last executing test programs: 4m58.407896908s ago: executing program 4 (id=112): socket$unix(0x1, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000000a882, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r2, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000340)={0xaa00072}, &(0x7f0000000380)={0x0, 0xc, 0x1, 0x1, 0x7fff, 0x534}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) r3 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000140)=0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000300, r4, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0xf400, 0x1000000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r3, 0x4147, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x143102) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000300)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1c3902, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x80000000000003) syz_usb_connect(0x5, 0x59, 0x0, 0x0) 4m54.553998107s ago: executing program 4 (id=126): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000008c0)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0b06000000000000000030000000050036000000000008000200", @ANYRES32=r3, @ANYBLOB="05003500b5000000050033"], 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 4m54.289270618s ago: executing program 4 (id=130): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000032680)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000326c0)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) capset(&(0x7f0000032700)={0x19980330}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$usbmon(&(0x7f0000032800), 0x6, 0x200) readv(r3, &(0x7f0000032840)=[{&(0x7f0000032880)=""/190, 0xbe}], 0x1) fanotify_mark(0xffffffffffffffff, 0x201, 0x4800003e, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r4, 0x5) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90092000e00050017420a008000008200020a0040"], 0x17) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5969b576688f07d0c9a40492833d21e37648a8f1a750f755b7", 0x19}, {0x0}], 0x2, 0x0, 0x0, 0x4040}], 0x1, 0x8010) landlock_restrict_self(0xffffffffffffffff, 0xc) 4m53.022560714s ago: executing program 4 (id=132): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r2, r2, 0x0, 0x4) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000300)={0xc, 0x6, {0x57, 0x9, 0xf001, {0x2}, {0x2, 0x7}, @const={0x8, {0x8, 0x1, 0x80, 0x6}}}, {0x56, 0x8, 0xfff8, {0x8}, {0x4, 0x10}, @cond=[{0x400, 0xfff8, 0x3, 0x7, 0x0, 0x1}, {0x800, 0xffff, 0x1b, 0x1, 0x1, 0xfffa}]}}) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) write$dsp(r2, &(0x7f0000000240)="e5f6353cb5beb50d420ec4b7008121adb7e8ef63587e23974cb13b6eecbfde150024584b07c67382a1b9a26fb07cba1ef719b14e1c2e3e34f434", 0x3a) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff12, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4$tipc(r4, &(0x7f0000000180)=@id, &(0x7f00000001c0)=0x10, 0x800) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x1701) 4m49.924214759s ago: executing program 4 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000191c0)='proc\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000019300)={0x3, 0x8, &(0x7f0000019800)=ANY=[@ANYBLOB="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"], &(0x7f000001a9c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f000001aa00)='./proc/thread-self/fail-nth\x00', 0x8202, 0x70) write(r1, &(0x7f000001aa40)='27', 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_DETACH(0x1c, &(0x7f000001aa80)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00'], 0x20) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r5, &(0x7f00000001c0)=""/102392, 0x18ff8) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000019200)=0x46c, 0x4) sendto$packet(r6, &(0x7f0000000000), 0x0, 0x4044804, &(0x7f00000192c0)={0x11, 0x8, 0x0, 0x1, 0xc}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000019640)={0x0, 0x0, &(0x7f0000019680)={&(0x7f00000196c0)=ANY=[@ANYBLOB="2c00000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b000000000004001a8078a44c8865638f0088f1eaa308f9e5d5a9c242989fc254f2cb94dc33ddaebad475d2e01b97f361084193f7544b26349b05b33626357d75032ce5494770947f58cbcfdf0bf204e40e0cbf3e4ea72a6e1b2291c4671e410c2d26a2a2691689b586"], 0x2c}}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000197c0)={0x43, 0x0, 0x3, 0x3}, 0x10) 4m47.461208228s ago: executing program 4 (id=153): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r2, r2, 0x0, 0x4) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000300)={0xc, 0x6, {0x57, 0x9, 0xf001, {0x2}, {0x2, 0x7}, @const={0x8, {0x8, 0x1, 0x80, 0x6}}}, {0x56, 0x8, 0xfff8, {0x8}, {0x4, 0x10}, @cond=[{0x400, 0xfff8, 0x3, 0x7, 0x0, 0x1}, {0x800, 0xffff, 0x1b, 0x1, 0x1, 0xfffa}]}}) write(0xffffffffffffffff, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) write$dsp(r2, &(0x7f0000000240)="e5f6353cb5beb50d420ec4b7008121adb7e8ef63587e23974cb13b6eecbfde150024584b07c67382a1b9a26fb07cba1ef719b14e1c2e3e34f434", 0x3a) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff12, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4$tipc(r4, &(0x7f0000000180)=@id, &(0x7f00000001c0)=0x10, 0x800) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x1701) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5309, 0x0) 4m31.970227071s ago: executing program 32 (id=153): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r2, r2, 0x0, 0x4) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000300)={0xc, 0x6, {0x57, 0x9, 0xf001, {0x2}, {0x2, 0x7}, @const={0x8, {0x8, 0x1, 0x80, 0x6}}}, {0x56, 0x8, 0xfff8, {0x8}, {0x4, 0x10}, @cond=[{0x400, 0xfff8, 0x3, 0x7, 0x0, 0x1}, {0x800, 0xffff, 0x1b, 0x1, 0x1, 0xfffa}]}}) write(0xffffffffffffffff, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) write$dsp(r2, &(0x7f0000000240)="e5f6353cb5beb50d420ec4b7008121adb7e8ef63587e23974cb13b6eecbfde150024584b07c67382a1b9a26fb07cba1ef719b14e1c2e3e34f434", 0x3a) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff12, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4$tipc(r4, &(0x7f0000000180)=@id, &(0x7f00000001c0)=0x10, 0x800) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x1701) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5309, 0x0) 1m35.35942527s ago: executing program 0 (id=700): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'veth0_vlan\x00', 0x0}) r1 = gettid() r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r0, @ANYBLOB="089805000750050008001300", @ANYRES32=r1, @ANYBLOB="08002c0005000000140003007665"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) 1m34.811713314s ago: executing program 0 (id=704): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) prlimit64(0x0, 0x8, &(0x7f00000002c0)={0x4000000000000005, 0xa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x11, 0xffffffffffffffff, 0xd6d18000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x2004c884) socket$key(0xf, 0x3, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000019300)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000019440)={0x0, 0x0, &(0x7f0000019480)={&(0x7f0000000100)=ANY=[], 0x38}}, 0x4000) sendmmsg(0xffffffffffffffff, &(0x7f0000019500), 0x800001d, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000000080)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000010) sendmsg$NFT_BATCH(r3, &(0x7f0000019400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019640)=ANY=[@ANYBLOB="140000001000010000240000000000000500000a5c000000060a010400000000000000000a0000010900010073797a31000000003000048020000180080001006c6f67001400028008000540ffffff0807000240402f00000c00018007000100727400000900020073797a32"], 0x84}}, 0x24000044) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mount(0x0, &(0x7f0000019540)='./trace\x00', &(0x7f0000000000)='aufs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000195c0)='trace/events/sched/sched_switch/filter\x00', 0x1, 0xb2) write(r4, &(0x7f0000019600)='prev_state.function ==x', 0x17) r5 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f000001dbc0)={0x0, 0x0}) recvmmsg(r5, &(0x7f000001d980)=[{{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f000001ab40)=[{&(0x7f00000196c0)=""/209, 0xd1}, {&(0x7f00000197c0)=""/118, 0x76}, {&(0x7f0000019840)=""/199, 0xc7}, {&(0x7f0000019940)=""/20, 0x14}, {&(0x7f0000019980)=""/59, 0x3b}, {&(0x7f00000199c0)=""/132, 0x84}, {&(0x7f0000019a80)=""/132, 0x84}, {&(0x7f0000019b40)=""/4096, 0x1000}], 0x8}, 0x8}, {{&(0x7f000001abc0)=@nl, 0x80, &(0x7f000001af40)=[{&(0x7f000001ac40)=""/182, 0xb6}, {&(0x7f000001ad00)=""/106, 0x6a}, {&(0x7f000001ad80)=""/86, 0x56}, {&(0x7f000001ae00)=""/112, 0x70}, {&(0x7f000001ae80)=""/161, 0xa1}], 0x5}, 0x6}, {{&(0x7f000001afc0)=@tipc, 0x80, &(0x7f000001b0c0)=[{&(0x7f000001b040)=""/66, 0x42}], 0x1, &(0x7f000001b100)=""/30, 0x1e}, 0x890f}, {{&(0x7f000001b140)=@un=@abs, 0x80, &(0x7f000001c280)=[{&(0x7f000001b1c0)=""/4096, 0x1000}, {&(0x7f000001c1c0)=""/93, 0x5d}, {&(0x7f000001c240)=""/1, 0x1}], 0x3, &(0x7f000001c2c0)=""/41, 0x29}, 0xbac}, {{&(0x7f000001c300)=@alg, 0x80, &(0x7f000001c640)=[{&(0x7f000001c380)=""/168, 0xa8}, {&(0x7f000001c440)=""/122, 0x7a}, {&(0x7f000001c4c0)}, {&(0x7f000001c500)=""/3, 0x3}, {&(0x7f000001c540)=""/118, 0x76}, {&(0x7f000001c5c0)=""/101, 0x65}], 0x6, &(0x7f000001c6c0)=""/143, 0x8f}, 0x5}, {{&(0x7f000001c780)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f000001c940)=[{&(0x7f000001c800)=""/124, 0x7c}, {&(0x7f000001c880)=""/132, 0x84}], 0x2, &(0x7f000001c980)=""/121, 0x79}, 0x10000}, {{&(0x7f000001ca00)=@l2tp, 0x80, &(0x7f000001cfc0)=[{&(0x7f000001ca80)=""/214, 0xd6}, {&(0x7f000001cb80)=""/136, 0x88}, {&(0x7f000001cc40)=""/127, 0x7f}, {&(0x7f000001ccc0)=""/132, 0x84}, {&(0x7f000001cd80)=""/115, 0x73}, {&(0x7f000001ce00)=""/16, 0x10}, {&(0x7f000001ce40)=""/204, 0xcc}, {&(0x7f000001cf40)=""/115, 0x73}], 0x8, &(0x7f000001d040)=""/103, 0x67}, 0x8}, {{&(0x7f000001d0c0)=@nfc_llcp, 0x80, &(0x7f000001d3c0)=[{&(0x7f000001d140)=""/91, 0x5b}, {&(0x7f000001d1c0)=""/7, 0x7}, {&(0x7f000001d200)=""/226, 0xe2}, {&(0x7f000001d300)=""/11, 0xb}, {&(0x7f000001d340)=""/70, 0x46}], 0x5, &(0x7f000001d440)=""/64, 0x40}, 0x9}, {{&(0x7f000001d480)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f000001d840)=[{&(0x7f000001d500)=""/126, 0x7e}, {&(0x7f000001d580)=""/160, 0xa0}, {&(0x7f000001d640)=""/223, 0xdf}, {&(0x7f000001d740)=""/206, 0xce}], 0x4, &(0x7f000001d880)=""/211, 0xd3}, 0x4}], 0x9, 0x2020, &(0x7f000001dc00)={r6, r7+10000000}) 1m33.737167205s ago: executing program 0 (id=708): creat(&(0x7f00000002c0)='./file0\x00', 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xbd}]}, &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1100, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000500)=[@increfs]}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1000, 0x2, 0xfffffffffffffffc}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000680)=[@acquire]}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000780)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x4}}, &(0x7f0000000800)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) 1m31.78367049s ago: executing program 0 (id=713): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) pwrite64(r1, 0x0, 0x0, 0x7ffffffe) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20008800) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20008800) syz_usb_connect(0x0, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810240000007050202", @ANYRES64], 0x0) 1m28.991577932s ago: executing program 0 (id=721): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/video4linux/video0/dev_debug\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000019580)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, 0x0, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000000500)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000019500)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r6 = dup(r5) r7 = open(&(0x7f0000019540)='./file0\x00', 0x181c42, 0x81) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d1) 1m28.203886106s ago: executing program 0 (id=724): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x0, 0x2563718f, {0xffffffffffffffff}, {0xee01}, 0x3, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) getpriority(0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_open_dev$vim2m(0x0, 0x0, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000340), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f00000003c0)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000400)={0x1, 0xa, 0x2}, 0x8, 0x2, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x14) r6 = syz_open_dev$vim2m(&(0x7f0000000440), 0x3, 0x2) fsopen(&(0x7f0000000480)='romfs\x00', 0x1) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000004c0)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000500)=@userptr={0x2, 0x1, 0x4, 0x10, 0x1, {0x77359400}, {0x3, 0xc, 0x9, 0x80, 0x3, 0x12, "b70400"}, 0x3, 0x2, {&(0x7f0000000580)}, 0x96000}) close_range(r3, 0xffffffffffffffff, 0x3f00000000000000) setrlimit(0x3, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) futex_waitv(&(0x7f0000000280)=[{0x42, 0x0, 0x2}, {0x4, 0x0, 0x7f}], 0x2, 0x0, 0x0, 0x0) 1m17.189935504s ago: executing program 5 (id=756): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0xffa9}, 0x0) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x8c) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000000)={0xc0d8, 0xa, 0x3, 0x0, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r8, 0xf) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = getpgid(0x0) fcntl$setownex(r10, 0xf, &(0x7f0000000240)={0x2, r11}) sendmmsg$unix(r9, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) lseek(r7, 0x2, 0x2) getdents64(r7, 0x0, 0x22) ioctl$TIOCSETD(r4, 0x5423, 0x0) 1m16.621283364s ago: executing program 5 (id=758): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000002440)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000000)={0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x41, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a80)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="300000001c00010d000000000000000007000800", @ANYRES32=r6, @ANYBLOB="80000200080001007f0000010a0002"], 0x30}}, 0x0) connect$unix(r3, &(0x7f0000000240)=@file={0x1}, 0x6e) r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r8 = syz_ublk_setup_io_uring(0x8000010, &(0x7f00000002c0)={0x0, 0x30b5, 0x2, 0x2, 0x8377, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000400)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f00000004c0)) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = add_key$user(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), 0x390, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r7, &(0x7f00000005c0)='user\x00', 0x0) keyctl$dh_compute(0x17, &(0x7f0000000600)={0x0, r13}, 0x0, 0x0, 0x0) dup(r12) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f00000024c0), 0x62181) 1m15.588973499s ago: executing program 5 (id=761): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x2, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffdff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0xc, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x52, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x1, 0x40000f04, 0x0, 0x2, 0x4, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x7fff, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0xfffffffd, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x1, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x7, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000c40)={0x0, 0x0, "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", "35aaf5fb9715a1b81c7c1ac7bda9323eca466ff175480e75f4e2963d87c2f72fb80c099565232b609ee3ffa572d8d176ab024342d8f95ff8af813f27c414a3ee5942c1671cd00aa3ea1eb5f6e44475cc060373d4bc41ae7b6384839187b44a75b5983ef15aefe78704a3e153d50407fcd4478c77a61bbc4f84e7baf5c826343f3e15535de68c4ee5ca3e45af57a1873c77701712ec8dba1cd6a3bdb472a6ebddfcb962562636561d7516a39da48100609d21957033f59802383a7a04565a66ebf2d98e890555f2d2b0c2afb7ca8b4ee3dde4c50ff9ad5489b64c7751ecd42b776c068f27b5632e23afda530343fd4db976ee90a122db3f95f59b1eeb2a65e26392213ccb97935b67d7504db0be09708e2f144806bc0b7c3db7872053ac06f03d609ddd35182cf34eb62196d2ca106e65f096c66f0483ef2979967c7bed06d18ecd868078ae835474ec3b10bdf6bd2ed94fe8255534705145a014b2e81f629c8419f530b3d19a7e8c8eda58ae5fec1b3afff67299b788771efdf4fce430ebc16f12f413d3019136a6b15d99f38eb7b4eca0c0cbad870dba72436643aa7a1fd5ef6a03c4398b837cc7546f55680c96a5082b423b6dcd2ca6109bb5e6a5964bcaf4b3bbcc9b176c8a062f976b1561ac0cb3229c9c4f2410c3e7ffeac2caeb4c86f055d4b3b4fb94f0fcdb199bafe0ac0b5e40c12f3b932d6208ff524b52e616af02541a5f56c28cf52d3fb5a2ed8d615238d17736e1c73ff2901181e40b41730dd6c8c37f92cd262f57257c49ba0b58c910eefc42c9630b3fb8525e37bcbfd8b2532449e408906655fa22c6f11870896e19475f6d5d81b9ff68f59a7c7774b018648445e4bc6ad5296ec2bbdc709252a066ca88e7a6fce010736e2417e071571cd446098cd8bce3e81602fd996fbd02616d725537eccc6189e628f1845e0731a50d2e6227e87d92b1a590f95c27eff0ebdbf2ddd7807b3affe04cd800dd1d570b5aa06a33965cb5b4aab47c09bba99d489f3c3f3272b7d3bb0feee98c333c96eb4ac976f983db72f58e2545991a6c7389fd616de79f42b6b1c6a099cd0d55cb8a0717a3175571ea4bd71ea2eff0d3e6764d23ea8a934b5a8e2d68b9b9f948f44d45115f003c37ba12a352c139af969057eabb8ed3793f22afe5a39dcd368f36d036167e23f82c912eee92a6617ab90d912941b5ea06e3cffb4a9640b21c7d52ed003b842b04f0dc21d6b9424b3a81e53e4878cd4ba0c8e713e1f6e20e897683900103a7be00d3ef2ec69404f7e2f0e0bd0c6a0d78905cac0c62ad7f7887758e912ff3f2cee57021d5762238af7b1b360bf5f654b75c58cfd751b943e17b898b7404d12391a81af9c78dbaa48760ca39910b511303eb1ed4d3b29fb0613aa76b0d5a9450133404ed7a6c6c88dc1aebf0828c0a9423819096e438f468ef14394162f30125a67323bf7d0535f602daa3fbd3b6495211e48117fae68d0448863b9edb2a08ef86a2ffd661bdc5d3cf1ba654a76fe1adaf254dfaa1118d158c25fc1c81acbf6e43cf0e2f1f8aff3f4cade29a9510f745b9b7258e992e41def84791690fe644a10bac92d9fc3aff392d407ed08bbe777266f344e36d33589e4d8dae8ebb060bf85f19c7f73f395d3f9d1ae140937efd4670210b12a88124cbc1b6baa333e2554e1508f7b1a72f299e97e910e4a8d98f60504f9f6f8acb109eb0242b349a8f3ada102232813d990c96b474ce2af13e8db9c98e892a6d35b1d284f8b8e60dd814ddebc0ce07ebd6af39201e3c09d87fb0cb3ce0968ed4a25ef0e7e44c91feb1ee327da113423b75315190de04251c55d1d8a621ad239fc9dd36d32032af5674207ce86d9936c2af6397c0f224833d186a3b623d75bae550a751070cb1919e70e5db308b974289c756272ff898851ae219a60e8586bff6bf24cc4ca1796da1acb40e9b2aa17166b8d130cfcc2e07b632d0cf345707210665f4b9327634cb159c1e78ae9dad5686bff5914de41d05797695df719f3c76dde2d62a752d51b176aafc213e9cb23a013b2785467bc44ccc75973f55f9d7f3fb3d6fdbbb153cfee5e35dbb65402cc146440e5cd83109697c135c857bd9094562337c1b1f2bf75e2cf5e54bb99d7db7f0013aa8b475d875f278e68c6e476cdb69985528c095adcd38cb727eb1ac016b04f6db0d6b031a5786f406a68ed570eb93f5b913cc1a69792aee796280c01b74b05a6e64969e59c4bba788236807426de8625fc4d1685d31ddd2687d6f672bef2752d8846cf3fc341ea905095dc1217c7b7e30453c6939fb781c08c01a324404c42cb626a7f09d4d23ebffc5f31d429c57f4bd19b60a6a0932be225671332e69decb38c4d4d9cadc3bf74acd9dfb984f6713d581b649019fb238e5d8ae7fcf5b01dc2222d858c8e6c26ef0b6d8642b4c6842191fcdd7e4d3321117a3ece7d2d42efb769d1c3ae6c7bc5c55c3aea9239af49fe25ce987c0c570880bbb9e42d0487fc0731a35016b8adc293b566cc5af263815cdfb5f6f180c5747c6fb9465f9130a9237ec12d17955a6c82cc2ce501c8c3715948b319737b5e6c1cf16c8c057ad85a08b6d879a445bb7b7a743f109eb88aa622cf35d4e84679dcf8574e4360e2d43989b7fe30d7136b18d9da55e05f5ff928542bf68b884fbe60cdb82aa70045cf2adcfc024418f56504af4aee2c855e4cea2628946da9ff3c14368e8338c53054bbb8b7e0bda8ea8229cf98594e6ee14b9861d40d0866b694d21d37b59353e2116bd3b05794fce1c81ccdff45e353ec51b25a96ec451c56a92777d8be079d591053a72e8ecfbdf9a0603e04bfbf309d93922b5a9145005fb63dad504615cffaa59e9312f40068d393c05677d5bdbb9ad2b56eae94786b3e234d94b79f21fffb061609a137624bbe582ee871bf56c58f4507a6ef2024ecf5e3904839103fb1162d045716dbd3a00b4c843474af0d206bae101bcaa987ff871509d0360e06ec1dc8ae50ae06936c477df835cf3bb511278c598c15b1590dba902230c4f525f71faf66e92aec3830f0befecb26a581a5b9751abc19cda8dbaba44caad756ffd3d063e3c07f928a09e5a9a4967d0ef75fa3c67ab7f5ce6690c6c7a8a1a69ecbfd61566910a8933cdba8912522a303d7ab2ba9f4703776fb34a4738898cfa27a23903f2d14c505f619ee855913c70a823162d85c35329f3560511582959517f295ce8a472e78a82de2c41f3ada87300f9ab67bd2f6be87942a63f7222de16fc2a36ba894e78c3410f6d7550248f23de1e6c68f27a7f67eb5af7eef699927303c74086f0c7178a2ce8158cbb8fc8323a27950601b2a15bf57d00713cd4ffe68dc01b867a541cf2ab0409d59a8bf370258f94faf157e06a5082421bbea67ff159b5651c0bfc85d32d8fe682722ee6db9f6eeca90f8afac345fa39f6cdbf037a2bafc8e038dc1849371fe97171eb0d9e7f5a86e7686b306548ac073b2a20be4b07fda23dd5022b6369579fbdfa1830786fe1bf699aa9517342b7c8a195eed5d4a141d6a4686f0727b8fe099b912c376ec27c8707a6545b922afe54602cbd796ffdfc2861e811425f0481ff27ae52aeed376d3d156ec2b2b710ed487962c72901a83e1bc224f834e437485e270b52163c4b3bef51e032bc3d140779ffedcdaf709db4b072a265636b63cbf5fef1d7e48d670da07aa9a6702bdb32e479679194298e3ad1eff033e2e26182b73c76a4515ac1466e47dc653d64795ee63dafe505e6902540f55a8c6b578e0b67c40a46c2745db1a9b59779ef8821fdee1f86f6c0e9d6b1d1bcef81f8b7fe46af02391409f34d3269a9e2f586b1c83090390e744ced0d403710cc734c999b0c23e7bf86137a9c197668d6965e40f34501a1e0066782d8e1dcb5d72d5814f651c3b88e47592eeefcd9284f290be2b572b84d653fa1a66cff83c643ad4e8333c959efaa938d69e5f7388f0c686d29c810ee79b2c8bc9bad0e83a4a7784be585cb765acc8cf8667c5bf9bb092870a397819097b1974c3edf843fe1232c831b9eb3f0cf91293e5893b3e13636f68f57c268dd4d284b2864b6c3f545ec9030f20a0773d8270f0494233aa18f1e5b1b5c2408c1295e55bb4e84f701f89555287f74e6d437623e09e404fc8e3370daf457b286fa5e5d9cbac63b9e389a7dae041b703789aaaf4f28fb116cb8d26f90dced34ffb7ecd638fa96b468b8e3fefee732b5d1052bc502e5727da13b2868addd9c1bde28e28e3e776d2f013681655c698cd0dac774d0c6e207f0c48aeb40d1f19e0f2f48907791c284ddb7dd1105687342019fe42a3872dd2001f2e6eb317313972f3b05840f68df956788340d9237ccd78067cde892e3402b7d6c771e4df9eb8d9d4d6c0b49a26099a75300612a115028a2a11d22c3e9060ebb668ce5367ebfae1af3131c8c0b993b54bc15ca47785593d9c1908ba0d73860d2f4d963079e4840df5381d59f5011add23ffdc688524052a4832fcd7c7591078a7449e12b51923d86ede6c10511afa798b46f3199d4465722a785eb36422921d3db18e241eddadf4e55b0f03b4379b735e25ca80651733e6fec3b2e902892bcdd23af94493c6360909b0fb511cbe87597bd9795b5d3056ca883a3332850b2d51ed9b7cdfa54e48b89bef94e6a90b0b9b8c180796d3989f0e4bf3181a4818510b64761bf068c193b7292d9f39f8560ea613803b35e7e0daea45322c40a23e27baeddf00ba3f178c01c8209aeeff965190c59224f4ca50ee2df6006fb53a2d04f96807b4f8b36f3069b5bee82616590720d3e2dcf938501f27874e3bdb01a747f328c4c2133b4a11ea4c73b43545c72e56f559880dc5383cd0c56ad4d6298b68d08ccfa07eef8f6d8d4341ae164c8b4708cc9566d0eaf6d31f077bd78eb436a435a7aeaa527282b08c000f5ad365ea6e0e4c820047371dfe5e6c12dd7003fd79cf2d6727a0321ad984631159a834c7617b4de1b44ea71bbd74764d371f41aafec7226f00870a92bb7f3a2e101cfe317ee735773347cfe7054c21268a99d938cc1257094f00a4a27beef9cab08ba9f1739786f2b5fbeeebece0d78bd9ef584f7dd8c9c616b613c1a288dcc35b1038290117de55e56670d7d489ae4f6da75d10156dd964562213d441d1227f07e8c1627ae07739280b8fe78f5a57f8527f53e869164f4295f43a61c312e7df8f2258fb0db07679ade59008c228572afcd269587f052e673e67ac7e1201b7962f7efc3325de0082d24193f219879f256deca6bd76fd718ae8debce5e882503934983857ebe007045311d7dbc04ca518c96846fbf79d4bd2c28a3bbb2bf386897cd2711ecaadbf09dfacd4374521b76fe91101553008bfec047967dae42c52d26d883a3c247a0e15789dcb6014e5f788e1744f9"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001c40)={{0x0, 0x7, 0xffffffff7fffffff, 0x81, 0x8, 0x8000000000000001, 0x8, 0x9, 0x1, 0x42c, 0x5, 0x7, 0x8000000000000001, 0xffffffffffffffff, 0xa}}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x300, 0x0, 0x6, 0x0, @private=0xa210104, @broadcast, {[@timestamp_addr={0x44, 0x14, 0x8, 0x1, 0x0, [{@remote, 0x4}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002c40)={r5, r6, "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", "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"}) 1m15.184779887s ago: executing program 5 (id=763): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x3c5093, 0xf6) 1m14.959358642s ago: executing program 5 (id=764): setns(0xc9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000805", @ANYRES8], 0x97) openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x6c, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 1m14.052071614s ago: executing program 5 (id=768): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010428bd70000001000000000000", @ANYRES32=0x0, @ANYBLOB="0386000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32, @ANYBLOB="bec928f5", @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x9000000, 0x0, 0x240008c4}, 0x20008004) 1m12.801420216s ago: executing program 33 (id=768): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010428bd70000001000000000000", @ANYRES32=0x0, @ANYBLOB="0386000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32, @ANYBLOB="bec928f5", @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x9000000, 0x0, 0x240008c4}, 0x20008004) 1m12.717150375s ago: executing program 34 (id=724): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x0, 0x2563718f, {0xffffffffffffffff}, {0xee01}, 0x3, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) getpriority(0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_open_dev$vim2m(0x0, 0x0, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000340), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f00000003c0)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000400)={0x1, 0xa, 0x2}, 0x8, 0x2, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x14) r6 = syz_open_dev$vim2m(&(0x7f0000000440), 0x3, 0x2) fsopen(&(0x7f0000000480)='romfs\x00', 0x1) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000004c0)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000500)=@userptr={0x2, 0x1, 0x4, 0x10, 0x1, {0x77359400}, {0x3, 0xc, 0x9, 0x80, 0x3, 0x12, "b70400"}, 0x3, 0x2, {&(0x7f0000000580)}, 0x96000}) close_range(r3, 0xffffffffffffffff, 0x3f00000000000000) setrlimit(0x3, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) futex_waitv(&(0x7f0000000280)=[{0x42, 0x0, 0x2}, {0x4, 0x0, 0x7f}], 0x2, 0x0, 0x0, 0x0) 12.035960402s ago: executing program 6 (id=955): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008f}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$video(0x0, 0x101, 0xab02) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=']) chdir(&(0x7f0000000100)='./file0\x00') r3 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, &(0x7f0000000500)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x3800, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfc, {0x60, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x2fd, 0xea94, 0x6, 0x7, 0x4, 0xc091}, [@TCA_NETEM_RATE={0x14, 0x6, {0x200, 0x5b, 0x0, 0xf8}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x1, 0x6}}]}}}]}, 0x6c}}, 0x40844) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r6, &(0x7f00000001c0), 0x0}, 0x20) 10.507379463s ago: executing program 7 (id=957): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000500)='./file0\x00', 0x80140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000600), 0x2, 0x141102) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e23, @multicast1}], 0x2c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_nanosleep(0x9, 0x2000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, r3, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) unshare(0x8040480) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e) socket(0x15, 0x5, 0x0) fcntl$setlease(r0, 0x400, 0x2) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002940)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) 10.247958576s ago: executing program 6 (id=958): prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0xa, 0x100}, 0x0) r0 = syz_open_dev$video4linux(0x0, 0x6, 0x20000) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000c40)={0x0, 0x0, '\x00', @bt={0x100, 0x9, 0xfffffbff, 0xd314, 0x1, 0x8, 0x1f, 0x8}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000d00)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000d40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000dc0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000e40), 0x651, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000e80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ec0)=0x6) syz_open_dev$usbfs(&(0x7f0000000f40), 0x75, 0x109301) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f80)='net/llc/socket\x00') fsopen(&(0x7f0000000fc0)='affs\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203fdff00000000e500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f0000000b00)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000b40), 0x0, 0x10, &(0x7f0000000b80), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48) syz_emit_vhci(&(0x7f0000000f00)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0x7}}}}, 0x9) 9.29091913s ago: executing program 3 (id=959): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ppoll(&(0x7f0000000680)=[{r2, 0x1002}, {r1, 0x2}, {r1, 0x6}, {r4, 0x200}, {r1, 0x18c}, {r3, 0x8}], 0x6, &(0x7f00000006c0), &(0x7f0000000700)={[0xfffffffffffffff8]}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000048009d0300000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r12, {0x10}, {}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 8.56733941s ago: executing program 7 (id=961): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$igmp(0x2, 0x3, 0x2) msgget$private(0x0, 0x230) r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) writev(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000440)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000500)=""/102400, 0x19000) sched_setaffinity(r3, 0x47, &(0x7f0000019500)=0x7) mount(0x0, &(0x7f0000019540)='./sys\x00', &(0x7f0000019580)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000195c0)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x20080, 0x10) read(r5, &(0x7f0000019600)=""/100, 0x64) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) socket(0x10, 0x3, 0x0) 8.43880254s ago: executing program 1 (id=962): sysfs$3(0x3) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x9031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r3, r4, 0x14, 0x0, @void}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) prlimit64(0x0, 0x3, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) close(0xffffffffffffffff) write$nsim_bool(0xffffffffffffffff, &(0x7f0000000680)='1', 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/route\x00') pread64(r5, &(0x7f0000000700)=""/102356, 0x18fd4, 0xc2a) execve(&(0x7f0000019700)='./file0\x00', 0x0, &(0x7f0000019740)={[&(0x7f0000019780)=' ']}) r6 = socket$inet6(0xa, 0x6, 0xfffffff0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f00000197c0)={'bridge0\x00', &(0x7f0000019800)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x3, 0x1, 0x900, 0x4}}) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000003c0)={0xe, 0x6, {0x51, 0x9, 0xe, {0x9, 0x2}, {0x9, 0x3}, @cond=[{0x9, 0x200, 0xe5a, 0xb16, 0x7, 0x8}, {0xfffa, 0x2, 0x80, 0x8, 0x3, 0x4}]}, {0x53, 0x5, 0x0, {0x5, 0x3}, {0xad, 0xd}, @ramp={0x9, 0x60, {0xffff, 0xe4, 0xff, 0x1b}}}}) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000019840)=0x2, 0x4) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000019880)={0x6, {{0xa, 0x0, 0x2, @empty, 0x4}}}, 0x88) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000000)={0x8, 0x0, 0x1, {0xb, 0xfffffff8, 0x6, 0x8001}}) syz_emit_vhci(&(0x7f0000019980)=ANY=[@ANYBLOB="043e"], 0x22) 7.808686753s ago: executing program 6 (id=964): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) (fail_nth: 7) 7.086568941s ago: executing program 3 (id=966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0xf01c, 0x8900) ioctl$LOOP_CONFIGURE(r2, 0x801070cf, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(r3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r1, 0xf, 0x1, 0x6045, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0}, 0x40) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='gid_map\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000380)=""/214, 0xd6}], 0x1, 0xf2, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x2001, 0x0) write$P9_RSTATFS(r6, 0x0, 0x72) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@map=r5, r3, 0x16, 0x2000, 0x0, @value=r6, @void, @void, @void, r4}, 0x20) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c00000001040100dfee0000000000000200000005000100010500002316fe0a5123faaf119c6bb3afb0622d3d596c3a96591e439cead7e35d5291a51501159a3029f04acafea6fc8f74755dcf5a5c76e6a4b1b07d4d7a68c8f49af3e2"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000000010401000000000000000000020000000a0002"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0xac, 0x8, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6558}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x264}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x892f}]}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x138}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f00000009c0)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000a00)=0x58, 0x4) socket$igmp(0x2, 0x3, 0x2) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f0000000a40)={0x23, 0x2, 0x898, 0x7, 0x10000}) r9 = syz_open_dev$usbfs(&(0x7f0000000a80), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f0000000ac0)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r9, 0xc0105502, &(0x7f0000000c00)={0x1, 0x1}) ioctl$FS_IOC_GETFLAGS(r9, 0x80086601, &(0x7f0000000c40)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), 0xffffffffffffffff) 6.755104878s ago: executing program 1 (id=967): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x402, 0x51}, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0xf4ffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 6.734526286s ago: executing program 7 (id=968): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd0e, &(0x7f0000000440)="0400000032000000000000005001000038010000000000000000000000000000000000000000000000000000000000006d") 6.688118509s ago: executing program 6 (id=969): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$igmp(0x2, 0x3, 0x2) msgget$private(0x0, 0x230) r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) writev(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000440)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000500)=""/102400, 0x19000) sched_setaffinity(r3, 0x47, &(0x7f0000019500)=0x7) mount(0x0, &(0x7f0000019540)='./sys\x00', &(0x7f0000019580)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000195c0)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x20080, 0x10) read(r5, &(0x7f0000019600)=""/100, 0x64) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) socket(0x10, 0x3, 0x0) 6.595530139s ago: executing program 3 (id=970): r0 = io_uring_setup(0x2f4f, &(0x7f0000000000)={0x0, 0xf537, 0x20000, 0x3, 0xfb}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0xffffffffffffffff, 0x1, 0xe, 0xfe, "d92984bd1ca44c226af5160e961711a07775b78411e08509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) listen(r1, 0xf5f) accept(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mtd(&(0x7f00000003c0), 0x46, 0x2) ioctl$ECCGETLAYOUT(r3, 0x81484d11, 0x0) 6.519751073s ago: executing program 7 (id=971): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x5ae, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4622, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc0}}, 0x7}, 0x1c) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56e4f, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.529539091s ago: executing program 2 (id=972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200000000310000000008000a40fffffffc08000340000000140c00098008000140000000811400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001b140100fcffffff0000000008004a0001000000080003000000000108004b0013000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000080fa5f4cf88aa6c7fc52fec9", @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf251100000008000100", @ANYRES32=0x0, @ANYBLOB="0800150001000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r5 = syz_open_dev$cec(&(0x7f0000000300), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000340)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", '\x00', "0400", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f00000003c0)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x2, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000000)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9cf439ff80e1d1c800", "82b42c25aca980ba00", "00000000000200"]}) 5.454155558s ago: executing program 6 (id=973): mount_setattr(0xffffffffffffffff, 0x0, 0x1200, 0x0, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) r1 = getpid() listns(&(0x7f0000000000)={0x20, 0x0, 0xffffffffffffffff, 0x1c000000}, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000980)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000a80), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000ac0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000b00)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000b40)={0x0, 0xb9d8, 0x2}) mount(&(0x7f0000000c00)=@filename='127.0.0.1:/\x00', &(0x7f0000000c40)='./file2\x00', &(0x7f0000000c80)='nfs\x00', 0x0, &(0x7f0000000cc0)='addr=127.0.0.1,vers=3,proto=udp\x00') keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000d00)='user\x00', &(0x7f0000000d40)={'syz', 0x1}, &(0x7f0000000d80)='R\x10rust\xe3c*sgrVix@De', 0x0) mount(0x0, &(0x7f0000000ec0)='./sys\x00', &(0x7f0000000f00)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f40)='./sys/bus/serio/devices/serio1/protocol\x00', 0x2, 0x0) r4 = semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180"], 0xe4}}, 0x0) semop(r4, &(0x7f0000001080)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e23, @local}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) 5.252266195s ago: executing program 3 (id=974): socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000001700)={0x20080522}, &(0x7f0000001740)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001080)='./dev\x00', &(0x7f00000010c0)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt\x00', 0x1ff) mount(&(0x7f0000001140)=@filename='./dev/sda1\x00', &(0x7f0000001180)='./mnt\x00', &(0x7f00000011c0)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001280)=@v2={0x2, @aes256, 0x4, '\x00', @c}) (fail_nth: 3) 5.108406291s ago: executing program 2 (id=975): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, 0x0, 0x8044) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0xf, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24004045) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x103, 0x2043, 0x2, 0x8e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x64d7, 0x2000, 0x0, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x4, 0x3, 0x26d}}], 0x1, 0x0, 0x0) 4.886140029s ago: executing program 3 (id=976): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) link(0x0, 0x0) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl(r1, 0x404c4701, &(0x7f0000000340)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000006c0)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000700)=0x3f) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000740)=0x1c) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000780)=0xf9) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e", 0x21) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x4e21, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0x2, 0xa}, {@in=@private=0xa012101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x6c, 0x3, 0x0, 0x0, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="10000000000100000000020000000000"], 0x10}], 0x1}, 0x0) 4.74631375s ago: executing program 1 (id=977): sysfs$3(0x3) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x9031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r3, r4, 0x14, 0x0, @void}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) prlimit64(0x0, 0x3, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) close(0xffffffffffffffff) write$nsim_bool(0xffffffffffffffff, &(0x7f0000000680)='1', 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/route\x00') pread64(r5, &(0x7f0000000700)=""/102356, 0x18fd4, 0xc2a) execve(&(0x7f0000019700)='./file0\x00', 0x0, &(0x7f0000019740)={[&(0x7f0000019780)=' ']}) r6 = socket$inet6(0xa, 0x6, 0xfffffff0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f00000197c0)={'bridge0\x00', &(0x7f0000019800)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x3, 0x1, 0x900, 0x4}}) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000003c0)={0xe, 0x6, {0x51, 0x9, 0xe, {0x9, 0x2}, {0x9, 0x3}, @cond=[{0x9, 0x200, 0xe5a, 0xb16, 0x7, 0x8}, {0xfffa, 0x2, 0x80, 0x8, 0x3, 0x4}]}, {0x53, 0x5, 0x0, {0x5, 0x3}, {0xad, 0xd}, @ramp={0x9, 0x60, {0xffff, 0xe4, 0xff, 0x1b}}}}) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000019840)=0x2, 0x4) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000019880)={0x6, {{0xa, 0x0, 0x2, @empty, 0x4}}}, 0x88) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000000)={0x8, 0x0, 0x1, {0xb, 0xfffffff8, 0x6, 0x8001}}) syz_emit_vhci(&(0x7f0000019980)=ANY=[@ANYBLOB="043e1f"], 0x22) 3.260586783s ago: executing program 1 (id=978): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x0) listen(r3, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, 0x0, 0x4000090) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x14, r7, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000540)=0x2000002) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x313}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x6, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3.136281516s ago: executing program 7 (id=979): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x48000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000180)={{0x3, 0x3, 0xe47, 0x0, 0x800000}, 0x2, 0x9, 'id0\x00', 'timer1\x00', 0x0, 0x2, 0xffffffffffffbd85, 0x800, 0x5692dae6}) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x6) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000180001092cbd7000fbdbdf25021800000000fd080001000008000400", @ANYRES32], 0x2c}}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f000001ad00)=ANY=[@ANYBLOB="1b00000000000000000000004501000000000000", @ANYRES32, @ANYBLOB="0300010000000000000000000000000000ac7e00f941cde0daaddc10ca5c64b529fdef3ac4908b0c1f0cf8a446818fdd93ff5f85443faf16c96d638f38a9ebfd8c0f11860241d2d9aa4208bb872e70bf6b58b3370f6ae446724a85ba259ccb0336460cf31198edc32019658ca386acf603d288", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000300"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x0, 0x20, 0xf420, 0x7, {{0x13, 0x4, 0x3, 0x32, 0x4c, 0x66, 0x0, 0xc, 0x4, 0x0, @loopback, @broadcast, {[@timestamp={0x44, 0xc, 0x77, 0x0, 0x3, [0x3ff, 0x8a]}, @cipso={0x86, 0x13, 0x3, [{0x0, 0x5, "5ac7ea"}, {0x0, 0x8, "7789cd6592f7"}]}, @timestamp={0x44, 0xc, 0xa2, 0x0, 0x4, [0x5, 0x2]}, @lsrr={0x83, 0xb, 0x4a, [@dev={0xac, 0x14, 0x14, 0x44}, @remote]}]}}}}}) r2 = syz_open_procfs(0x0, &(0x7f0000000640)='net/route\x00') pread64(r2, &(0x7f0000000680)=""/102356, 0x18fd4, 0xc2a) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000019780)={0xffffffffffffffff, 0x20, &(0x7f0000019740)={&(0x7f00000196c0)=""/51, 0x33, 0x0, &(0x7f0000019700)=""/54, 0x36}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000009000000040000000100000008080400", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000300000000000000000000000000000000f4bb32f33e285f69"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000198c0)={{0x1}, &(0x7f0000019840), &(0x7f0000019880)='%pB \x00'}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000019900)='./tracing/uprobe_events\x00', 0x401, 0x1) write(r3, &(0x7f0000019940)='p:--s_/event1 ./file0:0', 0x17) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000019980)=ANY=[], 0x48) setns(0xc9, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000019980)={&(0x7f000001ae40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f000001aec0)={0x0, 0x0, &(0x7f000001af00)={&(0x7f000001af40)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e5414000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000199c0)={0x1f, 0x18, &(0x7f0000019a80)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b705"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000019ac0)={0x1}, 0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000019b00)={0x200f, {"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", 0x1000}}, 0x1006) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f000001abc0)={{}, &(0x7f000001ab40), &(0x7f000001ab80)='%pK \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2100000000000000000000000d00000000000600", @ANYRES32=0x1, @ANYBLOB="0022244f2a02651d55002c010000000000000000935545eba6365e1d849faf7b4d69de3278869cc6e37b33b666a432602b5ba917505524910599010c1f46e52327a3392e90f99d56f8e6f0db1750a8dcd839bb7ace78f58a482b278fbff937d02866213b3c6aba421761", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010000000200"/28], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f000001ac80)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 2.057461434s ago: executing program 1 (id=980): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) fcntl$notify(r1, 0x402, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000008c0)={'wlan0\x00', @multicast}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffc}}}}, 0x280) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000140)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000036e000/0x3000)=nil, 0x400000, 0x3, 0x2}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000800)=0x0) munmap(&(0x7f0000587000/0x1000)=nil, 0x1000) syz_open_procfs$pagemap(r5, &(0x7f0000000840)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0x800020d, 0x16, 0x120, &(0x7f0000000400)}) 1.843701826s ago: executing program 2 (id=981): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) close(0x3) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) sendfile(r1, r0, 0x0, 0x7ffff03f) 1.456002041s ago: executing program 2 (id=982): socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x60840, 0x0) r0 = semget$private(0x0, 0x4000000009, 0x668) semop(r0, &(0x7f0000000340)=[{0x0, 0x9b6a, 0x1000}], 0x1) semop(r0, &(0x7f0000000700), 0x53) semctl$IPC_RMID(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000440)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) userfaultfd(0x801) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x9c}) syz_open_dev$tty1(0xc, 0x4, 0x2) 1.438194656s ago: executing program 3 (id=983): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xa4242, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00004fb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xdbc, &(0x7f0000000280)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r2 = syz_open_procfs(0x0, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="17"], 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xc, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000880)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r5, r4, 0x25, 0x0, @void}, 0x10) io_uring_enter(r1, 0x2219, 0x7721, 0x33, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000f5e000/0x2000)=nil, 0x2000, 0x3000007, 0x38011, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioprio_set$pid(0x2, 0x0, 0x4000) ioprio_get$pid(0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0xc004080) socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x11000) copy_file_range(r6, &(0x7f0000000180)=0x4, r6, &(0x7f0000000440)=0x6b76, 0x5, 0x0) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f00000004c0)={0x9, 0x0, 0x3e}) syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x2) syz_open_dev$sg(&(0x7f0000000500), 0x7fff, 0x2b00) syz_open_dev$sg(&(0x7f0000000540), 0x0, 0x189482) 1.430094146s ago: executing program 7 (id=984): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000805"], 0x97) openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x6c, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 1.296162073s ago: executing program 1 (id=985): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x0, 0xb, 0x800a, 0x7488eb57, 0x10, 0x6, 0x10000, 0xfe, r3}, &(0x7f0000000180)=0x20) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 796.258799ms ago: executing program 2 (id=986): connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x3, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r2) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000000000000000020100000900010073797a3000000000070002006c6f"], 0x30}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r5, &(0x7f0000001f00)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x2, &(0x7f000001af00)=0x80000000000003) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x686200, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000080)="02000000", 0x4}, {&(0x7f00000000c0)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000000140)="527302587e0a4e47ad", 0x9}], 0x3, 0x0, 0x0) 354.932µs ago: executing program 6 (id=987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000640)=0xe14) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000680)) write(r5, &(0x7f0000000240)="7472616e73706f72743d66632c7472616464723d6e6e2d3078313030303030303034343030313132323a706e2d3078323030303030303034343030313132322c686f73745f7472616464723d6e6e2d3078313030303030303034343030313132333a706e2d3078323030303030303034343030313132332c6e716e3d746573747375627379732c686f73746e716e3d6e71d00870c9175641d259bee5a8400e540a", 0xa1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r6, 0x7fffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24005800) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r6) sendmsg$DEVLINK_CMD_SB_POOL_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x54, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x93, 0xb, 0xb5a}, {0x6}, {0x8, 0x13, 0x100}, {0x5, 0x14, 0xfd}}]}, 0x54}}, 0xc000) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/time_for_children\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xf8, r8, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x7fff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ptrace$setsig(0x4203, 0x0, 0x1, &(0x7f0000000380)={0x14, 0x1, 0xfee9}) 0s ago: executing program 2 (id=988): sysfs$3(0x3) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x9031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r3, r4, 0x14, 0x0, @void}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) prlimit64(0x0, 0x3, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) close(0xffffffffffffffff) write$nsim_bool(0xffffffffffffffff, &(0x7f0000000680)='1', 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/route\x00') pread64(r5, &(0x7f0000000700)=""/102356, 0x18fd4, 0xc2a) execve(&(0x7f0000019700)='./file0\x00', 0x0, &(0x7f0000019740)={[&(0x7f0000019780)=' ']}) r6 = socket$inet6(0xa, 0x6, 0xfffffff0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f00000197c0)={'bridge0\x00', &(0x7f0000019800)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x3, 0x1, 0x900, 0x4}}) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000003c0)={0xe, 0x6, {0x51, 0x9, 0xe, {0x9, 0x2}, {0x9, 0x3}, @cond=[{0x9, 0x200, 0xe5a, 0xb16, 0x7, 0x8}, {0xfffa, 0x2, 0x80, 0x8, 0x3, 0x4}]}, {0x53, 0x5, 0x0, {0x5, 0x3}, {0xad, 0xd}, @ramp={0x9, 0x60, {0xffff, 0xe4, 0xff, 0x1b}}}}) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000019840)=0x2, 0x4) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000019880)={0x6, {{0xa, 0x0, 0x2, @empty, 0x4}}}, 0x88) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000000)={0x8, 0x0, 0x1, {0xb, 0xfffffff8, 0x6, 0x8001}}) syz_emit_vhci(&(0x7f0000019980)=ANY=[@ANYBLOB="043e1f"], 0x22) kernel console output (not intermixed with test programs): high-speed USB device number 12 using dummy_hcd [ 226.413714][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 226.414202][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 226.415063][ T10] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 226.415085][ T10] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 226.415104][ T10] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 226.415123][ T10] usb 4-1: config 250 has no interface number 0 [ 226.415157][ T10] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 226.415170][ T10] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 226.415183][ T10] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 226.415194][ T10] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 226.415206][ T10] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 226.415219][ T10] usb 4-1: config 250 interface 228 has no altsetting 0 [ 226.416329][ T10] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 226.416342][ T10] usb 4-1: Product: syz [ 226.416351][ T10] usb 4-1: SerialNumber: syz [ 226.420927][ T10] hub 4-1:250.228: bad descriptor, ignoring hub [ 226.420952][ T10] hub 4-1:250.228: probe with driver hub failed with error -5 [ 226.632089][ T10] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 226.648752][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 226.809122][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 226.833096][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 226.833177][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 226.833287][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.959588][ T7719] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 227.087490][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 227.087510][ T29] audit: type=1400 audit(1792360058.556:523): avc: denied { read write } for pid=7705 comm="syz.3.453" name="lp0" dev="devtmpfs" ino=3420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 227.087733][ T29] audit: type=1400 audit(1792360058.556:524): avc: denied { open } for pid=7705 comm="syz.3.453" path="/dev/usb/lp0" dev="devtmpfs" ino=3420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 227.152832][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 227.370640][ T29] audit: type=1400 audit(1792360058.756:525): avc: denied { append } for pid=7705 comm="syz.3.453" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 227.370751][ T29] audit: type=1400 audit(1792360058.776:526): avc: denied { ioctl } for pid=7724 comm="syz.0.458" path="/87/mnt/trace_pipe" dev="tracefs" ino=230 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 228.477566][ T7463] usb 4-1: USB disconnect, device number 12 [ 228.507159][ T7463] usblp0: removed [ 228.559624][ T9] usb 6-1: USB disconnect, device number 6 [ 228.669639][ T29] audit: type=1400 audit(1792360060.136:527): avc: denied { getopt } for pid=7740 comm="syz.1.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 228.850576][ T29] audit: type=1400 audit(1792360060.316:528): avc: denied { map } for pid=7738 comm="syz.0.462" path="socket:[15131]" dev="sockfs" ino=15131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 230.675473][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 230.825365][ T10] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 230.826437][ T10] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 230.826477][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 230.826500][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 230.826522][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 230.826543][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 230.826565][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 230.826588][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 230.826609][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 230.826630][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 230.826650][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 230.826670][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 230.826691][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 230.826712][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 14385, setting to 1024 [ 230.826741][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 230.826762][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 230.843668][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.843694][ T10] usb 6-1: Product: syz [ 230.843708][ T10] usb 6-1: Manufacturer: syz [ 230.843729][ T10] usb 6-1: SerialNumber: syz [ 230.923517][ T5613] Bluetooth: hci1: unexpected event for opcode 0x2029 [ 231.038666][ T7758] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 231.038792][ T7758] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 231.038901][ T7758] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 231.038986][ T7758] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 231.039091][ T7758] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 231.039193][ T7758] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 231.039284][ T7758] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 231.039390][ T7758] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 231.039493][ T7758] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 231.039577][ T7758] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 231.039679][ T7758] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 231.040591][ T7758] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 231.080198][ T10] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 231.141288][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 231.156919][ T10] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 231.162248][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 231.168997][ T7760] ve: renamed from veth0_vlan (while UP) [ 231.186662][ T10] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 231.472692][ T7778] geneve1: entered allmulticast mode [ 231.499065][ T29] audit: type=1400 audit(1792360062.966:529): avc: denied { create } for pid=7757 comm="syz.5.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 231.541058][ T29] audit: type=1400 audit(1792360063.006:530): avc: denied { bind } for pid=7757 comm="syz.5.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 233.057515][ T7460] usb 6-1: USB disconnect, device number 7 [ 233.081051][ T7799] binder: 7798:7799 ioctl 4018620d 0 returned -22 [ 233.991753][ T29] audit: type=1400 audit(1792360065.006:531): avc: denied { ioctl } for pid=7798 comm="syz.3.476" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 234.115561][ T7460] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 234.122877][ T7460] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 234.152583][ T7460] keyspan 6-1:1.0: device disconnected [ 234.583943][ T29] audit: type=1400 audit(1792360066.056:532): avc: denied { write } for pid=7810 comm="syz.0.479" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 234.584710][ T7811] binder: 7810:7811 ioctl c018620c 200000000140 returned -1 [ 234.771978][ T29] audit: type=1400 audit(1792360066.236:533): avc: denied { write } for pid=7790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.241879][ T29] audit: type=1400 audit(1792360066.706:534): avc: denied { write } for pid=7816 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.127595][ T5613] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 238.519650][ T7843] pimreg: entered allmulticast mode [ 238.594208][ T7843] netlink: 'syz.3.477': attribute type 12 has an invalid length. [ 238.594223][ T7843] netlink: 'syz.3.477': attribute type 29 has an invalid length. [ 238.594230][ T7843] netlink: 148 bytes leftover after parsing attributes in process `syz.3.477'. [ 238.695528][ T29] audit: type=1400 audit(1792360070.166:535): avc: denied { map } for pid=7842 comm="syz.3.477" path="socket:[16386]" dev="sockfs" ino=16386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 238.801120][ T29] audit: type=1400 audit(1792360070.266:536): avc: denied { write } for pid=7820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.854571][ T7842] pimreg: left allmulticast mode [ 239.129583][ T29] audit: type=1400 audit(1792360070.596:537): avc: denied { write } for pid=7851 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.582337][ T29] audit: type=1400 audit(1792360072.046:538): avc: denied { watch } for pid=7861 comm="syz.1.485" path="/125/net_prio.prioidx" dev="tmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 240.582420][ T29] audit: type=1400 audit(1792360072.046:539): avc: denied { watch_sb watch_reads } for pid=7861 comm="syz.1.485" path="/125/net_prio.prioidx" dev="tmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 240.907334][ T7867] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 240.907367][ T7867] CPU: 1 UID: 0 PID: 7867 Comm: syz.5.487 Not tainted syzkaller #0 PREEMPT(full) [ 240.907391][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 240.907405][ T7867] Call Trace: [ 240.907412][ T7867] [ 240.907420][ T7867] dump_stack_lvl+0x100/0x190 [ 240.907460][ T7867] sysfs_warn_dup.cold+0x1c/0x28 [ 240.907493][ T7867] sysfs_create_dir_ns+0x24b/0x2b0 [ 240.907514][ T7867] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 240.907533][ T7867] ? find_held_lock+0x2b/0x80 [ 240.907563][ T7867] ? kobject_add_internal+0x25f/0x930 [ 240.907587][ T7867] ? kobject_add_internal+0x25f/0x930 [ 240.907619][ T7867] ? class_dir_child_ns_type+0xd/0x60 [ 240.907645][ T7867] kobject_add_internal+0x2c8/0x930 [ 240.907673][ T7867] kobject_add+0x16a/0x1e0 [ 240.907695][ T7867] ? __pfx_kobject_add+0x10/0x10 [ 240.907719][ T7867] ? preempt_schedule_thunk+0x16/0x40 [ 240.907747][ T7867] ? kobject_put+0xb9/0x640 [ 240.907776][ T7867] device_add+0x294/0x1970 [ 240.907799][ T7867] ? lockdep_init_map_type+0x5c/0x250 [ 240.907825][ T7867] ? __pfx_device_add+0x10/0x10 [ 240.907847][ T7867] ? lockdep_init_map_type+0x5c/0x250 [ 240.907872][ T7867] ? __init_waitqueue_head+0xca/0x150 [ 240.907907][ T7867] tty_register_device_attr+0x388/0x810 [ 240.907939][ T7867] ? lockdep_init_map_type+0x5c/0x250 [ 240.907965][ T7867] ? __pfx_tty_register_device_attr+0x10/0x10 [ 240.908004][ T7867] ? tty_port_init+0x156/0x1c0 [ 240.908028][ T7867] gsm_activate_mux+0x155/0x2a0 [ 240.908050][ T7867] gsmld_ioctl+0xbbc/0x15c0 [ 240.908081][ T7867] ? __pfx_gsmld_ioctl+0x10/0x10 [ 240.908124][ T7867] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 240.908151][ T7867] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 240.908182][ T7867] ? __pfx_gsmld_ioctl+0x10/0x10 [ 240.908205][ T7867] tty_ioctl+0x12f0/0x1800 [ 240.908225][ T7867] ? __pfx_tty_ioctl+0x10/0x10 [ 240.908243][ T7867] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 240.908277][ T7867] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 240.908312][ T7867] ? __fget_files+0x34/0x3d0 [ 240.908353][ T7867] ? selinux_file_ioctl+0x13b/0x290 [ 240.908380][ T7867] ? selinux_file_ioctl+0xb6/0x290 [ 240.908411][ T7867] ? __pfx_tty_ioctl+0x10/0x10 [ 240.908431][ T7867] __x64_sys_ioctl+0x18e/0x210 [ 240.908460][ T7867] do_syscall_64+0x123/0x790 [ 240.908492][ T7867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.908513][ T7867] RIP: 0033:0x7f4f9c39e559 [ 240.908531][ T7867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.908550][ T7867] RSP: 002b:00007f4f9d225028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.908571][ T7867] RAX: ffffffffffffffda RBX: 00007f4f9c626180 RCX: 00007f4f9c39e559 [ 240.908585][ T7867] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007 [ 240.908603][ T7867] RBP: 00007f4f9c435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 240.908616][ T7867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.908628][ T7867] R13: 00007f4f9c626218 R14: 00007f4f9c626180 R15: 00007fff310deee8 [ 240.908657][ T7867] [ 240.908793][ T7867] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 240.969159][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.487'. [ 241.694597][ T944] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 241.871978][ T944] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 241.872111][ T944] usb 6-1: too many configurations: 15, using maximum allowed: 8 [ 242.028778][ T944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.028843][ T944] usb 6-1: Product: syz [ 242.028882][ T944] usb 6-1: Manufacturer: syz [ 242.028920][ T944] usb 6-1: SerialNumber: syz [ 243.463700][ T29] audit: type=1400 audit(1792360074.926:540): avc: denied { ioctl } for pid=7878 comm="syz.2.486" path="socket:[16550]" dev="sockfs" ino=16550 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 243.723733][ T944] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 243.723785][ T944] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 243.725724][ T944] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 243.731761][ T29] audit: type=1400 audit(1792360075.186:541): avc: denied { setopt } for pid=7864 comm="syz.5.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 243.731812][ T29] audit: type=1400 audit(1792360075.186:542): avc: denied { bind } for pid=7864 comm="syz.5.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 243.816571][ T944] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 243.851891][ T944] usb 6-1: USB disconnect, device number 8 [ 245.368582][ T7911] tipc: Enabling of bearer rejected, failed to enable media [ 245.408125][ T7911] tipc: Enabling of bearer rejected, already enabled [ 245.555768][ T7916] tipc: Started in network mode [ 245.555800][ T7916] tipc: Node identity 7f000001, cluster identity 4711 [ 245.556178][ T7916] tipc: Enabling of bearer rejected, failed to enable media [ 245.621715][ T7916] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 245.622056][ T7916] tipc: Enabled bearer , priority 10 [ 245.746864][ T29] audit: type=1400 audit(1792360077.216:543): avc: denied { write } for pid=7912 comm="syz.3.501" name="config" dev="proc" ino=4026533038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 246.115909][ T7937] vlan2: entered promiscuous mode [ 246.115936][ T7937] bridge0: entered promiscuous mode [ 246.116088][ T7937] vlan2: entered allmulticast mode [ 246.116102][ T7937] bridge0: entered allmulticast mode [ 246.787582][ T7460] tipc: Node number set to 2130706433 [ 246.950116][ T7948] netlink: 144 bytes leftover after parsing attributes in process `syz.2.509'. [ 247.187703][ T29] audit: type=1400 audit(1792360078.656:544): avc: denied { bind } for pid=7950 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 249.076615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 249.773314][ T7973] binder: 7971:7973 ioctl c018620c 200000000140 returned -1 [ 249.810057][ T29] audit: type=1400 audit(1792360081.276:545): avc: denied { setopt } for pid=7974 comm="syz.3.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 249.839351][ T7969] netlink: 48 bytes leftover after parsing attributes in process `syz.2.515'. [ 250.012720][ T7978] binder: 7977:7978 ioctl c018620c 200000000140 returned -1 [ 250.235375][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.235422][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.214433][ T7981] netlink: 48 bytes leftover after parsing attributes in process `syz.5.520'. [ 252.777921][ T8007] xt_hashlimit: size too large, truncated to 1048576 [ 252.897023][ T8008] tmpfs: Bad value for 'mpol' [ 252.907009][ T29] audit: type=1400 audit(1792360084.206:546): avc: denied { mount } for pid=8003 comm="syz.2.526" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 253.883455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 256.431455][ T8034] loop8: detected capacity change from 0 to 16384 [ 256.868111][ T8036] loop8: detected capacity change from 16384 to 16383 [ 256.905523][ T8034] I/O error, dev loop8, sector 8192 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 256.906394][ T8034] I/O error, dev loop8, sector 8448 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 256.906697][ T8034] I/O error, dev loop8, sector 8192 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.948271][ T8034] Buffer I/O error on dev loop8, logical block 1024, async page read [ 256.948467][ T8034] I/O error, dev loop8, sector 8200 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.948495][ T8034] Buffer I/O error on dev loop8, logical block 1025, async page read [ 256.948523][ T8034] I/O error, dev loop8, sector 8208 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.948546][ T8034] Buffer I/O error on dev loop8, logical block 1026, async page read [ 256.948573][ T8034] I/O error, dev loop8, sector 8216 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.948593][ T8034] Buffer I/O error on dev loop8, logical block 1027, async page read [ 256.948619][ T8034] I/O error, dev loop8, sector 8224 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.948640][ T8034] Buffer I/O error on dev loop8, logical block 1028, async page read [ 256.948667][ T8034] I/O error, dev loop8, sector 8232 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.948688][ T8034] Buffer I/O error on dev loop8, logical block 1029, async page read [ 256.948713][ T8034] I/O error, dev loop8, sector 8240 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.948734][ T8034] Buffer I/O error on dev loop8, logical block 1030, async page read [ 256.948761][ T8034] I/O error, dev loop8, sector 8248 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.948782][ T8034] Buffer I/O error on dev loop8, logical block 1031, async page read [ 256.948811][ T8034] Buffer I/O error on dev loop8, logical block 1032, async page read [ 256.948847][ T8034] Buffer I/O error on dev loop8, logical block 1033, async page read [ 257.604044][ T7460] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 257.764358][ T7460] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 257.765258][ T7460] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.765299][ T7460] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 257.765329][ T7460] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 257.765365][ T7460] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.899983][ T8036] ldm_validate_partition_table(): Disk read failed. [ 257.900068][ T8036] Dev loop8: unable to read RDB block 0 [ 257.900257][ T8036] loop8: unable to read partition table [ 257.900392][ T8036] loop_reread_partitions: partition scan of loop8 ((õÉê—) failed (rc=-5) [ 258.013617][ T944] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 258.253471][ T944] usb 4-1: Using ep0 maxpacket: 8 [ 258.255328][ T944] usb 4-1: unable to get BOS descriptor or descriptor too short [ 258.255368][ T944] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 258.256179][ T944] usb 4-1: config 4 interface 0 has no altsetting 0 [ 258.260299][ T944] usb 4-1: string descriptor 0 read error: -22 [ 258.260372][ T944] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 258.270984][ T944] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 258.286798][ T944] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 258.287053][ T944] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 258.287086][ T944] usb 4-1: media controller created [ 258.314280][ T944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 259.081655][ T29] audit: type=1400 audit(1792360090.546:547): avc: denied { ioctl } for pid=8033 comm="syz.5.523" path="socket:[17564]" dev="sockfs" ino=17564 ioctlcmd=0x6150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 259.081690][ T29] audit: type=1400 audit(1792360090.546:548): avc: denied { module_request } for pid=8033 comm="syz.5.523" kmod="atm-device-140799593" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 259.370449][ T29] audit: type=1400 audit(1792360090.836:549): avc: denied { listen } for pid=8045 comm="syz.3.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 259.668889][ T7460] cxacru 6-1:1.0: send of cm 0x91 failed (-71) [ 259.668944][ T7460] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 259.668956][ T7460] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 259.706018][ T7460] cxacru 6-1:1.0: probe with driver cxacru failed with error -71 [ 259.730428][ T7460] usb 6-1: USB disconnect, device number 9 [ 260.241286][ T944] zl10353_read_register: readreg error (reg=127, ret==0) [ 260.422650][ T29] audit: type=1400 audit(1792360091.886:550): avc: denied { write } for pid=8064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.500418][ T29] audit: type=1326 audit(1792360091.966:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.3.539" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66719e559 code=0x7ffc0000 [ 260.500471][ T29] audit: type=1326 audit(1792360091.966:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.3.539" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66719e559 code=0x7ffc0000 [ 260.571461][ T29] audit: type=1326 audit(1792360092.036:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.3.539" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff66719e559 code=0x7ffc0000 [ 260.600080][ T29] audit: type=1326 audit(1792360092.066:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.3.539" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66719e559 code=0x7ffc0000 [ 260.606056][ T29] audit: type=1326 audit(1792360092.076:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.3.539" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66719e559 code=0x7ffc0000 [ 260.771059][ T8077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.539'. [ 261.158777][ T8085] Invalid logical block size (8195) [ 261.863635][ T8077] faux_driver vgem: [drm] Unknown color mode 58886; guessing buffer size. [ 262.120801][ T8093] netlink: 'syz.2.538': attribute type 16 has an invalid length. [ 262.919445][ T7463] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 263.074737][ T7463] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 263.116572][ T8125] overlayfs: failed to clone upperpath [ 263.137209][ T7463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.137233][ T7463] usb 1-1: Product: syz [ 263.137242][ T7463] usb 1-1: Manufacturer: syz [ 263.137250][ T7463] usb 1-1: SerialNumber: syz [ 263.178316][ T7463] usb 1-1: USB2VGA dongle found at address 12 [ 263.196571][ T7463] usb 1-1: Allocated 8 output buffers [ 263.640292][ T8131] FAULT_INJECTION: forcing a failure. [ 263.640292][ T8131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.640314][ T8131] CPU: 0 UID: 0 PID: 8131 Comm: syz.5.541 Not tainted syzkaller #0 PREEMPT(full) [ 263.640328][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 263.640335][ T8131] Call Trace: [ 263.640339][ T8131] [ 263.640344][ T8131] dump_stack_lvl+0x100/0x190 [ 263.640365][ T8131] should_fail_ex.cold+0x5/0xa [ 263.640383][ T8131] _copy_to_user+0x32/0xd0 [ 263.640401][ T8131] simple_read_from_buffer+0xcb/0x170 [ 263.640420][ T8131] proc_fail_nth_read+0x1af/0x230 [ 263.640437][ T8131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.640455][ T8131] ? rw_verify_area+0xce/0x6d0 [ 263.640467][ T8131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.640483][ T8131] vfs_read+0x1e4/0xb40 [ 263.640497][ T8131] ? lock_acquire+0x1d1/0x380 [ 263.640510][ T8131] ? __fget_files+0x34/0x3d0 [ 263.640526][ T8131] ? __pfx_vfs_read+0x10/0x10 [ 263.640538][ T8131] ? find_held_lock+0x2b/0x80 [ 263.640555][ T8131] ? __fget_files+0x215/0x3d0 [ 263.640573][ T8131] ? __fget_files+0x21f/0x3d0 [ 263.640593][ T8131] ksys_read+0x12a/0x250 [ 263.640606][ T8131] ? __pfx_ksys_read+0x10/0x10 [ 263.640623][ T8131] do_syscall_64+0x123/0x790 [ 263.640642][ T8131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.640654][ T8131] RIP: 0033:0x7f4f9c35ed8e [ 263.640664][ T8131] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 263.640674][ T8131] RSP: 002b:00007f4f9d266fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 263.640685][ T8131] RAX: ffffffffffffffda RBX: 00007f4f9d2676c0 RCX: 00007f4f9c35ed8e [ 263.640692][ T8131] RDX: 000000000000000f RSI: 00007f4f9d2670a0 RDI: 0000000000000005 [ 263.640699][ T8131] RBP: 00007f4f9d267090 R08: 0000000000000000 R09: 0000000000000000 [ 263.640707][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.640714][ T8131] R13: 00007f4f9c626038 R14: 00007f4f9c625fa0 R15: 00007fff310deee8 [ 263.640729][ T8131] [ 263.925976][ T7463] usb 1-1: Failed to early initialize device [ 263.956180][ T7463] usb 1-1: USB disconnect, device number 12 [ 264.156085][ T8144] batman_adv: batadv0: Adding interface: veth0 [ 264.156103][ T8144] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.156131][ T8144] batman_adv: batadv0: Interface activated: veth0 [ 264.161705][ T8144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.161731][ T8144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.277831][ T8144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.277853][ T8144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.761686][ T7463] libceph: connect (1)[c::]:6789 error -101 [ 264.762075][ T7463] libceph: mon0 (1)[c::]:6789 connect error [ 264.774461][ T8144] batman_adv: batadv0: Interface deactivated: veth0 [ 264.774481][ T8144] batman_adv: batadv0: Removing interface: veth0 [ 264.882966][ T8147] ceph: No mds server is up or the cluster is laggy [ 265.025067][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 265.025085][ T29] audit: type=1400 audit(1792360096.496:759): avc: denied { listen } for pid=8155 comm="syz.3.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 265.993718][ T5598] Bluetooth: hci5: command 0x0406 tx timeout [ 266.223458][ T7452] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 266.379357][ T7452] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 266.381797][ T7452] usb 1-1: config 0 has no interfaces? [ 266.400958][ T7452] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 266.400985][ T7452] usb 1-1: Product: syz [ 266.400999][ T7452] usb 1-1: Manufacturer: syz [ 266.401012][ T7452] usb 1-1: SerialNumber: syz [ 266.437580][ T7452] usb 1-1: config 0 descriptor?? [ 266.562812][ T29] audit: type=1400 audit(1792360098.026:760): avc: denied { write } for pid=8166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.673297][ T7452] usb 1-1: USB disconnect, device number 13 [ 266.760980][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 266.763887][ T8193] ipvlan3: entered allmulticast mode [ 266.834937][ T29] audit: type=1400 audit(1792360098.296:761): avc: denied { write } for pid=8195 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.182809][ T29] audit: type=1400 audit(1792360100.646:762): avc: denied { write } for pid=8202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.075428][ T29] audit: type=1400 audit(1792360101.546:763): avc: denied { write } for pid=8246 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.856672][ T29] audit: type=1400 audit(1792360102.316:764): avc: denied { getopt } for pid=8260 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 272.233599][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 272.444931][ T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 272.445788][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.445819][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 272.445832][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 272.445845][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.445866][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.560936][ T9] usb 1-1: USB disconnect, device number 14 [ 274.944353][ T8299] netlink: 24 bytes leftover after parsing attributes in process `syz.5.591'. [ 274.944387][ T8299] netlink: 24 bytes leftover after parsing attributes in process `syz.5.591'. [ 274.944401][ T8299] FAULT_INJECTION: forcing a failure. [ 274.944401][ T8299] name failslab, interval 1, probability 0, space 0, times 0 [ 274.944424][ T8299] CPU: 0 UID: 0 PID: 8299 Comm: syz.5.591 Not tainted syzkaller #0 PREEMPT(full) [ 274.944444][ T8299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 274.944455][ T8299] Call Trace: [ 274.944462][ T8299] [ 274.944470][ T8299] dump_stack_lvl+0x100/0x190 [ 274.944501][ T8299] should_fail_ex.cold+0x5/0xa [ 274.944538][ T8299] should_failslab+0xc2/0x120 [ 274.944566][ T8299] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 274.944591][ T8299] ? __alloc_skb+0x5b7/0x710 [ 274.944609][ T8299] ? __alloc_skb+0x140/0x710 [ 274.944630][ T8299] __alloc_skb+0x140/0x710 [ 274.944645][ T8299] ? __alloc_skb+0x5b7/0x710 [ 274.944661][ T8299] ? __pfx___alloc_skb+0x10/0x10 [ 274.944687][ T8299] netlink_ack+0x117/0xb80 [ 274.944703][ T8299] ? avc_has_perm_noaudit+0x145/0x470 [ 274.944731][ T8299] netlink_rcv_skb+0x333/0x420 [ 274.944748][ T8299] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 274.944773][ T8299] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.944800][ T8299] ? ns_capable+0xd2/0xf0 [ 274.944823][ T8299] nfnetlink_rcv+0x1b3/0x440 [ 274.944845][ T8299] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 274.944865][ T8299] ? rcu_is_watching+0x13/0xc0 [ 274.944895][ T8299] netlink_unicast+0x65f/0x950 [ 274.944914][ T8299] ? __pfx_netlink_unicast+0x10/0x10 [ 274.944936][ T8299] netlink_sendmsg+0x8b0/0xda0 [ 274.944957][ T8299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.944975][ T8299] ? selinux_socket_sendmsg+0x198/0x2f0 [ 274.945005][ T8299] ____sys_sendmsg+0xa4d/0xbe0 [ 274.945033][ T8299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.945053][ T8299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.945081][ T8299] ? lock_acquire+0x1d1/0x380 [ 274.945102][ T8299] ? get_pid_task+0x2a/0x250 [ 274.945129][ T8299] ___sys_sendmsg+0x190/0x1e0 [ 274.945155][ T8299] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.945181][ T8299] ? get_pid_task+0x106/0x250 [ 274.945218][ T8299] ? find_held_lock+0x2b/0x80 [ 274.945260][ T8299] __sys_sendmsg+0x160/0x210 [ 274.945281][ T8299] ? __pfx___sys_sendmsg+0x10/0x10 [ 274.945314][ T8299] do_syscall_64+0x123/0x790 [ 274.945344][ T8299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.945364][ T8299] RIP: 0033:0x7f4f9c39e559 [ 274.945380][ T8299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.945398][ T8299] RSP: 002b:00007f4f9d267028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.945417][ T8299] RAX: ffffffffffffffda RBX: 00007f4f9c625fa0 RCX: 00007f4f9c39e559 [ 274.945429][ T8299] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 274.945440][ T8299] RBP: 00007f4f9d267090 R08: 0000000000000000 R09: 0000000000000000 [ 274.945451][ T8299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.945462][ T8299] R13: 00007f4f9c626038 R14: 00007f4f9c625fa0 R15: 00007fff310deee8 [ 274.945487][ T8299] [ 275.393663][ T8306] netlink: 2 bytes leftover after parsing attributes in process `syz.5.594'. [ 275.651739][ T8314] binder: 8313:8314 ioctl c018620c 200000000140 returned -1 [ 276.526555][ T29] audit: type=1400 audit(1792360107.996:765): avc: denied { write } for pid=8300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.859755][ T29] audit: type=1400 audit(1792360108.326:766): avc: denied { write } for pid=8330 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.833821][ T29] audit: type=1400 audit(1792360110.306:767): avc: denied { write } for pid=8337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.742671][ T29] audit: type=1400 audit(1792360111.196:768): avc: denied { write } for pid=8364 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.795542][ T29] audit: type=1326 audit(1792360111.246:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.3.604" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66719e559 code=0x7ffc0000 [ 279.795685][ T29] audit: type=1326 audit(1792360111.246:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.3.604" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff66719e559 code=0x7ffc0000 [ 279.795758][ T29] audit: type=1326 audit(1792360111.246:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.3.604" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66719e559 code=0x7ffc0000 [ 279.795831][ T29] audit: type=1326 audit(1792360111.246:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.3.604" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff66719e559 code=0x7ffc0000 [ 279.795931][ T29] audit: type=1326 audit(1792360111.266:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.3.604" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66719e559 code=0x7ffc0000 [ 279.814762][ T29] audit: type=1326 audit(1792360111.266:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.3.604" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66719e559 code=0x7ffc0000 [ 282.273464][ T5613] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 283.816709][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 283.816728][ T29] audit: type=1400 audit(1792360115.286:811): avc: denied { write } for pid=8380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.436987][ T29] audit: type=1400 audit(1792360115.886:812): avc: denied { write } for pid=8423 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.137879][ T29] audit: type=1400 audit(1792360116.606:813): avc: denied { create } for pid=8431 comm="syz.5.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 285.141212][ T29] audit: type=1400 audit(1792360116.606:814): avc: denied { bind } for pid=8431 comm="syz.5.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 285.302564][ T8433] Unsupported ieee802154 address type: 0 [ 285.595083][ T5792] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 285.783475][ T5792] usb 6-1: Invalid ep0 maxpacket: 32 [ 286.303901][ T5792] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 286.416913][ T8450] tipc: Enabled bearer , priority 10 [ 286.534126][ T8450] tipc: Enabling of bearer rejected, already enabled [ 286.536660][ T29] audit: type=1326 audit(1792360118.006:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.0.618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c979e559 code=0x7ffc0000 [ 286.553314][ T29] audit: type=1326 audit(1792360118.016:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.0.618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa5c979e559 code=0x7ffc0000 [ 286.589070][ T29] audit: type=1326 audit(1792360118.026:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.0.618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c979e559 code=0x7ffc0000 [ 286.589798][ T29] audit: type=1326 audit(1792360118.056:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.0.618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa5c979e559 code=0x7ffc0000 [ 286.593421][ T5792] usb 6-1: Invalid ep0 maxpacket: 32 [ 286.594176][ T5792] usb usb6-port1: attempt power cycle [ 286.598104][ T29] audit: type=1326 audit(1792360118.066:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.0.618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c979e559 code=0x7ffc0000 [ 286.601950][ T29] audit: type=1326 audit(1792360118.066:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.0.618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa5c979e559 code=0x7ffc0000 [ 286.959910][ T5792] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 286.975065][ T5792] usb 6-1: Invalid ep0 maxpacket: 32 [ 287.103475][ T5792] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 287.125494][ T5792] usb 6-1: Invalid ep0 maxpacket: 32 [ 287.126102][ T5792] usb usb6-port1: unable to enumerate USB device [ 287.571901][ T8460] tmpfs: Bad value for 'mpol' [ 287.873574][ T5792] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 287.891655][ T8474] 9p: Bad value for 'rfdno' [ 288.395293][ T5792] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 288.402467][ T5792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.402494][ T5792] usb 1-1: Product: syz [ 288.402544][ T5792] usb 1-1: Manufacturer: syz [ 288.402554][ T5792] usb 1-1: SerialNumber: syz [ 289.128348][ T5792] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 289.128403][ T5792] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 289.129246][ T5792] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 289.129290][ T5792] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 289.166184][ T5792] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 289.178130][ T5792] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 289.227715][ T5792] usb 1-1: USB disconnect, device number 15 [ 289.733999][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 289.734019][ T29] audit: type=1400 audit(1792360121.176:855): avc: denied { mount } for pid=8491 comm="syz.2.632" name="/" dev="ramfs" ino=18178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 290.455940][ T8508] FAULT_INJECTION: forcing a failure. [ 290.455940][ T8508] name failslab, interval 1, probability 0, space 0, times 0 [ 290.455965][ T8508] CPU: 1 UID: 0 PID: 8508 Comm: syz.5.635 Not tainted syzkaller #0 PREEMPT(full) [ 290.455978][ T8508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 290.455984][ T8508] Call Trace: [ 290.455989][ T8508] [ 290.455993][ T8508] dump_stack_lvl+0x100/0x190 [ 290.456015][ T8508] should_fail_ex.cold+0x5/0xa [ 290.456031][ T8508] should_failslab+0xc2/0x120 [ 290.456049][ T8508] __kmalloc_noprof+0xfc/0x840 [ 290.456063][ T8508] ? rcu_is_watching+0x13/0xc0 [ 290.456080][ T8508] ? tomoyo_realpath_from_path+0xb6/0x690 [ 290.456095][ T8508] tomoyo_realpath_from_path+0xb6/0x690 [ 290.456109][ T8508] tomoyo_path_number_perm+0x23c/0x580 [ 290.456124][ T8508] ? tomoyo_path_number_perm+0x22e/0x580 [ 290.456141][ T8508] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 290.456161][ T8508] ? __lock_acquire+0x5c0/0x1f40 [ 290.456182][ T8508] ? __fget_files+0x34/0x3d0 [ 290.456199][ T8508] ? find_held_lock+0x2b/0x80 [ 290.456215][ T8508] ? hook_file_ioctl_common+0x140/0x440 [ 290.456230][ T8508] ? __fget_files+0x21f/0x3d0 [ 290.456248][ T8508] security_file_ioctl+0xd3/0x230 [ 290.456265][ T8508] __x64_sys_ioctl+0xb7/0x210 [ 290.456281][ T8508] do_syscall_64+0x123/0x790 [ 290.456300][ T8508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.456314][ T8508] RIP: 0033:0x7f4f9c39e559 [ 290.456323][ T8508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.456334][ T8508] RSP: 002b:00007f4f9d267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.456346][ T8508] RAX: ffffffffffffffda RBX: 00007f4f9c625fa0 RCX: 00007f4f9c39e559 [ 290.456353][ T8508] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 290.456360][ T8508] RBP: 00007f4f9d267090 R08: 0000000000000000 R09: 0000000000000000 [ 290.456366][ T8508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.456373][ T8508] R13: 00007f4f9c626038 R14: 00007f4f9c625fa0 R15: 00007fff310deee8 [ 290.456387][ T8508] [ 290.456392][ T8508] ERROR: Out of memory at tomoyo_realpath_from_path. [ 290.818063][ T8513] veth0_macvtap: left promiscuous mode [ 290.847972][ T8513] macvtap0: entered promiscuous mode [ 290.847997][ T8513] macvtap0: entered allmulticast mode [ 294.243116][ T8563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.245120][ T8563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.296530][ T8563] tcpci 0-0002: probe with driver tcpci failed with error -5 [ 294.300098][ T8563] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 294.628375][ T29] audit: type=1400 audit(1792360126.096:856): avc: denied { remount } for pid=8562 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 295.555084][ T8578] tipc: Enabling of bearer rejected, already enabled [ 295.557934][ T8578] tipc: Enabling of bearer rejected, already enabled [ 295.923468][ T5792] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 296.074595][ T5792] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 296.076788][ T5792] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 296.076809][ T5792] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.076824][ T5792] usb 6-1: config 0 interface 0 has no altsetting 0 [ 296.076841][ T5792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.095760][ T5792] usb 6-1: config 0 descriptor?? [ 296.356988][ T8589] usb usb7: usbfs: process 8589 (syz.0.658) did not claim interface 0 before use [ 296.844577][ T8582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.844827][ T8582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.951788][ T29] audit: type=1400 audit(1792360128.416:857): avc: denied { setopt } for pid=8590 comm="syz.2.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 297.985021][ T5792] usbhid 6-1:0.0: can't add hid device: -71 [ 297.985115][ T5792] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 298.003601][ T5792] usb 6-1: USB disconnect, device number 14 [ 298.107141][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 298.107175][ T8594] netlink: 'syz.2.659': attribute type 10 has an invalid length. [ 298.107189][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.659'. [ 298.197188][ T29] audit: type=1400 audit(1792360129.666:858): avc: denied { read } for pid=8610 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 298.199515][ T8611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.199897][ T8611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.829047][ T29] audit: type=1400 audit(1792360130.296:859): avc: denied { map } for pid=8610 comm="syz.3.664" path="socket:[18362]" dev="sockfs" ino=18362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 298.838716][ T8594] geneve2: entered promiscuous mode [ 298.838737][ T8594] geneve2: entered allmulticast mode [ 298.882722][ T8614] IPVS: set_ctl: invalid protocol: 12078 118.0.0.0:256 [ 298.890723][ T59] IPVS: starting estimator thread 0... [ 298.898038][ T29] audit: type=1400 audit(1792360130.356:860): avc: denied { mounton } for pid=8608 comm="syz.0.663" path="/124/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 298.996965][ T8618] IPVS: using max 75 ests per chain, 180000 per kthread [ 299.257892][ T8628] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 299.259755][ T8628] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 299.259837][ T29] audit: type=1400 audit(1792360130.726:861): avc: denied { write } for pid=8626 comm="syz.5.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 300.482056][ T29] audit: type=1400 audit(1792360131.946:862): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 300.901211][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 300.916311][ T8633] tipc: Enabling of bearer rejected, already enabled [ 300.950886][ T8633] tipc: Enabling of bearer rejected, already enabled [ 302.959304][ T29] audit: type=1400 audit(1792360134.426:863): avc: denied { write } for pid=8643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.233798][ T29] audit: type=1400 audit(1792360134.696:864): avc: denied { write } for pid=8671 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.503481][ T7452] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 303.797006][ T7452] usb 1-1: device descriptor read/64, error -71 [ 304.103427][ T7452] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 304.299297][ T7452] usb 1-1: device descriptor read/64, error -71 [ 304.403771][ T7452] usb usb1-port1: attempt power cycle [ 305.367897][ T7452] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 305.394175][ T7452] usb 1-1: device descriptor read/8, error -71 [ 305.532639][ T29] audit: type=1400 audit(1792360136.996:865): avc: denied { write } for pid=8677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.588327][ T5613] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 306.092573][ T7452] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 306.216145][ T7452] usb 1-1: device descriptor read/8, error -71 [ 306.335936][ T7452] usb usb1-port1: unable to enumerate USB device [ 306.419185][ T29] audit: type=1400 audit(1792360137.886:866): avc: denied { write } for pid=8710 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.133214][ T29] audit: type=1400 audit(1792360139.596:867): avc: denied { write } for pid=8717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.001464][ T29] audit: type=1400 audit(1792360140.466:868): avc: denied { write } for pid=8746 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.365847][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.692'. [ 309.701979][ T8762] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5607] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8762] [ 310.015226][ T29] audit: type=1400 audit(1792360141.486:869): avc: denied { mounton } for pid=8760 comm="syz.2.694" path="/" dev="ramfs" ino=19048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 310.216968][ T8749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 311.704479][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.704558][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.928399][ T8792] netlink: 17 bytes leftover after parsing attributes in process `syz.2.703'. [ 313.374197][ T29] audit: type=1400 audit(1792360144.826:870): avc: denied { map } for pid=8813 comm="syz.0.708" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 313.419601][ T29] audit: type=1400 audit(1792360144.886:871): avc: denied { call } for pid=8813 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 313.451722][ T29] audit: type=1400 audit(1792360144.916:872): avc: denied { transfer } for pid=8813 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 316.183435][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 316.335176][ T24] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 316.337382][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 316.337404][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 316.337419][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 316.343055][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.343071][ T24] usb 1-1: Product: syz [ 316.343080][ T24] usb 1-1: Manufacturer: syz [ 316.343088][ T24] usb 1-1: SerialNumber: syz [ 316.349208][ T8832] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 316.349304][ T8832] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 316.419443][ C1] port100 1-1:1.0: NFC: Urb failure (status -71) [ 316.431053][ C1] port100 1-1:1.0: NFC: Urb failure (status -71) [ 316.432551][ T24] port100 1-1:1.0: NFC: Could not get supported command types [ 316.571522][ T24] usb 1-1: USB disconnect, device number 20 [ 316.878107][ T8844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.878736][ T8844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.483029][ T29] audit: type=1400 audit(1792360148.946:873): avc: denied { ioctl } for pid=8838 comm="syz.5.716" path="socket:[19201]" dev="sockfs" ino=19201 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 317.585782][ T8846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.719'. [ 317.866590][ T29] audit: type=1400 audit(1792360149.336:874): avc: denied { bind } for pid=8849 comm="syz.1.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 317.916987][ T29] audit: type=1400 audit(1792360149.386:875): avc: denied { cmd } for pid=8849 comm="iou-wrk-8850" path="socket:[19761]" dev="sockfs" ino=19761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 320.608654][ T7452] rxe_eth0 speed is unknown, defaulting to 1000 [ 320.694998][ T29] audit: type=1400 audit(1792360152.166:876): avc: denied { watch } for pid=8883 comm="syz.3.728" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 320.814208][ T29] audit: type=1400 audit(1792360152.286:877): avc: denied { read } for pid=8883 comm="syz.3.728" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 322.120570][ T8902] fuse: Bad value for 'fd' [ 322.253243][ T8901] FAULT_INJECTION: forcing a failure. [ 322.253243][ T8901] name failslab, interval 1, probability 0, space 0, times 0 [ 322.253279][ T8901] CPU: 1 UID: 60928 PID: 8901 Comm: syz.5.723 Not tainted syzkaller #0 PREEMPT(full) [ 322.253304][ T8901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 322.253317][ T8901] Call Trace: [ 322.253323][ T8901] [ 322.253331][ T8901] dump_stack_lvl+0x100/0x190 [ 322.253367][ T8901] should_fail_ex.cold+0x5/0xa [ 322.253392][ T8901] should_failslab+0xc2/0x120 [ 322.253421][ T8901] __kmalloc_noprof+0xfc/0x840 [ 322.253448][ T8901] ? tomoyo_encode2+0xfb/0x3c0 [ 322.253493][ T8901] tomoyo_encode2+0xfb/0x3c0 [ 322.253529][ T8901] tomoyo_encode+0x29/0x50 [ 322.253562][ T8901] tomoyo_realpath_from_path+0x18c/0x690 [ 322.253589][ T8901] tomoyo_mount_acl+0x1b6/0x8b0 [ 322.253618][ T8901] ? is_bpf_text_address+0x8a/0x1a0 [ 322.253650][ T8901] ? is_bpf_text_address+0x8a/0x1a0 [ 322.253681][ T8901] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 322.253707][ T8901] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 322.253734][ T8901] ? kernel_text_address+0x8d/0x100 [ 322.253755][ T8901] ? unwind_get_return_address+0x59/0xa0 [ 322.253785][ T8901] ? arch_stack_walk+0xa6/0xf0 [ 322.253814][ T8901] ? __lock_acquire+0x5c0/0x1f40 [ 322.253851][ T8901] ? tomoyo_mount_permission+0x1f6/0x460 [ 322.253884][ T8901] ? tomoyo_domain+0xb2/0x150 [ 322.253904][ T8901] ? tomoyo_profile+0x47/0x60 [ 322.253928][ T8901] tomoyo_mount_permission+0x214/0x460 [ 322.253957][ T8901] ? tomoyo_mount_permission+0x1f6/0x460 [ 322.253987][ T8901] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 322.254034][ T8901] security_sb_mount+0xdd/0x270 [ 322.254063][ T8901] path_mount+0x158/0x2850 [ 322.254089][ T8901] ? __pfx_path_mount+0x10/0x10 [ 322.254108][ T8901] ? lockdep_hardirqs_on+0x7d/0x110 [ 322.254139][ T8901] ? putname+0xb1/0x110 [ 322.254156][ T8901] ? kmem_cache_free+0x127/0x6c0 [ 322.254187][ T8901] ? __x64_sys_mount+0x293/0x310 [ 322.254208][ T8901] __x64_sys_mount+0x293/0x310 [ 322.254229][ T8901] ? __pfx___x64_sys_mount+0x10/0x10 [ 322.254259][ T8901] do_syscall_64+0x123/0x790 [ 322.254291][ T8901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.254311][ T8901] RIP: 0033:0x7f4f9c39e559 [ 322.254327][ T8901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.254347][ T8901] RSP: 002b:00007f4f9d267028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 322.254365][ T8901] RAX: ffffffffffffffda RBX: 00007f4f9c625fa0 RCX: 00007f4f9c39e559 [ 322.254378][ T8901] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 322.254390][ T8901] RBP: 00007f4f9c435ab8 R08: 00002000000002c0 R09: 0000000000000000 [ 322.254402][ T8901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.254414][ T8901] R13: 00007f4f9c626038 R14: 00007f4f9c625fa0 R15: 00007fff310deee8 [ 322.254442][ T8901] [ 322.263645][ T8901] ERROR: Out of memory at tomoyo_realpath_from_path. [ 322.287929][ T8901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 323.306828][ T29] audit: type=1400 audit(1792360154.776:878): avc: denied { write } for pid=8913 comm="syz.2.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 323.337858][ T29] audit: type=1400 audit(1792360154.806:879): avc: denied { nlmsg_read } for pid=8915 comm="syz.1.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 323.562731][ T29] audit: type=1400 audit(1792360155.026:880): avc: denied { write } for pid=8890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.800595][ T29] audit: type=1400 audit(1792360155.266:881): avc: denied { write } for pid=8931 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.656455][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.738'. [ 326.090293][ T7452] Process accounting resumed [ 326.241046][ T29] audit: type=1400 audit(1792360157.706:882): avc: denied { write } for pid=8944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.417277][ T29] audit: type=1400 audit(1792360157.886:883): avc: denied { write } for pid=8965 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.537967][ T8967] netlink: 830 bytes leftover after parsing attributes in process `syz.2.744'. [ 326.538413][ T7452] bond_slave_0: entered promiscuous mode [ 326.538444][ T7452] bond_slave_1: entered promiscuous mode [ 326.540259][ T8967] sctp: [Deprecated]: syz.2.744 (pid 8967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.540259][ T8967] Use struct sctp_sack_info instead [ 326.542477][ T29] audit: type=1400 audit(1792360158.006:884): avc: denied { bind } for pid=8962 comm="syz.2.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 326.542906][ T29] audit: type=1400 audit(1792360158.006:885): avc: denied { node_bind } for pid=8962 comm="syz.2.744" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 327.178480][ T8971] netlink: 116 bytes leftover after parsing attributes in process `syz.5.745'. [ 328.597409][ T8981] FAULT_INJECTION: forcing a failure. [ 328.597409][ T8981] name failslab, interval 1, probability 0, space 0, times 0 [ 328.597438][ T8981] CPU: 1 UID: 0 PID: 8981 Comm: syz.3.749 Not tainted syzkaller #0 PREEMPT(full) [ 328.597459][ T8981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 328.597471][ T8981] Call Trace: [ 328.597477][ T8981] [ 328.597485][ T8981] dump_stack_lvl+0x100/0x190 [ 328.597518][ T8981] should_fail_ex.cold+0x5/0xa [ 328.597547][ T8981] should_failslab+0xc2/0x120 [ 328.597574][ T8981] kmem_cache_alloc_noprof+0x92/0x6a0 [ 328.597598][ T8981] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 328.597621][ T8981] ? inet_bind2_bucket_create+0x36/0x5f0 [ 328.597647][ T8981] inet_bind2_bucket_create+0x36/0x5f0 [ 328.597669][ T8981] inet_csk_get_port+0x15b4/0x28e0 [ 328.597702][ T8981] ? trace_inet_sock_set_state+0x78/0x220 [ 328.597730][ T8981] ? __pfx_inet_csk_get_port+0x10/0x10 [ 328.597751][ T8981] inet_csk_listen_start+0x205/0x450 [ 328.597775][ T8981] __inet_listen_sk+0x20f/0x510 [ 328.597801][ T8981] ? __pfx___inet_listen_sk+0x10/0x10 [ 328.597827][ T8981] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 328.597860][ T8981] ? __local_bh_enable_ip+0xa5/0x120 [ 328.597885][ T8981] mptcp_listen+0x213/0x4e0 [ 328.597912][ T8981] ? __pfx_mptcp_listen+0x10/0x10 [ 328.597943][ T8981] __sys_listen_socket+0x108/0x150 [ 328.597971][ T8981] __sys_listen+0xa7/0x130 [ 328.597998][ T8981] __x64_sys_listen+0x53/0x80 [ 328.598025][ T8981] do_syscall_64+0x123/0x790 [ 328.598054][ T8981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.598073][ T8981] RIP: 0033:0x7ff66719e559 [ 328.598088][ T8981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.598105][ T8981] RSP: 002b:00007ff6680d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 328.598124][ T8981] RAX: ffffffffffffffda RBX: 00007ff667425fa0 RCX: 00007ff66719e559 [ 328.598136][ T8981] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003 [ 328.598146][ T8981] RBP: 00007ff6680d4090 R08: 0000000000000000 R09: 0000000000000000 [ 328.598156][ T8981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.598167][ T8981] R13: 00007ff667426038 R14: 00007ff667425fa0 R15: 00007ffd75c13e58 [ 328.598195][ T8981] [ 329.008134][ T8987] tipc: Enabling of bearer rejected, failed to enable media [ 329.037743][ T8987] tipc: Enabling of bearer rejected, failed to enable media [ 329.357954][ T8993] binder: 8991:8993 ioctl c018620c 200000000140 returned -1 [ 330.564700][ T29] audit: type=1400 audit(1792360162.036:886): avc: denied { read } for pid=9022 comm="syz.1.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 330.983490][ T9019] jffs2: notice: (9019) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 331.739783][ T29] audit: type=1400 audit(1792360163.206:887): avc: denied { unmount } for pid=6522 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 334.392236][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.408280][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.411072][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.412730][ T29] audit: type=1400 audit(1792360165.876:888): avc: denied { ioctl } for pid=9051 comm="syz.1.773" path="socket:[20634]" dev="sockfs" ino=20634 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 334.416344][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.431521][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.525576][ T5598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.528671][ T5598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.533263][ T5598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.570566][ T5598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.581580][ T5598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.119855][ T7452] kernel write not supported for file 518/task/519/fail-nth (pid: 7452 comm: kworker/1:11) [ 335.131093][ T5598] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 335.136323][ T9075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.139323][ T9075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.426639][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.746359][ T9088] sctp: [Deprecated]: syz.2.775 (pid 9088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.746359][ T9088] Use struct sctp_sack_info instead [ 336.340058][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.386198][ T9057] rxe_eth0 speed is unknown, defaulting to 1000 [ 336.510455][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.553707][ T5598] Bluetooth: hci0: command tx timeout [ 336.633468][ T5598] Bluetooth: hci5: command tx timeout [ 336.910060][ T29] audit: type=1326 audit(1792360168.376:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.1.780" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7af9e559 code=0x7ffc0000 [ 336.944946][ T29] audit: type=1326 audit(1792360168.416:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.1.780" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7af9e559 code=0x7ffc0000 [ 336.973806][ T29] audit: type=1326 audit(1792360168.446:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.1.780" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7af9e559 code=0x7ffc0000 [ 336.973838][ T29] audit: type=1326 audit(1792360168.446:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.1.780" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7af9e559 code=0x7ffc0000 [ 336.974083][ T29] audit: type=1326 audit(1792360168.446:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.1.780" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f5e7af9e559 code=0x7ffc0000 [ 336.974107][ T29] audit: type=1326 audit(1792360168.446:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.1.780" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7af9e559 code=0x7ffc0000 [ 336.974128][ T29] audit: type=1326 audit(1792360168.446:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.1.780" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7af9e559 code=0x7ffc0000 [ 337.002212][ T29] audit: type=1326 audit(1792360168.466:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.1.780" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7af9e559 code=0x7ffc0000 [ 337.002264][ T29] audit: type=1326 audit(1792360168.466:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.1.780" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7af9e559 code=0x7ffc0000 [ 337.002303][ T29] audit: type=1326 audit(1792360168.466:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9102 comm="syz.1.780" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5e7af9e559 code=0x7ffc0000 [ 337.122684][ T62] bridge0: port 3(netdevsim0) entered disabled state [ 338.635093][ T5598] Bluetooth: hci0: command tx timeout [ 338.716153][ T5598] Bluetooth: hci5: command tx timeout [ 338.925084][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 338.925106][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 338.927348][ T62] bridge0: port 3(netdevsim0) entered disabled state [ 339.011382][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.205966][ T5598] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 339.206024][ T5598] Bluetooth: hci2: Injecting HCI hardware error event [ 339.207392][ T5613] Bluetooth: hci2: hardware error 0x00 [ 339.283825][ T9053] rxe_eth0 speed is unknown, defaulting to 1000 [ 339.981231][ T62] bridge_slave_1: left allmulticast mode [ 339.981255][ T62] bridge_slave_1: left promiscuous mode [ 339.981422][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.006739][ T62] bridge_slave_0: left allmulticast mode [ 340.006764][ T62] bridge_slave_0: left promiscuous mode [ 340.006940][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.211208][ T9141] Bluetooth: MGMT ver 1.23 [ 340.329083][ T9148] binder: 9147:9148 ioctl c018620c 200000000140 returned -1 [ 340.369212][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.386518][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.388540][ T62] bond0 (unregistering): Released all slaves [ 340.397854][ T62] bond1 (unregistering): Released all slaves [ 340.518199][ T62] tipc: Left network mode [ 340.608655][ T9156] binder: 9155:9156 ioctl c0306201 200000000100 returned -14 [ 340.714131][ T5598] Bluetooth: hci0: command tx timeout [ 340.793728][ T5598] Bluetooth: hci5: command tx timeout [ 340.857033][ T5264] 8021q: adding VLAN 0 to HW filter on device eth5 [ 341.285661][ T5613] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 341.317520][ T9187] device-mapper: ioctl: device name cannot contain '/' [ 341.342309][ T9057] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.342389][ T9057] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.342509][ T9057] bridge_slave_0: entered allmulticast mode [ 341.354119][ T9057] bridge_slave_0: entered promiscuous mode [ 341.358140][ T9057] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.419386][ T9057] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.419519][ T9057] bridge_slave_1: entered allmulticast mode [ 341.421191][ T9057] bridge_slave_1: entered promiscuous mode [ 341.449498][ T9187] macsec1: entered promiscuous mode [ 341.449581][ T9187] macsec1: entered allmulticast mode [ 341.548984][ T62] hsr_slave_0: left promiscuous mode [ 341.563248][ T62] hsr_slave_1: left promiscuous mode [ 341.569335][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.569355][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.587754][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.587776][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.629933][ T62] veth1_macvtap: left promiscuous mode [ 341.629969][ T62] veth0_macvtap: left promiscuous mode [ 341.630050][ T62] veth1_vlan: left promiscuous mode [ 341.630106][ T62] veth0_vlan: left promiscuous mode [ 341.737270][ T9201] FAULT_INJECTION: forcing a failure. [ 341.737270][ T9201] name failslab, interval 1, probability 0, space 0, times 0 [ 341.737303][ T9201] CPU: 0 UID: 0 PID: 9201 Comm: syz.3.799 Not tainted syzkaller #0 PREEMPT(full) [ 341.737324][ T9201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 341.737336][ T9201] Call Trace: [ 341.737342][ T9201] [ 341.737350][ T9201] dump_stack_lvl+0x100/0x190 [ 341.737383][ T9201] should_fail_ex.cold+0x5/0xa [ 341.737410][ T9201] should_failslab+0xc2/0x120 [ 341.737439][ T9201] __kmalloc_cache_noprof+0x91/0x6d0 [ 341.737459][ T9201] ? __might_fault+0xc5/0x140 [ 341.737478][ T9201] ? alloc_pipe_info+0x10e/0x590 [ 341.737510][ T9201] alloc_pipe_info+0x10e/0x590 [ 341.737540][ T9201] splice_direct_to_actor+0x78f/0xa30 [ 341.737571][ T9201] ? __lock_acquire+0x5c0/0x1f40 [ 341.737592][ T9201] ? __pfx_direct_splice_actor+0x10/0x10 [ 341.737620][ T9201] ? lock_acquire+0x1d1/0x380 [ 341.737640][ T9201] ? get_pid_task+0x2a/0x250 [ 341.737670][ T9201] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 341.737702][ T9201] ? lock_acquire+0x1d1/0x380 [ 341.737726][ T9201] do_splice_direct+0x174/0x240 [ 341.737755][ T9201] ? __pfx_do_splice_direct+0x10/0x10 [ 341.737782][ T9201] ? avc_policy_seqno+0x9/0x20 [ 341.737803][ T9201] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 341.737834][ T9201] ? rw_verify_area+0xce/0x6d0 [ 341.737857][ T9201] do_sendfile+0xadc/0xe20 [ 341.737885][ T9201] ? __pfx_do_sendfile+0x10/0x10 [ 341.737904][ T9201] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 341.737934][ T9201] ? __fget_files+0x21f/0x3d0 [ 341.737967][ T9201] __x64_sys_sendfile64+0x1d8/0x220 [ 341.737994][ T9201] ? ksys_write+0x1ac/0x250 [ 341.738015][ T9201] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 341.738050][ T9201] do_syscall_64+0x123/0x790 [ 341.738080][ T9201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.738099][ T9201] RIP: 0033:0x7ff66719e559 [ 341.738121][ T9201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.738138][ T9201] RSP: 002b:00007ff6680d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 341.738157][ T9201] RAX: ffffffffffffffda RBX: 00007ff667425fa0 RCX: 00007ff66719e559 [ 341.738170][ T9201] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 341.738180][ T9201] RBP: 00007ff6680d4090 R08: 0000000000000000 R09: 0000000000000000 [ 341.738191][ T9201] R10: 0002000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 341.738202][ T9201] R13: 00007ff667426038 R14: 00007ff667425fa0 R15: 00007ffd75c13e58 [ 341.738228][ T9201] [ 342.062249][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 342.062283][ T29] audit: type=1400 audit(1792360173.526:1027): avc: denied { write } for pid=9209 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.405028][ T12] rpcbind: server 127.0.0.1 not responding, timed out [ 342.777417][ T62] team0 (unregistering): Port device team_slave_1 removed [ 342.788066][ T62] team0 (unregistering): Port device team_slave_0 removed [ 342.803462][ T5613] Bluetooth: hci0: command tx timeout [ 342.901341][ T5613] Bluetooth: hci5: command tx timeout [ 342.956267][ T9228] binder: 9227:9228 ioctl c018620c 200000000140 returned -1 [ 342.976321][ T5264] 8021q: adding VLAN 0 to HW filter on device eth6 [ 342.983873][ T9057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.066862][ T9057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.130534][ T9057] team0: Port device team_slave_0 added [ 343.136368][ T9057] team0: Port device team_slave_1 added [ 343.211865][ T9057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.211884][ T9057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.211905][ T9057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.240248][ T9057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.240264][ T9057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.240284][ T9057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.345151][ T9057] hsr_slave_0: entered promiscuous mode [ 343.348026][ T9057] hsr_slave_1: entered promiscuous mode [ 343.348569][ T9057] debugfs: 'hsr0' already exists in 'hsr' [ 343.348585][ T9057] Cannot create hsr debugfs directory [ 343.417521][ T9237] tipc: Enabling of bearer rejected, failed to enable media [ 344.186741][ T9237] tipc: Enabling of bearer rejected, failed to enable media [ 344.192167][ T62] IPVS: stop unused estimator thread 0... [ 344.429283][ T29] audit: type=1400 audit(1792360175.896:1028): avc: denied { write } for pid=9242 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 344.479329][ T9053] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.479451][ T9053] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.479548][ T9053] bridge_slave_0: entered allmulticast mode [ 344.482934][ T9053] bridge_slave_0: entered promiscuous mode [ 344.507539][ T29] audit: type=1400 audit(1792360175.976:1029): avc: denied { write } for pid=9261 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 344.552995][ T9053] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.553119][ T9053] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.553235][ T9053] bridge_slave_1: entered allmulticast mode [ 344.577297][ T9053] bridge_slave_1: entered promiscuous mode [ 344.608355][ T5264] 8021q: adding VLAN 0 to HW filter on device eth7 [ 345.215479][ T62] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.282426][ T9053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.318887][ T9053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.395366][ T62] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.530628][ T9053] team0: Port device team_slave_0 added [ 345.536248][ T9053] team0: Port device team_slave_1 added [ 345.612369][ T9276] fuse: fd is not a fuse device [ 346.126543][ T62] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.168256][ T9053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.168274][ T9053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.168292][ T9053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.240289][ T9053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.240304][ T9053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.240322][ T9053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.452047][ T62] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.556137][ T9057] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 346.588944][ T9057] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 346.605966][ T9053] hsr_slave_0: entered promiscuous mode [ 346.606532][ T9053] hsr_slave_1: entered promiscuous mode [ 346.606823][ T9053] debugfs: 'hsr0' already exists in 'hsr' [ 346.606839][ T9053] Cannot create hsr debugfs directory [ 346.619639][ T29] audit: type=1400 audit(1792360178.086:1030): avc: denied { write } for pid=9274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.650377][ T9057] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 346.686383][ T9057] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 346.686956][ T9057] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 346.710305][ T9057] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 346.749021][ T9057] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 346.758667][ T9057] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 346.810255][ T29] audit: type=1400 audit(1792360178.276:1031): avc: denied { write } for pid=9298 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.575520][ T5264] 8021q: adding VLAN 0 to HW filter on device eth8 [ 347.752336][ T62] bridge_slave_1: left allmulticast mode [ 347.752360][ T62] bridge_slave_1: left promiscuous mode [ 347.752680][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.792481][ T62] bridge_slave_0: left allmulticast mode [ 347.792506][ T62] bridge_slave_0: left promiscuous mode [ 347.792683][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.982477][ T29] audit: type=1400 audit(1792360179.436:1032): avc: denied { append } for pid=9320 comm="syz.3.824" name="video8" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 348.016540][ T9321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.021912][ T9321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.129909][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.132824][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.157762][ T62] bond0 (unregistering): Released all slaves [ 348.177705][ T59] smbdirect: ib_dev[syz1] removed [ 348.182470][ T9324] netlink: 5 bytes leftover after parsing attributes in process `syz.2.823'. [ 348.243106][ T5792] infiniband syz1: ib_query_port failed (-19) [ 348.271837][ T9324] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 348.286836][ T9324] 0ªî{X¹¦: entered allmulticast mode [ 348.288712][ T9324] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 348.432952][ T29] audit: type=1400 audit(1792360179.896:1033): avc: denied { read } for pid=9328 comm="syz.1.826" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 348.502136][ T9057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.648096][ T9057] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.669674][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.669745][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.731477][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.731571][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.815576][ T29] audit: type=1400 audit(1792360180.286:1034): avc: denied { write } for pid=9331 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.908026][ T9053] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 348.925194][ T9053] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 348.925864][ T9053] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 348.975024][ T9053] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 349.010703][ T62] hsr_slave_0: left promiscuous mode [ 349.011984][ T62] hsr_slave_1: left promiscuous mode [ 349.012417][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.012429][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.015729][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.015745][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.048320][ T62] veth1_macvtap: left promiscuous mode [ 349.048413][ T62] veth0_macvtap: left promiscuous mode [ 349.048488][ T62] veth1_vlan: left promiscuous mode [ 349.048537][ T62] veth0_vlan: left promiscuous mode [ 349.083562][ T29] audit: type=1400 audit(1792360180.546:1035): avc: denied { write } for pid=9344 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.473827][ T62] team0 (unregistering): Port device team_slave_1 removed [ 349.497397][ T62] team0 (unregistering): Port device team_slave_0 removed [ 349.716849][ T9053] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 349.720095][ T9053] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 349.732127][ T5264] 8021q: adding VLAN 0 to HW filter on device eth9 [ 349.747967][ T9053] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 349.760820][ T9053] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 349.975364][ T9053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.016587][ T9053] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.021585][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.021669][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.061400][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.061489][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.186021][ T9053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.625846][ T29] audit: type=1400 audit(1792360182.096:1036): avc: denied { write } for pid=9369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.432210][ T9057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.475712][ T29] audit: type=1400 audit(1792360182.946:1037): avc: denied { write } for pid=9404 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.542083][ T9053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.636662][ T5264] 8021q: adding VLAN 0 to HW filter on device eth10 [ 351.755828][ T5613] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 351.862913][ T9057] veth0_vlan: entered promiscuous mode [ 351.886580][ T9057] veth1_vlan: entered promiscuous mode [ 351.917585][ T29] audit: type=1400 audit(1792360183.386:1038): avc: denied { read } for pid=9421 comm="syz.3.837" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 351.950011][ T9057] veth0_macvtap: entered promiscuous mode [ 352.184908][ T9057] veth1_macvtap: entered promiscuous mode [ 352.962727][ T9057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.998576][ T9057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.022481][ T9438] netlink: 'syz.3.839': attribute type 2 has an invalid length. [ 353.022503][ T9438] netlink: 48 bytes leftover after parsing attributes in process `syz.3.839'. [ 353.112445][ T9438] : entered promiscuous mode [ 353.125776][ T62] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.181174][ T1024] IPVS: starting estimator thread 0... [ 353.182889][ T9440] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 353.206167][ T994] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.208067][ T1008] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.264892][ T9444] IPVS: using max 44 ests per chain, 105600 per kthread [ 353.279725][ T62] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.288860][ T29] audit: type=1400 audit(1792360184.756:1039): avc: denied { write } for pid=9432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.367068][ T9053] veth0_vlan: entered promiscuous mode [ 353.400955][ T9053] veth1_vlan: entered promiscuous mode [ 353.420568][ T29] audit: type=1400 audit(1792360184.886:1040): avc: denied { write } for pid=9447 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.477310][ T1024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.477332][ T1024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.672286][ T699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.672310][ T699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.683064][ T9053] veth0_macvtap: entered promiscuous mode [ 353.702833][ T5264] 8021q: adding VLAN 0 to HW filter on device eth11 [ 353.709855][ T9053] veth1_macvtap: entered promiscuous mode [ 353.742555][ T29] audit: type=1400 audit(1792360185.206:1041): avc: denied { mounton } for pid=9057 comm="syz-executor" path="/root/syzkaller.0Akapr/syz-tmp" dev="sda1" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 353.823660][ T9053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.829207][ T9053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.865881][ T59] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.866632][ T59] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.866663][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.866693][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.282885][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.282907][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.462585][ T9459] netlink: 'syz.7.771': attribute type 21 has an invalid length. [ 354.462612][ T9459] netlink: 128 bytes leftover after parsing attributes in process `syz.7.771'. [ 354.543063][ T9459] netlink: 'syz.7.771': attribute type 4 has an invalid length. [ 354.543088][ T9459] netlink: 3 bytes leftover after parsing attributes in process `syz.7.771'. [ 354.615777][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.615804][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.235716][ T9471] usb usb7: usbfs: process 9471 (syz.7.843) did not claim interface 0 before use [ 356.276382][ T29] audit: type=1400 audit(1792360187.746:1042): avc: denied { write } for pid=9455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.353564][ T191] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 356.965604][ T191] usb 7-1: Using ep0 maxpacket: 16 [ 356.975083][ T191] usb 7-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 357.000009][ T191] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 357.000043][ T191] usb 7-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.000069][ T191] usb 7-1: config 0 interface 0 has no altsetting 0 [ 357.000097][ T191] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.351053][ T29] audit: type=1400 audit(1792360188.816:1043): avc: denied { write } for pid=9492 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.355299][ T191] usb 7-1: config 0 descriptor?? [ 357.356363][ T9481] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 357.468422][ T5264] 8021q: adding VLAN 0 to HW filter on device eth12 [ 357.812521][ T191] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 357.812554][ T191] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 357.812576][ T191] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 357.812597][ T191] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 357.812618][ T191] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 357.812639][ T191] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 357.812658][ T191] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 357.812678][ T191] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 357.812698][ T191] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 357.812723][ T191] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 357.819628][ T191] samsung 0003:0419:0001.0003: item fetching failed at offset 270/483 [ 357.821485][ T191] samsung 0003:0419:0001.0003: parse failed [ 357.821540][ T191] samsung 0003:0419:0001.0003: probe with driver samsung failed with error -22 [ 358.032322][ T7452] usb 7-1: USB disconnect, device number 2 [ 358.919670][ T29] audit: type=1400 audit(1792360190.386:1044): avc: denied { append } for pid=9523 comm="syz.7.847" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 358.963446][ T9524] loop5: detected capacity change from 0 to 7 [ 358.984354][ T9524] Dev loop5: unable to read RDB block 7 [ 358.984388][ T9524] loop5: AHDI p1 p2 p3 [ 358.984406][ T9524] loop5: partition table partially beyond EOD, truncated [ 358.984575][ T9524] loop5: p1 start 1601398130 is beyond EOD, truncated [ 358.984592][ T9524] loop5: p2 start 1702059890 is beyond EOD, truncated [ 359.613517][ T9539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.615080][ T9539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.633663][ T24] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 359.799640][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 359.800721][ T24] usb 7-1: not running at top speed; connect to a high speed hub [ 359.800830][ T24] usb 7-1: New USB device found, idVendor=1199, idProduct=9053, bcdDevice=bf.1c [ 359.803133][ T24] usb 7-1: config 129 has an invalid interface number: 8 but max is 1 [ 359.803201][ T24] usb 7-1: config 129 has an invalid interface number: 3 but max is 1 [ 359.803247][ T24] usb 7-1: config 129 has no interface number 0 [ 359.803289][ T24] usb 7-1: config 129 has no interface number 1 [ 359.879700][ T24] usb 7-1: config 129 interface 8 has no altsetting 0 [ 359.901938][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.901977][ T24] usb 7-1: Product: syz [ 359.901992][ T24] usb 7-1: Manufacturer: syz [ 359.902042][ T24] usb 7-1: SerialNumber: syz [ 360.410521][ T9536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9536 comm=syz.6.856 [ 360.693192][ T9546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.362190][ T24] usb 7-1: Could not set interface, error -71 [ 363.372781][ T24] usb 7-1: USB disconnect, device number 3 [ 365.267007][ T29] audit: type=1400 audit(1792360196.736:1045): avc: denied { write } for pid=9549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.377405][ T29] audit: type=1400 audit(1792360196.846:1046): avc: denied { write } for pid=9587 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.020242][ T29] audit: type=1400 audit(1792360198.486:1047): avc: denied { read } for pid=9609 comm="syz.7.864" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 367.022330][ T29] audit: type=1400 audit(1792360198.486:1048): avc: denied { open } for pid=9609 comm="syz.7.864" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 367.048401][ T29] audit: type=1400 audit(1792360198.506:1049): avc: denied { write } for pid=9592 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.242395][ T29] audit: type=1400 audit(1792360198.706:1050): avc: denied { write } for pid=9616 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.336543][ T9618] tipc: Enabling of bearer rejected, already enabled [ 367.406452][ T29] audit: type=1400 audit(1792360198.876:1051): avc: denied { read } for pid=5604 comm="syz-executor" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 367.406696][ T29] audit: type=1400 audit(1792360198.876:1052): avc: denied { open } for pid=5604 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 367.406925][ T29] audit: type=1400 audit(1792360198.876:1053): avc: denied { ioctl } for pid=5604 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 367.418644][ T9593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.700544][ T9649] netlink: 288 bytes leftover after parsing attributes in process `syz.2.878'. [ 369.774889][ T29] audit: type=1400 audit(1792360201.246:1054): avc: denied { read write } for pid=9642 comm="syz.6.876" name="vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 370.204103][ T9669] macsec1: entered promiscuous mode [ 370.204128][ T9669] virt_wifi0: entered promiscuous mode [ 372.049877][ T9684] FAULT_INJECTION: forcing a failure. [ 372.049877][ T9684] name failslab, interval 1, probability 0, space 0, times 0 [ 372.049912][ T9684] CPU: 1 UID: 0 PID: 9684 Comm: syz.7.889 Not tainted syzkaller #0 PREEMPT(full) [ 372.049937][ T9684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 372.049950][ T9684] Call Trace: [ 372.049957][ T9684] [ 372.049965][ T9684] dump_stack_lvl+0x100/0x190 [ 372.050001][ T9684] should_fail_ex.cold+0x5/0xa [ 372.050031][ T9684] should_failslab+0xc2/0x120 [ 372.050064][ T9684] kmem_cache_alloc_noprof+0x92/0x6a0 [ 372.050090][ T9684] ? __pfx_stack_trace_save+0x10/0x10 [ 372.050112][ T9684] ? vm_area_dup+0x27/0x9d0 [ 372.050135][ T9684] vm_area_dup+0x27/0x9d0 [ 372.050156][ T9684] __split_vma+0x19c/0x1de0 [ 372.050183][ T9684] ? __pfx___split_vma+0x10/0x10 [ 372.050204][ T9684] ? can_vma_merge_after+0x2b5/0x6f0 [ 372.050238][ T9684] vma_modify+0x137b/0x29b0 [ 372.050269][ T9684] ? find_held_lock+0x2b/0x80 [ 372.050300][ T9684] ? __pfx_vma_modify+0x10/0x10 [ 372.050322][ T9684] ? rcu_is_watching+0x13/0xc0 [ 372.050352][ T9684] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 372.050379][ T9684] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 372.050418][ T9684] vma_modify_flags+0x2c3/0x460 [ 372.050441][ T9684] ? __pfx_vma_modify_flags+0x10/0x10 [ 372.050481][ T9684] ? find_held_lock+0x2b/0x80 [ 372.050511][ T9684] ? __pfx_ima_file_mprotect+0x10/0x10 [ 372.050547][ T9684] mprotect_fixup+0x27a/0xe00 [ 372.050574][ T9684] ? __pfx_mprotect_fixup+0x10/0x10 [ 372.050612][ T9684] ? selinux_file_mprotect+0x152/0x6c0 [ 372.050642][ T9684] do_mprotect_pkey+0xa51/0xdd0 [ 372.050673][ T9684] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 372.050708][ T9684] ? fput+0x7c/0x100 [ 372.050753][ T9684] __x64_sys_mprotect+0x78/0xc0 [ 372.050772][ T9684] ? lockdep_hardirqs_on+0x7d/0x110 [ 372.050801][ T9684] do_syscall_64+0x123/0x790 [ 372.050834][ T9684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.050853][ T9684] RIP: 0033:0x7f4ddad9e559 [ 372.050870][ T9684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.050890][ T9684] RSP: 002b:00007f4ddbc49028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 372.050910][ T9684] RAX: ffffffffffffffda RBX: 00007f4ddb025fa0 RCX: 00007f4ddad9e559 [ 372.050923][ T9684] RDX: 0000000000000001 RSI: 000000000000f000 RDI: 0000200000000000 [ 372.050935][ T9684] RBP: 00007f4ddae35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 372.050947][ T9684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.050958][ T9684] R13: 00007f4ddb026038 R14: 00007f4ddb025fa0 R15: 00007fff1d8045f8 [ 372.050984][ T9684] [ 372.673602][ T9701] tipc: Enabling of bearer rejected, already enabled [ 372.701744][ T9701] tipc: Enabling of bearer rejected, already enabled [ 372.711443][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 372.711462][ T29] audit: type=1400 audit(1792360204.176:1057): avc: denied { write } for pid=9676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.719588][ T7452] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 372.812616][ T9710] FAULT_INJECTION: forcing a failure. [ 372.812616][ T9710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.812647][ T9710] CPU: 1 UID: 0 PID: 9710 Comm: syz.3.887 Not tainted syzkaller #0 PREEMPT(full) [ 372.812669][ T9710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 372.812680][ T9710] Call Trace: [ 372.812686][ T9710] [ 372.812693][ T9710] dump_stack_lvl+0x100/0x190 [ 372.812725][ T9710] should_fail_ex.cold+0x5/0xa [ 372.812751][ T9710] _copy_from_user+0x2e/0xd0 [ 372.812779][ T9710] __sys_bpf+0x2f5/0x4a30 [ 372.812807][ T9710] ? __pfx___sys_bpf+0x10/0x10 [ 372.812826][ T9710] ? find_held_lock+0x2b/0x80 [ 372.812852][ T9710] ? get_pid_task+0xfc/0x250 [ 372.812875][ T9710] ? get_pid_task+0xfc/0x250 [ 372.812906][ T9710] ? find_held_lock+0x2b/0x80 [ 372.812938][ T9710] ? rcu_read_lock_any_held+0x6a/0x90 [ 372.812957][ T9710] ? find_held_lock+0x2b/0x80 [ 372.812982][ T9710] ? ksys_write+0x190/0x250 [ 372.813005][ T9710] ? ksys_write+0x190/0x250 [ 372.813028][ T9710] ? lock_acquire+0x1d1/0x380 [ 372.813067][ T9710] ? fput+0x7c/0x100 [ 372.813094][ T9710] ? ksys_write+0x1ac/0x250 [ 372.813119][ T9710] ? __x64_sys_bpf+0xce/0x140 [ 372.813138][ T9710] __x64_sys_bpf+0xce/0x140 [ 372.813160][ T9710] ? do_syscall_64+0xae/0x790 [ 372.813189][ T9710] do_syscall_64+0x123/0x790 [ 372.813218][ T9710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.813238][ T9710] RIP: 0033:0x7ff66719e559 [ 372.813254][ T9710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.813271][ T9710] RSP: 002b:00007ff6680d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 372.813290][ T9710] RAX: ffffffffffffffda RBX: 00007ff667425fa0 RCX: 00007ff66719e559 [ 372.813301][ T9710] RDX: 0000000000000050 RSI: 0000200000000700 RDI: 000000000000000a [ 372.813311][ T9710] RBP: 00007ff6680d4090 R08: 0000000000000000 R09: 0000000000000000 [ 372.813323][ T9710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.813333][ T9710] R13: 00007ff667426038 R14: 00007ff667425fa0 R15: 00007ffd75c13e58 [ 372.813356][ T9710] [ 373.019145][ T7452] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 373.045267][ T7452] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 373.045295][ T7452] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 373.045318][ T7452] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 373.045343][ T7452] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 373.045364][ T7452] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 373.318406][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.318481][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.385528][ T7452] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.385557][ T7452] usb 7-1: Product: syz [ 373.385572][ T7452] usb 7-1: Manufacturer: syz [ 373.385586][ T7452] usb 7-1: SerialNumber: syz [ 373.415699][ T7452] usb 7-1: config 0 descriptor?? [ 373.428772][ T29] audit: type=1400 audit(1792360204.896:1058): avc: denied { write } for pid=9716 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.456174][ T7452] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input9 [ 374.100356][ T9731] usb usb7: usbfs: process 9731 (syz.7.898) did not claim interface 0 before use [ 376.271639][ T5616] usb 7-1: USB disconnect, device number 4 [ 376.302326][ T29] audit: type=1400 audit(1792360207.766:1059): avc: denied { write } for pid=9729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.061912][ T29] audit: type=1400 audit(1792360208.526:1060): avc: denied { write } for pid=9754 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.570331][ T29] audit: type=1400 audit(1792360209.036:1061): avc: denied { write } for pid=9759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.813175][ T9787] ip_tables: iptables: counters copy to user failed while replacing table [ 377.903074][ T29] audit: type=1400 audit(1792360209.366:1062): avc: denied { write } for pid=9788 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.463618][ T9810] netlink: 'syz.6.913': attribute type 2 has an invalid length. [ 379.988209][ T29] audit: type=1400 audit(1792360211.456:1063): avc: denied { write } for pid=9798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.355524][ T9833] pimreg: entered allmulticast mode [ 380.742294][ T29] audit: type=1400 audit(1792360212.206:1064): avc: denied { write } for pid=9831 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.534513][ T9842] netlink: 56 bytes leftover after parsing attributes in process `syz.3.920'. [ 382.519477][ T29] audit: type=1400 audit(1792360213.986:1065): avc: denied { write } for pid=9846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.729481][ T29] audit: type=1400 audit(1792360214.196:1066): avc: denied { write } for pid=9863 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.927818][ T29] audit: type=1400 audit(1792360214.396:1067): avc: denied { mounton } for pid=9868 comm="syz.6.921" path="/13/mnt/file0" dev="sda1" ino=8194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 384.553051][ T29] audit: type=1400 audit(1792360216.016:1068): avc: denied { write } for pid=9874 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 385.265862][ T29] audit: type=1400 audit(1792360216.736:1069): avc: denied { write } for pid=9909 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 385.501670][ T29] audit: type=1400 audit(1792360216.966:1070): avc: denied { write } for pid=9914 comm="syz.1.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 385.652954][ T9917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.934'. [ 385.864508][ T29] audit: type=1400 audit(1792360217.216:1071): avc: denied { setopt } for pid=9923 comm="syz.7.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 387.732378][ T9929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.020459][ T9924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.020836][ T9924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.577344][ T9965] batman_adv: batadv0: Adding interface: vlan2 [ 389.577358][ T9965] batman_adv: batadv0: The MTU of interface vlan2 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.577373][ T9965] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 389.763040][ T9968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.942'. [ 389.783551][ T7460] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 390.333729][ T7460] usb 7-1: Using ep0 maxpacket: 16 [ 390.334668][ T7460] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 390.338737][ T7460] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.345131][ T7460] usb 7-1: config 0 descriptor?? [ 390.353091][ T7460] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 390.356618][ T7460] usb 7-1: Detected FT2233HP [ 390.569864][ T7460] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 390.585380][ T7460] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 391.651379][ T29] audit: type=1326 audit(1792360223.106:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9982 comm="syz.7.945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddad9e559 code=0x7ffc0000 [ 391.651979][ T29] audit: type=1326 audit(1792360223.116:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9982 comm="syz.7.945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddad9e559 code=0x7ffc0000 [ 391.652086][ T29] audit: type=1326 audit(1792360223.116:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9982 comm="syz.7.945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4ddad9e559 code=0x7ffc0000 [ 391.686004][ T29] audit: type=1326 audit(1792360223.116:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9982 comm="syz.7.945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddad9e559 code=0x7ffc0000 [ 391.686185][ T29] audit: type=1326 audit(1792360223.156:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9982 comm="syz.7.945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ddad9e559 code=0x7ffc0000 [ 391.929143][ T29] audit: type=1326 audit(1792360223.396:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9982 comm="syz.7.945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddad9e559 code=0x7ffc0000 [ 392.388655][ T29] audit: type=1326 audit(1792360223.856:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9982 comm="syz.7.945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddad9e559 code=0x7ffc0000 [ 392.448101][ T29] audit: type=1326 audit(1792360223.916:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9982 comm="syz.7.945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ddad9e559 code=0x7ffc0000 [ 392.448693][ T29] audit: type=1326 audit(1792360223.916:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9982 comm="syz.7.945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddad9e559 code=0x7ffc0000 [ 392.451926][ T29] audit: type=1326 audit(1792360223.916:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9982 comm="syz.7.945" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ddad9e559 code=0x7ffc0000 [ 393.352168][ T9997] nvme_fabrics: found same hostid 4bd43c26-f6a6-413c-87ae-648c7f9861ce but different hostnqn nqÐpÉVAÒY¾å¨@T [ 394.625199][ T7460] usb 7-1: USB disconnect, device number 5 [ 394.643108][ T7460] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 394.647215][ T7460] ftdi_sio 7-1:0.0: device disconnected [ 394.977250][T10011] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 396.655435][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 396.655472][ T29] audit: type=1326 audit(1792360228.126:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.7.957" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddad9e559 code=0x7ffc0000 [ 396.656661][ T29] audit: type=1326 audit(1792360228.126:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.7.957" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4ddad9e559 code=0x7ffc0000 [ 396.657498][ T29] audit: type=1326 audit(1792360228.126:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.7.957" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddad9e559 code=0x7ffc0000 [ 396.658280][ T29] audit: type=1326 audit(1792360228.126:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.7.957" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddad9e559 code=0x7ffc0000 [ 396.661688][ T29] audit: type=1326 audit(1792360228.126:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.7.957" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4ddad9e559 code=0x7ffc0000 [ 396.677745][ T29] audit: type=1326 audit(1792360228.136:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.7.957" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddad9e559 code=0x7ffc0000 [ 396.687958][ T29] audit: type=1326 audit(1792360228.146:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.7.957" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddad9e559 code=0x7ffc0000 [ 396.737341][ T29] audit: type=1326 audit(1792360228.196:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.7.957" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ddad9e559 code=0x7ffc0000 [ 396.737387][ T29] audit: type=1326 audit(1792360228.196:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.7.957" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddad9e559 code=0x7ffc0000 [ 396.737424][ T29] audit: type=1326 audit(1792360228.196:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10016 comm="syz.7.957" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddad9e559 code=0x7ffc0000 [ 399.692165][T10043] FAULT_INJECTION: forcing a failure. [ 399.692165][T10043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.692201][T10043] CPU: 0 UID: 0 PID: 10043 Comm: syz.6.964 Not tainted syzkaller #0 PREEMPT(full) [ 399.692223][T10043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 399.692234][T10043] Call Trace: [ 399.692241][T10043] [ 399.692248][T10043] dump_stack_lvl+0x100/0x190 [ 399.692282][T10043] should_fail_ex.cold+0x5/0xa [ 399.692308][T10043] _copy_to_user+0x32/0xd0 [ 399.692337][T10043] simple_read_from_buffer+0xcb/0x170 [ 399.692365][T10043] proc_fail_nth_read+0x1af/0x230 [ 399.692392][T10043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 399.692411][T10043] ? rw_verify_area+0xce/0x6d0 [ 399.692424][T10043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 399.692441][T10043] vfs_read+0x1e4/0xb40 [ 399.692455][T10043] ? lock_acquire+0x1d1/0x380 [ 399.692468][T10043] ? __fget_files+0x34/0x3d0 [ 399.692483][T10043] ? __pfx_vfs_read+0x10/0x10 [ 399.692495][T10043] ? find_held_lock+0x2b/0x80 [ 399.692513][T10043] ? __fget_files+0x215/0x3d0 [ 399.692531][T10043] ? __fget_files+0x21f/0x3d0 [ 399.692551][T10043] ksys_read+0x12a/0x250 [ 399.692564][T10043] ? __pfx_ksys_read+0x10/0x10 [ 399.692582][T10043] do_syscall_64+0x123/0x790 [ 399.692600][T10043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.692612][T10043] RIP: 0033:0x7fed0af5ed8e [ 399.692622][T10043] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 399.692633][T10043] RSP: 002b:00007fed0be73fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 399.692645][T10043] RAX: ffffffffffffffda RBX: 00007fed0be746c0 RCX: 00007fed0af5ed8e [ 399.692652][T10043] RDX: 000000000000000f RSI: 00007fed0be740a0 RDI: 0000000000000006 [ 399.692658][T10043] RBP: 00007fed0be74090 R08: 0000000000000000 R09: 0000000000000000 [ 399.692665][T10043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.692671][T10043] R13: 00007fed0b226038 R14: 00007fed0b225fa0 R15: 00007ffcf85a5b58 [ 399.692686][T10043] [ 400.119494][T10053] device-mapper: ioctl: Empty message received. [ 401.486815][T10064] tipc: Started in network mode [ 401.486843][T10064] tipc: Node identity 4ae0042f6e2d, cluster identity 4711 [ 401.487045][T10064] tipc: Enabled bearer , priority 0 [ 401.493845][T10064] syzkaller0: entered promiscuous mode [ 401.493865][T10064] syzkaller0: entered allmulticast mode [ 401.574815][T10064] tipc: Resetting bearer [ 401.578015][T10066] FAULT_INJECTION: forcing a failure. [ 401.578015][T10066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.578045][T10066] CPU: 0 UID: 60928 PID: 10066 Comm: syz.3.974 Not tainted syzkaller #0 PREEMPT(full) [ 401.578067][T10066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 401.578078][T10066] Call Trace: [ 401.578084][T10066] [ 401.578091][T10066] dump_stack_lvl+0x100/0x190 [ 401.578124][T10066] should_fail_ex.cold+0x5/0xa [ 401.578151][T10066] _copy_from_user+0x2e/0xd0 [ 401.578185][T10066] fscrypt_ioctl_set_policy+0x166/0x500 [ 401.578215][T10066] ? __pfx_fscrypt_ioctl_set_policy+0x10/0x10 [ 401.578241][T10066] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 401.578266][T10066] ? kasan_quarantine_put+0x104/0x240 [ 401.578293][T10066] ? find_held_lock+0x2b/0x80 [ 401.578319][T10066] ? tomoyo_path_number_perm+0x28f/0x580 [ 401.578349][T10066] __ext4_ioctl+0x1797/0x4200 [ 401.578378][T10066] ? __pfx___ext4_ioctl+0x10/0x10 [ 401.578405][T10066] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 401.578430][T10066] ? do_vfs_ioctl+0x226/0x13e0 [ 401.578454][T10066] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 401.578473][T10066] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 401.578503][T10066] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 401.578533][T10066] ? __fget_files+0x34/0x3d0 [ 401.578569][T10066] ? selinux_file_ioctl+0x13b/0x290 [ 401.578595][T10066] ? selinux_file_ioctl+0xb6/0x290 [ 401.578623][T10066] ? __pfx_ext4_ioctl+0x10/0x10 [ 401.578646][T10066] __x64_sys_ioctl+0x18e/0x210 [ 401.578668][T10066] do_syscall_64+0x123/0x790 [ 401.578699][T10066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.578718][T10066] RIP: 0033:0x7ff66719e559 [ 401.578733][T10066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.578750][T10066] RSP: 002b:00007ff6680d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.578766][T10066] RAX: ffffffffffffffda RBX: 00007ff667425fa0 RCX: 00007ff66719e559 [ 401.578777][T10066] RDX: 0000200000001280 RSI: 00000000800c6613 RDI: 0000000000000003 [ 401.578787][T10066] RBP: 00007ff6680d4090 R08: 0000000000000000 R09: 0000000000000000 [ 401.578797][T10066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.578808][T10066] R13: 00007ff667426038 R14: 00007ff667425fa0 R15: 00007ffd75c13e58 [ 401.578833][T10066] [ 401.702450][T10063] tipc: Resetting bearer [ 402.003867][T10063] tipc: Disabling bearer [ 404.423695][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.7.979'. [ 405.138475][T10103] mac80211_hwsim hwsim6 »»»»»»: renamed from wlan0 (while UP) [ 405.653429][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 405.653467][ T29] audit: type=1400 audit(1792360237.116:1166): avc: denied { name_bind } for pid=10107 comm="syz.6.973" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 405.851256][T10113] X25: received unknown 00 with LCI 000 [ 405.868572][T10113] tipc: Enabling of bearer rejected, already enabled [ 405.898999][T10113] tipc: Enabling of bearer rejected, already enabled [ 407.290663][T10136] nvme_fabrics: found same hostid 4bd43c26-f6a6-413c-87ae-648c7f9861ce but different hostnqn nqÐpÉVAÒY¾å¨@T [ 407.782635][ T31] INFO: task kworker/1:2:944 blocked for more than 144 seconds. [ 407.782658][ T31] Not tainted syzkaller #0 [ 407.782668][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 407.782676][ T31] task:kworker/1:2 state:D stack:21912 pid:944 tgid:944 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 407.782731][ T31] Workqueue: usb_hub_wq hub_event [ 407.782757][ T31] Call Trace: [ 407.782763][ T31] [ 407.782774][ T31] __schedule+0x1259/0x6920 [ 407.782801][ T31] ? __lock_acquire+0x5c0/0x1f40 [ 407.782831][ T31] ? look_up_lock_class+0x55/0x120 [ 407.782864][ T31] ? __pfx___schedule+0x10/0x10 [ 407.782887][ T31] ? find_held_lock+0x2b/0x80 [ 407.782920][ T31] ? schedule+0x225/0x2c0 [ 407.782949][ T31] schedule+0xdd/0x2c0 [ 407.782972][ T31] schedule_timeout+0x1b2/0x280 [ 407.782994][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 407.783025][ T31] ? mark_held_locks+0x40/0x70 [ 407.783050][ T31] __wait_for_common+0x2e7/0x4c0 [ 407.783075][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 407.783101][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 407.783125][ T31] ? __pfx_device_del+0x10/0x10 [ 407.783157][ T31] ? kobject_put+0xb9/0x640 [ 407.783182][ T31] i2c_del_adapter+0x1e3/0x2e0 [ 407.783209][ T31] dvb_usbv2_exit.isra.0+0x4aa/0xb70 [ 407.783240][ T31] dvb_usbv2_probe+0x669/0x970 [ 407.783275][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 407.783297][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 407.783361][ T31] ? lockdep_hardirqs_on+0x7d/0x110 [ 407.783389][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 407.783412][ T31] ? __pm_runtime_set_status+0x13c/0x970 [ 407.783438][ T31] usb_probe_interface+0x386/0x9b0 [ 407.783467][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 407.783489][ T31] ? kernfs_put+0x3f/0x60 [ 407.783513][ T31] ? sysfs_create_link+0x68/0xc0 [ 407.783533][ T31] ? __pfx_usb_probe_interface+0x10/0x10 ** replaying previous printk message ** [ 407.783533][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 407.783558][ T31] really_probe+0x241/0xa60 [ 407.783580][ T31] __driver_probe_device+0x210/0x460 [ 407.783597][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 407.783624][ T31] driver_probe_device+0x4a/0x140 [ 407.783642][ T31] __device_attach_driver+0x1df/0x320 [ 407.783662][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 407.783680][ T31] bus_for_each_drv+0x159/0x1e0 [ 407.783705][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 407.783729][ T31] ? lockdep_hardirqs_on+0x7d/0x110 [ 407.783756][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 407.783783][ T31] __device_attach+0x1e4/0x4d0 [ 407.783803][ T31] ? __pfx___device_attach+0x10/0x10 [ 407.783822][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 407.783853][ T31] device_initial_probe+0xaf/0xd0 [ 407.783873][ T31] bus_probe_device+0x64/0x160 [ 407.783906][ T31] device_add+0x121d/0x1970 [ 407.783931][ T31] ? __pfx_device_add+0x10/0x10 [ 407.783950][ T31] ? usb_cache_string+0x20/0x100 [ 407.783968][ T31] ? usb_cache_string+0xd6/0x100 [ 407.783986][ T31] ? kfree+0x22b/0x6d0 [ 407.784013][ T31] usb_set_configuration+0xd97/0x1dc0 [ 407.847694][ T29] audit: type=1400 audit(1792360239.296:1167): avc: denied { append } for pid=10111 comm="syz.3.983" name="sg0" dev="devtmpfs" ino=899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 407.879905][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 407.879942][ T31] usb_generic_driver_probe+0xa1/0xe0 [ 407.879970][ T31] usb_probe_device+0xef/0x400 [ 407.879992][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 407.880007][ T31] really_probe+0x241/0xa60 [ 407.880020][ T31] __driver_probe_device+0x210/0x460 [ 407.880031][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 407.880050][ T31] driver_probe_device+0x4a/0x140 [ 407.880061][ T31] __device_attach_driver+0x1df/0x320 [ 407.880073][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 407.880084][ T31] bus_for_each_drv+0x159/0x1e0 [ 407.880100][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 407.880116][ T31] ? lockdep_hardirqs_on+0x7d/0x110 [ 407.880133][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 407.880149][ T31] __device_attach+0x1e4/0x4d0 [ 407.880161][ T31] ? __pfx___device_attach+0x10/0x10 [ 407.880173][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 407.880192][ T31] device_initial_probe+0xaf/0xd0 [ 407.880204][ T31] bus_probe_device+0x64/0x160 [ 407.880221][ T31] device_add+0x121d/0x1970 [ 407.880236][ T31] ? __pfx_device_add+0x10/0x10 [ 407.880248][ T31] ? usb_detect_static_quirks+0x335/0x3e0 [ 407.880259][ T31] ? kfree+0x22b/0x6d0 [ 407.880275][ T31] usb_new_device.part.0+0xcc2/0x1686 [ 407.880296][ T31] ? do_raw_spin_lock+0x128/0x260 [ 407.880311][ T31] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 407.880329][ T31] ? mark_held_locks+0x40/0x70 [ 407.880344][ T31] hub_event.cold+0x1e3/0xe90 [ 407.880374][ T31] ? __pfx_hub_event+0x10/0x10 [ 407.880386][ T31] ? hlock_class+0x70/0x70 [ 407.880398][ T31] ? lock_acquire+0x1d1/0x380 [ 407.880413][ T31] ? process_one_work+0xa2c/0x1b10 [ 407.880425][ T31] ? process_one_work+0x906/0x1b10 [ 407.880435][ T31] ? process_one_work+0x906/0x1b10 [ 407.880448][ T31] process_one_work+0xac7/0x1b10 [ 407.880465][ T31] ? __pfx_process_one_work+0x10/0x10 [ 407.880483][ T31] ? lock_acquire+0x1d1/0x380 [ 407.880500][ T31] ? __pfx_hub_event+0x10/0x10 [ 407.880514][ T31] worker_thread+0x5ef/0xe50 [ 407.880529][ T31] ? __pfx_worker_thread+0x10/0x10 [ 407.880540][ T31] ? kthread+0x13a/0x450 [ 407.880555][ T31] ? __pfx_worker_thread+0x10/0x10 [ 407.880565][ T31] kthread+0x373/0x450 [ 407.880580][ T31] ? __pfx_kthread+0x10/0x10 [ 407.880597][ T31] ret_from_fork+0x730/0xd60 [ 407.880611][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 407.880625][ T31] ? __switch_to+0x800/0x10f0 [ 407.880641][ T31] ? __pfx_kthread+0x10/0x10 [ 407.880658][ T31] ret_from_fork_asm+0x1a/0x30 [ 407.880678][ T31] [ 407.880773][ T31] [ 407.880773][ T31] Showing all locks held in the system: [ 407.880782][ T31] locks held by pr/ttyS0/30: 1, last CPU#1: [ 407.880791][ T31] #0: ffffffff8fdd88f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 407.880823][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 407.880831][ T31] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 407.880883][ T31] locks held by kworker/1:2/944: 5, on CPU#1: [ 407.880891][ T31] #0: ffff888020a8c140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 407.880921][ T31] #1: ffffc90004d0fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 407.880946][ T31] #2: ffff88802bc541d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 407.880971][ T31] #3: ffff888027f1c1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 407.880995][ T31] #4: ffff88807ee681a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 407.881020][ T31] locks held by kworker/u8:9/1008: 4, on CPU#0: [ 407.881030][ T31] #0: ffff888022ac8940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 407.947276][ T31] #1: ffffc90004e07d08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 407.947320][ T31] #2: ffff8880396f20e8 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x21/0xf0 [ 407.947374][ T31] #3: ffff8880396a4cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 407.947441][ T31] locks held by getty/5360: 2, on CPU#0: [ 407.947472][ T31] #0: ffff888038a180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 407.947524][ T31] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 407.947572][ T31] locks held by syz-executor/5607: 2, last CPU#0: [ 407.947585][ T31] #0: ffff888028202460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 407.947630][ T31] #1: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 407.947693][ T31] locks held by syz-executor/9053: 2, last CPU#1: [ 407.947705][ T31] #0: ffff888085f0a460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 407.947749][ T31] #1: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 407.947803][ T31] locks held by syz.7.961/10040: 3, last CPU#0: [ 407.947815][ T31] #0: ffff88804f376460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 407.947861][ T31] #1: ffff88807892e910 (&sb->s_type->i_mutex_key#16){+.+.}-{4:4}, at: shmem_file_write_iter+0x86/0x140 [ 407.947917][ T31] #2: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 407.947964][ T31] locks held by syz.7.984/10113: 2, last CPU#0: [ 407.947976][ T31] #0: ffff88807d179bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 407.948020][ T31] #1: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 407.948065][ T31] locks held by syz.1.985/10123: 2, on CPU#0: [ 407.948078][ T31] #0: ffffffff91cdb740 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0x38/0xa50 [ 407.948118][ T31] #1: ffffffff8fdf84e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 407.948160][ T31] locks held by dhcpcd-run-hook/10139: 1, last CPU#0: [ 407.948171][ T31] #0: ffff88802e97e540 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xc5/0x140 [ 407.948211][ T31] [ 407.948215][ T31] ============================================= [ 407.948215][ T31] [ 407.948222][ T31] NMI backtrace for cpu 1 [ 407.948235][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 407.948255][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 407.948266][ T31] Call Trace: [ 407.948272][ T31] [ 407.948278][ T31] dump_stack_lvl+0x100/0x190 [ 407.948306][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 407.948334][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 407.948356][ T31] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 407.948381][ T31] sys_info+0x141/0x190 [ 407.948397][ T31] watchdog+0xcb1/0x1030 [ 407.948422][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 407.948446][ T31] ? __pfx_watchdog+0x10/0x10 [ 407.948467][ T31] ? __kthread_parkme+0x18f/0x230 [ 407.948492][ T31] ? kthread+0x13a/0x450 [ 407.948515][ T31] ? __pfx_watchdog+0x10/0x10 [ 407.948533][ T31] kthread+0x373/0x450 [ 407.948555][ T31] ? __pfx_kthread+0x10/0x10 [ 407.948580][ T31] ret_from_fork+0x730/0xd60 [ 407.948603][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 407.948624][ T31] ? __switch_to+0x800/0x10f0 [ 407.948651][ T31] ? __pfx_kthread+0x10/0x10 [ 407.948678][ T31] ret_from_fork_asm+0x1a/0x30 [ 407.948709][ T31] [ 407.948715][ T31] Sending NMI from CPU 1 to CPUs 0: [ 407.948737][ C0] NMI backtrace for cpu 0 [ 407.948748][ C0] CPU: 0 UID: 0 PID: 10139 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 407.948765][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 407.948774][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 407.948790][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 4b 82 9e f5 cc [ 407.948804][ C0] RSP: 0018:ffffc9000dacf9d0 EFLAGS: 00000293 [ 407.948816][ C0] RAX: 0000000000000000 RBX: ffff88802c151340 RCX: 0000000000000000 [ 407.948825][ C0] RDX: ffff888029764b00 RSI: ffffffff8294ee87 RDI: ffff888029764b00 [ 407.948834][ C0] RBP: 00000000000002d8 R08: 0000000000000005 R09: 0000000000000007 [ 407.948842][ C0] R10: 0000000000000004 R11: 0000000000000001 R12: ffff888029764b00 [ 407.948851][ C0] R13: ffffc9000dacfb78 R14: 1ffff92001b59f3e R15: 0000000000004004 [ 407.948860][ C0] FS: 00007f53dbc8bc80(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 407.948875][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.948885][ C0] CR2: 00007f53dbee0286 CR3: 000000002e289000 CR4: 00000000003526f0 [ 407.948894][ C0] Call Trace: [ 407.948899][ C0] [ 407.948904][ C0] __kernel_read+0x2f7/0xad0 [ 407.948923][ C0] ? __pfx___kernel_read+0x10/0x10 [ 407.948940][ C0] ? avc_policy_seqno+0x9/0x20 [ 407.948955][ C0] ? selinux_file_permission+0x8f/0x6d0 [ 407.948977][ C0] ? rw_verify_area+0xce/0x6d0 [ 407.948992][ C0] kernel_read+0x55/0x70 [ 407.949008][ C0] load_elf_phdrs+0x14e/0x210 [ 407.949026][ C0] ? __pfx_load_elf_phdrs+0x10/0x10 [ 407.949046][ C0] ? __pfx_ext4_file_mmap_prepare+0x10/0x10 [ 407.949067][ C0] load_elf_binary+0x298/0x51a0 [ 407.949087][ C0] ? load_misc_binary+0x6f4/0x17d0 [ 407.949104][ C0] ? load_misc_binary+0x6f4/0x17d0 [ 407.949123][ C0] ? put_binfmt_handler+0x87/0x310 [ 407.949142][ C0] ? lock_acquire+0x1d1/0x380 [ 407.949157][ C0] ? __pfx_load_elf_binary+0x10/0x10 [ 407.949175][ C0] ? find_held_lock+0x2b/0x80 [ 407.949194][ C0] ? bprm_execve+0x8a2/0x1940 [ 407.949209][ C0] ? bprm_execve+0x8a2/0x1940 [ 407.949227][ C0] bprm_execve+0x8cd/0x1940 [ 407.949245][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 407.949260][ C0] ? copy_strings.isra.0+0x491/0x790 [ 407.949279][ C0] do_execveat_common.isra.0+0x4a5/0x580 [ 407.949298][ C0] __x64_sys_execve+0x93/0xd0 [ 407.949314][ C0] do_syscall_64+0x123/0x790 [ 407.949334][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.949349][ C0] RIP: 0033:0x7f53dbe26107 [ 407.949360][ C0] Code: 0f 00 64 c7 00 07 00 00 00 b8 ff ff ff ff c9 c3 0f 1f 00 48 8b 05 a9 ee 0f 00 48 8b 10 e9 01 00 00 00 90 b8 3b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 ec 0f 00 f7 d8 64 89 01 48 [ 407.949372][ C0] RSP: 002b:00007ffca4041c38 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 407.949384][ C0] RAX: ffffffffffffffda RBX: 00005640777f9e38 RCX: 00007f53dbe26107 [ 407.949393][ C0] RDX: 00005640777f9e60 RSI: 00005640777f9e38 RDI: 00005640777f9ef0 [ 407.949407][ C0] RBP: 00005640777f9ef0 R08: 00007ffca4046e61 R09: 0000000000000000 [ 407.949416][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 00005640777f9e60 [ 407.949424][ C0] R13: 00007f53dbfebe8b R14: 00005640777f9e60 R15: 0000000000000000 [ 407.949440][ C0] [ 407.990665][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 409.165364][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 409.174463][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 409.184501][ T31] Call Trace: [ 409.187757][ T31] [ 409.190681][ T31] dump_stack_lvl+0x100/0x190 [ 409.195339][ T31] vpanic+0x553/0x970 [ 409.199294][ T31] ? __pfx_vpanic+0x10/0x10 [ 409.203783][ T31] panic+0xd1/0xe0 [ 409.207502][ T31] ? __pfx_panic+0x10/0x10 [ 409.211933][ T31] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 409.218091][ T31] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 409.224243][ T31] ? watchdog.cold+0x1ec/0x234 [ 409.229010][ T31] watchdog.cold+0x1fd/0x234 [ 409.233613][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 409.239410][ T31] ? __pfx_watchdog+0x10/0x10 [ 409.244093][ T31] ? __kthread_parkme+0x18f/0x230 [ 409.249104][ T31] ? kthread+0x13a/0x450 [ 409.253335][ T31] ? __pfx_watchdog+0x10/0x10 [ 409.257997][ T31] kthread+0x373/0x450 [ 409.262051][ T31] ? __pfx_kthread+0x10/0x10 [ 409.266631][ T31] ret_from_fork+0x730/0xd60 [ 409.271207][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 409.276303][ T31] ? __switch_to+0x800/0x10f0 [ 409.280975][ T31] ? __pfx_kthread+0x10/0x10 [ 409.285555][ T31] ret_from_fork_asm+0x1a/0x30 [ 409.290311][ T31] [ 409.293514][ T31] Kernel Offset: disabled [ 409.297818][ T31] Rebooting in 86400 seconds..