Product: syz [ 547.246737][ T1987] usb 4-1: Manufacturer: syz [ 548.020885][ T1987] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 548.864820][T10440] netlink: 'syz.3.1072': attribute type 1 has an invalid length. [ 549.057084][T10440] 8021q: adding VLAN 0 to HW filter on device bond3 [ 549.079383][T10462] veth0_virt_wifi: entered promiscuous mode [ 549.110987][T10462] bond3: (slave veth0_virt_wifi): making interface the new active one [ 549.122598][T10462] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 549.145167][ T1987] mos7840 4-1:1.0: probe with driver mos7840 failed with error -71 [ 549.153949][ T1987] usb 4-1: USB disconnect, device number 23 [ 550.852398][ T5609] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 551.002303][ T5609] usb 5-1: Using ep0 maxpacket: 32 [ 551.057502][ T5609] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 551.076547][ T5609] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 551.076571][ T5609] usb 5-1: config 0 has no interface number 0 [ 551.106125][ T5609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.106141][ T5609] usb 5-1: Product: syz [ 551.106149][ T5609] usb 5-1: Manufacturer: syz [ 551.106158][ T5609] usb 5-1: SerialNumber: syz [ 551.108726][ T5609] usb 5-1: config 0 descriptor?? [ 551.131163][ T5609] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 551.131179][ T5609] usb 5-1: selecting invalid altsetting 1 [ 551.131188][ T5609] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 551.174725][ T5609] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 551.174964][ T5609] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 551.175002][ T5609] usb 5-1: media controller created [ 551.210934][ T5609] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 551.318140][T10488] comedi: No check for data length of config insn id -3834 is implemented [ 551.318159][T10488] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 551.318171][T10488] comedi: Assuming n=13664 is correct [ 552.902800][ T5609] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 552.904708][ T5609] zl10353_read_register: readreg error (reg=127, ret==-110) [ 554.177742][ T5609] usb 5-1: USB disconnect, device number 32 [ 554.227672][T10508] netlink: 'syz.0.1088': attribute type 1 has an invalid length. [ 554.433999][T10515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1088'. [ 554.437621][T10511] 8021q: adding VLAN 0 to HW filter on device bond5 [ 554.466782][T10511] bond4: (slave bond5): making interface the new active one [ 554.467036][T10511] bond4: (slave bond5): Enslaving as an active interface with an up link [ 554.541033][T10517] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 554.559872][ T30] audit: type=1400 audit(1792919769.096:944): avc: denied { execute } for pid=10516 comm="syz.5.1094" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 555.096099][ T30] audit: type=1400 audit(1792919769.636:945): avc: denied { ioctl } for pid=10521 comm="syz.0.1096" path="/dev/sg0" dev="devtmpfs" ino=851 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 556.702051][ T5725] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 556.863680][ T5725] usb 3-1: Using ep0 maxpacket: 32 [ 556.868887][ T5725] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 556.880156][ T5725] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 556.880178][ T5725] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.880194][ T5725] usb 3-1: config 0 has no interface number 0 [ 556.880228][ T5725] usb 3-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 556.889667][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.889690][ T5725] usb 3-1: Product: syz [ 556.889704][ T5725] usb 3-1: Manufacturer: syz [ 556.889717][ T5725] usb 3-1: SerialNumber: syz [ 556.906302][ T5725] usb 3-1: config 0 descriptor?? [ 556.916549][ T5725] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 556.916710][ T5725] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 557.167875][T10547] blktrace: Concurrent blktraces are not allowed on loop4 [ 557.402986][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.580400][T10550] ip_tables: iptables: counters copy to user failed while replacing table [ 557.631142][T10550] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1101'. [ 557.660928][T10550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.661138][T10550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.015412][ T984] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 558.215074][ T984] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 558.217516][ T984] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 558.217543][ T984] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 558.242361][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 558.242382][ T984] usb 5-1: Product: syz [ 558.242395][ T984] usb 5-1: Manufacturer: syz [ 558.275503][ T984] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 558.736220][T10554] netlink: 'syz.4.1102': attribute type 1 has an invalid length. [ 559.081334][T10565] 9pnet_fd: p9_fd_create_unix (10565): problem connecting socket: ./cgroup: -111 [ 559.402051][T10554] 8021q: adding VLAN 0 to HW filter on device bond6 [ 559.481678][T10564] bond5: (slave veth0_virt_wifi): Releasing active interface [ 559.544197][T10564] bond6: (slave veth0_virt_wifi): making interface the new active one [ 559.549029][ T5802] usb 3-1: USB disconnect, device number 29 [ 559.571336][T10564] bond6: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 560.997222][T10581] comedi: No check for data length of config insn id -3834 is implemented [ 560.997307][T10581] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 560.997335][T10581] comedi: Assuming n=13664 is correct [ 561.845371][ T984] mos7840 5-1:1.0: probe with driver mos7840 failed with error -71 [ 561.890151][ T984] usb 5-1: USB disconnect, device number 33 [ 563.846097][ T30] audit: type=1400 audit(1792919778.386:946): avc: denied { mount } for pid=10616 comm="syz.4.1116" name="/" dev="autofs" ino=32180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 564.024276][ T30] audit: type=1400 audit(1792919778.556:947): avc: denied { write } for pid=10589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.510836][ T30] audit: type=1400 audit(1792919779.046:948): avc: denied { write } for pid=10625 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.963244][T10628] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1110'. [ 565.426855][T10645] XFS (nullb0): Invalid superblock magic number [ 566.007739][T10659] FAULT_INJECTION: forcing a failure. [ 566.007739][T10659] name failslab, interval 1, probability 0, space 0, times 0 [ 566.007785][T10659] CPU: 0 UID: 0 PID: 10659 Comm: syz.2.1120 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.007810][T10659] Tainted: [L]=SOFTLOCKUP [ 566.007817][T10659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 566.007826][T10659] Call Trace: [ 566.007832][T10659] [ 566.007838][T10659] dump_stack_lvl+0x100/0x190 [ 566.007866][T10659] should_fail_ex.cold+0x5/0xa [ 566.007892][T10659] should_failslab+0xc2/0x120 [ 566.007915][T10659] kmem_cache_alloc_noprof+0x92/0x6a0 [ 566.007935][T10659] ? security_file_alloc+0x34/0x2c0 [ 566.007956][T10659] security_file_alloc+0x34/0x2c0 [ 566.007974][T10659] init_file+0x95/0x480 [ 566.007991][T10659] alloc_empty_file+0x79/0x1c0 [ 566.008008][T10659] alloc_file_pseudo+0x17e/0x290 [ 566.008026][T10659] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 566.008047][T10659] __anon_inode_getfile+0xe8/0x280 [ 566.008063][T10659] bpf_link_prime+0x200/0x4c0 [ 566.008084][T10659] bpf_xdp_link_attach+0x27a/0x8f0 [ 566.008096][T10659] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 566.008107][T10659] ? find_held_lock+0x2b/0x80 [ 566.008124][T10659] ? __fget_files+0x215/0x3d0 [ 566.008146][T10659] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 566.008165][T10659] __sys_bpf+0x3c31/0x4b60 [ 566.008182][T10659] ? __pfx___sys_bpf+0x10/0x10 [ 566.008196][T10659] ? find_held_lock+0x2b/0x80 [ 566.008211][T10659] ? get_pid_task+0xfc/0x250 [ 566.008226][T10659] ? get_pid_task+0xfc/0x250 [ 566.008245][T10659] ? find_held_lock+0x2b/0x80 [ 566.008264][T10659] ? rcu_read_lock_any_held+0x6a/0x90 [ 566.008275][T10659] ? find_held_lock+0x2b/0x80 [ 566.008291][T10659] ? ksys_write+0x190/0x250 [ 566.008302][T10659] ? ksys_write+0x190/0x250 [ 566.008314][T10659] ? lock_acquire+0x1d1/0x380 [ 566.008337][T10659] ? fput+0x7c/0x100 [ 566.008352][T10659] ? ksys_write+0x1ac/0x250 [ 566.008366][T10659] ? __x64_sys_bpf+0xce/0x140 [ 566.008379][T10659] __x64_sys_bpf+0xce/0x140 [ 566.008394][T10659] ? do_syscall_64+0xae/0x790 [ 566.008410][T10659] do_syscall_64+0x123/0x790 [ 566.008426][T10659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.008438][T10659] RIP: 0033:0x7f0587b9f559 [ 566.008448][T10659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.008458][T10659] RSP: 002b:00007f058898b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 566.008469][T10659] RAX: ffffffffffffffda RBX: 00007f0587e26090 RCX: 00007f0587b9f559 [ 566.008476][T10659] RDX: 0000000000000010 RSI: 0000200000019a80 RDI: 000000000000001c [ 566.008482][T10659] RBP: 00007f058898b090 R08: 0000000000000000 R09: 0000000000000000 [ 566.008489][T10659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.008495][T10659] R13: 00007f0587e26128 R14: 00007f0587e26090 R15: 00007ffe01289f98 [ 566.008510][T10659] [ 567.297695][T10669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.297898][T10669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.432527][T10668] FAULT_INJECTION: forcing a failure. [ 567.432527][T10668] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 567.432550][T10668] CPU: 0 UID: 0 PID: 10668 Comm: syz.4.1123 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.432565][T10668] Tainted: [L]=SOFTLOCKUP [ 567.432569][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 567.432577][T10668] Call Trace: [ 567.432581][T10668] [ 567.432586][T10668] dump_stack_lvl+0x100/0x190 [ 567.432605][T10668] should_fail_ex.cold+0x5/0xa [ 567.432620][T10668] ? prepare_alloc_pages+0x16d/0x5b0 [ 567.432636][T10668] should_fail_alloc_page+0xeb/0x140 [ 567.432652][T10668] prepare_alloc_pages+0x1f0/0x5b0 [ 567.432668][T10668] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 567.432681][T10668] ? __pfx_get_page_from_freelist+0x10/0x10 [ 567.432693][T10668] ? rcu_is_watching+0x13/0xc0 [ 567.432710][T10668] ? trace_mm_page_alloc+0x164/0x1c0 [ 567.432724][T10668] ? __alloc_frozen_pages_noprof+0x33e/0x3190 [ 567.432738][T10668] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 567.432749][T10668] ? lock_acquire+0x1d1/0x380 [ 567.432761][T10668] ? is_bpf_text_address+0x25/0x1a0 [ 567.432773][T10668] ? find_held_lock+0x2b/0x80 [ 567.432789][T10668] ? is_bpf_text_address+0x8a/0x1a0 [ 567.432799][T10668] ? is_bpf_text_address+0x8a/0x1a0 [ 567.432810][T10668] ? bpf_ksym_find+0x128/0x1c0 [ 567.432823][T10668] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 567.432835][T10668] ? kernel_text_address+0x8d/0x100 [ 567.432848][T10668] ? arch_stack_walk+0xa6/0xf0 [ 567.432869][T10668] alloc_pages_bulk_noprof+0x624/0x14a0 [ 567.432880][T10668] ? is_bpf_text_address+0x25/0x1a0 [ 567.432894][T10668] ? policy_nodemask+0xed/0x4f0 [ 567.432911][T10668] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 567.432923][T10668] ? path_openat+0x1547/0x23f0 [ 567.432944][T10668] __kasan_populate_vmalloc+0xf0/0x210 [ 567.432960][T10668] alloc_vmap_area+0x963/0x2bc0 [ 567.432978][T10668] ? kasan_save_track+0x14/0x30 [ 567.432990][T10668] ? __kasan_kmalloc+0xaa/0xb0 [ 567.433002][T10668] ? __pfx_alloc_vmap_area+0x10/0x10 [ 567.433015][T10668] ? __lock_acquire+0x5c0/0x1f40 [ 567.433027][T10668] ? __get_vm_area_node+0x124/0x350 [ 567.433042][T10668] __get_vm_area_node+0x1ed/0x350 [ 567.433059][T10668] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 567.433079][T10668] ? n_tty_open+0x1a/0x170 [ 567.433089][T10668] ? look_up_lock_class+0x55/0x120 [ 567.433106][T10668] ? lock_acquire+0x1d1/0x380 [ 567.433121][T10668] ? n_tty_open+0x1a/0x170 [ 567.433134][T10668] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 567.433151][T10668] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 567.433164][T10668] ? n_tty_open+0x1a/0x170 [ 567.433174][T10668] __vmalloc_node_noprof+0xad/0xf0 [ 567.433188][T10668] ? n_tty_open+0x1a/0x170 [ 567.433198][T10668] ? __pfx_n_tty_open+0x10/0x10 [ 567.433209][T10668] n_tty_open+0x1a/0x170 [ 567.433219][T10668] tty_ldisc_open+0xa2/0x120 [ 567.433232][T10668] tty_ldisc_setup+0x40/0xf0 [ 567.433246][T10668] tty_init_dev.part.0+0x1b5/0x470 [ 567.433264][T10668] tty_open+0x99d/0xee0 [ 567.433282][T10668] ? __pfx_tty_open+0x10/0x10 [ 567.433296][T10668] ? chrdev_open+0x10b/0x6a0 [ 567.433311][T10668] ? chrdev_open+0x10b/0x6a0 [ 567.433327][T10668] ? __pfx_tty_open+0x10/0x10 [ 567.433343][T10668] chrdev_open+0x234/0x6a0 [ 567.433358][T10668] ? __pfx_chrdev_open+0x10/0x10 [ 567.433373][T10668] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 567.433389][T10668] do_dentry_open+0x674/0x1470 [ 567.433402][T10668] ? __pfx_chrdev_open+0x10/0x10 [ 567.433419][T10668] vfs_open_consume+0xcc/0x460 [ 567.433441][T10668] path_openat+0x1547/0x23f0 [ 567.433459][T10668] ? __pfx_path_openat+0x10/0x10 [ 567.433478][T10668] do_file_open+0x20e/0x430 [ 567.433495][T10668] ? __pfx_do_file_open+0x10/0x10 [ 567.433520][T10668] ? _raw_spin_unlock+0x28/0x50 [ 567.433533][T10668] ? alloc_fd+0x471/0x7a0 [ 567.433552][T10668] do_sys_openat2+0x163/0x1d0 [ 567.433569][T10668] ? __pfx_do_sys_openat2+0x10/0x10 [ 567.433588][T10668] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 567.433604][T10668] ? __fget_files+0x21f/0x3d0 [ 567.433621][T10668] __x64_sys_openat+0x12d/0x210 [ 567.433638][T10668] ? __pfx___x64_sys_openat+0x10/0x10 [ 567.433654][T10668] ? ksys_write+0x1ac/0x250 [ 567.433671][T10668] do_syscall_64+0x123/0x790 [ 567.433687][T10668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.433699][T10668] RIP: 0033:0x7f3d9499f559 [ 567.433708][T10668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.433719][T10668] RSP: 002b:00007f3d92bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 567.433730][T10668] RAX: ffffffffffffffda RBX: 00007f3d94c25fa0 RCX: 00007f3d9499f559 [ 567.433737][T10668] RDX: 0000000000002982 RSI: 0000200000019900 RDI: ffffffffffffff9c [ 567.433743][T10668] RBP: 00007f3d92bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 567.433750][T10668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 567.433756][T10668] R13: 00007f3d94c26038 R14: 00007f3d94c25fa0 R15: 00007ffdaca95958 [ 567.433770][T10668] [ 567.433799][T10668] syz.4.1123: vmalloc error: size 9112, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 567.433850][T10668] CPU: 0 UID: 0 PID: 10668 Comm: syz.4.1123 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.433864][T10668] Tainted: [L]=SOFTLOCKUP [ 567.433868][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 567.433873][T10668] Call Trace: [ 567.433877][T10668] [ 567.433881][T10668] dump_stack_lvl+0x100/0x190 [ 567.433897][T10668] warn_alloc.cold+0x9e/0xb2 [ 567.433909][T10668] ? __pfx_warn_alloc+0x10/0x10 [ 567.433919][T10668] ? lockdep_hardirqs_on+0x7d/0x110 [ 567.433935][T10668] ? __get_vm_area_node+0x2f0/0x350 [ 567.433952][T10668] ? __get_vm_area_node+0x22b/0x350 [ 567.433969][T10668] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 567.433984][T10668] ? look_up_lock_class+0x55/0x120 [ 567.434000][T10668] ? lock_acquire+0x1d1/0x380 [ 567.434014][T10668] ? n_tty_open+0x1a/0x170 [ 567.434027][T10668] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 567.434045][T10668] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 567.434058][T10668] ? n_tty_open+0x1a/0x170 [ 567.434067][T10668] __vmalloc_node_noprof+0xad/0xf0 [ 567.434086][T10668] ? n_tty_open+0x1a/0x170 [ 567.434096][T10668] ? __pfx_n_tty_open+0x10/0x10 [ 567.434106][T10668] n_tty_open+0x1a/0x170 [ 567.434116][T10668] tty_ldisc_open+0xa2/0x120 [ 567.434130][T10668] tty_ldisc_setup+0x40/0xf0 [ 567.434144][T10668] tty_init_dev.part.0+0x1b5/0x470 [ 567.434162][T10668] tty_open+0x99d/0xee0 [ 567.434180][T10668] ? __pfx_tty_open+0x10/0x10 [ 567.434195][T10668] ? chrdev_open+0x10b/0x6a0 [ 567.434209][T10668] ? chrdev_open+0x10b/0x6a0 [ 567.434226][T10668] ? __pfx_tty_open+0x10/0x10 [ 567.434241][T10668] chrdev_open+0x234/0x6a0 [ 567.434256][T10668] ? __pfx_chrdev_open+0x10/0x10 [ 567.434272][T10668] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 567.434287][T10668] do_dentry_open+0x674/0x1470 [ 567.434300][T10668] ? __pfx_chrdev_open+0x10/0x10 [ 567.434317][T10668] vfs_open_consume+0xcc/0x460 [ 567.434335][T10668] path_openat+0x1547/0x23f0 [ 567.434353][T10668] ? __pfx_path_openat+0x10/0x10 [ 567.434372][T10668] do_file_open+0x20e/0x430 [ 567.434389][T10668] ? __pfx_do_file_open+0x10/0x10 [ 567.434414][T10668] ? _raw_spin_unlock+0x28/0x50 [ 567.434426][T10668] ? alloc_fd+0x471/0x7a0 [ 567.434445][T10668] do_sys_openat2+0x163/0x1d0 [ 567.434462][T10668] ? __pfx_do_sys_openat2+0x10/0x10 [ 567.434479][T10668] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 567.434495][T10668] ? __fget_files+0x21f/0x3d0 [ 567.434512][T10668] __x64_sys_openat+0x12d/0x210 [ 567.434529][T10668] ? __pfx___x64_sys_openat+0x10/0x10 [ 567.434545][T10668] ? ksys_write+0x1ac/0x250 [ 567.434562][T10668] do_syscall_64+0x123/0x790 [ 567.434581][T10668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.434592][T10668] RIP: 0033:0x7f3d9499f559 [ 567.434600][T10668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.434610][T10668] RSP: 002b:00007f3d92bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 567.434619][T10668] RAX: ffffffffffffffda RBX: 00007f3d94c25fa0 RCX: 00007f3d9499f559 [ 567.434626][T10668] RDX: 0000000000002982 RSI: 0000200000019900 RDI: ffffffffffffff9c [ 567.434632][T10668] RBP: 00007f3d92bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 567.434638][T10668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 567.434644][T10668] R13: 00007f3d94c26038 R14: 00007f3d94c25fa0 R15: 00007ffdaca95958 [ 567.434658][T10668] [ 567.434662][T10668] Mem-Info: [ 567.434666][T10668] active_anon:82499 inactive_anon:1 isolated_anon:0 [ 567.434666][T10668] active_file:16 inactive_file:69091 isolated_file:0 [ 567.434666][T10668] unevictable:0 dirty:662 writeback:0 [ 567.434666][T10668] slab_reclaimable:13434 slab_unreclaimable:106437 [ 567.434666][T10668] mapped:41450 shmem:74610 pagetables:1574 [ 567.434666][T10668] sec_pagetables:0 bounce:0 [ 567.434666][T10668] kernel_misc_reclaimable:0 [ 567.434666][T10668] free:1154267 free_pcp:35770 free_cma:0 [ 567.434692][T10668] Node 0 active_anon:329996kB inactive_anon:4kB active_file:64kB inactive_file:276164kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165800kB dirty:2648kB writeback:0kB shmem:298440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13580kB pagetables:5768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 567.434718][T10668] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:528kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 567.434743][T10668] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 567.434770][T10668] lowmem_reserve[]: 0 2448 2450 2450 2450 [ 567.434788][T10668] Node 0 DMA32 free:664260kB boost:0kB min:33788kB low:42232kB high:50676kB reserved_highatomic:0kB free_highatomic:0kB active_anon:329996kB inactive_anon:4kB active_file:64kB inactive_file:276164kB unevictable:0kB writepending:2648kB zspages:0kB present:3129332kB managed:2507192kB mlocked:0kB bounce:0kB free_pcp:140976kB local_pcp:67080kB free_cma:0kB [ 567.434817][T10668] lowmem_reserve[]: 0 0 1 1 1 [ 567.434834][T10668] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1784kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 567.434862][T10668] lowmem_reserve[]: 0 0 0 0 0 [ 567.434879][T10668] Node 1 Normal free:3937448kB boost:0kB min:56088kB low:70108kB high:84128kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2104kB local_pcp:616kB free_cma:0kB [ 567.434907][T10668] lowmem_reserve[]: 0 0 0 0 0 [ 567.434924][T10668] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 567.434993][T10668] Node 0 DMA32: 4638*4kB (UME) 1835*8kB (UME) 1180*16kB (UME) 1114*32kB (UM) 783*64kB (UM) 246*128kB (UM) 55*256kB (UM) 13*512kB (UME) 1*1024kB (U) 1*2048kB (M) 115*4096kB (UM) = 664208kB [ 567.435078][T10668] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 567.435128][T10668] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 12*16kB (UM) 3*32kB (UM) 4*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 960*4096kB (M) = 3937500kB [ 567.435205][T10668] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 567.435213][T10668] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 567.435221][T10668] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 567.435229][T10668] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 567.435236][T10668] 143714 total pagecache pages [ 567.435240][T10668] 1 pages in swap cache [ 567.435244][T10668] Free swap = 124992kB [ 567.435247][T10668] Total swap = 124996kB [ 567.435251][T10668] 2097051 pages RAM [ 567.435255][T10668] 0 pages HighMem/MovableOnly [ 567.435258][T10668] 438191 pages reserved [ 567.435261][T10668] 0 pages cma reserved [ 567.435398][T10668] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 568.473191][ T30] audit: type=1400 audit(1792919783.016:949): avc: denied { write } for pid=10633 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.556510][T10678] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 568.721904][T10678] 9p: Bad value for 'rfdno' [ 569.036527][T10682] FAULT_INJECTION: forcing a failure. [ 569.036527][T10682] name failslab, interval 1, probability 0, space 0, times 0 [ 569.036576][T10682] CPU: 1 UID: 0 PID: 10682 Comm: syz.0.1125 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.036599][T10682] Tainted: [L]=SOFTLOCKUP [ 569.036605][T10682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 569.036614][T10682] Call Trace: [ 569.036620][T10682] [ 569.036627][T10682] dump_stack_lvl+0x100/0x190 [ 569.036649][T10682] should_fail_ex.cold+0x5/0xa [ 569.036666][T10682] should_failslab+0xc2/0x120 [ 569.036689][T10682] __kmalloc_noprof+0xfc/0x840 [ 569.036709][T10682] ? handler_new_ref+0x1ab/0xc60 [ 569.036740][T10682] handler_new_ref+0x1ab/0xc60 [ 569.036764][T10682] v4l2_ctrl_new+0xe67/0x23a0 [ 569.036786][T10682] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 569.036806][T10682] ? write_comp_data+0x90/0xa0 [ 569.036827][T10682] v4l2_ctrl_new_std+0x1bb/0x290 [ 569.036861][T10682] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 569.036888][T10682] ? __mutex_unlock_slowpath+0x35d/0x930 [ 569.036909][T10682] ? __sanitizer_cov_trace_switch+0x16/0x90 [ 569.036924][T10682] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 569.036941][T10682] ? __asan_memcpy+0x3c/0x60 [ 569.036953][T10682] ? find_ref+0x209/0x420 [ 569.036974][T10682] handler_new_ref+0x82f/0xc60 [ 569.037007][T10682] v4l2_ctrl_new+0xe67/0x23a0 [ 569.037047][T10682] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 569.037062][T10682] ? irqentry_exit+0x202/0xab0 [ 569.037077][T10682] ? lockdep_hardirqs_on+0x7d/0x110 [ 569.037097][T10682] v4l2_ctrl_new_std+0x1bb/0x290 [ 569.037125][T10682] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 569.037150][T10682] ? rcu_is_watching+0x13/0xc0 [ 569.037179][T10682] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 569.037200][T10682] ? media_request_object_init+0x105/0x180 [ 569.037218][T10682] vicodec_open+0x1b2/0xf70 [ 569.037232][T10682] v4l2_open+0x1d2/0x490 [ 569.037248][T10682] ? __pfx_v4l2_open+0x10/0x10 [ 569.037271][T10682] chrdev_open+0x234/0x6a0 [ 569.037295][T10682] ? __pfx_chrdev_open+0x10/0x10 [ 569.037319][T10682] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 569.037341][T10682] do_dentry_open+0x674/0x1470 [ 569.037354][T10682] ? __pfx_chrdev_open+0x10/0x10 [ 569.037371][T10682] vfs_open_consume+0xcc/0x460 [ 569.037389][T10682] path_openat+0x1547/0x23f0 [ 569.037412][T10682] ? __pfx_path_openat+0x10/0x10 [ 569.037443][T10682] do_file_open+0x20e/0x430 [ 569.037469][T10682] ? __pfx_do_file_open+0x10/0x10 [ 569.037489][T10682] ? lockdep_hardirqs_on+0x7d/0x110 [ 569.037512][T10682] ? _raw_spin_unlock+0x28/0x50 [ 569.037526][T10682] ? alloc_fd+0x471/0x7a0 [ 569.037547][T10682] do_sys_openat2+0x163/0x1d0 [ 569.037573][T10682] ? __pfx_do_sys_openat2+0x10/0x10 [ 569.037608][T10682] __x64_sys_openat+0x12d/0x210 [ 569.037633][T10682] ? __pfx___x64_sys_openat+0x10/0x10 [ 569.037649][T10682] ? ksys_write+0x1ac/0x250 [ 569.037661][T10682] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 569.037677][T10682] do_syscall_64+0x123/0x790 [ 569.037694][T10682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.037712][T10682] RIP: 0033:0x7fabe5f9f559 [ 569.037726][T10682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.037741][T10682] RSP: 002b:00007fabe6d93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 569.037759][T10682] RAX: ffffffffffffffda RBX: 00007fabe6226090 RCX: 00007fabe5f9f559 [ 569.037770][T10682] RDX: 0000000000000002 RSI: 0000200000019400 RDI: ffffffffffffff9c [ 569.037779][T10682] RBP: 00007fabe6d93090 R08: 0000000000000000 R09: 0000000000000000 [ 569.037785][T10682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 569.037791][T10682] R13: 00007fabe6226128 R14: 00007fabe6226090 R15: 00007fff208b37a8 [ 569.037806][T10682] [ 570.256289][ T30] audit: type=1400 audit(1792919784.796:950): avc: denied { write } for pid=10684 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.363530][ T30] audit: type=1400 audit(1792919785.876:951): avc: denied { write } for pid=10691 comm="syz.5.1128" name="core" dev="configfs" ino=3635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 571.367947][ T30] audit: type=1400 audit(1792919785.906:952): avc: denied { write } for pid=10691 comm="syz.5.1128" name="rd_mcp_0" dev="configfs" ino=31354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 571.368127][T10693] FAULT_INJECTION: forcing a failure. [ 571.368127][T10693] name failslab, interval 1, probability 0, space 0, times 0 [ 571.368184][T10693] CPU: 0 UID: 0 PID: 10693 Comm: syz.5.1128 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.368211][T10693] Tainted: [L]=SOFTLOCKUP [ 571.368218][T10693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 571.368229][T10693] Call Trace: [ 571.368236][T10693] [ 571.368243][T10693] dump_stack_lvl+0x100/0x190 [ 571.368276][T10693] should_fail_ex.cold+0x5/0xa [ 571.368307][T10693] should_failslab+0xc2/0x120 [ 571.368335][T10693] __kmalloc_cache_noprof+0x91/0x6d0 [ 571.368364][T10693] ? configfs_mkdir+0x13e/0xd40 [ 571.368387][T10693] ? new_fragment+0x3b/0xf0 [ 571.368414][T10693] new_fragment+0x3b/0xf0 [ 571.368434][T10693] configfs_mkdir+0x20c/0xd40 [ 571.368459][T10693] ? may_create+0x280/0x430 [ 571.368494][T10693] ? __pfx_configfs_mkdir+0x10/0x10 [ 571.368532][T10693] vfs_mkdir+0x367/0x850 [ 571.368559][T10693] filename_mkdirat+0x48b/0x5e0 [ 571.368590][T10693] ? __pfx_filename_mkdirat+0x10/0x10 [ 571.368618][T10693] ? strncpy_from_user+0x19d/0x2d0 [ 571.368645][T10693] ? do_getname+0x191/0x390 [ 571.368666][T10693] __x64_sys_mkdirat+0x89/0xc0 [ 571.368694][T10693] do_syscall_64+0x123/0x790 [ 571.368724][T10693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.368744][T10693] RIP: 0033:0x7f32f819f559 [ 571.368760][T10693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.368778][T10693] RSP: 002b:00007f32f90f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 571.368796][T10693] RAX: ffffffffffffffda RBX: 00007f32f8426090 RCX: 00007f32f819f559 [ 571.368807][T10693] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 571.368818][T10693] RBP: 00007f32f90f2090 R08: 0000000000000000 R09: 0000000000000000 [ 571.368829][T10693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 571.368839][T10693] R13: 00007f32f8426128 R14: 00007f32f8426090 R15: 00007ffe234fc528 [ 571.368867][T10693] [ 574.043592][ T29] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 575.828427][ T29] usb 3-1: device descriptor read/64, error -71 [ 575.911137][T10696] fuse: Bad value for 'user_id' [ 575.911171][T10696] fuse: Bad value for 'user_id' [ 576.764005][ T29] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 576.914596][ T29] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 576.915597][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.915681][ T29] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 576.915702][ T29] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 576.924124][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.924145][ T29] usb 3-1: Product: syz [ 576.924158][ T29] usb 3-1: Manufacturer: syz [ 576.924170][ T29] usb 3-1: SerialNumber: syz [ 577.480592][T10717] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 577.593816][ T30] audit: type=1400 audit(1792919792.136:953): avc: denied { write } for pid=10716 comm="syz.2.1133" name="mouse0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 578.122591][ C1] ATM dev 0: usbatm_complete: urb 0xffff88807569bf00 failed (-71)! [ 578.122653][ C1] ATM dev 0: usbatm_complete: urb 0xffff88807569bb00 failed (-71)! [ 578.124294][ C1] ATM dev 0: usbatm_complete: urb 0xffff88807569b300 failed (-71)! [ 578.124322][ C1] ATM dev 0: usbatm_complete: urb 0xffff88807569bd00 failed (-71)! [ 578.232458][ C1] ATM dev 0: usbatm_complete: urb 0xffff88807569bf00 failed (-71)! [ 578.232506][ C1] ATM dev 0: usbatm_complete: urb 0xffff88807569bb00 failed (-71)! [ 578.232540][ C1] ATM dev 0: usbatm_complete: urb 0xffff88807569b300 failed (-71)! [ 578.232574][ C1] ATM dev 0: usbatm_complete: urb 0xffff88807569bd00 failed (-71)! [ 578.334689][ T1987] usb 3-1: USB disconnect, device number 31 [ 578.342301][ C1] ATM dev 0: usbatm_submit_urb: urb 0xffff88807569bf00 submission failed (-19)! [ 579.866956][T10748] FAULT_INJECTION: forcing a failure. [ 579.866956][T10748] name failslab, interval 1, probability 0, space 0, times 0 [ 579.866986][T10748] CPU: 0 UID: 0 PID: 10748 Comm: syz.4.1137 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.867011][T10748] Tainted: [L]=SOFTLOCKUP [ 579.867017][T10748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 579.867030][T10748] Call Trace: [ 579.867036][T10748] [ 579.867043][T10748] dump_stack_lvl+0x100/0x190 [ 579.867072][T10748] should_fail_ex.cold+0x5/0xa [ 579.867098][T10748] should_failslab+0xc2/0x120 [ 579.867121][T10748] kmem_cache_alloc_noprof+0x92/0x6a0 [ 579.867141][T10748] ? netlink_deliver_tap+0x103/0xb50 [ 579.867165][T10748] ? skb_clone+0x187/0x3f0 [ 579.867185][T10748] skb_clone+0x187/0x3f0 [ 579.867201][T10748] netlink_deliver_tap+0x82f/0xb50 [ 579.867232][T10748] netlink_unicast+0x784/0x950 [ 579.867253][T10748] ? __pfx_netlink_unicast+0x10/0x10 [ 579.867268][T10748] ? genl_rcv_msg+0x4be/0x800 [ 579.867293][T10748] netlink_ack+0x660/0xba0 [ 579.867317][T10748] netlink_rcv_skb+0x333/0x420 [ 579.867334][T10748] ? __pfx_genl_rcv_msg+0x10/0x10 [ 579.867354][T10748] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 579.867382][T10748] ? netlink_deliver_tap+0x1ae/0xb50 [ 579.867411][T10748] genl_rcv+0x28/0x40 [ 579.867427][T10748] netlink_unicast+0x668/0x950 [ 579.867447][T10748] ? __pfx_netlink_unicast+0x10/0x10 [ 579.867471][T10748] netlink_sendmsg+0x9ac/0x10c0 [ 579.867492][T10748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.867515][T10748] ? selinux_socket_sendmsg+0x198/0x2f0 [ 579.867540][T10748] ? ____sys_sendmsg+0xa99/0xc30 [ 579.867560][T10748] ____sys_sendmsg+0xa99/0xc30 [ 579.867577][T10748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.867590][T10748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 579.867606][T10748] ? lock_acquire+0x1d1/0x380 [ 579.867619][T10748] ? get_pid_task+0x2a/0x250 [ 579.867635][T10748] ___sys_sendmsg+0x190/0x1e0 [ 579.867650][T10748] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.867663][T10748] ? get_pid_task+0x106/0x250 [ 579.867684][T10748] ? find_held_lock+0x2b/0x80 [ 579.867709][T10748] __sys_sendmsg+0x160/0x210 [ 579.867725][T10748] ? __pfx___sys_sendmsg+0x10/0x10 [ 579.867750][T10748] do_syscall_64+0x123/0x790 [ 579.867766][T10748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.867778][T10748] RIP: 0033:0x7f3d9499f559 [ 579.867788][T10748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.867798][T10748] RSP: 002b:00007f3d92bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.867809][T10748] RAX: ffffffffffffffda RBX: 00007f3d94c25fa0 RCX: 00007f3d9499f559 [ 579.867817][T10748] RDX: 0000000004040140 RSI: 0000200000000500 RDI: 0000000000000003 [ 579.867823][T10748] RBP: 00007f3d92bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 579.867829][T10748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.867835][T10748] R13: 00007f3d94c26038 R14: 00007f3d94c25fa0 R15: 00007ffdaca95958 [ 579.867850][T10748] [ 581.261765][T10762] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 581.685015][T10769] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1143'. [ 581.686739][T10769] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1143'. [ 583.490329][T10781] XFS (nullb0): Invalid superblock magic number [ 583.612424][ T5609] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 584.582511][ T5609] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 584.583506][ T5609] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 584.583540][ T5609] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 584.583558][ T5609] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 584.583572][ T5609] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 584.583591][ T5609] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.586981][T10779] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 584.997086][ T5609] ims_pcu 6-1:1.0: GET_INFO command failed, error: -71 [ 584.997655][ T5609] ims_pcu 6-1:1.0: probe with driver ims_pcu failed with error -71 [ 585.932247][T10779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 585.945794][T10779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.946093][T10779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.174193][ T5609] usb 6-1: USB disconnect, device number 21 [ 587.129038][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 587.129060][ T30] audit: type=1400 audit(1792919801.666:955): avc: denied { write } for pid=10809 comm="syz.0.1149" name="cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 587.135594][T10811] CacheFiles: Failed to register: -2 [ 587.192204][T10811] siw: device registration error -23 [ 587.213817][T10811] smc: removing ib device syz1 [ 587.254330][T10811] smbdirect: ib_dev[syz1] removed [ 587.915710][T10811] ------------[ cut here ]------------ [ 587.915719][T10811] !xa_empty(&pool->xa) [ 587.915726][T10811] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.0.1149/10811 [ 587.936684][T10811] Modules linked in: [ 587.940578][T10811] CPU: 0 UID: 0 PID: 10811 Comm: syz.0.1149 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.951648][T10811] Tainted: [L]=SOFTLOCKUP [ 587.955985][T10811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 587.966142][T10811] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 587.971603][T10811] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 86 ad 04 f9 5b e9 d0 9d df 02 e8 7b ad 04 f9 90 <0f> 0b 90 e8 72 ad 04 f9 5b e9 bc 9d df 02 e8 17 c0 7d f9 eb d0 0f [ 587.991255][T10811] RSP: 0018:ffffc90004ea7158 EFLAGS: 00010246 [ 587.997348][T10811] RAX: 0000000000080000 RBX: ffff88807c0fd3d8 RCX: ffffc900037d1000 [ 588.005338][T10811] RDX: 0000000000080000 RSI: ffffffff89095d95 RDI: ffff88807c0fd458 [ 588.015173][T10811] RBP: ffffffff8907b270 R08: 0000000000000005 R09: 0000000000000001 [ 588.024380][T10811] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88807c0fc6d0 [ 588.032415][T10811] R13: ffff88807c0fbfe0 R14: ffff88807c0fbfe0 R15: ffff88807c0fd138 [ 588.040389][T10811] FS: 00007fabe6db46c0(0000) GS:ffff8881224ba000(0000) knlGS:0000000000000000 [ 588.049339][T10811] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 588.055942][T10811] CR2: 00007fb1921f37b0 CR3: 0000000020f2d000 CR4: 00000000003526f0 [ 588.063942][T10811] Call Trace: [ 588.067207][T10811] [ 588.070125][T10811] rxe_dealloc+0x25/0xc0 [ 588.074358][T10811] ib_dealloc_device+0x49/0x230 [ 588.079211][T10811] __ib_unregister_device+0x396/0x480 [ 588.084595][T10811] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 588.090382][T10811] ib_unregister_device_and_put+0x5a/0x80 [ 588.096206][T10811] nldev_dellink+0x308/0x450 [ 588.100780][T10811] ? __pfx_nldev_dellink+0x10/0x10 [ 588.105944][T10811] ? rcu_is_watching+0x13/0xc0 [ 588.110778][T10811] ? cap_capable+0x107/0x430 [ 588.116534][T10811] ? bpf_lsm_capable+0x9/0x10 [ 588.121203][T10811] ? security_capable+0x80/0x260 [ 588.129020][T10811] ? ns_capable+0xcd/0xf0 [ 588.133382][T10811] ? __pfx_nldev_dellink+0x10/0x10 [ 588.138481][T10811] rdma_nl_rcv_msg+0x392/0x6f0 [ 588.143279][T10811] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 588.148562][T10811] ? __lock_acquire+0x5c0/0x1f40 [ 588.153530][T10811] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 588.159932][T10811] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 588.167064][T10811] ? netlink_deliver_tap+0x1ae/0xb50 [ 588.172386][T10811] netlink_unicast+0x668/0x950 [ 588.177123][T10811] ? __pfx_netlink_unicast+0x10/0x10 [ 588.182423][T10811] netlink_sendmsg+0x9ac/0x10c0 [ 588.187269][T10811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.192571][T10811] ? selinux_socket_sendmsg+0x198/0x2f0 [ 588.198099][T10811] ? ____sys_sendmsg+0xa99/0xc30 [ 588.203035][T10811] ____sys_sendmsg+0xa99/0xc30 [ 588.207785][T10811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.213089][T10811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.219555][T10811] ___sys_sendmsg+0x190/0x1e0 [ 588.225073][T10811] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.230268][T10811] ? futex_wait+0x11e/0x370 [ 588.234804][T10811] ? find_held_lock+0x2b/0x80 [ 588.239480][T10811] __sys_sendmsg+0x160/0x210 [ 588.244068][T10811] ? __pfx___sys_sendmsg+0x10/0x10 [ 588.249182][T10811] do_syscall_64+0x123/0x790 [ 588.253798][T10811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.259681][T10811] RIP: 0033:0x7fabe5f9f559 [ 588.264090][T10811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.283790][T10811] RSP: 002b:00007fabe6db4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.292222][T10811] RAX: ffffffffffffffda RBX: 00007fabe6225fa0 RCX: 00007fabe5f9f559 [ 588.300164][T10811] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 588.308160][T10811] RBP: 00007fabe6036b20 R08: 0000000000000000 R09: 0000000000000000 [ 588.316139][T10811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.325331][T10811] R13: 00007fabe6226038 R14: 00007fabe6225fa0 R15: 00007fff208b37a8 [ 588.334180][T10811] [ 588.337186][T10811] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 588.344452][T10811] CPU: 0 UID: 0 PID: 10811 Comm: syz.0.1149 Tainted: G L syzkaller #0 PREEMPT(full)