last executing test programs: 4m47.74919881s ago: executing program 32 (id=388): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000001400000008"], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166e", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m0.036447063s ago: executing program 5 (id=509): r0 = socket$inet6(0xa, 0x5, 0x0) socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x561401, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) r2 = getpid() r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000300)={0xc}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x36f}) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r4, &(0x7f0000000380)={&(0x7f00000003c0), 0x10, &(0x7f0000000400)={0x0, 0x51}, 0x2, 0x0, 0x0, 0x44184}, 0x8005) sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x400000bce) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x130, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x268, 0x20a, 0x278, 0x268, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @mcast1, [0xffffff00, 0xffffff00], [0x0, 0x0, 0xffffff00, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e20], [0x4e20, 0x4e22], 0x3, 0x8, 0x2, 0x7}}, @common=@inet=@tcp={{0x30}, {[0x0, 0x2], [], 0x0, 0x0, 0x40, 0xc}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x100, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}, {0x6}}, @common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x2d30, 0xe}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x1}, {0x2, 0x5}, {0x2, 0x0, 0x5}, 0x7, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000880)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) r6 = syz_open_dev$MSR(&(0x7f00000008c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001780)=""/102392, 0x18ff8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$video(&(0x7f000001a7c0), 0x800010000000008, 0x123000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001a800)={0x18, 0x19, &(0x7f000001a8c0)=ANY=[@ANYBLOB="180000008b00000000000000ffffffff1811", @ANYRES32, @ANYBLOB], &(0x7f000001a980)='GPL\x00', 0x6, 0x1001, &(0x7f000001a9c0)=""/4097, 0x41000, 0x24}, 0x94) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000000), 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001740)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fbdbdf250100000008000100", @ANYBLOB], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x4000}, 0x0) 3m58.110833503s ago: executing program 33 (id=515): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') getrusage(0xfffffffffffffffe, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x1, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) kexec_load(0x3, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000180)={0x600, 0x1000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ptrace$setregset(0x4205, r0, 0x3, 0xfffffffffffffffe) 3m56.651537759s ago: executing program 5 (id=519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r2}, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55ebfcb85e78e984}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m56.311773244s ago: executing program 1 (id=520): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x0, 0x1, 0x10007d50}) 3m56.139448913s ago: executing program 1 (id=521): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) close(0x4) 3m55.936151065s ago: executing program 1 (id=522): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) stat(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='- 0 -', 0x5) 3m55.375017066s ago: executing program 1 (id=524): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0, 0x2125099, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x8) 3m55.124059989s ago: executing program 1 (id=526): r0 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000000c0)={0x0, 0x7d71}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r1, 0xffffffff}, 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e27, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0x99}, 0x1c) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000200)=ANY=[@ANYRES64=r0], 0x8) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 3m54.329570024s ago: executing program 1 (id=528): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) r0 = syz_open_dev$video(&(0x7f00000007c0), 0x81, 0xa082) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000800)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000840)='.\x00', &(0x7f0000000880), 0x0, &(0x7f00000008c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 3m51.291447539s ago: executing program 34 (id=528): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) r0 = syz_open_dev$video(&(0x7f00000007c0), 0x81, 0xa082) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000800)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000840)='.\x00', &(0x7f0000000880), 0x0, &(0x7f00000008c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 3m50.728185827s ago: executing program 5 (id=533): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000280)={'syztnl0\x00', r3, 0x7800, 0x7, 0x7, 0x120b9314, {{0x1f, 0x4, 0x1, 0x2, 0x7c, 0x65, 0x0, 0xb, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast2, {[@timestamp_prespec={0x44, 0x34, 0xd8, 0x3, 0x5, [{@remote, 0x6}, {@broadcast, 0x4}, {@local, 0x4d78000}, {@private=0xa010100, 0x2}, {@rand_addr=0x64010100, 0xffff}, {@loopback, 0x7c85}]}, @ra={0x94, 0x4}, @noop, @timestamp={0x44, 0x14, 0x3e, 0x0, 0x0, [0x7f, 0x6, 0x7fffffff, 0x1]}, @timestamp={0x44, 0xc, 0xaf, 0x0, 0xe, [0x99a, 0x7]}, @noop, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x4, [0x5, 0x5]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtclass={0x68, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0xfffc, 0x0, 0x0, 0x11000}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}, 0x1000, 0x8}}]}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x2}}]}, 0x68}}, 0x0) 3m49.787079822s ago: executing program 5 (id=536): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(0x0, 0x8) 3m49.432685792s ago: executing program 5 (id=538): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000019400), 0x651, 0x0) recvmmsg(r2, &(0x7f0000019880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000198c0)=0x6) r4 = add_key$user(&(0x7f0000019900), &(0x7f0000019940), &(0x7f0000019980), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000199c0)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000019a00)={&(0x7f0000019a40)={'streebog256\x00'}}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0xa245, 0x7) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x3fef, 0x8b7) syz_emit_ethernet(0x120, &(0x7f0000019700)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @val={@val={0x88a8, 0x3, 0x0, 0x4}, {0x8100, 0x6, 0x0, 0x4}}, {@ipv6={0x86dd, @tcp={0x2, 0x6, "087b1a", 0xe2, 0x6, 0xff, @private1, @loopback, {[@fragment={0x2b, 0x0, 0x2, 0x1, 0x0, 0x0, 0x68}, @fragment={0x62, 0x0, 0xc, 0x0, 0x0, 0x2, 0x68}, @fragment={0x89, 0x0, 0x5, 0x1, 0x0, 0x18, 0x65}, @srh={0xc, 0x8, 0x4, 0x4, 0x7, 0x38, 0xdb, [@mcast1, @private0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @dstopts={0x89}], {{0x4e21, 0x4e20, 0x41424344, r6, 0x1, 0x0, 0x6, 0x2, 0x2, 0x0, 0x7, {[@mss={0x2, 0x4, 0x6}]}}, {"c3328e3a291d046f83e7e74880ba65a38819a53d880083f9db609bb0bbc891f261e37c2e90985103e99e6bb8edb6521e21ec9c625caeb0e8daa05ad291381181463d2dc03d949bb27d77470a0914745b52bdba71c99742918b1595645d80cbc752c5"}}}}}}}, &(0x7f0000019840)={0x1, 0x2, [0xf7, 0xe31, 0x5b0, 0xa32]}) syz_emit_ethernet(0x321, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6cccc7e002eb0631fe8000000000000000000000000000aafe8800000000000000000000000001018406010100000000ff02000000000000000000000000000100000000000000000000000000000000fe880000000000000000000000000101330a0405fa28ffffff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000002001000000000000000000000000000120010000000000000000000000000000671004080110050020010000000000000000000000000002fe80000000000000000000000000004400000000000000000000ffffe0000001fe8000000000000000000000000000bbfe800000000000000000000000000033fe8800000000000000000000000000010000000000000000000000000000000100000000000000000000ffffac1414272c0802e300000000ff010000000000000000000000000001ff010000000000000000000000000001fe8000000000000000000000000000bbfe8000000000000000000000000000aa210c0406f660010000000000000000000000000000000001fc01000000000000000000000000000000000000000000000000ffffac141425ff020000000000000000000000000001ff01000000000000000000000000000100000000000000000000ffffe00000023b00017064000000670e01020000000000000000000000000000000000000001fe88000000000000000000000000000100000000000000000000000000000001fe8000000000000000000000000000bbfe8000000000000000000000000000aafe880000000000000000000000000101fc00000000000000000000000000000000000200660000004e234e23", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="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"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r7 = getpgrp(0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r9 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x3, &(0x7f0000000300)={[0x7d]}, 0xfffffffffffffd68) prctl$PR_SCHED_CORE(0x3e, 0x1, r9, 0x1, 0x0) 3m43.086567464s ago: executing program 5 (id=546): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(0x0, 0x8) 3m42.661011899s ago: executing program 35 (id=546): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(0x0, 0x8) 3m24.643676133s ago: executing program 6 (id=575): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x15, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2", @ANYRES32], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f00000007c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000540)) r3 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000580)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000006c0)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000700)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000740)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) connect$vsock_stream(r4, &(0x7f0000000780)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000200)='qnx6\x00', 0x0, &(0x7f0000000240)='mmi_fs\x00') r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x34b130198900281b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001240)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x57}], 0x1, 0x21, 0x0, 0x0) 3m20.558951913s ago: executing program 6 (id=581): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001380)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000013c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000001400), 0x2, 0x141102) writev(r0, &(0x7f0000001440)=[{&(0x7f0000001480)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x363, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="c8ed0ec2aff22b790000000000000000", 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x44800}, 0x4048000) recvmmsg(r3, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1}, 0xb43}], 0x1, 0x2100, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x11c0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_clone(0xb86511, 0x0, 0x0, 0x0, 0x0, 0x0) 3m16.406828632s ago: executing program 6 (id=589): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000019440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000019480)={0xffffffff, 0x1, "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"}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000019240)={0x0, 0x0, &(0x7f0000019280)={&(0x7f00000192c0)={0x1c, 0x2d, 0x1, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x104}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000019340)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000019400)={&(0x7f0000019300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000193c0)={&(0x7f0000019380)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8000040) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000000200)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x47, &(0x7f0000019200)=0x7) wait4(r4, 0x0, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r8 = socket(0x11, 0x3, 0x300) fchmod(r8, 0x30) 3m14.765516428s ago: executing program 6 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESHEX=r0, @ANYRES16=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000380)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f0000000840)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019840)=0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000019880)={&(0x7f00000198c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000019900)={0x0, 0xdea2, 0x3400, 0x1, 0x15b}, &(0x7f0000019980)=0x0, &(0x7f00000199c0)=0x0, &(0x7f0000019a00)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000019a40)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000019ac0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000019b00)) r10 = landlock_create_ruleset(&(0x7f0000019b40)={0xa019, 0x1, 0x3, 0x0, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r10, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r11 = landlock_create_ruleset(&(0x7f0000019b80)={0x3a1, 0x2, 0x0, 0x40}, 0xffffffffffffffdc, 0x2) landlock_restrict_self(r11, 0x0) 3m12.097231883s ago: executing program 2 (id=593): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000003040), 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) preadv(0xffffffffffffffff, &(0x7f0000003440)=[{&(0x7f0000000140)=""/245, 0xf5}, {0x0}], 0x2, 0x162, 0xb) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r4, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000640)) sendmmsg$sock(r4, &(0x7f0000000f40)=[{{&(0x7f0000000300)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)="327792f34339e0fdb5d1ffed8572f443581e76aa0f636314155de69a10e61694d73d2185ea685f41444ad5b377d13b7e905033eea2a25f3e435065ebcce8", 0x3e}, {&(0x7f0000000540)="d9ed3c0d10de7b3315838b234427241b5dcf999f60d74f227fc2704ff7decdea5e6d307f19b49ebc5902763e6d8e348fe828bc1054fb9d1b0a9366d1bff81a01ce0581b2a8dd609aa46e096a98d22dea6d7b9b7decc50cb6cb632c69154918f209f3f179df1704b6116bc3fbadf136693e83701414ffd23bc60d2c902fc473fb2badb5f121b2dbb38e92fa570af89806153120017be3a167fe00c8f6c73d2836e3661eed132a16cb2e7d470d57364a16a65ab9a2d20817eb9c9e08468caa8bac01f4", 0xc2}, {&(0x7f0000000680)="3ccddd8feb5b7a458546c6d98db09b5cf4f48c6fa6093aed71e7249b729126e6e26365d35ebe37db5f6b39a1b2014d3c6bc93065a77ed3fe38c5", 0x3a}], 0x3, &(0x7f0000000700)=[@timestamping={{0x14, 0x1, 0x25, 0x27}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x98d}}, @mark={{0x14, 0x1, 0x24, 0xd84}}, @mark={{0x14, 0x1, 0x24, 0xa2ed}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000007c0)="642faf30963408c86244ae6de1fa76fe00b249fc4268dad6ec21d1b25881b5df75ddf0ba3ed7e304a7d9b9646020d14d60baa3351a3ab2cd3e196ce7d7ae8a2bbe07585a469ed0d7223db572e8e9d5cf0a43be4aa1", 0x55}, {&(0x7f0000000840)="3379212fcec323c420fecb821e7034c412bfd47b11479bedc447028f2257599991025ceec08ed4ac64632988dbbd66bd033a57d95ee05ec1f60c1d5d158404d19786ac3198ddba19a6675f31d2e33623d8aa3409bcc280d7650e74b45b4bfdcdb6f072b03199d1c501fce4860455bd8edd54996ecac12dcf8f840252720ff6436f97648b1050c6a026c043ac2528012ff5582f5e223af0728d9e55e8ae578792", 0xa0}, {&(0x7f0000000900)="d0647c8f265970972064dbc3db6cf39a7f629d293090e3bfff6485d6ab27a188ffd3cdc75fb20a7423e97e76ebb46854e735e4a4fa069af94e89d77743dcf7fc3826d06fc92b2da501a24ab9cb81dcd5c6e94decf8b9f396418203af25d2bf59bf064fba94c724458c4f22ee1f7d9414c59dd72dbc964ee838fdbaed21891e76a0de3eb1b136dc3a0c8314d038b095b86d598389829e9bcc680c4cd17bbdd6761de68b718e856907490bca75258373393ac49234c4113e6e7462f2e5b1067a11320984b948148e44581b793811f8ccbba12d78a629fc4b128be0bd", 0xdb}], 0x3, &(0x7f0000000a40)=[@mark={{0x14, 0x1, 0x24, 0x2000000}}, @mark={{0x14, 0x1, 0x24, 0x40}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffe}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x78}}, {{&(0x7f0000000ac0)=@l2tp={0x2, 0x0, @loopback, 0x3}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b40)="7d6e74d26daf2e22b46b85c4a939d36628ff4635230026e1712869569d13a23d785bd90169056597d34970e69ea9e0df93d164408ca151357dfff7d1d2a6c6", 0x3f}, {&(0x7f0000000b80)="094e74ddb766134b8a0f70fada15576b21b669c07948a3512869242d758bcb1269812d3aba7d4dbb47102087f52af9db404f466d4753b6a29a87092710e0bf95fa4283d7c0b08b116bda11544635e10e521d7c8f1be4ae4889f6f51307dc24f3b972485f07bc5b7bd244b4", 0x6b}, {&(0x7f0000000c00)="6aa99fa4a208fde85755c3dcc18de496b6f771dbf52279a5717d8f171d67af7413c91454ba7c2f02250b8c25d4ee48477afbcbeecd9e166c93ffc6977946884b63f7b62c6e0ed031857073859e590070f99c0858f3a1618504daeb592a1e3c580d335fe7829f4800e8b5676a4aad8f91f40553e0a4edc153b100ad6ba80f229981", 0x81}, {&(0x7f0000000cc0)="8c7a552c37f909b492c3d1e20f892a949eaedb42a70a9d4db980fd4e4b5173e51ed95a478c6cbc2130d5d69ef0c35ebc35cc5da2783335e86888b24b36", 0x3d}, {&(0x7f0000000d00)="81000881ddffc6bb330a066c15ad4494367c51ec4dbd3d93d593ff88249b8cf67baaa82f7ab73f10dcb49f000063ea28e366dd08dd683c20387816b601f7b312324faec25122a017d104cb73a1e83eb36a40df2aa4eda4ac15be48d2b83f16e87bd4602a56a85aca23a07b7fadc35fccc114ffb985c3a6598de03a19c237d1410cb42a87fa1969cde08411fe71e66af06633a104f597afe2f9014be522ff17198bfd261bcd186830b14598746a05001b88af17ef29e40079f52b6a87218cfa9315b1c0ca0d2b1cde6feea182c90024683003e620395e6791d1cc99954033730f33a3db4f1f8b7f603e14bf7bbdbf23e1954c", 0xf2}], 0x5, &(0x7f0000000e80)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0xf}}, @mark={{0x14}}], 0xa8}}], 0x3, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x70) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) mlockall(0x7) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') read$eventfd(r5, &(0x7f0000000080), 0x8) 3m10.545307184s ago: executing program 2 (id=596): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000300)="46000000130001000242424242424242424242424242424242", 0x19) 3m8.723546936s ago: executing program 2 (id=599): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10169, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3m6.911135675s ago: executing program 2 (id=601): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m6.052060244s ago: executing program 2 (id=604): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000380)={0x0, 0x57b0, 0x80, 0xfffffffd, 0x40055}, 0x0, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r2, r3, &(0x7f00000004c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000540)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000640)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000680)=0x1, 0x4) connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000740)=0x8, 0x4) 3m4.942564138s ago: executing program 6 (id=605): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x15, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2", @ANYRES32], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f00000007c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000540)) r3 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000580)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000006c0)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000700)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000740)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) connect$vsock_stream(r4, &(0x7f0000000780)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000200)='qnx6\x00', 0x0, &(0x7f0000000240)='mmi_fs\x00') ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3m4.585419467s ago: executing program 2 (id=606): socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x200000000) r1 = dup2(r0, r0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000400)=""/90, 0x5a}], 0x1, 0xfffffffc, 0x3) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000480)=0x8000000) personality(0xfe47fef9f5ff7379) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40480, 0x0) close(r3) r4 = syz_open_dev$sg(&(0x7f00000006c0), 0xffffffffffffff16, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r4, 0x2288, &(0x7f0000000780)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x11c, 0x2, {{0xd, [0x5, 0xa, 0xa, 0xd, 0x0, 0xe, 0x10, 0xb, 0x8, 0x8, 0xc, 0x8, 0x4, 0x8, 0x3, 0x5], 0x0, [0x401, 0x0, 0x9, 0x7, 0x0, 0xfe00, 0x1000, 0x2, 0xf976, 0x1, 0xfffd, 0x7, 0xf, 0xfff9, 0x3, 0x9], [0xc0, 0x0, 0x8001, 0x19d, 0x9, 0x80, 0x0, 0x9, 0x8, 0x0, 0x2, 0x4, 0x0, 0x100, 0xfd2, 0x7cc]}, [@TCA_MQPRIO_MAX_RATE64={0x4}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_MIN_RATE64={0xa0, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x7}, {0xc, 0x3, 0x5}, {0xc, 0x3, 0x7db0}, {0xc, 0x3, 0x626c}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0xfffffffffffffc01}, {0xc, 0x3, 0xfffffffffffffffd}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0xca}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0x5}]}]}}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast}) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r7, 0xc0184d08, &(0x7f0000000a80)) r8 = syz_open_dev$sndpcmc(&(0x7f0000000ac0), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r8, 0xc2604111, &(0x7f0000000b00)={0x0, [[0xffffffff, 0xffffffff, 0xfffffffe, 0xffffffff, 0xffffffff, 0xffffffff, 0x3c9, 0xffffffff], [0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0xbfa7, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1002, 0x0, 0x0, 0x1}, {0x1001, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PAUSE(r8, 0x40044145, &(0x7f0000000d80)=0x2) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x6}, 0x0) 3m4.284675285s ago: executing program 7 (id=607): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x2b, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x40}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x12}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x54}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)={0x64, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x64}}, 0x0) 3m3.961500205s ago: executing program 7 (id=608): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r1 = io_uring_setup(0x1, &(0x7f00000000c0)={0x0, 0x0, 0x3800, 0x2}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, &(0x7f00000001c0)={&(0x7f0000000200), 0x1000}, &(0x7f0000000240)={&(0x7f0000000280), 0xfffffffffffffd05, 0x1}}, 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x44, r3, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x44}}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x400000}, 0x8) 3m2.962103464s ago: executing program 7 (id=609): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000300)="46000000130001000242424242424242424242424242424242", 0x19) 3m2.142426033s ago: executing program 7 (id=610): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r4, &(0x7f0000000580)=[{{&(0x7f00000005c0)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="34000000000000000000000002"], 0x38}}], 0x1, 0x46000) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000540)={0x1, r1, 0x80000}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)={0xf4, r2, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x8848, @void, @void, @val={0x3, 0x1, 0x5c}, @void, @val={0x6, 0x2, 0x10}, @void, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54}}, @void}}, @NL80211_ATTR_IE_PROBE_RESP={0x91, 0x7f, [@mesh_chsw={0x76, 0x6, {0x9, 0x3, 0x2, 0x32}}, @measure_req={0x26, 0x83, {0x1, 0x83, 0xfb, "b9509ab675b811612b64643df15251a179e0dc70f20a1920c8cc9e0bd085b52f4f78d3855be12916a5d785851e3a26cac282df1b20ca7571f4462c54591a314b4e1709e4e44d815eddbd96f8fbeeafba7882a6872f962d2a7c73a9263b51acf6a1e7aabdbd587cd7e04a9799b985f6b583ffd151d41a7fdee9d40a6ad457deeb"}}]}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xcd63}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffefc}]}, 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x40) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x28, r6, 0xf004f8c3ba8e9963, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}]}, 0x28}, 0x1, 0x0, 0x0, 0x40851}, 0x20008000) mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f00000009c0)='7', 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) nanosleep(&(0x7f00000004c0)={0x1}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000640)={'gretap0\x00', &(0x7f0000000680)=@ethtool_gstrings={0x1b, 0x8, 0x2, "c917"}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 2m58.873440741s ago: executing program 6 (id=614): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000003c0)={'nicvf0\x00', {0x2, 0x0, @multicast1}}) mkdir(&(0x7f0000000080)='./file1\x00', 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000004000, 0x6, 0x1000, 0x3, 0x1000, 0x1000008, 0xb, 0xfffffffffffff7fc, 0x100fff}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000440)={0x0, "d8d7531c1c6054b6b70257ec47e25dc91f003f19004f6ceb55fb98d58dccd7f0fe41ae63a0df07926f45a38667304ab9b9b98347fbe76528e77e751fd98d62be", {0x2}}) recvfrom$unix(r1, &(0x7f0000000180)=""/72, 0x48, 0x40000142, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000600)='./file1\x00', 0x219) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[], [], 0x2c}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000390000/0x400000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x60040000) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000002d0007012b037000fedbdf25067c00000c000180f607b41a7f0000010c000380080001"], 0x2c}}, 0x4008030) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x3, 0x32, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 2m58.6309413s ago: executing program 7 (id=615): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001380)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000013c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000001400), 0x2, 0x141102) writev(r0, &(0x7f0000001440)=[{&(0x7f0000001480)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x363, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="c8ed0ec2aff22b790000000000000000", 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x44800}, 0x4048000) recvmmsg(r3, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1}, 0xb43}], 0x1, 0x2100, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x11c0, 0x0) syz_clone(0xb86511, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x58, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote, {[@srh={0x6, 0xa, 0x4, 0x5, 0x5, 0x54, 0xab, [@dev={0xfe, 0x80, '\x00', 0x3d}, @loopback, @private1, @empty, @mcast1]}]}}}}}, 0x0) 2m54.834479489s ago: executing program 7 (id=618): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x0, 0x4c, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff0007058202"], 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000006c0)=0x6, &(0x7f0000000700)=0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000640)=0xa, 0x4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048801}, 0x24008082) landlock_create_ruleset(&(0x7f00000011c0)={0x0, 0x1}, 0x4a, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000740)={0x0, 0x6}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000007c0)={r4, @in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x0, 0x4, 0x9, 0x20, 0x9, 0x1}, 0x9c) connect$inet(r3, &(0x7f0000000680)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f00000005c0)={0x6, &(0x7f0000000240)=[{@fixed}, {}, {}, {@none}, {}, {@none}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc\x00', 0x1ff) r6 = syz_usb_connect(0x3, 0x40, &(0x7f0000001200)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) syz_usb_ep_read(r6, 0x1, 0x0, 0x0) syz_usb_ep_write(r6, 0x81, 0x40, &(0x7f0000001240)="900100"/64) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x40106183, &(0x7f0000001280)) mount(0x0, &(0x7f0000000a80)='./proc\x00', &(0x7f0000000ac0)='v7\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc/thread-self/fail-nth\x00', 0x2, 0xc0) write(0xffffffffffffffff, &(0x7f0000000a00)="4e42c11ebced0aea7e27eec8c0d04407deeea4c8aa9c8c00000000", 0x1b) 2m47.707462476s ago: executing program 36 (id=606): socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x200000000) r1 = dup2(r0, r0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000400)=""/90, 0x5a}], 0x1, 0xfffffffc, 0x3) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000480)=0x8000000) personality(0xfe47fef9f5ff7379) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40480, 0x0) close(r3) r4 = syz_open_dev$sg(&(0x7f00000006c0), 0xffffffffffffff16, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r4, 0x2288, &(0x7f0000000780)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x11c, 0x2, {{0xd, [0x5, 0xa, 0xa, 0xd, 0x0, 0xe, 0x10, 0xb, 0x8, 0x8, 0xc, 0x8, 0x4, 0x8, 0x3, 0x5], 0x0, [0x401, 0x0, 0x9, 0x7, 0x0, 0xfe00, 0x1000, 0x2, 0xf976, 0x1, 0xfffd, 0x7, 0xf, 0xfff9, 0x3, 0x9], [0xc0, 0x0, 0x8001, 0x19d, 0x9, 0x80, 0x0, 0x9, 0x8, 0x0, 0x2, 0x4, 0x0, 0x100, 0xfd2, 0x7cc]}, [@TCA_MQPRIO_MAX_RATE64={0x4}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_MIN_RATE64={0xa0, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x7}, {0xc, 0x3, 0x5}, {0xc, 0x3, 0x7db0}, {0xc, 0x3, 0x626c}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0xfffffffffffffc01}, {0xc, 0x3, 0xfffffffffffffffd}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0xca}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0x5}]}]}}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast}) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r7, 0xc0184d08, &(0x7f0000000a80)) r8 = syz_open_dev$sndpcmc(&(0x7f0000000ac0), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r8, 0xc2604111, &(0x7f0000000b00)={0x0, [[0xffffffff, 0xffffffff, 0xfffffffe, 0xffffffff, 0xffffffff, 0xffffffff, 0x3c9, 0xffffffff], [0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0xbfa7, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1002, 0x0, 0x0, 0x1}, {0x1001, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PAUSE(r8, 0x40044145, &(0x7f0000000d80)=0x2) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x6}, 0x0) 2m42.942667633s ago: executing program 37 (id=614): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000003c0)={'nicvf0\x00', {0x2, 0x0, @multicast1}}) mkdir(&(0x7f0000000080)='./file1\x00', 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000004000, 0x6, 0x1000, 0x3, 0x1000, 0x1000008, 0xb, 0xfffffffffffff7fc, 0x100fff}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000440)={0x0, "d8d7531c1c6054b6b70257ec47e25dc91f003f19004f6ceb55fb98d58dccd7f0fe41ae63a0df07926f45a38667304ab9b9b98347fbe76528e77e751fd98d62be", {0x2}}) recvfrom$unix(r1, &(0x7f0000000180)=""/72, 0x48, 0x40000142, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000600)='./file1\x00', 0x219) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[], [], 0x2c}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000390000/0x400000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x60040000) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000002d0007012b037000fedbdf25067c00000c000180f607b41a7f0000010c000380080001"], 0x2c}}, 0x4008030) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x3, 0x32, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 2m39.428175033s ago: executing program 38 (id=618): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x0, 0x4c, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff0007058202"], 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000006c0)=0x6, &(0x7f0000000700)=0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000640)=0xa, 0x4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048801}, 0x24008082) landlock_create_ruleset(&(0x7f00000011c0)={0x0, 0x1}, 0x4a, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000740)={0x0, 0x6}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000007c0)={r4, @in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x0, 0x4, 0x9, 0x20, 0x9, 0x1}, 0x9c) connect$inet(r3, &(0x7f0000000680)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f00000005c0)={0x6, &(0x7f0000000240)=[{@fixed}, {}, {}, {@none}, {}, {@none}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc\x00', 0x1ff) r6 = syz_usb_connect(0x3, 0x40, &(0x7f0000001200)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) syz_usb_ep_read(r6, 0x1, 0x0, 0x0) syz_usb_ep_write(r6, 0x81, 0x40, &(0x7f0000001240)="900100"/64) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x40106183, &(0x7f0000001280)) mount(0x0, &(0x7f0000000a80)='./proc\x00', &(0x7f0000000ac0)='v7\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc/thread-self/fail-nth\x00', 0x2, 0xc0) write(0xffffffffffffffff, &(0x7f0000000a00)="4e42c11ebced0aea7e27eec8c0d04407deeea4c8aa9c8c00000000", 0x1b) 26.025804998s ago: executing program 0 (id=900): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f00001c7000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='syz_tun\x00', 0x10) sendto$inet(r2, 0x0, 0x38, 0x20000800, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000280000000000069078ac1414bbac14cf62e94d92d014aa00004e222c3fab474bf17732042dfef515b28a8e716f95b9e03bdfe5589961a2b6f7069b092cb396671c5e706312eeacd1ddd5c2a05c8d757d712602fe10d9158fa013ac2b06c195a17f07322aa85b17a199adfeed02a9d08c7c8f591366664537bd3afed27c43ca4506f7fb67e724f062ab9236598f76276fd85a83fbb1806008bcbb20d7ba4aa15636d876aa653c6f72d74cf8d92faf2713b0c3344c1011", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c01000090780000"], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000600)=""/1, 0x1) r4 = fsopen(&(0x7f0000000640)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00'], 0x50) r6 = openat$cgroup_subtree(r5, &(0x7f00000006c0), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000700)=ANY=[@ANYBLOB='-cpu'], 0x5) socket$inet(0x2, 0x2, 0x1) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000740)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x44, &(0x7f0000000780)={0x4d, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x28) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000840)={0xffffffffffffffff, r3, 0xa, 0x0, @val=@tcx}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 21.39783756s ago: executing program 0 (id=909): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40042, 0x1) write$selinux_create(r0, &(0x7f0000000480)=@objname={'system_u:object_r:restorecond_var_run_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x3, 0x20, './file0\x00'}, 0x58) close(r0) r1 = socket(0x23, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1014c98, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001ecdbcf20460d810021fc0102030109021b00010303900909044f0501aca74b000905030b"], 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083ef0840cc7d6e67db7700000003090220000100000000090400000eef0101"], 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000140)={0x6, 'vlan1\x00', {0x1c}, 0x195}) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x4, 0x2, 0x2, {0xa, 0x4e22, 0xff, @loopback, 0x1}}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) r3 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = dup(r4) ioctl$FIONREAD(r5, 0x4008af21, &(0x7f00000005c0)) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x3, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000400), 0x4) 19.358294508s ago: executing program 8 (id=914): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000003c0)={'nicvf0\x00', {0x2, 0x0, @multicast1}}) mkdir(&(0x7f0000000080)='./file1\x00', 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000004000, 0x6, 0x1000, 0x3, 0x1000, 0x1000008, 0xb, 0xfffffffffffff7fc, 0x100fff}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000440)={0x0, "d8d7531c1c6054b6b70257ec47e25dc91f003f19004f6ceb55fb98d58dccd7f0fe41ae63a0df07926f45a38667304ab9b9b98347fbe76528e77e751fd98d62be", {0x2}}) recvfrom$unix(r1, &(0x7f0000000180)=""/72, 0x48, 0x40000142, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000600)='./file1\x00', 0x219) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[], [], 0x2c}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000390000/0x400000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x60040000) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000002d0007012b037000fedbdf25067c00000c000180f607b41a7f0000010c000380080001"], 0x2c}}, 0x4008030) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x3, 0x32, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) write$cgroup_devices(r4, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 18.424601914s ago: executing program 0 (id=916): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000340)=ANY=[@ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000380), 0x1, 0x2703) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000003c0)={0x0, 0x1, 0x5, &(0x7f0000000400)={0x6, "b3d92cdddf96c20e9064264ccfc6000000fa00008c0000c87fb100000000000100"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 18.413684786s ago: executing program 3 (id=917): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, 0x0, 0x20048040) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) syz_usb_connect$midi(0x3, 0x38, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x1, 0x18, 0xd8, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x6, [@midi_out_jack={0x7, 0x24, 0x3, 0x1, 0x63, 0x0, [], 0xf4}], [{{0x9, 0x5, 0x8e, 0xb, 0x0, 0xf, 0xd7, 0x2, {0x4}}}]}}}}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xdf, 0x0, 0x4000}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000300)={0x2, 0x0, @ioapic={0x5000, 0x8004, 0x1, 0xfffffffe, 0x0, [{0x0, 0xc, 0x7, '\x00', 0x38}, {0x9, 0xde, 0x7a, '\x00', 0x9}, {0x2, 0xb3, 0x3, '\x00', 0x5}, {0x5, 0x9, 0x6, '\x00', 0x4}, {0x5, 0x5, 0x6, '\x00', 0x7c}, {0x0, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0xff, '\x00', 0x45}, {0x52, 0xc, 0x9, '\x00', 0x7}, {0x7, 0x6, 0x73, '\x00', 0x3}, {0x1, 0xb7, 0x89, '\x00', 0x7}, {0x16, 0x24, 0xa9, '\x00', 0x81}, {0x3, 0x1, 0x17, '\x00', 0xb}, {0x6, 0x5, 0x5, '\x00', 0x3}, {0x19, 0x9, 0x89, '\x00', 0x4}, {0x5, 0x1, 0x3, '\x00', 0x1}, {0xa, 0x9, 0xcb, '\x00', 0x5}, {0x4, 0xe, 0xb, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x44, 0x3, 0x3, '\x00', 0x4}, {0xf4, 0x8, 0x7, '\x00', 0xf8}, {0x4, 0x7, 0x31, '\x00', 0xf7}, {0x7, 0x8b, 0xe6, '\x00', 0xb}, {0xff, 0x8, 0x3, '\x00', 0xa}, {0x7, 0x83, 0x4, '\x00', 0xff}]}}) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f0000000200)={0xce, 0x0, r2}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004800) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000540)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000580)=0x5, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 15.221396495s ago: executing program 4 (id=919): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000004c0)={r0, &(0x7f00000002c0)='sysfs\x00', 0x24000, &(0x7f0000000380)={@_ha_fsid={[0x1, 0x9]}, {0x5, 0x8, 0x72, 0x9}}, 0x1, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000480)=0x10001}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f80)=@security={'security\x00', 0xe, 0x4, 0x3f0, 0xffffffff, 0x250, 0x0, 0x250, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0x0, 0xff, 0xff0000ff], [0xff000000, 0xffffffff, 0xffffff00, 0xff], 'rose0\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x3b, 0x10, 0x4, 0x2b}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xffffff00, 0xffffffff, 0xff000000, 0xffffff00], 0x4e21, 0x4e20, 0x4e24, 0x4e22, 0x400, 0x7, 0x8, 0x9, 0x9}}}, {{@ipv6={@private2, @local, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'bridge_slave_0\x00', 'virt_wifi0\x00', {}, {0xff}, 0x2f, 0x6, 0x4, 0x4c}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x0, 0x0, [0x1000, 0x8, 0x1, 0xcda4, 0x5, 0x6, 0x1, 0xb, 0x9, 0x3, 0x7, 0x18, 0x2ffe, 0x1, 0xa5b, 0x8], 0x1}}, @common=@srh={{0x30}, {0x3c, 0x76, 0x7, 0xae, 0x1a62, 0x3009, 0x1180}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0xff, 0xe}}}, {{@ipv6={@mcast2, @private2, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffffff, 0x8000007f], 'vxcan1\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x33, 0x7, 0x6, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0xe760}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0xc01, 0x3, 0x468, 0x0, 0x5002004a, 0x6, 0x0, 0x3, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x0, [], 0x0, 0x0, 0x4000000000}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=@newqdisc={0x24, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, 0x0, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, 0x0, 0x8800) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000019c0)={0x0, 0x1c, &(0x7f0000001a00)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000001a40)=@assoc_value={0x0}, &(0x7f0000001a80)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000001ac0)={r8, 0x400}, &(0x7f0000001b00)=0x8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0x0) write$tcp_mem(r9, &(0x7f0000000240)={0xfff, 0x20, 0xffffffffffffffff, 0x20, 0xa}, 0x48) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)=0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="6400017c000000000000001a0000000002000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB], 0x864}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x44, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 14.684277375s ago: executing program 0 (id=921): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001380)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000013c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000001400), 0x2, 0x141102) writev(r0, &(0x7f0000001440)=[{&(0x7f0000001480)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x363, 0x0, 0x0, 0x0, 0x0) gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="c8ed0ec2aff22b790000000000000000", 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x44800}, 0x4048000) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1}, 0xb43}], 0x1, 0x2100, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x11c0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_clone(0xb86511, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x58, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote, {[@srh={0x6, 0xa, 0x4, 0x5, 0x5, 0x54, 0xab, [@dev={0xfe, 0x80, '\x00', 0x3d}, @loopback, @private1, @empty, @mcast1]}]}}}}}, 0x0) 14.678212446s ago: executing program 3 (id=922): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x0) io_setup(0x5, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000340)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x8) write(r4, &(0x7f0000000400)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x81) write(r5, &(0x7f0000000500)='loop', 0x4) close(r5) symlinkat(&(0x7f0000000540)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write(r6, &(0x7f0000000600)='transport=loop,nqn=testsubsys', 0x1d) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./sys\x00', &(0x7f00000006c0)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/nvme/nvme0/rescan_controller\x00', 0x1, 0x0) write(r7, 0x0, 0x0) close(r7) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000840), 0xffffffffffffffff) io_submit(r1, 0x1, &(0x7f0000000240)=[0x0]) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003080)={&(0x7f0000000000)="8783bf783d3a0b079e7420de7c0318f6c7ec06ab0531b31afd8ee88982df630afa50205b56f7ba8cb619ed9c3dd40de87eb680044195437bfab0326027fe0b0b2cd1186d0a2bd06c3b8da7787242f23014a0ee8afc151612a6ba0f3c72b7b9ce4ca638406bae8a38af1ded73893050007272bd67dea425426dfc65dd2c740108830203f2e4a320e0b251af7ffa9d5b3c103a63", &(0x7f0000000100)=""/194, &(0x7f0000001080)="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", &(0x7f0000002080)="071c54269a5e9578b4da68f7f4b0ee3a5016e4bff4604f543a3636816ef4eb615f7849ae55083127843ed3318e95566499959c5452ed35315e5fd68b70ff01acf21c4e53361613e527acb99b2d0668f3fc9b9a7ee268d207e88ea686b5dab0b0fcbb89d99892c594f12da249ea41eafdf8ae6189649be9b7f61b7882ff53fcea6c04c55f9424dde942d4363551b370ec7b2f131987d74756f0ac9398f31db7b2d27804edf98ef61d420f4fea2f8513994741f61613de9fbef68748f0c33eff559df70bc421f20eb7075903d945d7af37e8042f44a1c9d790c480466a0607cc3c034ba55e7a1403121ab450263f3cc4d117734701f56d4251675edf2aa553d26e0468f85e28d11126df51e05c401fa24a553986f130ef1829df883b102f06b2c8c34243154d73de7e3872934759ad037e0744d41d23f85fba26439f5c43dadfbdf747a76c8b02b779626091ae92c66eba38e77bc93c4f6deb904327843ff5ecd2b294221da484a9cdf3cd40ab2f549d0571660de34bbe8f69f51f8313b1981be7859d76bebae15f6a46aca219e4d1c5a2aa870268ba229a4bfdbc77db6292acf6a0857596ef60bc6ca25fc857f33cb8113ab5db61527c260a1a03d45194e8e1e537d8f0273567c8146703f7ea0a8e0fd3b5b49fc0f4573f70f123fc71d69398084aef08974abd1bb8b1bc6d04010ba608e893e28af63f1270a05048f694336ae23450b6767c64d25d5d9a9d5074d68cad034a0388aecd020df6eb36cafea1ce0099e39d4f952cd10973c68d7703c1d084a4cf5321948c5df2fe4e3fea9f5fc148d3a615fc880e6a7b6b1e9c380d82828fe4914c42e6baef418248bb83d57a2075d68c0e1628d1c722c6f93b1c352e303de89654167ef4d8e3042a4eafa01ab6fc7ebb1462eb7de513a7c95111a907fcb47c21f1c9acf012bdc91d381318e57eb7bef9db397ecd08c2f7b658a4e1cb85a8913a0458fec167a4fb48e67d31a4edb5ccc38f74f317111738bc4dbf927fe6d993996255c31f1fbe30df86f63d07797cd87b1434e4d140824527584e24477f14385d098f6f91140c6544546022b9be7981ec80db19ec5c5580f03b787ca7cdb1232b66c9541c23c8e5a58b608f732c2aa50e0f257bbd840967fac57ca2add9b704c8273e186cbc968ab931937fd0fdd3cf4a2dcd35989f78a74e747e276330d8bb1ba70a69cb5fd1d94b49428bdff087f7dcef7514f8e0cf9362a5fba378c476af5d7e3e0540faa7aa01096a22e8f7f47f2caca18a5d7311569771a85ca399bd4052d8375b4b370c57472594ec89c5f4fb248e7ccb6469741d5bcbcbd9879fb79f39c21789ecb998051f3b979ace9d383cb458a9dca78f5b713bf415d2cfaa5f1bdaa6da3283810637bbd0ff57ad666c760a571d362289656bd2f96ac803a92403dbe3ce567e1c3d3fbd02bbe1d03d1f9aadf4f8ef2cfeb66b2d9b479cdbcaf82e5c4ed3583ff676595441cf615e8d048a13539c311c308bcbdc8f95ef9e47e2de44ce037cbb2d752d646b9c0f3bb624a70c6072fc34256e52f7be339f25d9e666b2d5230c48093fc9ef4409b2914565297291246f3c28bc6c779bbd18188df4d2fb659e421705d7bbca2da39d72785e5a4cac136bd74a6e6e38790d2bf26c9cc3d24d402ee850715f958211071eec6c64564e6046c5c6a32bf37f32166f19aa8548677436bba5ecbdd8dfa045fafd7644ad50eae9510f8091403c71c6ca0b86ce91cad79eb58b9385c0eb953089cb281a2f3c9158189729d088cc79075462e38d68d3040d49df5383a3e6124f47bb681dde14629c5e4114f49761e4876779cf5a9e06f3ba57d0f9ff51abcdec8a9097bbbdd042eb6a572e32a614d34e4837219dec6916bc50db616b52d3cd9d681a1f5ef279b3d4bc3d739d85b28fe38f4fee82b09cd00311408ab3a657e1ed5d9e5ad3e78eee10699e892f0467c1b07f426990903ce64093050d61f7d72b3145423203e120e05bc6216dd18046cf5177297c26828bc580286dd4279fccf8de29c53ce6f1a083d8cd60f7bfd313a97537f6a8880b61b82ba597a0ef74360b1207f6108775bd7c6d178a394f63d482180a70acd3c2ec562be4f8b9819baa5e59bdbe8ab27b33553411c6e12af7684738c9470c7bf36798dc9024ee70f51cb802cc485e081be59e6877befcae4e6ebf99effe5ba2dff69e4e56f74634302ffbb3249fb683b348e29b49b24135f4677e9c96e9ab71629802c56c718ee902a56c81b4b4ae2bf50a9f3846b6463464bc9cd0478d1efb41c1cf31f1f97c309f41946021aee99c76a98cfc01c8acb84feef4bcb855cdb721bbe62e07dff7de71d3c91f3d84cc7ce32c6d02711ed1eaf18dc7ca79272177d2e49c9b893c4ed13c1c560a079bd08986f488faa596bfcbe6d36b1eb7102ceebc14adcce20d2ae704dcc53aba9c201a1a30d0f5546104178a324e239ffcc80cec14009373ee45037c0771f59068cbf980d5582d755267f2fba9d650c659815d00bb613d85822576ac086f662536ab63ca54ad5da33350e2f02833271b76cea66f901c590e647cd58eeeb4b997654209f2cadfef5dd6888770a1f5c6beab6e474e8ae69826dc37012089970768be04dbaef4f11a5c954117b67cacc0e3984117fef917e9179939ea1a760ce38cafaafc0fa45e2d7205ed139284c8fbdaf10987a26964e3ccfbc7fd631cda7f4d4f118b8763a6518536129df2442211575f21b9e6fae9bdded28923bebf2b30e4988514f085b958d8fcd9d484cc00e559f61d812656f8993b304a6623c8c0c8bc12e3147cab25166a6b3d2e4fc58d457d232db057007163fa62c3fbefb6639466d2ffa92dcd6fc6b4e0bfc54a4c58e81f0d8e4d844655809a497a06bef3870016024072fd83942f9e7c41f98a557da75dcebeb7c4828052f54422c518fb3b3b1e2cfd4464ebfe33e447b4dfa91007be2a433804f548f5c3e817582432cefbb384495ee97aa3bff85e08072f6a68c2614f7539f84246d0813f4a0536346f7f790941a05dfc9d628fa714488759da10fbe1e7518af3aef2b424b93a1e428e37ed9b9075bcd08504ad950e30bc65e2b97168f9c173238a2912c2142014435ec6d7c5068a17c385322f742506eddf5a9072bd0394c7d5bfb7aa52552d7915182d22944392932bb253fa61e7e899541785781e8ac904cf63d92cf56149ae0218e4cbc94aa011ddc403e282cc4cb589b680dcbb8749d18ec969f90302b1fce2a0576084ef9615410c40fb175a1561da29113f1043f0fc87aa4f763dc86446d6509038437de9d8e89578d5b4f95cadf7671fdb38e639ea59647f7121294b30e61b069826f53cb9d94e766a164f0953cd081fc10d06a75ea5dce1447a847fb337d9cee897fad8034cf0a474b4902cf65f67969af0d8e710ee18f770f323ead6760d94a76123f04454d29d508bad40aabf3854f69809d8c447b61d2b8acd105045fce9212f6dd4706714a585a7032bd691f01fa96f071d8910db6f4ac9ad0f2164eb3e1c216700a46b34ed29b04068bffdde1407139ecb35fd8f961ff529e54cb62f96d2c82f15516875b45e6207ff3bf324293c2aeb03860bc682e1b50bf00b74b4e66575419b3956472242f5dcd736c9e386b156a171bd6c3aa57b2b61c038299af1ce51f3586da8adc1b9e27af6b30b64950d5c712d40d859f9733778f54b635bfb85ad379066b8c82b3451e1ef957d3e0425a5b542c1ff2ece10b49056c847550936c34e79a4e1390b7fc1bc7e0909b5802bb655b29d86cc4399b8d75544f19aa3b4c7ee1d4cfbec4cdbb8a70394e77ecbbeeb9a27e68d49968668e4d27279bbecd940f6f2526707ae7c3491fc7ab8085d3897696517b73896e4cfad3a5f45106928eb0f651a27736a165f113569fb75e71f0373f2f3525ee912e3ea5eab4d35cbaf97895a9bba023d2c2d26e54a2f6fa0ffcb8aa239db91877773821c429ab9fbee42b502c70c3ef6f606bcf9cf650426a3680a0971f90df275972356ec4ef6051bf4e9359c6fbf34066314fa1450ae1310581af827d181dab61b2b29f9ccf02f5e57fc820b04db3b7b3f842d7e02e438b60df6081e3021c12e3603ded136d59f88153cca84cd3f29e56ac9f130f158941979b44b014f31b048472502555999edc4a89f2d9a33ffa1f89314854dab1175db9b00d976b07b5d6d0404d8e9afed16f2b42853013403b4acd572389f7b997cf9dfe755972e494b2901b345345487f0f5336f6db2075bad4a74fca399c7dcab5a01d31f53321ee45e3a49e8ac76901c4843f3b846c5f0af75c023951ee4a12b64b86f4da252d82dc7f93e762b471891d06da0fa0a4e80172f7a9e59ad33b9636af65f3e13a27b88bfa415dd5dbba421480b68ae75a5e737a2b500e254ca63fe19b9bf1e322b06df2a304861b043e781dc3f6e6b619d86e03cbe1a671c1df52c5a495b838ed187bcf0872f8fa133e849aef8a9305f665263b70b0e39a7b4bd86f52a86f937bf73bb55462a011bcbe327e50dd222f3ae10ea93c33ed90db9efa74935d6e006f32c72d9708860e9a9a79622132b67913fdbafaf4ff39a5628b412bca7f7e9522f0214683d2c3a7ff484cf4048598c36d13ac80de580bd4ee9d5b2a74ae60df47f4bf56522ca4195346b9172481f1f1b407ef99d053eddcf2b424f08e26ad946905c76175992960edad07a6c5babc2b4a900556159f6b82f34a5512839d2b7b143e465e6dcb5fe9fbd9de24e7a5b7a65860d92e7d1da7fd9d3a2c324bcfe5c00d48ff91b8c14ac3089961296a2145ad83469320d5015939020e4e64d66e2a747f225fd53bfdb5d02d618e46e0f4b2290ccc87ec3ac80fff5a65a8cb2b8011a2a6c58c8fada61fa889ebad87bde5f2369f6f37a1f69413f52cadef3800005faf47488c706beec37a5fee84dfe46b8e2e4e22ea8b15d9d0762cde25da4191b4997b2010ae6b22ec5d12bc83c27f9717cb79259e87f312e5c2bd8889d49f5935bdb6782831032e8d517e8d79a5b46788040f32143887aa717eda6a9462c732195cf969eecfea1de288dbd42340331356b0e4a44084c8a913111a856ca5a53b043f1fdf52a56149e2b0db7249a8598a785bf0df02fdae37f4ec57b68f7e42199aeac846a6bcd31b987f669f0eb0618754421f08304b93f223390d1b5fbcb05efb6adb162302c4bc741daa9b1b454ed60ecf6c8095478f2198990bb3983dace4d5ec40c558722d98adebb99c7a3981b6777c011a4fa7efbbdb6c5eb9cd3913afc924f6fd61eaa68caf183394bbb33ee6c66977b55c586202609559b2a42975aca47b46c9f1f30e1ed3f3b4b1790564d4a7bb0e915b915f4ecd67a8eb2bd66aef2a83b2a4eaf2faa334a270fff6eaa1b188609ec5215464f0cf68e068f21cf32267f736d65fab411da90c1943dcc5957dab3d4aa464e3cf23b345041d0fedbfa1b889b105eac4578c4112696779712b4dfe7152bc60210d6d2ed14e26acbe56ba59c040b025551a4241583300cdb400340b5ef2b7d07700c0f89b238b9f8cd71f1bbd47d679b5d4bd5310d614c215677c8a460ad06c38a2204f77580fadaee26a5122fda2df0312df0b8472d9e87fe3548b3e5d19f3d58fd5864b15d5dec609677674b500abf8792a7ed405cfe3275a595d5c7b8a1e36ec0fb5b11672099211596b359bd78a885627e28df6e7f9951e37c5b137cea62ccb1e1e3e695d8c949586874e708b2109477ee747434662d9cc6d15c9f2fa56d1870ea861406027f6eb0150cfb92b458d43387b2f476548e6888140b", 0x6, r0}, 0x38) 14.387931047s ago: executing program 8 (id=924): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 14.211944869s ago: executing program 4 (id=925): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000200001002400128009000100626f6e64000000001400028008000b00018a48415b2b8b64bb241f669ac7c06f59de38bf0d53d1d2e8c6b211d0d9b1312b76f31aeba6835b798bedb776cc314382c8f3c1d59b06b4cebcff3ddcabe5c07035", @ANYRES32=0x0, @ANYBLOB="05000e0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b80)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC=r0], 0xfc}}, 0x8010) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000010140)=""/180, 0xb4}], 0x1}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0xa}], 0x2, 0x40000002, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r1) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x1, 0x5002) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000900), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x6) openat(0xffffffffffffff9c, 0x0, 0x250942, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000a40), 0x41000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000a80)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000ac0)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000b00)={"0080bced01eb0100000000000000000700000000000000c900", r8, 0xffffffffffffffff}) ppoll(&(0x7f0000000b40)=[{r9, 0x200}], 0x1, 0x0, 0x0, 0x0) 10.264331228s ago: executing program 8 (id=927): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)=@newchain={0x24, 0x64, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0x5, 0xc}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044801}, 0x20040000) 9.814407987s ago: executing program 3 (id=928): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x3f) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x48) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000480)={0x4, 0x6, 0x800000000000, 0xb, 0xd7d, 0x4}) 9.465561341s ago: executing program 4 (id=929): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 8.954840059s ago: executing program 3 (id=930): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESHEX=r0, @ANYRES16=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000380)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f0000000840)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019840)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000019880)={&(0x7f00000198c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000019900)={0x0, 0xdea2, 0x3400, 0x1, 0x15b}, &(0x7f0000019980)=0x0, &(0x7f00000199c0)=0x0, &(0x7f0000019a00)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000019a40)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000019ac0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000019b00)) r9 = landlock_create_ruleset(&(0x7f0000019b40)={0xa019, 0x1, 0x3, 0x0, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r9, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) r12 = landlock_create_ruleset(&(0x7f0000019b80)={0x3a1, 0x2, 0x0, 0x40}, 0xffffffffffffffdc, 0x2) landlock_restrict_self(r12, 0x0) bind$unix(r11, &(0x7f0000019bc0)=@file={0x1}, 0x6e) listen(r11, 0x0) connect$unix(r10, &(0x7f0000019c40)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 8.780416142s ago: executing program 4 (id=931): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socket$kcm(0x11, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x88}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x2c, 0x0, 0x8, 0x0, 0x800, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x4004810) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f00000025c0)={&(0x7f0000002600)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800c080}, 0x4005) sched_setscheduler(0x0, 0x1, &(0x7f0000002640)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000002680)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000026c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002700)=@abs={0x0, 0x0, 0x4e24}, 0x7) sendmmsg$unix(r3, &(0x7f0000002780), 0x651, 0x0) recvmmsg(r2, &(0x7f00000027c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002800)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002840)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000002880)='./dev\x00', &(0x7f00000028c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002900)='./dev/mtdblock0\x00', 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000002940)='./dev/mtdblock0\x00', 0x8000, 0x0) sendfile(r4, r5, 0x0, 0x110000) close(r4) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 8.721149474s ago: executing program 0 (id=932): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20048040) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) syz_usb_connect$midi(0x3, 0x38, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x1, 0x18, 0xd8, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x6, [@midi_out_jack={0x7, 0x24, 0x3, 0x1, 0x63, 0x0, [], 0xf4}], [{{0x9, 0x5, 0x8e, 0xb, 0x0, 0xf, 0xd7, 0x2, {0x4}}}]}}}}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xdf, 0x0, 0x4000}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000300)={0x2, 0x0, @ioapic={0x5000, 0x8004, 0x1, 0xfffffffe, 0x0, [{0x0, 0xc, 0x7, '\x00', 0x38}, {0x9, 0xde, 0x7a, '\x00', 0x9}, {0x2, 0xb3, 0x3, '\x00', 0x5}, {0x5, 0x9, 0x6, '\x00', 0x4}, {0x5, 0x5, 0x6, '\x00', 0x7c}, {0x0, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0xff, '\x00', 0x45}, {0x52, 0xc, 0x9, '\x00', 0x7}, {0x7, 0x6, 0x73, '\x00', 0x3}, {0x1, 0xb7, 0x89, '\x00', 0x7}, {0x16, 0x24, 0xa9, '\x00', 0x81}, {0x3, 0x1, 0x17, '\x00', 0xb}, {0x6, 0x5, 0x5, '\x00', 0x3}, {0x19, 0x9, 0x89, '\x00', 0x4}, {0x5, 0x1, 0x3, '\x00', 0x1}, {0xa, 0x9, 0xcb, '\x00', 0x5}, {0x4, 0xe, 0xb, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x44, 0x3, 0x3, '\x00', 0x4}, {0xf4, 0x8, 0x7, '\x00', 0xf8}, {0x4, 0x7, 0x31, '\x00', 0xf7}, {0x7, 0x8b, 0xe6, '\x00', 0xb}, {0xff, 0x8, 0x3, '\x00', 0xa}, {0x7, 0x83, 0x4, '\x00', 0xff}]}}) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f0000000200)={0xce, 0x0, r2}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004800) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000540)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000580)=0x5, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 7.427767012s ago: executing program 8 (id=933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x181a01, 0x0) poll(0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0xff0f) 7.426284785s ago: executing program 3 (id=934): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socket$kcm(0x11, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f00000025c0)={&(0x7f0000002600)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800c080}, 0x4005) sched_setscheduler(0x0, 0x1, &(0x7f0000002640)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000002680)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000026c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002700)=@abs={0x0, 0x0, 0x4e24}, 0x7) sendmmsg$unix(r3, &(0x7f0000002780), 0x651, 0x0) recvmmsg(r2, &(0x7f00000027c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002800)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002840)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000002880)='./dev\x00', &(0x7f00000028c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002900)='./dev/mtdblock0\x00', 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000002940)='./dev/mtdblock0\x00', 0x8000, 0x0) sendfile(r4, r5, 0x0, 0x110000) close(r4) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 6.796157072s ago: executing program 9 (id=935): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001380)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000013c0), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000001400), 0x2, 0x141102) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x363, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x44800}, 0x4048000) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1}, 0xb43}], 0x1, 0x2100, 0x0) 6.363225262s ago: executing program 4 (id=936): openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/tty/drivers\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') close(0x3) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002100), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000002140)={0xf000, 0x118000}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x21, 0xfffffffffffffffe, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000021c0)={0x52, 0x8000, 0xfffd, {0x0, 0x1}, {0x52, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc8, 0x202}, {0xd06, 0x5, 0x1, 0x1198, 0x2, 0x101}]}) write$char_usb(r6, &(0x7f0000002200), 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000002200)='/proc/asound/card0/oss_mixer\x00', 0x14d000, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) flock(0xffffffffffffffff, 0x8) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000002240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xa0, 0xfe, "", [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x81, 0xf8, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x2, 0x6}}]}}}]}}]}}, &(0x7f0000002280)={0x0, 0x0, 0x5, &(0x7f00000022c0)={0x5, 0xf, 0x5}, 0x2, [{0xb2, &(0x7f0000002300)=@string={0xb2, 0x3, "6b22013b0221c8c03218f45234c963393d44513cfa236bd1a918e5b48e48ca0e5b7c414f57ebb2316c53df9824e8c09d0bfa4f86c97974096dac801165cff96f02a6a8fd19c58f3f8fb7e55d34e614b7ee1490e7158f87d621e6e2303380cc75dd78f1fc6461d144cf3044df9eb042cb87c167628786a4ec2d940216bfd25ff0d4dd9e019165e658f0b91c60a2702ebd568e82bf35de21faec3167a189845fce22cc355a52c486c8ba3b9894e3e9b431"}}, {0x0, 0x0}]}) add_key$keyring(&(0x7f00000023c0), &(0x7f0000002400)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2040) 4.63431149s ago: executing program 8 (id=937): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 4.517537603s ago: executing program 9 (id=938): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000380)={0x0, 0x57b0, 0x80, 0xfffffffd, 0x40055}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000004c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000540)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xad) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000640)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000680)=0x1, 0x4) connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000740)=0x8, 0x4) 4.504389331s ago: executing program 8 (id=939): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setns(0xc9, 0x0) unshare(0x22000200) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@bloom_filter={0x1e, 0xf, 0x9, 0x5, 0x4000, 0xffffffffffffffff, 0xfef, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x3}, 0x50) syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902610002010484080000000001020d000005240600010524020006000606"], 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2e, 0xbbf690e4e39d2fd, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0xad5, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x112}}}, &(0x7f0000000500)) ioctl$UBLK_U_CMD_GET_FEATURES(r2, 0x80207513, &(0x7f0000000580)={0x0, 0xffff, 0x8, &(0x7f0000000540)}) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8}}]}}}]}}]}}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, 0x103) r6 = memfd_secret(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b1, &(0x7f0000000680)) futimesat(r6, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$UBLK_U_CMD_START_DEV(r6, 0xc0207506, &(0x7f0000000700)={0x0, 0xffff, 0x0, 0x0, 0x0}) tgkill(0x0, r8, 0x2) mount$fuse(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x3a0060, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x2000, 0x800, 0x0) syz_fuse_handle_req(r7, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x130, 0x0, 0x9, {0xffffffffffffffff, 0x40000008, 0x0, '\x00', {0x7ff, 0x1, 0x1, 0x800, 0xee01, 0x0, 0x1000, '\x00', 0xa, 0x8000, 0xb4ea, 0x4, {0x88007, 0xfffffff9}, {0xc7, 0x7f4a}, {0x1, 0x9}, {0x200000008, 0x9}, 0x8000, 0x4, 0x0, 0x9}}}}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000ac0)={0x24, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1010901a10075089102c0c0"], 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000b40), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r9, 0x400c4808, &(0x7f0000000b80)={0x2, 0x100}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) 4.210003102s ago: executing program 9 (id=940): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdff"], 0x50) close(0x4) 3.958168666s ago: executing program 9 (id=941): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3.609630563s ago: executing program 9 (id=942): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000400)={0xc, 0x8b}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000440)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000004c0)=""/80}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000580)=[@acquire], 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) pipe2$9p(&(0x7f0000000600), 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000700)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000780)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x4010012, r5, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000180)=""/174, &(0x7f0000000240)=0xae) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.438017766s ago: executing program 0 (id=943): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESHEX=r0, @ANYRES16=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000380)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f0000000840)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019840)=0x7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000019900)={0x0, 0xdea2, 0x3400, 0x1, 0x15b}, &(0x7f0000019980)=0x0, &(0x7f00000199c0)=0x0, &(0x7f0000019a00)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000019a40)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000019ac0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000019b00)) r9 = landlock_create_ruleset(&(0x7f0000019b40)={0xa019, 0x1, 0x3, 0x0, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r9, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) r12 = landlock_create_ruleset(&(0x7f0000019b80)={0x3a1, 0x2, 0x0, 0x40}, 0xffffffffffffffdc, 0x2) landlock_restrict_self(r12, 0x0) bind$unix(r11, &(0x7f0000019bc0)=@file={0x1}, 0x6e) listen(r11, 0x0) connect$unix(r10, &(0x7f0000019c40)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 2.336325321s ago: executing program 3 (id=944): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e1304095c0009003f0020480a0000000d0085a168d0bf46c92345653600648d040012ec0cff3959547f5000000000c902000000004a3200040016000b000a0000000000e0ddf66ed538f25232529c28bf00"/120, 0x78, 0x44, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000002380)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591638d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0006cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296560000d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fd92bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f46dc53a26fd997f3af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde84f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c5770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46ba8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a650b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0c1043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077be00000000d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc654ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000004380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004440)={0x90, 0x0, 0x4000000000000, {0x0, 0x2, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x7fff, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r4, r5, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004500)={0x50, 0x0, r3, {0x7, 0x26, 0x5, 0xffffffff80010000, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_emit_ethernet(0x36, &(0x7f0000008980)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004580)="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", 0x2000, &(0x7f0000006580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0x6, 0x0, 0xfffffff8, 0x8003, {0x1000000001, 0x801, 0x2b, 0x40000003, 0xd, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0xfffffffd, r4, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x50120b533aae0b5d}}}, 0x0, 0x0}) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000006700)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000006740)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000001010103000000000000000002000000180001801400018008000100ffffffff08000200e00000010c001980080001"], 0x38}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r8, &(0x7f0000008940)={&(0x7f0000008800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000008900)={&(0x7f0000008840)={0xa4, 0x2, 0x9, 0x0, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x31e4afe0}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x74c}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x44844) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000008780)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000087c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) sendmsg$nl_generic(r1, &(0x7f0000008a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000008a40)={&(0x7f0000008ac0)=ANY=[@ANYBLOB="0c020000370000042bbd7000fcdbdf250e000000bc00408008004d00", @ANYRES32=r4, @ANYBLOB="0800a7123d28feae00c1d35e4e984a4c609722383905e3fcbf9212d17784070d7292f82a76cb72b170ff0eace19294071c2827099faa9a8e57e06626a114174f3ac3c66a9a9845aa9d4ce3df776d0825226649fe867a08132e28d8fadd2625961438a1bf60e15e732dd99640481b72094bbc93fd8e38743c65b714432d0809c539e4fa3cbd7dc2d787c2140b4e43f46258508e00d51bf998c58c1588d6d8181ff318ccee3a8a978093d59e3c3a21f1cfbd4c9c730548ca5f5509b8d6b0bdaf7e7542100919f66c0f2f221a902ed8aeedfe4e1ee53fde76996b00fd67b3d13c1fdfe57efff220351f5ace80b8f604a89680d80aff4321159d3b677e4ca5aed3ba569d8c", @ANYRES32=r6, @ANYBLOB="0800f500", @ANYRES32=r7, @ANYBLOB="95005200bab7a920880064a03f646e74f6afe9e82870f8c40f1c27e660f83bb6765c3210ee80fb232b902b922ecdc33e2680568c9307d9d9ac6218090c19fc026cdea59050518b496abbb47e4cb0bc4812b594ad7268a85930a8581d37837148f0ea4777d23d544895497432f989e5bd7d98ceb0f31a8af4fd628e03ebc3fc090e531913ae2120ee60945103fa01650a71340e15ec0000000800e900", @ANYRES32=r9, @ANYBLOB="18e0dc5259f1769146abb3034fa2411714cbd1156929d9e38a9134501a3908a1e892dad713ded54c0522ebbc89ea3c1b95c83e319918edf3afa5ea30494cfdfdb8171ed3204d767acd850a7b3437adf1edb1b200c680040082800400c88004006880f591fdcd37a48cc51255acd0af82f17081941fd534ba43fe43e4fa88a9f202a1a92511fd91ecf725826ff0d9a29a63786eb23f74f5c7d5d8311a96c10daadb62a4772f52a0e185ded141e9a26c13b18f952030c6fe37764ed44d299ea7fdfdc2c94230605c8af51e0032222f5a539175f4e1562c4a60bb11f1548995353a4e9d66646b184c15fffbe00d5b8b9eda3b9bc97873993a12ae61cb504723fab50400f00000000c0022000d000000000000002800c9800400a98042446a12fb7a259fcef2052b9af9c5f840aca3467a9de41508002d00", @ANYRES32=r10, @ANYBLOB='\x00\x00'], 0x20c}, 0x1, 0x0, 0x0, 0xb1942b013b73adf3}, 0x45) pwrite64(r0, &(0x7f0000000300)="51cf5a815e2f1ecdea353a42", 0xc, 0x8) 2.212083294s ago: executing program 9 (id=945): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x5411, 0x1000000000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000010840)={&(0x7f0000010880)=ANY=[@ANYRES32=0x2], 0x60}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000280)={r2, &(0x7f0000000180)='!!^\xf4\x00', 0x50000, &(0x7f00000001c0)={@align=0xc616, {0x3ff, 0x0, 0x26828ee5, 0x9}}, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4}) openat(r3, &(0x7f00000002c0)='./file0\x00', 0x630001, 0x163) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000010900)={0x0, 0x0, &(0x7f0000010940)={&(0x7f0000010980)=@ipv6_newroute={0x60, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2}}, @RTA_OIF={0x8, 0x4, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0x0, 0x2, 0x1, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}]}, 0x60}}, 0x0) 0s ago: executing program 4 (id=946): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socket$kcm(0x11, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x88}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x2c, 0x0, 0x8, 0x0, 0x800, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x4004810) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f00000025c0)={&(0x7f0000002600)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800c080}, 0x4005) sched_setscheduler(0x0, 0x1, &(0x7f0000002640)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000002680)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000026c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002700)=@abs={0x0, 0x0, 0x4e24}, 0x7) sendmmsg$unix(r3, &(0x7f0000002780), 0x651, 0x0) recvmmsg(r2, &(0x7f00000027c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002800)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002840)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000002880)='./dev\x00', &(0x7f00000028c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002900)='./dev/mtdblock0\x00', 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000002940)='./dev/mtdblock0\x00', 0x8000, 0x0) sendfile(r4, r5, 0x0, 0x110000) close(r4) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): T9454] Call Trace: [ 363.967396][ T9454] [ 363.967404][ T9454] dump_stack_lvl+0x100/0x190 [ 363.967437][ T9454] should_fail_ex.cold+0x5/0xa [ 363.967463][ T9454] should_failslab+0xc2/0x120 [ 363.967489][ T9454] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 363.967513][ T9454] ? __alloc_skb+0x5b7/0x710 [ 363.967529][ T9454] ? __alloc_skb+0x140/0x710 [ 363.967549][ T9454] __alloc_skb+0x140/0x710 [ 363.967564][ T9454] ? __alloc_skb+0x5b7/0x710 [ 363.967580][ T9454] ? __pfx___alloc_skb+0x10/0x10 [ 363.967605][ T9454] netlink_alloc_large_skb+0x69/0x150 [ 363.967640][ T9454] netlink_sendmsg+0x680/0xda0 [ 363.967672][ T9454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.967703][ T9454] ? selinux_socket_sendmsg+0x198/0x2f0 [ 363.967732][ T9454] ____sys_sendmsg+0xa4d/0xbe0 [ 363.967754][ T9454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.967783][ T9454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.967812][ T9454] ? lock_acquire+0x1d1/0x380 [ 363.967836][ T9454] ? get_pid_task+0x2a/0x250 [ 363.967863][ T9454] ___sys_sendmsg+0x190/0x1e0 [ 363.967889][ T9454] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.967913][ T9454] ? get_pid_task+0x106/0x250 [ 363.967948][ T9454] ? find_held_lock+0x2b/0x80 [ 363.967991][ T9454] __sys_sendmsg+0x160/0x210 [ 363.968012][ T9454] ? __pfx___sys_sendmsg+0x10/0x10 [ 363.968045][ T9454] do_syscall_64+0x123/0x790 [ 363.968074][ T9454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.968093][ T9454] RIP: 0033:0x7ffad279e1d9 [ 363.968109][ T9454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.968126][ T9454] RSP: 002b:00007ffad36b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.968144][ T9454] RAX: ffffffffffffffda RBX: 00007ffad2a25fa0 RCX: 00007ffad279e1d9 [ 363.968156][ T9454] RDX: 0000000000004050 RSI: 0000200000000240 RDI: 0000000000000003 [ 363.968168][ T9454] RBP: 00007ffad36b7090 R08: 0000000000000000 R09: 0000000000000000 [ 363.968179][ T9454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.968190][ T9454] R13: 00007ffad2a26038 R14: 00007ffad2a25fa0 R15: 00007fff1b4a3a28 [ 363.968215][ T9454] [ 365.172933][ T31] audit: type=1400 audit(1791735767.173:838): avc: denied { write } for pid=9449 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 365.574459][ T9466] netlink: 20 bytes leftover after parsing attributes in process `syz.9.759'. [ 365.703454][ T9471] xt_CONNSECMARK: invalid mode: 66 [ 365.846339][ T31] audit: type=1400 audit(1791735767.791:839): avc: denied { listen } for pid=9475 comm="syz.9.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 365.881451][ T31] audit: type=1400 audit(1791735767.828:840): avc: denied { write } for pid=9440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.008646][ T9484] netlink: 'syz.3.764': attribute type 3 has an invalid length. [ 366.352945][ T31] audit: type=1400 audit(1791735768.244:841): avc: denied { read } for pid=9475 comm="syz.9.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 366.379438][ T1464] IPVS: starting estimator thread 0... [ 366.408969][ T9487] overlay: Unknown parameter '/file0' [ 366.488433][ T9488] IPVS: using max 49 ests per chain, 117600 per kthread [ 366.588015][ T31] audit: type=1400 audit(1791735768.483:842): avc: denied { write } for pid=9489 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.632695][ T9493] netlink: 'syz.4.765': attribute type 1 has an invalid length. [ 366.632717][ T9493] netlink: 'syz.4.765': attribute type 1 has an invalid length. [ 366.795674][ T31] audit: type=1400 audit(1791735768.668:843): avc: denied { connect } for pid=9494 comm="syz.3.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 366.921522][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 367.883115][ T5602] Bluetooth: hci2: command 0x0406 tx timeout [ 367.960815][ T9499] phram: not enough arguments [ 367.985824][ T10] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 367.986755][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 367.986779][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 368.001960][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.001983][ T10] usb 5-1: Product: syz [ 368.001996][ T10] usb 5-1: Manufacturer: syz [ 368.002008][ T10] usb 5-1: SerialNumber: syz [ 369.414084][ T31] audit: type=1400 audit(1791735771.085:844): avc: denied { write } for pid=9501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 369.877937][ T31] audit: type=1400 audit(1791735771.510:845): avc: denied { write } for pid=9527 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.051779][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz.8.773'. [ 370.726793][ T9538] overlay: Unknown parameter '/file0' [ 371.007771][ T9538] netlink: 'syz.0.768': attribute type 1 has an invalid length. [ 371.007865][ T9538] netlink: 'syz.0.768': attribute type 1 has an invalid length. [ 371.156822][ T10] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 371.193588][ T10] usb 5-1: USB disconnect, device number 31 [ 371.211194][ T10] usblp0: removed [ 371.397851][ T9036] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 371.561653][ T9036] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 371.564063][ T9036] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 371.564092][ T9036] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 371.726214][ T9036] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.726243][ T9036] usb 1-1: Product: syz [ 371.726257][ T9036] usb 1-1: Manufacturer: syz [ 371.726272][ T9036] usb 1-1: SerialNumber: syz [ 374.478904][ T9036] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 374.520676][ T9036] usb 1-1: USB disconnect, device number 33 [ 374.530743][ T9560] size and base must be multiples of 4 kiB [ 374.530759][ T9560] CPU: 1 UID: 0 PID: 9560 Comm: syz.8.777 Not tainted syzkaller #0 PREEMPT(full) [ 374.530779][ T9560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 374.530789][ T9560] Call Trace: [ 374.530795][ T9560] [ 374.530802][ T9560] dump_stack_lvl+0x100/0x190 [ 374.530833][ T9560] mtrr_add.cold+0x74/0x87 [ 374.530851][ T9560] mtrr_ioctl+0x25a/0xcf0 [ 374.530869][ T9560] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 374.530895][ T9560] ? __pfx_mtrr_ioctl+0x10/0x10 [ 374.530911][ T9560] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 374.530938][ T9560] ? __fget_files+0x34/0x3d0 [ 374.530976][ T9560] ? __pfx_mtrr_ioctl+0x10/0x10 [ 374.530994][ T9560] proc_reg_unlocked_ioctl+0x229/0x320 [ 374.531012][ T9560] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 374.531032][ T9560] __x64_sys_ioctl+0x18e/0x210 [ 374.531055][ T9560] do_syscall_64+0x123/0x790 [ 374.531081][ T9560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.531098][ T9560] RIP: 0033:0x7ffad279e1d9 [ 374.531114][ T9560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.531130][ T9560] RSP: 002b:00007ffad3696028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.531146][ T9560] RAX: ffffffffffffffda RBX: 00007ffad2a26090 RCX: 00007ffad279e1d9 [ 374.531156][ T9560] RDX: 0000200000000100 RSI: 0000000040104d01 RDI: 0000000000000005 [ 374.531167][ T9560] RBP: 00007ffad2835888 R08: 0000000000000000 R09: 0000000000000000 [ 374.531177][ T9560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.531186][ T9560] R13: 00007ffad2a26128 R14: 00007ffad2a26090 R15: 00007fff1b4a3a28 [ 374.531210][ T9560] [ 374.795104][ T9036] usblp0: removed [ 374.901915][ T9567] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.644224][ T31] audit: type=1400 audit(1791735776.834:846): avc: denied { write } for pid=9544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.547796][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.547838][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.780406][ T31] audit: type=1400 audit(1791735777.886:847): avc: denied { write } for pid=9586 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.093418][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 378.243097][ T9597] FAULT_INJECTION: forcing a failure. [ 378.243097][ T9597] name failslab, interval 1, probability 0, space 0, times 0 [ 378.243127][ T9597] CPU: 0 UID: 0 PID: 9597 Comm: syz.0.785 Not tainted syzkaller #0 PREEMPT(full) [ 378.243148][ T9597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 378.243159][ T9597] Call Trace: [ 378.243165][ T9597] [ 378.243174][ T9597] dump_stack_lvl+0x100/0x190 [ 378.243205][ T9597] should_fail_ex.cold+0x5/0xa [ 378.243232][ T9597] should_failslab+0xc2/0x120 [ 378.243260][ T9597] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 378.243286][ T9597] ? __alloc_skb+0x5b7/0x710 [ 378.243303][ T9597] ? __alloc_skb+0x140/0x710 [ 378.243325][ T9597] __alloc_skb+0x140/0x710 [ 378.243341][ T9597] ? __alloc_skb+0x5b7/0x710 [ 378.243358][ T9597] ? __pfx___alloc_skb+0x10/0x10 [ 378.243383][ T9597] netlink_alloc_large_skb+0x69/0x150 [ 378.243414][ T9597] netlink_sendmsg+0x680/0xda0 [ 378.243452][ T9597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.243482][ T9597] ? selinux_socket_sendmsg+0x198/0x2f0 [ 378.243513][ T9597] ____sys_sendmsg+0xa4d/0xbe0 [ 378.243534][ T9597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.243563][ T9597] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.243593][ T9597] ? lock_acquire+0x1d1/0x380 [ 378.243614][ T9597] ? get_pid_task+0x2a/0x250 [ 378.243642][ T9597] ___sys_sendmsg+0x190/0x1e0 [ 378.243667][ T9597] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.243691][ T9597] ? get_pid_task+0x106/0x250 [ 378.243726][ T9597] ? find_held_lock+0x2b/0x80 [ 378.243769][ T9597] __sys_sendmsg+0x160/0x210 [ 378.243789][ T9597] ? __pfx___sys_sendmsg+0x10/0x10 [ 378.243823][ T9597] do_syscall_64+0x123/0x790 [ 378.243853][ T9597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.243873][ T9597] RIP: 0033:0x7fc187b9e1d9 [ 378.243889][ T9597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.243906][ T9597] RSP: 002b:00007fc188a76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.243925][ T9597] RAX: ffffffffffffffda RBX: 00007fc187e25fa0 RCX: 00007fc187b9e1d9 [ 378.243938][ T9597] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 378.243949][ T9597] RBP: 00007fc188a76090 R08: 0000000000000000 R09: 0000000000000000 [ 378.243960][ T9597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.243970][ T9597] R13: 00007fc187e26038 R14: 00007fc187e25fa0 R15: 00007fff5998d108 [ 378.243997][ T9597] [ 378.559359][ T9606] netlink: 40 bytes leftover after parsing attributes in process `syz.0.786'. [ 378.583393][ T9606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.786'. [ 378.653763][ T31] audit: type=1400 audit(1791735779.602:848): avc: denied { map } for pid=9602 comm="syz.8.784" path="/53/dev/sda" dev="devtmpfs" ino=872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.526117][ T5698] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 379.692966][ T5698] usb 1-1: Using ep0 maxpacket: 16 [ 379.693565][ T5698] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 379.696079][ T5698] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 379.696106][ T5698] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 379.700424][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.700446][ T5698] usb 1-1: Product: syz [ 379.700457][ T5698] usb 1-1: Manufacturer: syz [ 379.700469][ T5698] usb 1-1: SerialNumber: syz [ 379.723216][ T5698] usb 1-1: config 0 descriptor?? [ 379.744312][ T5698] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 379.744339][ T5698] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 379.850863][ T5334] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 379.991996][ T5334] usb 5-1: device descriptor read/64, error -71 [ 380.286491][ T5334] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 380.293534][ T31] audit: type=1400 audit(1791735781.124:849): avc: denied { write } for pid=9604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.328805][ T5698] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 380.331370][ T5698] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 380.331801][ T5698] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 380.331812][ T5698] em28xx 1-1:0.0: No AC97 audio processor [ 380.353768][ T5698] usb 1-1: USB disconnect, device number 34 [ 380.371126][ T5698] em28xx 1-1:0.0: Disconnecting em28xx [ 380.457746][ T5334] usb 5-1: device descriptor read/64, error -71 [ 380.569064][ T31] audit: type=1400 audit(1791735781.383:850): avc: denied { write } for pid=9624 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.599503][ T5334] usb usb5-port1: attempt power cycle [ 380.628931][ T5698] em28xx: Freeing device [ 380.698790][ T31] audit: type=1400 audit(1791735781.503:851): avc: denied { watch watch_reads } for pid=9626 comm="syz.9.783" path="/25" dev="tmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 381.045969][ T31] audit: type=1400 audit(1791735781.826:852): avc: denied { append } for pid=9633 comm="syz.3.790" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 382.588014][ T9648] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 382.588038][ T9648] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 382.588061][ T9648] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 382.593388][ T9648] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 385.423936][ T9666] FAULT_INJECTION: forcing a failure. [ 385.423936][ T9666] name failslab, interval 1, probability 0, space 0, times 0 [ 385.423956][ T9666] CPU: 1 UID: 0 PID: 9666 Comm: syz.8.787 Not tainted syzkaller #0 PREEMPT(full) [ 385.423968][ T9666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 385.423975][ T9666] Call Trace: [ 385.423979][ T9666] [ 385.423984][ T9666] dump_stack_lvl+0x100/0x190 [ 385.424004][ T9666] should_fail_ex.cold+0x5/0xa [ 385.424021][ T9666] should_failslab+0xc2/0x120 [ 385.424038][ T9666] __kmalloc_noprof+0xfc/0x840 [ 385.424053][ T9666] ? bpf_ctx_init+0xf8/0x1e0 [ 385.424070][ T9666] bpf_ctx_init+0xf8/0x1e0 [ 385.424086][ T9666] bpf_prog_test_run_sk_lookup+0x2c6/0x1300 [ 385.424106][ T9666] ? lock_acquire+0x1d1/0x380 [ 385.424119][ T9666] ? __fget_files+0x34/0x3d0 [ 385.424139][ T9666] ? find_held_lock+0x2b/0x80 [ 385.424156][ T9666] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 385.424173][ T9666] ? __fget_files+0x215/0x3d0 [ 385.424191][ T9666] ? __fget_files+0x21f/0x3d0 [ 385.424210][ T9666] ? fput+0x7c/0x100 [ 385.424227][ T9666] ? __bpf_prog_get+0x97/0x290 [ 385.424243][ T9666] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 385.424261][ T9666] __sys_bpf+0x2265/0x4a30 [ 385.424277][ T9666] ? __pfx___sys_bpf+0x10/0x10 [ 385.424289][ T9666] ? find_held_lock+0x2b/0x80 [ 385.424311][ T9666] ? get_pid_task+0xfc/0x250 [ 385.424326][ T9666] ? get_pid_task+0xfc/0x250 [ 385.424346][ T9666] ? find_held_lock+0x2b/0x80 [ 385.424366][ T9666] ? rcu_read_lock_any_held+0x6a/0x90 [ 385.424377][ T9666] ? find_held_lock+0x2b/0x80 [ 385.424393][ T9666] ? ksys_write+0x190/0x250 [ 385.424407][ T9666] ? ksys_write+0x190/0x250 [ 385.424420][ T9666] ? lock_acquire+0x1d1/0x380 [ 385.424443][ T9666] ? fput+0x7c/0x100 [ 385.424459][ T9666] ? ksys_write+0x1ac/0x250 [ 385.424475][ T9666] ? __x64_sys_bpf+0xce/0x140 [ 385.424487][ T9666] __x64_sys_bpf+0xce/0x140 [ 385.424500][ T9666] ? do_syscall_64+0xae/0x790 [ 385.424518][ T9666] do_syscall_64+0x123/0x790 [ 385.424535][ T9666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.424547][ T9666] RIP: 0033:0x7ffad279e1d9 [ 385.424557][ T9666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.424568][ T9666] RSP: 002b:00007ffad36b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 385.424580][ T9666] RAX: ffffffffffffffda RBX: 00007ffad2a25fa0 RCX: 00007ffad279e1d9 [ 385.424587][ T9666] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 385.424594][ T9666] RBP: 00007ffad36b7090 R08: 0000000000000000 R09: 0000000000000000 [ 385.424601][ T9666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.424608][ T9666] R13: 00007ffad2a26038 R14: 00007ffad2a25fa0 R15: 00007fff1b4a3a28 [ 385.424623][ T9666] [ 385.763584][ T31] audit: type=1400 audit(1791735786.172:853): avc: denied { write } for pid=9636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.009992][ T9672] netlink: 'syz.4.799': attribute type 3 has an invalid length. [ 386.781306][ T31] audit: type=1400 audit(1791735787.113:854): avc: denied { write } for pid=9679 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.061278][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 387.177822][ T9691] FAULT_INJECTION: forcing a failure. [ 387.177822][ T9691] name failslab, interval 1, probability 0, space 0, times 0 [ 387.177852][ T9691] CPU: 0 UID: 0 PID: 9691 Comm: syz.0.803 Not tainted syzkaller #0 PREEMPT(full) [ 387.177873][ T9691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 387.177884][ T9691] Call Trace: [ 387.177890][ T9691] [ 387.177897][ T9691] dump_stack_lvl+0x100/0x190 [ 387.177927][ T9691] should_fail_ex.cold+0x5/0xa [ 387.177953][ T9691] should_failslab+0xc2/0x120 [ 387.177980][ T9691] __kvmalloc_node_noprof+0x113/0x9b0 [ 387.178004][ T9691] ? lock_acquire+0x1d1/0x380 [ 387.178024][ T9691] ? traverse.part.0.constprop.0+0x397/0x650 [ 387.178055][ T9691] traverse.part.0.constprop.0+0x397/0x650 [ 387.178089][ T9691] seq_lseek+0x2fb/0x430 [ 387.178119][ T9691] proc_reg_llseek+0x104/0x2f0 [ 387.178142][ T9691] ksys_lseek+0xf3/0x1b0 [ 387.178163][ T9691] do_syscall_64+0x123/0x790 [ 387.178191][ T9691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.178210][ T9691] RIP: 0033:0x7fc187b9e1d9 [ 387.178225][ T9691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.178273][ T9691] RSP: 002b:00007fc188a76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 387.178292][ T9691] RAX: ffffffffffffffda RBX: 00007fc187e25fa0 RCX: 00007fc187b9e1d9 [ 387.178305][ T9691] RDX: 0000000000000000 RSI: 400008000000006e RDI: 0000000000000003 [ 387.178317][ T9691] RBP: 00007fc188a76090 R08: 0000000000000000 R09: 0000000000000000 [ 387.178328][ T9691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.178339][ T9691] R13: 00007fc187e26038 R14: 00007fc187e25fa0 R15: 00007fff5998d108 [ 387.178366][ T9691] [ 387.211392][ T9682] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input28 [ 387.453259][ T9695] netlink: 156 bytes leftover after parsing attributes in process `syz.4.805'. [ 388.065998][ T191] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 388.200664][ T31] audit: type=1400 audit(1791735788.423:855): avc: denied { map } for pid=9711 comm="syz.8.807" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 388.267599][ T191] usb 1-1: unable to get BOS descriptor or descriptor too short [ 388.267641][ T191] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 388.299820][ T191] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 388.302684][ T191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.302706][ T191] usb 1-1: Product: syz [ 388.302725][ T191] usb 1-1: Manufacturer: syz [ 388.302743][ T191] usb 1-1: SerialNumber: syz [ 388.472431][ T31] audit: type=1400 audit(1791735788.672:856): avc: denied { write } for pid=9697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.867435][ T31] audit: type=1400 audit(1791735789.032:857): avc: denied { write } for pid=9726 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.934523][ T191] usb 1-1: USB disconnect, device number 35 [ 389.078596][ T9692] udevd[9692]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.128814][ T5263] 8021q: adding VLAN 0 to HW filter on device eth3 [ 389.504912][ T9735] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 389.635914][ T9739] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 389.678444][ T9739] @0Ù: renamed from bond_slave_1 (while UP) [ 389.774317][ T9744] netlink: 'syz.4.813': attribute type 16 has an invalid length. [ 389.774339][ T9744] netlink: 39206 bytes leftover after parsing attributes in process `syz.4.813'. [ 389.829785][ T9741] overlay: Unknown parameter '/file0' [ 389.852004][ T9747] netlink: 20 bytes leftover after parsing attributes in process `syz.0.814'. [ 389.951668][ T9748] overlay: Unknown parameter '/file0' [ 390.155715][ T9757] netlink: 'syz.8.815': attribute type 1 has an invalid length. [ 390.155730][ T9757] netlink: 'syz.8.815': attribute type 1 has an invalid length. [ 391.167268][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 391.199082][ T9036] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 391.200573][ T31] audit: type=1400 audit(1791735791.191:858): avc: denied { write } for pid=9730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.330204][ T10] usb 9-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 391.334572][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 391.334603][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 391.369536][ T9036] usb 10-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 391.390185][ T9036] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 391.390210][ T9036] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 391.394400][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.394422][ T10] usb 9-1: Product: syz [ 391.394452][ T10] usb 9-1: Manufacturer: syz [ 391.394465][ T10] usb 9-1: SerialNumber: syz [ 391.448247][ T9036] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.448310][ T9036] usb 10-1: Product: syz [ 391.448349][ T9036] usb 10-1: Manufacturer: syz [ 391.448387][ T9036] usb 10-1: SerialNumber: syz [ 392.076887][ T31] audit: type=1400 audit(1791735792.003:859): avc: denied { write } for pid=9768 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.142363][ T9772] netlink: 'syz.4.819': attribute type 3 has an invalid length. [ 392.466589][ T5263] 8021q: adding VLAN 0 to HW filter on device eth4 [ 392.571930][ T31] audit: type=1400 audit(1791735792.455:860): avc: denied { create } for pid=9771 comm="syz.3.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 394.317440][ T9036] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 394.354306][ T9036] usb 10-1: USB disconnect, device number 3 [ 394.363636][ T10] usblp 9-1:1.0: usblp1: USB Bidirectional printer dev 5 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 394.454281][ T9036] usblp0: removed [ 394.469644][ T10] usb 9-1: USB disconnect, device number 5 [ 394.528792][ T10] usblp1: removed [ 396.031402][ T9799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.825'. [ 396.367767][ T9036] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 396.534198][ T9036] usb 5-1: unable to get BOS descriptor or descriptor too short [ 396.534241][ T9036] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 396.535152][ T9036] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 396.536913][ T9036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.536934][ T9036] usb 5-1: Product: syz [ 396.536943][ T9036] usb 5-1: Manufacturer: syz [ 396.536951][ T9036] usb 5-1: SerialNumber: syz [ 396.705005][ T9810] netlink: 20 bytes leftover after parsing attributes in process `syz.9.827'. [ 397.213066][ T31] audit: type=1400 audit(1791735796.727:861): avc: denied { write } for pid=9808 comm="syz.8.823" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 397.213349][ T31] audit: type=1400 audit(1791735796.746:862): avc: denied { open } for pid=9808 comm="syz.8.823" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 397.231492][ T31] audit: type=1400 audit(1791735796.755:863): avc: denied { ioctl } for pid=9808 comm="syz.8.823" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 397.284558][ T9809] tc action pedit offset 0 out of bounds [ 397.284575][ T9809] tc action pedit offset 0 out of bounds [ 397.284584][ T9809] tc action pedit offset 0 out of bounds [ 397.284593][ T9809] tc action pedit offset 0 out of bounds [ 397.284601][ T9809] tc action pedit offset 0 out of bounds [ 397.284609][ T9809] tc action pedit offset 0 out of bounds [ 397.284617][ T9809] tc action pedit offset 0 out of bounds [ 397.284625][ T9809] tc action pedit offset 0 out of bounds [ 397.284633][ T9809] tc action pedit offset 0 out of bounds [ 397.284641][ T9809] tc action pedit offset 0 out of bounds [ 397.284656][ T9809] net_ratelimit: 50 callbacks suppressed [ 397.284666][ T9809] 0: reclassify loop, rule prio 0, protocol 800 [ 397.965359][ T9036] usb 5-1: USB disconnect, device number 35 [ 398.234910][ T9692] udevd[9692]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.786552][ T9835] serial 00:02: in use; can't configure [ 398.900937][ T9839] overlay: Unknown parameter '/file0' [ 398.988474][ T9841] FAULT_INJECTION: forcing a failure. [ 398.988474][ T9841] name failslab, interval 1, probability 0, space 0, times 0 [ 398.988495][ T9841] CPU: 1 UID: 0 PID: 9841 Comm: syz.8.833 Not tainted syzkaller #0 PREEMPT(full) [ 398.988509][ T9841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 398.988516][ T9841] Call Trace: [ 398.988521][ T9841] [ 398.988526][ T9841] dump_stack_lvl+0x100/0x190 [ 398.988547][ T9841] should_fail_ex.cold+0x5/0xa [ 398.988571][ T9841] should_failslab+0xc2/0x120 [ 398.988588][ T9841] __kmalloc_cache_noprof+0x91/0x6d0 [ 398.988601][ T9841] ? fuse_dentry_init+0x45/0x130 [ 398.988621][ T9841] ? __pfx_fuse_dentry_init+0x10/0x10 [ 398.988639][ T9841] fuse_dentry_init+0x45/0x130 [ 398.988655][ T9841] ? __pfx_fuse_dentry_init+0x10/0x10 [ 398.988671][ T9841] __d_alloc+0x5fb/0xa50 [ 398.988684][ T9841] d_alloc+0x4a/0x1e0 [ 398.988696][ T9841] lookup_one_qstr_excl+0x171/0x250 [ 398.988708][ T9841] ? mnt_get_write_access+0x52/0x2f0 [ 398.988722][ T9841] __start_renaming+0x16d/0x520 [ 398.988737][ T9841] filename_renameat2+0x538/0xa60 [ 398.988753][ T9841] ? __pfx_filename_renameat2+0x10/0x10 [ 398.988766][ T9841] ? lock_acquire+0x1d1/0x380 [ 398.988779][ T9841] ? __might_fault+0xc5/0x140 [ 398.988792][ T9841] ? __might_fault+0xc5/0x140 [ 398.988811][ T9841] ? do_getname+0x191/0x390 [ 398.988825][ T9841] __x64_sys_rename+0x81/0xb0 [ 398.988837][ T9841] do_syscall_64+0x123/0x790 [ 398.988855][ T9841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.988867][ T9841] RIP: 0033:0x7ffad279e1d9 [ 398.988877][ T9841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.988888][ T9841] RSP: 002b:00007ffad3675028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 398.988900][ T9841] RAX: ffffffffffffffda RBX: 00007ffad2a26180 RCX: 00007ffad279e1d9 [ 398.988907][ T9841] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 398.988914][ T9841] RBP: 00007ffad3675090 R08: 0000000000000000 R09: 0000000000000000 [ 398.988920][ T9841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.988927][ T9841] R13: 00007ffad2a26218 R14: 00007ffad2a26180 R15: 00007fff1b4a3a28 [ 398.988942][ T9841] [ 399.051293][ T9842] netlink: 'syz.9.834': attribute type 1 has an invalid length. [ 399.051313][ T9842] netlink: 'syz.9.834': attribute type 1 has an invalid length. [ 399.629725][ T5334] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 400.206069][ T5334] usb 10-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 400.214283][ T5334] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 400.214311][ T5334] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 400.407448][ T5334] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.407477][ T5334] usb 10-1: Product: syz [ 400.407491][ T5334] usb 10-1: Manufacturer: syz [ 400.407506][ T5334] usb 10-1: SerialNumber: syz [ 402.416044][ T9874] netlink: 20 bytes leftover after parsing attributes in process `syz.4.840'. [ 402.605561][ T9875] overlay: Unknown parameter '/file0' [ 402.708164][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.841'. [ 402.893773][ T9880] FAULT_INJECTION: forcing a failure. [ 402.893773][ T9880] name failslab, interval 1, probability 0, space 0, times 0 [ 402.893807][ T9880] CPU: 0 UID: 0 PID: 9880 Comm: syz.8.842 Not tainted syzkaller #0 PREEMPT(full) [ 402.893832][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 402.893844][ T9880] Call Trace: [ 402.893851][ T9880] [ 402.893860][ T9880] dump_stack_lvl+0x100/0x190 [ 402.893894][ T9880] should_fail_ex.cold+0x5/0xa [ 402.893924][ T9880] should_failslab+0xc2/0x120 [ 402.893956][ T9880] __kmalloc_cache_noprof+0x91/0x6d0 [ 402.893980][ T9880] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 402.894012][ T9880] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 402.894053][ T9880] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 402.894088][ T9880] selinux_socket_post_create+0x368/0x7e0 [ 402.894116][ T9880] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 402.894142][ T9880] ? raw_sk_init+0x97/0xb0 [ 402.894165][ T9880] ? __pfx_raw_sk_init+0x10/0x10 [ 402.894187][ T9880] ? inet_create+0x962/0x1060 [ 402.894214][ T9880] security_socket_post_create+0xaf/0x270 [ 402.894235][ T9880] __sock_create+0x70b/0x860 [ 402.894252][ T9880] __sys_socket+0x14d/0x260 [ 402.894267][ T9880] ? __pfx___sys_socket+0x10/0x10 [ 402.894288][ T9880] __x64_sys_socket+0x72/0xb0 [ 402.894309][ T9880] ? lockdep_hardirqs_on+0x7d/0x110 [ 402.894334][ T9880] do_syscall_64+0x123/0x790 [ 402.894363][ T9880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.894381][ T9880] RIP: 0033:0x7ffad279e1d9 [ 402.894391][ T9880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.894402][ T9880] RSP: 002b:00007ffad36b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 402.894414][ T9880] RAX: ffffffffffffffda RBX: 00007ffad2a25fa0 RCX: 00007ffad279e1d9 [ 402.894421][ T9880] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 402.894428][ T9880] RBP: 00007ffad2835888 R08: 0000000000000000 R09: 0000000000000000 [ 402.894434][ T9880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.894441][ T9880] R13: 00007ffad2a26038 R14: 00007ffad2a25fa0 R15: 00007fff1b4a3a28 [ 402.894465][ T9880] [ 402.978688][ T5727] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 403.155011][ T5727] usb 5-1: unable to get BOS descriptor or descriptor too short [ 403.155070][ T5727] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 403.159326][ T5727] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 403.175877][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.175898][ T5727] usb 5-1: Product: syz [ 403.175910][ T5727] usb 5-1: Manufacturer: syz [ 403.175922][ T5727] usb 5-1: SerialNumber: syz [ 403.239935][ T5852] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 403.416073][ T5852] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 403.422960][ T5852] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 403.423005][ T5852] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 403.520558][ T5334] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 403.525161][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.525178][ T5852] usb 1-1: Product: syz [ 403.525187][ T5852] usb 1-1: Manufacturer: syz [ 403.525196][ T5852] usb 1-1: SerialNumber: syz [ 403.571010][ T5334] usb 10-1: USB disconnect, device number 4 [ 403.603057][ T5334] usblp0: removed [ 404.224174][ T5727] usb 5-1: USB disconnect, device number 36 [ 404.429666][ T9692] udevd[9692]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 404.995157][ T5727] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 405.273565][ T5727] usb 9-1: Using ep0 maxpacket: 16 [ 405.287155][ T5727] usb 9-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 405.288438][ T5727] usb 9-1: config 0 interface 0 has no altsetting 0 [ 405.288462][ T5727] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.296016][ T5727] usb 9-1: config 0 descriptor?? [ 405.467814][ T9907] FAULT_INJECTION: forcing a failure. [ 405.467814][ T9907] name failslab, interval 1, probability 0, space 0, times 0 [ 405.467848][ T9907] CPU: 1 UID: 0 PID: 9907 Comm: syz.9.844 Not tainted syzkaller #0 PREEMPT(full) [ 405.467872][ T9907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 405.467883][ T9907] Call Trace: [ 405.467890][ T9907] [ 405.467899][ T9907] dump_stack_lvl+0x100/0x190 [ 405.467934][ T9907] should_fail_ex.cold+0x5/0xa [ 405.467962][ T9907] should_failslab+0xc2/0x120 [ 405.467989][ T9907] __kmalloc_cache_noprof+0x91/0x6d0 [ 405.468011][ T9907] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 405.468044][ T9907] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 405.468074][ T9907] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 405.468105][ T9907] selinux_socket_post_create+0x368/0x7e0 [ 405.468132][ T9907] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 405.468157][ T9907] ? raw_sk_init+0x97/0xb0 [ 405.468182][ T9907] ? __pfx_raw_sk_init+0x10/0x10 [ 405.468206][ T9907] ? inet_create+0x962/0x1060 [ 405.468235][ T9907] security_socket_post_create+0xaf/0x270 [ 405.468261][ T9907] __sock_create+0x70b/0x860 [ 405.468289][ T9907] __sys_socket+0x14d/0x260 [ 405.468313][ T9907] ? __pfx___sys_socket+0x10/0x10 [ 405.468343][ T9907] __x64_sys_socket+0x72/0xb0 [ 405.468369][ T9907] ? lockdep_hardirqs_on+0x7d/0x110 [ 405.468394][ T9907] do_syscall_64+0x123/0x790 [ 405.468422][ T9907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.468442][ T9907] RIP: 0033:0x7f7fa3f9e1d9 [ 405.468460][ T9907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.468487][ T9907] RSP: 002b:00007f7fa4e61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 405.468507][ T9907] RAX: ffffffffffffffda RBX: 00007f7fa4225fa0 RCX: 00007f7fa3f9e1d9 [ 405.468522][ T9907] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 405.468534][ T9907] RBP: 00007f7fa4035888 R08: 0000000000000000 R09: 0000000000000000 [ 405.468547][ T9907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.468559][ T9907] R13: 00007f7fa4226038 R14: 00007f7fa4225fa0 R15: 00007fffabe81eb8 [ 405.468587][ T9907] [ 405.831776][ T9901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.832124][ T9901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.872345][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.9.844'. [ 406.287844][ T31] audit: type=1800 audit(1791735805.105:864): pid=9913 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.846" name="file0" dev="overlay" ino=392 res=0 errno=0 [ 406.679139][ T5852] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 406.718041][ T5852] usb 1-1: USB disconnect, device number 36 [ 406.765091][ T5852] usblp0: removed [ 407.355881][ T31] audit: type=1400 audit(1791735806.093:865): avc: denied { write } for pid=9908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.745825][ T31] audit: type=1400 audit(1791735806.453:866): avc: denied { write } for pid=9925 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.967690][ T5727] usbhid 9-1:0.0: can't add hid device: -71 [ 407.967751][ T5727] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 407.994087][ T5727] usb 9-1: USB disconnect, device number 6 [ 409.119775][ T31] audit: type=1400 audit(1791735807.726:867): avc: denied { write } for pid=9930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.480947][ T31] audit: type=1400 audit(1791735808.049:868): avc: denied { write } for pid=9943 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.529650][ T9945] netlink: 'syz.9.851': attribute type 3 has an invalid length. [ 410.258806][ T9953] gadgetfs: bound to dummy_udc driver [ 410.521724][ T9036] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 410.521959][ C0] gadgetfs: connected [ 410.523331][ T9036] gadgetfs: disconnected [ 410.565132][ T10] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 410.732139][ T10] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 410.734885][ T10] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 410.734924][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 410.734947][ T10] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 410.734969][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 410.734991][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 410.735849][ T10] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 410.735872][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 410.735888][ T10] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 410.735901][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 410.735916][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 410.736681][ T10] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 410.736703][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 410.736718][ T10] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 410.736731][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 410.736746][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 410.741211][ T10] usb 10-1: string descriptor 0 read error: -22 [ 410.741298][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.782531][ T10] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 410.886968][ T9964] netlink: 20 bytes leftover after parsing attributes in process `syz.8.852'. [ 410.977385][ T9962] netlink: 'syz.4.855': attribute type 3 has an invalid length. [ 411.433301][ T31] audit: type=1107 audit(1791735809.848:869): pid=9967 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Sh' [ 411.468006][ T191] usb 10-1: USB disconnect, device number 5 [ 411.543232][ T31] audit: type=1400 audit(1791735809.959:870): avc: denied { transfer } for pid=9967 comm="syz.0.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 411.579852][ T9971] netlink: 12 bytes leftover after parsing attributes in process `syz.8.857'. [ 411.876445][ T9036] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 412.544139][ T9036] usb 9-1: unable to get BOS descriptor or descriptor too short [ 412.544166][ T9036] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 412.546787][ T9036] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 412.552018][ T9036] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.552038][ T9036] usb 9-1: Product: syz [ 412.552051][ T9036] usb 9-1: Manufacturer: syz [ 412.552063][ T9036] usb 9-1: SerialNumber: syz [ 412.626013][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 413.136433][ T31] audit: type=1400 audit(1791735811.435:871): avc: denied { map } for pid=9986 comm="syz.4.860" path="socket:[30897]" dev="sockfs" ino=30897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 413.499004][ T5720] hid_parser_main: 8 callbacks suppressed [ 413.499029][ T5720] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 413.711896][ T5720] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 413.732201][ T31] audit: type=1400 audit(1791735811.970:872): avc: denied { write } for pid=9979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.019073][ T9036] usb 9-1: USB disconnect, device number 7 [ 414.231657][ T5713] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 414.561964][ T5713] usb 10-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 414.573787][ T5713] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 414.573815][ T5713] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 414.573869][ T5713] usb 10-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 414.573890][ T5713] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 414.573902][ T5713] usb 10-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 414.573930][ T5713] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.644034][ T9998] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 414.672312][ T5713] ims_pcu 10-1:1.0: Max IN packet size is too small (0) [ 414.672364][ T5713] ims_pcu 10-1:1.0: probe with driver ims_pcu failed with error -22 [ 414.773609][ T31] audit: type=1400 audit(1791735812.939:873): avc: denied { write } for pid=10003 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.176620][T10011] ip_tables: iptables: counters copy to user failed while replacing table [ 415.194421][T10011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.196076][T10011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.300626][ T31] audit: type=1400 audit(1791735813.419:874): avc: denied { write } for pid=9995 comm="syz.9.862" path="socket:[31839]" dev="sockfs" ino=31839 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 415.327576][T10014] FAULT_INJECTION: forcing a failure. [ 415.327576][T10014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.327605][T10014] CPU: 0 UID: 0 PID: 10014 Comm: syz.8.865 Not tainted syzkaller #0 PREEMPT(full) [ 415.327625][T10014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 415.327635][T10014] Call Trace: [ 415.327642][T10014] [ 415.327649][T10014] dump_stack_lvl+0x100/0x190 [ 415.327680][T10014] should_fail_ex.cold+0x5/0xa [ 415.327706][T10014] strncpy_from_user+0x3b/0x2d0 [ 415.327737][T10014] do_getname+0x78/0x390 [ 415.327759][T10014] __do_sys_move_mount+0x511/0x780 [ 415.327780][T10014] ? __pfx___do_sys_move_mount+0x10/0x10 [ 415.327798][T10014] ? ksys_write+0x1ac/0x250 [ 415.327826][T10014] ? __pfx_ksys_write+0x10/0x10 [ 415.327853][T10014] do_syscall_64+0x123/0x790 [ 415.327880][T10014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.327899][T10014] RIP: 0033:0x7ffad279e1d9 [ 415.327914][T10014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.327930][T10014] RSP: 002b:00007ffad36b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 415.327947][T10014] RAX: ffffffffffffffda RBX: 00007ffad2a25fa0 RCX: 00007ffad279e1d9 [ 415.327959][T10014] RDX: 0000000000000005 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 415.327970][T10014] RBP: 00007ffad36b7090 R08: 0000000000000040 R09: 0000000000000000 [ 415.327981][T10014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.327992][T10014] R13: 00007ffad2a26038 R14: 00007ffad2a25fa0 R15: 00007fff1b4a3a28 [ 415.328018][T10014] [ 417.642223][ T5713] usb 10-1: USB disconnect, device number 6 [ 417.807945][ T31] audit: type=1400 audit(1791735815.744:875): avc: denied { write } for pid=10012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.048140][ T31] audit: type=1400 audit(1791735815.966:876): avc: denied { open } for pid=10044 comm="syz.8.871" path="/dev/ttyr5" dev="devtmpfs" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 418.049819][ T31] audit: type=1400 audit(1791735815.966:877): avc: denied { bind } for pid=10044 comm="syz.8.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 418.668087][T10042] xt_TCPMSS: Only works on TCP SYN packets [ 419.195704][T10047] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.517227][T10041] binder: BINDER_SET_CONTEXT_MGR already set [ 419.517241][T10041] binder: 10037:10041 ioctl 4018620d 2000000195c0 returned -16 [ 419.580791][T10042] netlink: 64 bytes leftover after parsing attributes in process `syz.4.870'. [ 419.773804][ T31] audit: type=1400 audit(1791735817.470:878): avc: denied { write } for pid=10050 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.425472][T10064] FAULT_INJECTION: forcing a failure. [ 420.425472][T10064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.425502][T10064] CPU: 1 UID: 0 PID: 10064 Comm: syz.8.873 Not tainted syzkaller #0 PREEMPT(full) [ 420.425525][T10064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 420.425537][T10064] Call Trace: [ 420.425543][T10064] [ 420.425551][T10064] dump_stack_lvl+0x100/0x190 [ 420.425583][T10064] should_fail_ex.cold+0x5/0xa [ 420.425609][T10064] _copy_to_user+0x32/0xd0 [ 420.425638][T10064] simple_read_from_buffer+0xcb/0x170 [ 420.425668][T10064] proc_fail_nth_read+0x1af/0x230 [ 420.425697][T10064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.425725][T10064] ? rw_verify_area+0xce/0x6d0 [ 420.425746][T10064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.425773][T10064] vfs_read+0x1e4/0xb40 [ 420.425796][T10064] ? lock_acquire+0x1d1/0x380 [ 420.425817][T10064] ? __fget_files+0x34/0x3d0 [ 420.425843][T10064] ? __pfx_vfs_read+0x10/0x10 [ 420.425862][T10064] ? find_held_lock+0x2b/0x80 [ 420.425891][T10064] ? __fget_files+0x215/0x3d0 [ 420.425922][T10064] ? __fget_files+0x21f/0x3d0 [ 420.425955][T10064] ksys_read+0x12a/0x250 [ 420.425977][T10064] ? __pfx_ksys_read+0x10/0x10 [ 420.426007][T10064] do_syscall_64+0x123/0x790 [ 420.426036][T10064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.426056][T10064] RIP: 0033:0x7ffad275ea0e [ 420.426072][T10064] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 420.426088][T10064] RSP: 002b:00007ffad36b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 420.426105][T10064] RAX: ffffffffffffffda RBX: 00007ffad36b76c0 RCX: 00007ffad275ea0e [ 420.426117][T10064] RDX: 000000000000000f RSI: 00007ffad36b70a0 RDI: 0000000000000005 [ 420.426127][T10064] RBP: 00007ffad36b7090 R08: 0000000000000000 R09: 0000000000000000 [ 420.426138][T10064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.426147][T10064] R13: 00007ffad2a26038 R14: 00007ffad2a25fa0 R15: 00007fff1b4a3a28 [ 420.426172][T10064] [ 423.755080][ T191] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 424.017082][T10092] ======================================================= [ 424.017082][T10092] WARNING: The mand mount option has been deprecated and [ 424.017082][T10092] and is ignored by this kernel. Remove the mand [ 424.017082][T10092] option from the mount to silence this warning. [ 424.017082][T10092] ======================================================= [ 424.437576][ T31] audit: type=1400 audit(1791735821.474:879): avc: denied { create } for pid=10089 comm="syz.8.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 424.437626][ T31] audit: type=1400 audit(1791735821.511:880): avc: denied { sys_admin } for pid=10089 comm="syz.8.880" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 424.662889][ T191] usb 10-1: Using ep0 maxpacket: 16 [ 425.053630][ T191] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 425.112533][ T191] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.112560][ T191] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 425.112575][ T191] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 425.112588][ T191] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 425.112601][ T191] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.119393][ T191] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 425.119418][ T191] usb 10-1: Manufacturer: syz [ 425.204088][ T191] usb 10-1: config 0 descriptor?? [ 425.236675][ T31] audit: type=1400 audit(1791735822.591:881): avc: denied { write } for pid=10059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.140457][ T31] audit: type=1400 audit(1791735823.430:882): avc: denied { write } for pid=10099 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.769388][ T191] rc_core: IR keymap rc-hauppauge not found [ 426.769409][ T191] Registered IR keymap rc-empty [ 426.769514][ T191] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 426.808926][ T191] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 426.895671][ T191] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 427.093488][ T191] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input29 [ 427.101365][ T191] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 427.123344][ T191] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 427.136058][ T191] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 427.165048][ T191] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 427.180790][ T191] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 427.201186][ T191] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 427.222762][ T191] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 427.245007][ T191] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 427.266261][ T191] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 427.287798][ T191] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 427.311707][ T191] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 427.311732][ T191] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 427.523849][ T5713] usb 10-1: USB disconnect, device number 7 [ 428.062385][ T31] audit: type=1400 audit(1791735825.202:883): avc: denied { write } for pid=10105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.254517][ T5615] Bluetooth: hci6: command 0x0406 tx timeout [ 428.378366][T10131] Cannot find del_set index 14804 as target [ 428.465812][ T31] audit: type=1400 audit(1791735825.571:884): avc: denied { write } for pid=10132 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.696668][ T5713] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 428.863132][ T5713] usb 10-1: New USB device found, idVendor=046d, idProduct=c09b, bcdDevice=ed.00 [ 428.863158][ T5713] usb 10-1: too many configurations: 126, using maximum allowed: 8 [ 428.867640][ T5713] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 428.867671][ T5713] usb 10-1: can't read configurations, error -61 [ 429.000134][ T5713] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 429.076025][ T5727] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 429.814748][ T5713] usb 10-1: New USB device found, idVendor=046d, idProduct=c09b, bcdDevice=ed.00 [ 429.814809][ T5713] usb 10-1: too many configurations: 126, using maximum allowed: 8 [ 429.819851][ T5713] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 429.819872][ T5713] usb 10-1: can't read configurations, error -61 [ 429.820799][ T5713] usb usb10-port1: attempt power cycle [ 429.823302][ T5727] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 429.824642][ T5727] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.857114][ T5727] usb 9-1: config 0 descriptor?? [ 429.868443][ T92] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 430.051404][ T92] usb 4-1: Using ep0 maxpacket: 16 [ 430.053767][ T92] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 430.062436][ T92] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.062501][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 430.062524][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 430.062543][ T92] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 430.062561][ T92] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.064287][ T92] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 430.064306][ T92] usb 4-1: Manufacturer: syz [ 430.085083][ T92] usb 4-1: config 0 descriptor?? [ 430.122834][T10136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.123225][T10136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.182740][ T5713] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 430.206115][ T5713] usb 10-1: New USB device found, idVendor=046d, idProduct=c09b, bcdDevice=ed.00 [ 430.206154][ T5713] usb 10-1: too many configurations: 126, using maximum allowed: 8 [ 430.214027][ T5713] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 430.214057][ T5713] usb 10-1: can't read configurations, error -61 [ 430.355393][ T5713] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 430.379684][ T5713] usb 10-1: New USB device found, idVendor=046d, idProduct=c09b, bcdDevice=ed.00 [ 430.379723][ T5713] usb 10-1: too many configurations: 126, using maximum allowed: 8 [ 430.390218][ T5713] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 430.390269][ T5713] usb 10-1: can't read configurations, error -61 [ 430.390668][ T5713] usb usb10-port1: unable to enumerate USB device [ 430.659474][ T5727] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 430.663607][ T5727] [drm:udl_init] *ERROR* Selecting channel failed [ 430.710600][ T31] audit: type=1400 audit(1791735827.638:885): avc: denied { write } for pid=10139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.738074][ T92] rc_core: IR keymap rc-hauppauge not found [ 430.738092][ T92] Registered IR keymap rc-empty [ 430.738183][ T92] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 430.763111][ T92] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 430.778396][ T92] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 430.790884][ T92] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input30 [ 430.824424][ T92] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 430.842632][ T92] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 430.864285][ T92] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 430.888578][ T92] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 430.908213][ T92] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 430.929323][ T92] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 430.935547][ T31] audit: type=1400 audit(1791735827.850:886): avc: denied { relabelfrom } for pid=10158 comm="syz.4.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 430.951288][ T92] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 430.968306][ T31] audit: type=1400 audit(1791735827.859:887): avc: denied { relabelto } for pid=10158 comm="syz.4.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 430.975023][ T92] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 430.995719][ T92] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 431.017594][ T92] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 431.094637][ T92] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 431.094676][ T92] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 431.208453][ T31] audit: type=1400 audit(1791735828.099:888): avc: denied { write } for pid=10165 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.338315][ T5727] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1 [ 431.338342][ T5727] [drm] Initialized udl on minor 1 [ 431.450500][ T5727] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 431.506688][ T5727] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 431.591935][ T5713] usb 4-1: USB disconnect, device number 15 [ 431.687091][ T5727] usb 9-1: USB disconnect, device number 8 [ 433.802735][ T4919] Bluetooth: hci1: command 0x0406 tx timeout [ 436.715428][T10191] overlay: Unknown parameter '/file0' [ 437.418341][T10191] netlink: 'syz.3.896': attribute type 1 has an invalid length. [ 437.418359][T10191] netlink: 'syz.3.896': attribute type 1 has an invalid length. [ 437.778704][ T6066] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 437.942459][ T6066] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 437.943373][ T6066] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 437.943395][ T6066] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 437.945071][ T6066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.945093][ T6066] usb 4-1: Product: syz [ 437.945107][ T6066] usb 4-1: Manufacturer: syz [ 437.945123][ T6066] usb 4-1: SerialNumber: syz [ 438.351937][T10209] FAULT_INJECTION: forcing a failure. [ 438.351937][T10209] name failslab, interval 1, probability 0, space 0, times 0 [ 438.351993][T10209] CPU: 0 UID: 0 PID: 10209 Comm: syz.8.892 Not tainted syzkaller #0 PREEMPT(full) [ 438.352016][T10209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 438.352028][T10209] Call Trace: [ 438.352036][T10209] [ 438.352044][T10209] dump_stack_lvl+0x100/0x190 [ 438.352079][T10209] should_fail_ex.cold+0x5/0xa [ 438.352111][T10209] should_failslab+0xc2/0x120 [ 438.352141][T10209] __kmalloc_cache_noprof+0x91/0x6d0 [ 438.352163][T10209] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 438.352197][T10209] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 438.352227][T10209] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 438.352259][T10209] selinux_socket_post_create+0x368/0x7e0 [ 438.352288][T10209] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 438.352315][T10209] ? raw_sk_init+0x97/0xb0 [ 438.352341][T10209] ? __pfx_raw_sk_init+0x10/0x10 [ 438.352367][T10209] ? inet_create+0x962/0x1060 [ 438.352397][T10209] security_socket_post_create+0xaf/0x270 [ 438.352426][T10209] __sock_create+0x70b/0x860 [ 438.352458][T10209] __sys_socket+0x14d/0x260 [ 438.352492][T10209] ? __pfx___sys_socket+0x10/0x10 [ 438.352528][T10209] __x64_sys_socket+0x72/0xb0 [ 438.352555][T10209] ? lockdep_hardirqs_on+0x7d/0x110 [ 438.352585][T10209] do_syscall_64+0x123/0x790 [ 438.352616][T10209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.352636][T10209] RIP: 0033:0x7ffad279e1d9 [ 438.352652][T10209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.352671][T10209] RSP: 002b:00007ffad36b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 438.352690][T10209] RAX: ffffffffffffffda RBX: 00007ffad2a25fa0 RCX: 00007ffad279e1d9 [ 438.352703][T10209] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 438.352715][T10209] RBP: 00007ffad2835888 R08: 0000000000000000 R09: 0000000000000000 [ 438.352727][T10209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.352739][T10209] R13: 00007ffad2a26038 R14: 00007ffad2a25fa0 R15: 00007fff1b4a3a28 [ 438.352766][T10209] [ 438.515767][ T191] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 438.692532][ T191] usb 1-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 438.693765][ T191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.727720][ T191] i2c-tiny-usb 1-1:1.0: version 1.00 found at bus 001 address 038 [ 438.862095][ T31] audit: type=1400 audit(1791735835.158:889): avc: denied { read } for pid=10212 comm="syz.8.902" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 438.862142][ T31] audit: type=1400 audit(1791735835.158:890): avc: denied { open } for pid=10212 comm="syz.8.902" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 438.912799][ T31] audit: type=1400 audit(1791735835.213:891): avc: denied { ioctl } for pid=10212 comm="syz.8.902" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 440.842296][ T6066] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 440.866201][ T6066] usb 4-1: USB disconnect, device number 16 [ 440.915926][ T191] (null): error -EIO: failure setting delay to 10us [ 440.915984][ T191] i2c-tiny-usb 1-1:1.0: probe with driver i2c-tiny-usb failed with error -5 [ 440.919960][ T6066] usblp0: removed [ 441.734301][ T31] audit: type=1400 audit(1791735837.815:892): avc: denied { append } for pid=10223 comm="syz.8.906" name="001" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 442.054354][ T5713] usb 1-1: USB disconnect, device number 38 [ 442.216976][ T31] audit: type=1400 audit(1791735838.249:893): avc: denied { watch } for pid=10228 comm="syz.4.908" path="/221/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 442.217019][ T31] audit: type=1400 audit(1791735838.249:894): avc: denied { watch_sb watch_reads } for pid=10228 comm="syz.4.908" path="/221/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 442.465737][T10230] kvm [10228]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 442.465863][T10230] kvm [10228]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 442.648295][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.648328][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.776786][T10238] xt_TCPMSS: Only works on TCP SYN packets [ 442.864068][T10240] netlink: 64 bytes leftover after parsing attributes in process `syz.3.905'. [ 442.948674][ T5727] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 443.599786][ T5727] usb 1-1: Using ep0 maxpacket: 32 [ 443.627634][ T5727] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=fc.21 [ 443.640433][ T5727] usb 1-1: config 3 has an invalid interface number: 79 but max is 0 [ 443.640458][ T5727] usb 1-1: config 3 has no interface number 0 [ 443.640490][ T5727] usb 1-1: config 3 interface 79 altsetting 5 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 443.640513][ T5727] usb 1-1: config 3 interface 79 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 443.640535][ T5727] usb 1-1: config 3 interface 79 has no altsetting 0 [ 443.680241][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.680266][ T5727] usb 1-1: Product: syz [ 443.680281][ T5727] usb 1-1: Manufacturer: syz [ 443.680295][ T5727] usb 1-1: SerialNumber: syz [ 443.801008][T10243] rnbd_client L607: Mapping device / on session s+, (access_mode: rw, nr_poll_queues: 0) [ 443.802237][T10243] rnbd_client L1256: Session s+ not found, and path parameter not given [ 443.870047][ T31] audit: type=1800 audit(1791735839.781:895): pid=10236 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.910" name="/" dev="fuse" ino=1 res=0 errno=0 [ 443.966028][T10234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.966285][T10234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.359659][T10249] netlink: 'syz.3.913': attribute type 3 has an invalid length. [ 444.834641][ T6066] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 444.905075][T10254] overlay: Unknown parameter '/file0' [ 444.937658][ T5727] kobil_sct 1-1:3.79: KOBIL USB smart card terminal converter detected [ 444.970673][ T5727] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 444.987086][ T5727] usb 1-1: USB disconnect, device number 39 [ 444.996914][ T6066] usb 10-1: Using ep0 maxpacket: 16 [ 444.997436][ T6066] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 444.998296][ T6066] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.998329][ T6066] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 444.998355][ T6066] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 444.998372][ T6066] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 444.998390][ T6066] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.999409][ T6066] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 444.999429][ T6066] usb 10-1: Manufacturer: syz [ 445.004682][ T6066] usb 10-1: config 0 descriptor?? [ 445.008718][ T5727] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 445.009172][ T5727] kobil_sct 1-1:3.79: device disconnected [ 445.024827][T10256] overlay: Unknown parameter '/file0' [ 445.198553][T10259] netlink: 'syz.4.915': attribute type 1 has an invalid length. [ 445.198568][T10259] netlink: 'syz.4.915': attribute type 1 has an invalid length. [ 445.430354][ T191] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 445.597147][ T191] usb 9-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 445.599010][ T191] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 445.599035][ T191] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 445.606816][ T191] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.606838][ T191] usb 9-1: Product: syz [ 445.606851][ T191] usb 9-1: Manufacturer: syz [ 445.606864][ T191] usb 9-1: SerialNumber: syz [ 445.636043][ T5720] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 445.682345][ T6066] rc_core: IR keymap rc-hauppauge not found [ 445.682358][ T6066] Registered IR keymap rc-empty [ 445.682869][ T6066] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 445.703866][ T6066] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 445.723618][ T6066] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 445.724572][ T6066] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input31 [ 445.751259][ T6066] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 445.765536][ T5727] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 445.778154][ T5720] usb 1-1: device descriptor read/64, error -71 [ 445.784919][ T6066] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 445.805068][ T6066] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 445.823252][ T6066] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 445.843993][ T6066] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 445.864662][ T6066] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 445.885385][ T6066] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 445.907052][ T6066] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 445.928768][ T6066] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 445.950476][ T6066] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 445.952022][ T5727] usb 4-1: unable to get BOS descriptor or descriptor too short [ 445.952067][ T5727] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 445.952933][ T5727] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 445.954669][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.954689][ T5727] usb 4-1: Product: syz [ 445.954702][ T5727] usb 4-1: Manufacturer: syz [ 445.954714][ T5727] usb 4-1: SerialNumber: syz [ 445.995631][ T6066] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 445.995652][ T6066] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 446.045000][ T5720] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 446.201397][ T5720] usb 1-1: device descriptor read/64, error -71 [ 446.319360][ T5720] usb usb1-port1: attempt power cycle [ 446.549886][ T92] usb 10-1: USB disconnect, device number 12 [ 446.710071][ T5720] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 446.733638][ T5720] usb 1-1: device descriptor read/8, error -71 [ 446.998274][ T5720] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 447.015743][ T5720] usb 1-1: device descriptor read/8, error -71 [ 447.132714][ T5720] usb usb1-port1: unable to enumerate USB device [ 447.767559][T10275] FAULT_INJECTION: forcing a failure. [ 447.767559][T10275] name failslab, interval 1, probability 0, space 0, times 0 [ 447.767595][T10275] CPU: 1 UID: 0 PID: 10275 Comm: syz.9.918 Not tainted syzkaller #0 PREEMPT(full) [ 447.767615][T10275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 447.767629][T10275] Call Trace: [ 447.767636][T10275] [ 447.767645][T10275] dump_stack_lvl+0x100/0x190 [ 447.767681][T10275] should_fail_ex.cold+0x5/0xa [ 447.767711][T10275] should_failslab+0xc2/0x120 [ 447.767741][T10275] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 447.767765][T10275] ? sock_alloc_inode+0x26/0x2c0 [ 447.767790][T10275] ? __pfx_sock_alloc_inode+0x10/0x10 [ 447.767822][T10275] sock_alloc_inode+0x26/0x2c0 [ 447.767845][T10275] ? __pfx_sock_alloc_inode+0x10/0x10 [ 447.767867][T10275] alloc_inode+0x68/0x250 [ 447.767891][T10275] sock_alloc+0x44/0x280 [ 447.767910][T10275] ? security_socket_create+0x7f/0x250 [ 447.767937][T10275] __sock_create+0xc2/0x860 [ 447.767967][T10275] __sys_socket+0x14d/0x260 [ 447.767994][T10275] ? __pfx___sys_socket+0x10/0x10 [ 447.768028][T10275] __x64_sys_socket+0x72/0xb0 [ 447.768051][T10275] ? lockdep_hardirqs_on+0x7d/0x110 [ 447.768079][T10275] do_syscall_64+0x123/0x790 [ 447.768109][T10275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.768130][T10275] RIP: 0033:0x7f7fa3f9e1d9 [ 447.768147][T10275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.768166][T10275] RSP: 002b:00007f7fa4e61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 447.768185][T10275] RAX: ffffffffffffffda RBX: 00007f7fa4225fa0 RCX: 00007f7fa3f9e1d9 [ 447.768197][T10275] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 447.768208][T10275] RBP: 00007f7fa4035888 R08: 0000000000000000 R09: 0000000000000000 [ 447.768220][T10275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.768232][T10275] R13: 00007f7fa4226038 R14: 00007f7fa4225fa0 R15: 00007fffabe81eb8 [ 447.768257][T10275] [ 447.769722][T10275] socket: no more sockets [ 447.871511][T10275] netlink: 24 bytes leftover after parsing attributes in process `syz.9.918'. [ 448.223343][ T191] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 448.259337][ T191] usb 9-1: USB disconnect, device number 9 [ 448.311520][ T191] usblp0: removed [ 448.996674][ T5727] usb 4-1: USB disconnect, device number 17 [ 449.055910][T10113] udevd[10113]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.351985][ T31] audit: type=1400 audit(1791735844.837:896): avc: denied { write } for pid=10286 comm="syz.3.922" name="subsystems" dev="configfs" ino=3526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 449.550981][ T31] audit: type=1400 audit(1791735845.012:897): avc: denied { write } for pid=10286 comm="syz.3.922" name="ports" dev="configfs" ino=3527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 449.650718][ T31] audit: type=1400 audit(1791735845.123:898): avc: denied { read write } for pid=10286 comm="syz.3.922" name="addr_trtype" dev="configfs" ino=31664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 449.650913][ T31] audit: type=1400 audit(1791735845.123:899): avc: denied { open } for pid=10286 comm="syz.3.922" path="/40/config/nvmet/ports/1/addr_trtype" dev="configfs" ino=31664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 449.764945][ T31] audit: type=1400 audit(1791735845.224:900): avc: denied { write } for pid=10286 comm="syz.3.922" name="subsystems" dev="configfs" ino=31660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 449.765645][ T31] audit: type=1400 audit(1791735845.234:901): avc: denied { create } for pid=10286 comm="syz.3.922" name="testsubsys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 449.920523][ T31] audit: type=1400 audit(1791735845.335:902): avc: denied { write } for pid=10286 comm="syz.3.922" name="subsystems" dev="configfs" ino=31660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 452.885819][ T4038] nvmet: connect request for invalid subsystem testsubsys! [ 452.888193][T10287] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 453.353789][ T5727] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 453.526005][ T5727] usb 10-1: Using ep0 maxpacket: 32 [ 453.528124][ T5727] usb 10-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=fc.21 [ 453.529607][ T5727] usb 10-1: config 3 has an invalid interface number: 79 but max is 0 [ 453.529630][ T5727] usb 10-1: config 3 has no interface number 0 [ 453.529664][ T5727] usb 10-1: config 3 interface 79 altsetting 5 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 453.529688][ T5727] usb 10-1: config 3 interface 79 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 453.529708][ T5727] usb 10-1: config 3 interface 79 has no altsetting 0 [ 453.533031][ T5727] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.533045][ T5727] usb 10-1: Product: syz [ 453.533053][ T5727] usb 10-1: Manufacturer: syz [ 453.533061][ T5727] usb 10-1: SerialNumber: syz [ 453.842840][T10310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.843147][T10310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.883160][ T9820] syz.0.828 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 453.883185][ T9820] CPU: 1 UID: 0 PID: 9820 Comm: syz.0.828 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.883202][ T9820] Tainted: [L]=SOFTLOCKUP [ 453.883207][ T9820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 453.883214][ T9820] Call Trace: [ 453.883218][ T9820] [ 453.883223][ T9820] dump_stack_lvl+0x100/0x190 [ 453.883244][ T9820] dump_header+0xfb/0x606 [ 453.883258][ T9820] oom_kill_process.cold+0xd/0x380 [ 453.883274][ T9820] out_of_memory+0x340/0x14f0 [ 453.883296][ T9820] ? __pfx_out_of_memory+0x10/0x10 [ 453.883317][ T9820] mem_cgroup_out_of_memory+0xc6/0x130 [ 453.883333][ T9820] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 453.883347][ T9820] ? find_held_lock+0x2b/0x80 [ 453.883367][ T9820] ? do_raw_spin_unlock+0x145/0x1e0 [ 453.883384][ T9820] ? _raw_spin_unlock+0x28/0x50 [ 453.883399][ T9820] try_charge_memcg+0x783/0xf60 [ 453.883416][ T9820] ? __pfx_try_charge_memcg+0x10/0x10 [ 453.883427][ T9820] ? find_held_lock+0x2b/0x80 [ 453.883444][ T9820] ? rcu_read_unlock+0x17/0x60 [ 453.883462][ T9820] ? rcu_read_unlock+0x17/0x60 [ 453.883480][ T9820] ? find_held_lock+0x2b/0x80 [ 453.883505][ T9820] ? rcu_read_unlock+0x17/0x60 [ 453.883528][ T9820] charge_memcg+0x1ae/0x210 [ 453.883547][ T9820] __mem_cgroup_charge+0x2b/0x1c0 [ 453.883569][ T9820] shmem_alloc_and_add_folio+0x451/0xd40 [ 453.883595][ T9820] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 453.883616][ T9820] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 453.883641][ T9820] shmem_get_folio_gfp+0x75b/0x1980 [ 453.883666][ T9820] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 453.883690][ T9820] ? filemap_map_pages+0x1155/0x2060 [ 453.883723][ T9820] shmem_fault+0x1fb/0xa30 [ 453.883742][ T9820] ? find_held_lock+0x2b/0x80 [ 453.883775][ T9820] ? __pfx_shmem_fault+0x10/0x10 [ 453.883794][ T9820] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 453.883816][ T9820] ? lockdep_hardirqs_on+0x7d/0x110 [ 453.883842][ T9820] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 453.883864][ T9820] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 453.883889][ T9820] ? __rcu_read_unlock+0x26a/0x5e0 [ 453.883912][ T9820] ? __pfx_filemap_map_pages+0x10/0x10 [ 453.883934][ T9820] __do_fault+0x10b/0x440 [ 453.883956][ T9820] do_fault+0xb3f/0x1830 [ 453.883983][ T9820] ? __pfx_do_fault+0x10/0x10 [ 453.884004][ T9820] ? rcu_read_unlock+0x2d/0xb0 [ 453.884022][ T9820] ? rcu_read_unlock+0x2d/0xb0 [ 453.884039][ T9820] ? __pte_offset_map+0x179/0x310 [ 453.884067][ T9820] __handle_mm_fault+0x150b/0x2f60 [ 453.884091][ T9820] ? __pfx___handle_mm_fault+0x10/0x10 [ 453.884110][ T9820] ? pte_offset_map_lock+0x174/0x320 [ 453.884134][ T9820] ? find_held_lock+0x2b/0x80 [ 453.884159][ T9820] ? find_held_lock+0x2b/0x80 [ 453.884183][ T9820] ? follow_page_pte+0x536/0x1050 [ 453.884219][ T9820] handle_mm_fault+0x363/0xa20 [ 453.884243][ T9820] __get_user_pages+0x8ae/0x2c30 [ 453.884272][ T9820] ? lock_acquire+0x1d1/0x380 [ 453.884292][ T9820] ? __pfx___get_user_pages+0x10/0x10 [ 453.884316][ T9820] ? __pfx___might_resched+0x10/0x10 [ 453.884341][ T9820] get_dump_page+0x27e/0x3d0 [ 453.884365][ T9820] ? __pfx_get_dump_page+0x10/0x10 [ 453.884389][ T9820] ? dump_user_range+0x65e/0xad0 [ 453.884419][ T9820] dump_user_range+0x18d/0xad0 [ 453.884447][ T9820] ? __pfx_dump_user_range+0x10/0x10 [ 453.884479][ T9820] ? __pfx_writenote+0x10/0x10 [ 453.884504][ T9820] ? elf_core_dump+0x2eb0/0x3d20 [ 453.884532][ T9820] elf_core_dump+0x2d68/0x3d20 [ 453.884571][ T9820] ? __pfx_elf_core_dump+0x10/0x10 [ 453.884596][ T9820] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 453.884621][ T9820] ? trace_sched_exit_tp+0x120/0x160 [ 453.884646][ T9820] ? 0xffffffffff600000 [ 453.884690][ T9820] ? lock_acquire+0x1d1/0x380 [ 453.884709][ T9820] ? get_signal+0x1f2a/0x21e0 [ 453.884737][ T9820] ? vfs_coredump+0x281a/0x54a0 [ 453.884756][ T9820] vfs_coredump+0x281a/0x54a0 [ 453.884793][ T9820] ? __pfx_vfs_coredump+0x10/0x10 [ 453.884817][ T9820] ? __lock_acquire+0x5c0/0x1f40 [ 453.884843][ T9820] ? __lock_acquire+0x5c0/0x1f40 [ 453.884867][ T9820] ? lock_acquire+0x1d1/0x380 [ 453.884888][ T9820] ? clockevents_program_event+0x23e/0x820 [ 453.884915][ T9820] ? find_held_lock+0x2b/0x80 [ 453.884950][ T9820] ? lapic_next_event+0x10/0x20 [ 453.884980][ T9820] ? __lock_acquire+0x5c0/0x1f40 [ 453.885002][ T9820] ? do_raw_spin_unlock+0x145/0x1e0 [ 453.885025][ T9820] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 453.885049][ T9820] ? rcu_is_watching+0x13/0xc0 [ 453.885076][ T9820] ? trace_hrtimer_start+0x77/0x220 [ 453.885104][ T9820] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 453.885144][ T9820] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 453.885168][ T9820] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 453.885191][ T9820] ? rcu_is_watching+0x13/0xc0 [ 453.885216][ T9820] ? trace_sched_exit_tp+0x120/0x160 [ 453.885240][ T9820] ? __schedule+0x126b/0x6920 [ 453.885275][ T9820] ? __pfx___schedule+0x10/0x10 [ 453.885299][ T9820] ? proc_coredump_connector+0x2d3/0x4f0 [ 453.885322][ T9820] ? __pfx_proc_coredump_connector+0x10/0x10 [ 453.885359][ T9820] get_signal+0x1f2a/0x21e0 [ 453.885392][ T9820] ? __pfx_get_signal+0x10/0x10 [ 453.885421][ T9820] arch_do_signal_or_restart+0x91/0x7e0 [ 453.885453][ T9820] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 453.885498][ T9820] irqentry_exit+0x402/0xa10 [ 453.885528][ T9820] asm_exc_page_fault+0x26/0x30 [ 453.885547][ T9820] RIP: 0033:0x7fc187a53c07 [ 453.885564][ T9820] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 ea 12 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 453.885582][ T9820] RSP: 002b:00007fc188a0b160 EFLAGS: 00010206 [ 453.885597][ T9820] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 453.885609][ T9820] RDX: 00007fc188a0b180 RSI: 00007fc188a0b2b0 RDI: 000000000000000b [ 453.885620][ T9820] RBP: 00007fc187c35888 R08: 0000000000000000 R09: 0000000000000000 [ 453.885632][ T9820] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 453.885642][ T9820] R13: 00007fc187e26218 R14: 00007fc187e26180 R15: 00007fff5998d108 [ 453.885669][ T9820] [ 454.077930][ T9820] memory: usage 307200kB, limit 307200kB, failcnt 48846 [ 454.077947][ T9820] memory+swap: usage 431928kB, limit 9007199254740988kB, failcnt 0 [ 454.077957][ T9820] kmem: usage 4088kB, limit 9007199254740988kB, failcnt 0 [ 454.077967][ T9820] Memory cgroup stats for /syz0: [ 454.078071][ T9820] cache 309731328 [ 454.078079][ T9820] rss 655360 [ 454.078085][ T9820] rss_huge 0 [ 454.078091][ T9820] shmem 309731328 [ 454.078097][ T9820] mapped_file 144633856 [ 454.078103][ T9820] dirty 0 [ 454.078108][ T9820] writeback 0 [ 454.078115][ T9820] workingset_refault_anon 9 [ 454.078121][ T9820] workingset_refault_file 448 [ 454.078128][ T9820] swap 127721472 [ 454.078134][ T9820] swapcached 127758336 [ 454.078140][ T9820] pgpgin 479732 [ 454.078145][ T9820] pgpgout 403954 [ 454.078151][ T9820] pgfault 191634 [ 454.078158][ T9820] pgmajfault 15 [ 454.078163][ T9820] inactive_anon 239665152 [ 454.078170][ T9820] active_anon 70721536 [ 454.078176][ T9820] inactive_file 0 [ 454.078182][ T9820] active_file 0 [ 454.078188][ T9820] unevictable 0 [ 454.078194][ T9820] hierarchical_memory_limit 314572800 [ 454.078201][ T9820] hierarchical_memsw_limit 9223372036854771712 [ 454.078208][ T9820] total_cache 309731328 [ 454.078214][ T9820] total_rss 655360 [ 454.078220][ T9820] total_rss_huge 0 [ 454.078226][ T9820] total_shmem 309731328 [ 454.078232][ T9820] total_mapped_file 144633856 [ 454.078239][ T9820] total_dirty 0 [ 454.078245][ T9820] total_writeback 0 [ 454.078251][ T9820] total_workingset_refault_anon 9 [ 454.078258][ T9820] total_workingset_refault_file 448 [ 454.078264][ T9820] total_swap 127721472 [ 454.078271][ T9820] total_swapcached 127758336 [ 454.078277][ T9820] total_pgpgin 479732 [ 454.078283][ T9820] total_pgpgout 403954 [ 454.078289][ T9820] total_pgfault 191634 [ 454.078295][ T9820] total_pgmajfault 15 [ 454.078302][ T9820] total_inactive_anon 239665152 [ 454.078308][ T9820] total_active_anon 70721536 [ 454.078315][ T9820] total_inactive_file 0 [ 454.078321][ T9820] total_active_file 0 [ 454.078327][ T9820] total_unevictable 0 [ 454.078333][ T9820] anon_cost 0 [ 454.078339][ T9820] file_cost 0 [ 454.078345][ T9820] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.798,pid=9663,uid=0 [ 454.079564][ T9820] Memory cgroup out of memory: Killed process 9663 (syz.0.798) total-vm:215208kB, anon-rss:1260kB, file-rss:20844kB, shmem-rss:57076kB, UID:0 pgtables:300kB oom_score_adj:1000 [ 454.296915][T10106] syz.8.881 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 454.296945][T10106] CPU: 0 UID: 0 PID: 10106 Comm: syz.8.881 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.296967][T10106] Tainted: [L]=SOFTLOCKUP [ 454.296973][T10106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 454.296982][T10106] Call Trace: [ 454.296989][T10106] [ 454.296996][T10106] dump_stack_lvl+0x100/0x190 [ 454.297029][T10106] dump_header+0xfb/0x606 [ 454.297048][T10106] oom_kill_process.cold+0xd/0x380 [ 454.297069][T10106] out_of_memory+0x340/0x14f0 [ 454.297097][T10106] ? __pfx_out_of_memory+0x10/0x10 [ 454.297127][T10106] mem_cgroup_out_of_memory+0xc6/0x130 [ 454.297149][T10106] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 454.297168][T10106] ? find_held_lock+0x2b/0x80 [ 454.297197][T10106] ? do_raw_spin_unlock+0x145/0x1e0 [ 454.297219][T10106] ? _raw_spin_unlock+0x28/0x50 [ 454.297242][T10106] try_charge_memcg+0x783/0xf60 [ 454.297264][T10106] ? __pfx_try_charge_memcg+0x10/0x10 [ 454.297279][T10106] ? find_held_lock+0x2b/0x80 [ 454.297302][T10106] ? rcu_read_unlock+0x17/0x60 [ 454.297318][T10106] ? rcu_read_unlock+0x17/0x60 [ 454.297334][T10106] ? find_held_lock+0x2b/0x80 [ 454.297362][T10106] ? rcu_read_unlock+0x17/0x60 [ 454.297384][T10106] charge_memcg+0x1ae/0x210 [ 454.297401][T10106] __mem_cgroup_charge+0x2b/0x1c0 [ 454.297421][T10106] shmem_alloc_and_add_folio+0x451/0xd40 [ 454.297447][T10106] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 454.297466][T10106] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 454.297488][T10106] shmem_get_folio_gfp+0x75b/0x1980 [ 454.297511][T10106] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 454.297530][T10106] ? filemap_map_pages+0x1155/0x2060 [ 454.297558][T10106] shmem_fault+0x1fb/0xa30 [ 454.297577][T10106] ? __pfx_shmem_fault+0x10/0x10 [ 454.297597][T10106] ? __pfx_filemap_map_pages+0x10/0x10 [ 454.297623][T10106] ? find_held_lock+0x2b/0x80 [ 454.297648][T10106] ? __pfx_filemap_map_pages+0x10/0x10 [ 454.297670][T10106] __do_fault+0x10b/0x440 [ 454.297692][T10106] do_fault+0xb3f/0x1830 [ 454.297716][T10106] ? __pfx_do_fault+0x10/0x10 [ 454.297739][T10106] ? rcu_read_unlock+0x2d/0xb0 [ 454.297756][T10106] ? rcu_read_unlock+0x2d/0xb0 [ 454.297773][T10106] ? __pte_offset_map+0x179/0x310 [ 454.297799][T10106] __handle_mm_fault+0x150b/0x2f60 [ 454.297821][T10106] ? __pfx___handle_mm_fault+0x10/0x10 [ 454.297834][T10106] ? pte_offset_map_lock+0x174/0x320 [ 454.297849][T10106] ? find_held_lock+0x2b/0x80 [ 454.297868][T10106] ? find_held_lock+0x2b/0x80 [ 454.297891][T10106] ? follow_page_pte+0x536/0x1050 [ 454.297929][T10106] handle_mm_fault+0x363/0xa20 [ 454.297952][T10106] __get_user_pages+0x8ae/0x2c30 [ 454.297974][T10106] ? lock_acquire+0x1d1/0x380 [ 454.297987][T10106] ? __pfx___get_user_pages+0x10/0x10 [ 454.298003][T10106] ? __pfx___might_resched+0x10/0x10 [ 454.298021][T10106] get_dump_page+0x27e/0x3d0 [ 454.298045][T10106] ? __pfx_get_dump_page+0x10/0x10 [ 454.298069][T10106] ? dump_user_range+0x65e/0xad0 [ 454.298097][T10106] dump_user_range+0x18d/0xad0 [ 454.298116][T10106] ? __pfx_dump_user_range+0x10/0x10 [ 454.298137][T10106] ? __pfx_writenote+0x10/0x10 [ 454.298152][T10106] ? elf_core_dump+0x1f25/0x3d20 [ 454.298175][T10106] elf_core_dump+0x2d68/0x3d20 [ 454.298213][T10106] ? __pfx_elf_core_dump+0x10/0x10 [ 454.298235][T10106] ? kasan_save_stack+0x3f/0x50 [ 454.298253][T10106] ? kasan_save_stack+0x30/0x50 [ 454.298267][T10106] ? kasan_save_track+0x14/0x30 [ 454.298281][T10106] ? __kasan_kmalloc+0xaa/0xb0 [ 454.298296][T10106] ? vfs_coredump+0x21f6/0x54a0 [ 454.298309][T10106] ? get_signal+0x1f2a/0x21e0 [ 454.298328][T10106] ? arch_do_signal_or_restart+0x91/0x7e0 [ 454.298364][T10106] ? 0xffffffffff600000 [ 454.298402][T10106] ? lock_acquire+0x1d1/0x380 [ 454.298415][T10106] ? get_signal+0x1f2a/0x21e0 [ 454.298432][T10106] ? vfs_coredump+0x281a/0x54a0 [ 454.298446][T10106] vfs_coredump+0x281a/0x54a0 [ 454.298473][T10106] ? __pfx_vfs_coredump+0x10/0x10 [ 454.298495][T10106] ? __lock_acquire+0x5c0/0x1f40 [ 454.298521][T10106] ? __lock_acquire+0x5c0/0x1f40 [ 454.298541][T10106] ? lock_acquire+0x1d1/0x380 [ 454.298553][T10106] ? unwind_next_frame+0xbd/0x2090 [ 454.298573][T10106] ? lock_acquire+0x1d1/0x380 [ 454.298589][T10106] ? bpf_ksym_find+0x128/0x1c0 [ 454.298602][T10106] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 454.298630][T10106] ? arch_stack_walk+0xa6/0xf0 [ 454.298660][T10106] ? __sigqueue_free+0xbe/0x2a0 [ 454.298683][T10106] ? stack_trace_save+0x8e/0xc0 [ 454.298695][T10106] ? __pfx_stack_trace_save+0x10/0x10 [ 454.298707][T10106] ? stack_depot_save_flags+0x27/0x9f0 [ 454.298719][T10106] ? __lock_acquire+0x5c0/0x1f40 [ 454.298767][T10106] ? proc_coredump_connector+0x2d3/0x4f0 [ 454.298792][T10106] ? __pfx_proc_coredump_connector+0x10/0x10 [ 454.298819][T10106] ? rcu_is_watching+0x13/0xc0 [ 454.298842][T10106] get_signal+0x1f2a/0x21e0 [ 454.298863][T10106] ? __pfx_get_signal+0x10/0x10 [ 454.298880][T10106] arch_do_signal_or_restart+0x91/0x7e0 [ 454.298902][T10106] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 454.298944][T10106] irqentry_exit+0x402/0xa10 [ 454.298971][T10106] asm_exc_page_fault+0x26/0x30 [ 454.298984][T10106] RIP: 0033:0x7ffad2653c07 [ 454.298994][T10106] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 ea 12 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 454.299005][T10106] RSP: 002b:00007ffad3677160 EFLAGS: 00010206 [ 454.299015][T10106] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 454.299022][T10106] RDX: 00007ffad3677180 RSI: 00007ffad36772b0 RDI: 000000000000000b [ 454.299029][T10106] RBP: 00007ffad2835888 R08: 0000000000000000 R09: 0000000000000000 [ 454.299036][T10106] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 454.299046][T10106] R13: 00007ffad2a26128 R14: 00007ffad2a26090 R15: 00007fff1b4a3a28 [ 454.299071][T10106] [ 454.334726][T10106] memory: usage 307200kB, limit 307200kB, failcnt 3969 [ 454.334743][T10106] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 454.334755][T10106] kmem: usage 2108kB, limit 9007199254740988kB, failcnt 0 [ 454.334765][T10106] Memory cgroup stats for /syz8: [ 454.334861][T10106] cache 311959552 [ 454.334866][T10106] rss 454656 [ 454.334870][T10106] rss_huge 0 [ 454.334874][T10106] shmem 311955456 [ 454.334879][T10106] mapped_file 115433472 [ 454.334886][T10106] dirty 0 [ 454.334891][T10106] writeback 0 [ 454.334898][T10106] workingset_refault_anon 0 [ 454.334905][T10106] workingset_refault_file 16 [ 454.334912][T10106] swap 0 [ 454.334918][T10106] swapcached 0 [ 454.334924][T10106] pgpgin 459597 [ 454.334929][T10106] pgpgout 383327 [ 454.334936][T10106] pgfault 184617 [ 454.334942][T10106] pgmajfault 11 [ 454.334948][T10106] inactive_anon 143118336 [ 454.334975][T10106] active_anon 169291776 [ 454.334980][T10106] inactive_file 0 [ 454.334984][T10106] active_file 4096 [ 454.334988][T10106] unevictable 0 [ 454.334992][T10106] hierarchical_memory_limit 314572800 [ 454.334997][T10106] hierarchical_memsw_limit 9223372036854771712 [ 454.335002][T10106] total_cache 311959552 [ 454.335006][T10106] total_rss 454656 [ 454.335010][T10106] total_rss_huge 0 [ 454.335014][T10106] total_shmem 311955456 [ 454.335018][T10106] total_mapped_file 115433472 [ 454.335022][T10106] total_dirty 0 [ 454.335026][T10106] total_writeback 0 [ 454.335033][T10106] total_workingset_refault_anon 0 [ 454.335040][T10106] total_workingset_refault_file 16 [ 454.335047][T10106] total_swap 0 [ 454.335053][T10106] total_swapcached 0 [ 454.335060][T10106] total_pgpgin 459597 [ 454.335066][T10106] total_pgpgout 383327 [ 454.335073][T10106] total_pgfault 184617 [ 454.335079][T10106] total_pgmajfault 11 [ 454.335086][T10106] total_inactive_anon 143118336 [ 454.335093][T10106] total_active_anon 169291776 [ 454.335100][T10106] total_inactive_file 0 [ 454.335126][T10106] total_active_file 4096 [ 454.335131][T10106] total_unevictable 0 [ 454.335135][T10106] anon_cost 0 [ 454.335138][T10106] file_cost 0 [ 454.335143][T10106] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.881,pid=10106,uid=0 [ 454.335207][T10106] Memory cgroup out of memory: Killed process 10106 (syz.8.881) total-vm:215208kB, anon-rss:1584kB, file-rss:20844kB, shmem-rss:112688kB, UID:0 pgtables:340kB oom_score_adj:1000 [ 454.673811][T10313] syz.8.927 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 454.673852][T10313] CPU: 0 UID: 0 PID: 10313 Comm: syz.8.927 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.673874][T10313] Tainted: [L]=SOFTLOCKUP [ 454.673881][T10313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 454.673890][T10313] Call Trace: [ 454.673896][T10313] [ 454.673903][T10313] dump_stack_lvl+0x100/0x190 [ 454.673943][T10313] dump_header+0xfb/0x606 [ 454.673963][T10313] oom_kill_process.cold+0xd/0x380 [ 454.673984][T10313] out_of_memory+0x340/0x14f0 [ 454.674013][T10313] ? __pfx_out_of_memory+0x10/0x10 [ 454.674050][T10313] mem_cgroup_out_of_memory+0xc6/0x130 [ 454.674072][T10313] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 454.674091][T10313] ? find_held_lock+0x2b/0x80 [ 454.674123][T10313] ? do_raw_spin_unlock+0x145/0x1e0 [ 454.674146][T10313] ? _raw_spin_unlock+0x28/0x50 [ 454.674169][T10313] try_charge_memcg+0x783/0xf60 [ 454.674191][T10313] ? __pfx_try_charge_memcg+0x10/0x10 [ 454.674208][T10313] ? find_held_lock+0x2b/0x80 [ 454.674230][T10313] ? rcu_read_unlock+0x17/0x60 [ 454.674246][T10313] ? rcu_read_unlock+0x17/0x60 [ 454.674271][T10313] obj_cgroup_charge_pages+0x2b/0x1f0 [ 454.674290][T10313] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 454.674316][T10313] ? kasan_save_track+0x14/0x30 [ 454.674342][T10313] kmem_cache_alloc_noprof+0x4fa/0x6a0 [ 454.674363][T10313] ? alloc_buffer_head+0x21/0x140 [ 454.674388][T10313] alloc_buffer_head+0x21/0x140 [ 454.674408][T10313] folio_alloc_buffers+0x197/0x8e0 [ 454.674435][T10313] create_empty_buffers+0x3a/0x660 [ 454.674463][T10313] folio_create_buffers+0x13b/0x1a0 [ 454.674486][T10313] __block_write_begin_int+0x393/0x19c0 [ 454.674510][T10313] ? lock_acquire+0x1d1/0x380 [ 454.674528][T10313] ? ext4_page_mkwrite+0x33a/0x1860 [ 454.674550][T10313] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 454.674576][T10313] ? __pfx___block_write_begin_int+0x10/0x10 [ 454.674601][T10313] ? __pfx___might_resched+0x10/0x10 [ 454.674622][T10313] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 454.674645][T10313] block_page_mkwrite+0x34d/0x460 [ 454.674672][T10313] ext4_page_mkwrite+0xdf6/0x1860 [ 454.674694][T10313] ? __lock_acquire+0x5c0/0x1f40 [ 454.674714][T10313] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 454.674731][T10313] ? inode_to_bdi+0x9e/0x160 [ 454.674755][T10313] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 454.674780][T10313] do_page_mkwrite+0x17a/0x440 [ 454.674802][T10313] do_fault+0x659/0x1830 [ 454.674822][T10313] ? __pfx_filemap_map_pages+0x10/0x10 [ 454.674847][T10313] ? __pfx_do_fault+0x10/0x10 [ 454.674868][T10313] ? rcu_read_unlock+0x2d/0xb0 [ 454.674884][T10313] ? rcu_read_unlock+0x2d/0xb0 [ 454.674901][T10313] ? __pte_offset_map+0x179/0x310 [ 454.674926][T10313] __handle_mm_fault+0x150b/0x2f60 [ 454.674948][T10313] ? __pfx___handle_mm_fault+0x10/0x10 [ 454.674963][T10313] ? __pfx_mt_find+0x10/0x10 [ 454.675000][T10313] ? find_vma+0xbf/0x140 [ 454.675019][T10313] ? __pfx_find_vma+0x10/0x10 [ 454.675042][T10313] handle_mm_fault+0x363/0xa20 [ 454.675063][T10313] do_user_addr_fault+0x745/0x12f0 [ 454.675092][T10313] exc_page_fault+0x6f/0xd0 [ 454.675115][T10313] asm_exc_page_fault+0x26/0x30 [ 454.675131][T10313] RIP: 0033:0x7ffad276e99e [ 454.675146][T10313] Code: e1 fd 28 7f 67 03 48 83 ef 80 48 39 fa 77 bd 62 e1 fe 28 7f 6a 03 62 e1 fe 28 7f 72 02 62 e1 fe 28 7f 7a 01 62 61 fe 28 7f 02 <62> e1 fe 28 7f 01 c3 48 85 c9 74 fa 62 e1 fe 28 6f 6e 01 62 e1 fe [ 454.675161][T10313] RSP: 002b:00007fff1b4a3a78 EFLAGS: 00010246 [ 454.675175][T10313] RAX: 0000001b33222fe0 RBX: 0000000000001020 RCX: 0000001b33222fe0 [ 454.675185][T10313] RDX: 0000001b33223f80 RSI: 00007ffad21fffa8 RDI: 0000001b33223f80 [ 454.675196][T10313] RBP: 00007ffad3555720 R08: 0000000000000000 R09: 0000000000000001 [ 454.675205][T10313] R10: 00007ffad3555700 R11: ffffffff81769c00 R12: 00007ffad21ff008 [ 454.675216][T10313] R13: 0000000000000081 R14: ffffffffffffbf80 R15: 0000000000000000 [ 454.675230][T10313] ? in_gate_area+0x60/0x100 [ 454.675257][T10313] [ 454.732060][T10313] memory: usage 307200kB, limit 307200kB, failcnt 3994 [ 454.732091][T10313] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 454.732102][T10313] kmem: usage 2108kB, limit 9007199254740988kB, failcnt 0 [ 454.732112][T10313] Memory cgroup stats for /syz8: [ 454.732267][T10313] cache 311959552 [ 454.732275][T10313] rss 454656 [ 454.732281][T10313] rss_huge 0 [ 454.732287][T10313] shmem 311955456 [ 454.732293][T10313] mapped_file 96538624 [ 454.732299][T10313] dirty 0 [ 454.732305][T10313] writeback 0 [ 454.732311][T10313] workingset_refault_anon 0 [ 454.732317][T10313] workingset_refault_file 16 [ 454.732324][T10313] swap 0 [ 454.732329][T10313] swapcached 0 [ 454.732335][T10313] pgpgin 459597 [ 454.732341][T10313] pgpgout 383327 [ 454.732348][T10313] pgfault 184618 [ 454.732354][T10313] pgmajfault 11 [ 454.732359][T10313] inactive_anon 174288896 [ 454.732366][T10313] active_anon 138121216 [ 454.732372][T10313] inactive_file 0 [ 454.732378][T10313] active_file 4096 [ 454.732384][T10313] unevictable 0 [ 454.732390][T10313] hierarchical_memory_limit 314572800 [ 454.732397][T10313] hierarchical_memsw_limit 9223372036854771712 [ 454.732405][T10313] total_cache 311959552 [ 454.732411][T10313] total_rss 454656 [ 454.732417][T10313] total_rss_huge 0 [ 454.732423][T10313] total_shmem 311955456 [ 454.732429][T10313] total_mapped_file 96538624 [ 454.732436][T10313] total_dirty 0 [ 454.732441][T10313] total_writeback 0 [ 454.732447][T10313] total_workingset_refault_anon 0 [ 454.732454][T10313] total_workingset_refault_file 16 [ 454.732460][T10313] total_swap 0 [ 454.732466][T10313] total_swapcached 0 [ 454.732472][T10313] total_pgpgin 459597 [ 454.732479][T10313] total_pgpgout 383327 [ 454.732485][T10313] total_pgfault 184618 [ 454.732491][T10313] total_pgmajfault 11 [ 454.732497][T10313] total_inactive_anon 174288896 [ 454.732504][T10313] total_active_anon 138121216 [ 454.732510][T10313] total_inactive_file 0 [ 454.732516][T10313] total_active_file 4096 [ 454.732522][T10313] total_unevictable 0 [ 454.732528][T10313] anon_cost 0 [ 454.732534][T10313] file_cost 0 [ 454.732541][T10313] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.927,pid=10313,uid=0 [ 454.734961][T10313] Memory cgroup out of memory: Killed process 10313 (syz.8.927) total-vm:112500kB, anon-rss:1368kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 454.847111][ T9857] syz.0.835 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 454.847141][ T9857] CPU: 0 UID: 0 PID: 9857 Comm: syz.0.835 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.847163][ T9857] Tainted: [L]=SOFTLOCKUP [ 454.847169][ T9857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 454.847178][ T9857] Call Trace: [ 454.847185][ T9857] [ 454.847192][ T9857] dump_stack_lvl+0x100/0x190 [ 454.847221][ T9857] dump_header+0xfb/0x606 [ 454.847242][ T9857] oom_kill_process.cold+0xd/0x380 [ 454.847263][ T9857] out_of_memory+0x340/0x14f0 [ 454.847294][ T9857] ? __pfx_out_of_memory+0x10/0x10 [ 454.847320][ T9857] mem_cgroup_out_of_memory+0xc6/0x130 [ 454.847336][ T9857] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 454.847353][ T9857] ? find_held_lock+0x2b/0x80 [ 454.847382][ T9857] ? do_raw_spin_unlock+0x145/0x1e0 [ 454.847407][ T9857] ? _raw_spin_unlock+0x28/0x50 [ 454.847430][ T9857] try_charge_memcg+0x783/0xf60 [ 454.847449][ T9857] ? __pfx_try_charge_memcg+0x10/0x10 [ 454.847460][ T9857] ? find_held_lock+0x2b/0x80 [ 454.847477][ T9857] ? rcu_read_unlock+0x17/0x60 [ 454.847489][ T9857] ? rcu_read_unlock+0x17/0x60 [ 454.847501][ T9857] ? find_held_lock+0x2b/0x80 [ 454.847527][ T9857] ? rcu_read_unlock+0x17/0x60 [ 454.847550][ T9857] charge_memcg+0x1ae/0x210 [ 454.847570][ T9857] __mem_cgroup_charge+0x2b/0x1c0 [ 454.847589][ T9857] shmem_alloc_and_add_folio+0x451/0xd40 [ 454.847605][ T9857] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 454.847618][ T9857] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 454.847633][ T9857] shmem_get_folio_gfp+0x75b/0x1980 [ 454.847651][ T9857] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 454.847672][ T9857] ? vm_normal_page+0x1d1/0x380 [ 454.847694][ T9857] ? __pfx_vm_normal_page+0x10/0x10 [ 454.847721][ T9857] shmem_write_begin+0x1a4/0x420 [ 454.847738][ T9857] ? __pfx_shmem_write_begin+0x10/0x10 [ 454.847756][ T9857] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 454.847772][ T9857] generic_perform_write+0x292/0xa40 [ 454.847788][ T9857] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 454.847814][ T9857] ? __pfx_generic_perform_write+0x10/0x10 [ 454.847842][ T9857] ? file_update_time_flags+0x38c/0x520 [ 454.847864][ T9857] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 454.847882][ T9857] shmem_file_write_iter+0x10e/0x140 [ 454.847897][ T9857] __kernel_write_iter+0x2ac/0x930 [ 454.847913][ T9857] ? __pfx___kernel_write_iter+0x10/0x10 [ 454.847927][ T9857] ? __up_read+0x333/0x980 [ 454.847948][ T9857] ? dump_user_range+0x65e/0xad0 [ 454.847978][ T9857] dump_user_range+0x3f9/0xad0 [ 454.848005][ T9857] ? __pfx_dump_user_range+0x10/0x10 [ 454.848032][ T9857] ? __pfx_writenote+0x10/0x10 [ 454.848054][ T9857] ? elf_core_dump+0x1f25/0x3d20 [ 454.848082][ T9857] elf_core_dump+0x2d68/0x3d20 [ 454.848119][ T9857] ? __pfx_elf_core_dump+0x10/0x10 [ 454.848143][ T9857] ? ktime_get+0x9f/0x320 [ 454.848162][ T9857] ? ktime_get+0x1a4/0x320 [ 454.848181][ T9857] ? 0xffffffffff600000 [ 454.848192][ T9857] ? __pfx_clockevents_program_event+0x10/0x10 [ 454.848210][ T9857] ? find_held_lock+0x2b/0x80 [ 454.848250][ T9857] ? lock_acquire+0x1d1/0x380 [ 454.848269][ T9857] ? get_signal+0x1f2a/0x21e0 [ 454.848297][ T9857] ? vfs_coredump+0x281a/0x54a0 [ 454.848318][ T9857] vfs_coredump+0x281a/0x54a0 [ 454.848341][ T9857] ? __pfx_vfs_coredump+0x10/0x10 [ 454.848356][ T9857] ? __lock_acquire+0x5c0/0x1f40 [ 454.848372][ T9857] ? __lock_acquire+0x5c0/0x1f40 [ 454.848387][ T9857] ? lock_acquire+0x1d1/0x380 [ 454.848406][ T9857] ? unwind_next_frame+0xbd/0x2090 [ 454.848435][ T9857] ? lock_acquire+0x1d1/0x380 [ 454.848460][ T9857] ? bpf_ksym_find+0x128/0x1c0 [ 454.848477][ T9857] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 454.848494][ T9857] ? arch_stack_walk+0xa6/0xf0 [ 454.848514][ T9857] ? __sigqueue_free+0xbe/0x2a0 [ 454.848530][ T9857] ? stack_trace_save+0x8e/0xc0 [ 454.848544][ T9857] ? __pfx_stack_trace_save+0x10/0x10 [ 454.848563][ T9857] ? stack_depot_save_flags+0x27/0x9f0 [ 454.848582][ T9857] ? __lock_acquire+0x5c0/0x1f40 [ 454.848634][ T9857] ? proc_coredump_connector+0x2d3/0x4f0 [ 454.848650][ T9857] ? __pfx_proc_coredump_connector+0x10/0x10 [ 454.848668][ T9857] ? rcu_is_watching+0x13/0xc0 [ 454.848691][ T9857] get_signal+0x1f2a/0x21e0 [ 454.848721][ T9857] ? __pfx_get_signal+0x10/0x10 [ 454.848753][ T9857] arch_do_signal_or_restart+0x91/0x7e0 [ 454.848776][ T9857] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 454.848802][ T9857] irqentry_exit+0x402/0xa10 [ 454.848821][ T9857] asm_exc_page_fault+0x26/0x30 [ 454.848835][ T9857] RIP: 0033:0x7fc187a53c07 [ 454.848851][ T9857] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 ea 12 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 454.848867][ T9857] RSP: 002b:00007fc188a36160 EFLAGS: 00010206 [ 454.848882][ T9857] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 454.848893][ T9857] RDX: 00007fc188a36180 RSI: 00007fc188a362b0 RDI: 000000000000000b [ 454.848903][ T9857] RBP: 00007fc187c35888 R08: 0000000000000000 R09: 0000000000000000 [ 454.848913][ T9857] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 454.848920][ T9857] R13: 00007fc187e26128 R14: 00007fc187e26090 R15: 00007fff5998d108 [ 454.848935][ T9857] [ 454.904928][ T9857] memory: usage 307200kB, limit 307200kB, failcnt 48995 [ 454.904944][ T9857] memory+swap: usage 431928kB, limit 9007199254740988kB, failcnt 0 [ 454.904956][ T9857] kmem: usage 3988kB, limit 9007199254740988kB, failcnt 0 [ 454.904967][ T9857] Memory cgroup stats for /syz0: [ 454.905116][ T9857] cache 309977088 [ 454.905122][ T9857] rss 491520 [ 454.905128][ T9857] rss_huge 0 [ 454.905133][ T9857] shmem 309977088 [ 454.905140][ T9857] mapped_file 129671168 [ 454.905146][ T9857] dirty 0 [ 454.905152][ T9857] writeback 0 [ 454.905159][ T9857] workingset_refault_anon 9 [ 454.905165][ T9857] workingset_refault_file 448 [ 454.905171][ T9857] swap 127721472 [ 454.905178][ T9857] swapcached 127758336 [ 454.905184][ T9857] pgpgin 479794 [ 454.905190][ T9857] pgpgout 403991 [ 454.905196][ T9857] pgfault 191664 [ 454.905201][ T9857] pgmajfault 15 [ 454.905207][ T9857] inactive_anon 239534080 [ 454.905214][ T9857] active_anon 70950912 [ 454.905220][ T9857] inactive_file 0 [ 454.905226][ T9857] active_file 0 [ 454.905232][ T9857] unevictable 0 [ 454.905237][ T9857] hierarchical_memory_limit 314572800 [ 454.905244][ T9857] hierarchical_memsw_limit 9223372036854771712 [ 454.905251][ T9857] total_cache 309977088 [ 454.905258][ T9857] total_rss 491520 [ 454.905264][ T9857] total_rss_huge 0 [ 454.905270][ T9857] total_shmem 309977088 [ 454.905276][ T9857] total_mapped_file 129671168 [ 454.905283][ T9857] total_dirty 0 [ 454.905290][ T9857] total_writeback 0 [ 454.905297][ T9857] total_workingset_refault_anon 9 [ 454.905304][ T9857] total_workingset_refault_file 448 [ 454.905311][ T9857] total_swap 127721472 [ 454.905317][ T9857] total_swapcached 127758336 [ 454.905324][ T9857] total_pgpgin 479794 [ 454.905330][ T9857] total_pgpgout 403991 [ 454.905336][ T9857] total_pgfault 191664 [ 454.905343][ T9857] total_pgmajfault 15 [ 454.905349][ T9857] total_inactive_anon 239534080 [ 454.905356][ T9857] total_active_anon 70950912 [ 454.905364][ T9857] total_inactive_file 0 [ 454.905370][ T9857] total_active_file 0 [ 454.905377][ T9857] total_unevictable 0 [ 454.905385][ T9857] anon_cost 0 [ 454.905402][ T9857] file_cost 0 [ 454.905410][ T9857] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1 [ 456.179817][ T5727] kobil_sct 10-1:3.79: KOBIL USB smart card terminal converter detected [ 456.211411][ T5727] usb 10-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 456.237101][ T5727] usb 10-1: USB disconnect, device number 13 [ 456.403854][ T5727] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 456.408073][ T5727] kobil_sct 10-1:3.79: device disconnected [ 456.747144][ T33] oom_reaper: reaped process 10106 (syz.8.881), now anon-rss:0kB, file-rss:20520kB, shmem-rss:31324kB [ 456.789319][ T33] oom_reaper: reaped process 9663 (syz.0.798), now anon-rss:0kB, file-rss:20520kB, shmem-rss:18364kB [ 456.791360][ T9857] ,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.835,pid=9857,uid=0 [ 456.791584][ T9857] Memory cgroup out of memory: Killed process 9857 (syz.0.835) total-vm:114852kB, anon-rss:1404kB, file-rss:55208kB, shmem-rss:10132kB, UID:0 pgtables:240kB oom_score_adj:1000 [ 457.378753][T10334] random: crng reseeded on system resumption [ 457.386308][ T31] audit: type=1400 audit(1791735852.255:903): avc: denied { write } for pid=10330 comm="syz.8.933" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 457.386401][ T31] audit: type=1400 audit(1791735852.255:904): avc: denied { open } for pid=10330 comm="syz.8.933" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 457.881639][ T31] audit: type=1400 audit(1791735852.717:905): avc: denied { append } for pid=10336 comm="syz.4.936" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 458.273221][ T31] audit: type=1400 audit(1791735853.067:906): avc: denied { map } for pid=10336 comm="syz.4.936" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 458.535811][ T92] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 458.908135][ T92] usb 1-1: unable to get BOS descriptor or descriptor too short [ 458.908180][ T92] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 458.913675][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 458.925841][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.925864][ T92] usb 1-1: Product: syz [ 458.925877][ T92] usb 1-1: Manufacturer: syz [ 458.925889][ T92] usb 1-1: SerialNumber: syz [ 459.368517][ T9036] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 459.530219][ T9036] usb 9-1: device descriptor read/64, error -71 [ 459.792029][ T9036] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 459.942067][ T9036] usb 9-1: device descriptor read/64, error -71 [ 460.072499][ T9036] usb usb9-port1: attempt power cycle [ 460.400155][ T31] audit: type=1400 audit(1791735855.042:907): avc: denied { map } for pid=10353 comm="syz.9.942" path="/dev/comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 460.560620][ T9036] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 460.705095][ T9036] usb 9-1: device descriptor read/8, error -71 [ 460.963255][ T9036] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 460.994517][ T9036] usb 9-1: device descriptor read/8, error -71 [ 461.126394][ T9036] usb usb9-port1: unable to enumerate USB device [ 461.298614][ T92] usb 1-1: USB disconnect, device number 44 [ 461.421275][T10113] udevd[10113]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.460748][T10372] syz.0.943 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 462.460773][T10372] CPU: 0 UID: 0 PID: 10372 Comm: syz.0.943 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.460788][T10372] Tainted: [L]=SOFTLOCKUP [ 462.460792][T10372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 462.460799][T10372] Call Trace: [ 462.460804][T10372] [ 462.460809][T10372] dump_stack_lvl+0x100/0x190 [ 462.460829][T10372] dump_header+0xfb/0x606 [ 462.460843][T10372] oom_kill_process.cold+0xd/0x380 [ 462.460857][T10372] out_of_memory+0x340/0x14f0 [ 462.460878][T10372] ? __pfx_out_of_memory+0x10/0x10 [ 462.460899][T10372] mem_cgroup_out_of_memory+0xc6/0x130 [ 462.460915][T10372] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 462.460929][T10372] ? find_held_lock+0x2b/0x80 [ 462.460949][T10372] ? do_raw_spin_unlock+0x145/0x1e0 [ 462.460965][T10372] ? _raw_spin_unlock+0x28/0x50 [ 462.460981][T10372] try_charge_memcg+0x783/0xf60 [ 462.460997][T10372] ? __pfx_try_charge_memcg+0x10/0x10 [ 462.461008][T10372] ? find_held_lock+0x2b/0x80 [ 462.461024][T10372] ? rcu_read_unlock+0x17/0x60 [ 462.461036][T10372] ? rcu_read_unlock+0x17/0x60 [ 462.461048][T10372] ? find_held_lock+0x2b/0x80 [ 462.461065][T10372] ? rcu_read_unlock+0x17/0x60 [ 462.461080][T10372] charge_memcg+0x1ae/0x210 [ 462.461093][T10372] __mem_cgroup_charge+0x2b/0x1c0 [ 462.461107][T10372] shmem_alloc_and_add_folio+0x451/0xd40 [ 462.461123][T10372] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 462.461136][T10372] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 462.461152][T10372] shmem_get_folio_gfp+0x75b/0x1980 [ 462.461168][T10372] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 462.461180][T10372] ? vm_normal_page+0x1d1/0x380 [ 462.461195][T10372] ? __pfx_vm_normal_page+0x10/0x10 [ 462.461213][T10372] shmem_write_begin+0x1a4/0x420 [ 462.461231][T10372] ? __pfx_shmem_write_begin+0x10/0x10 [ 462.461244][T10372] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 462.461260][T10372] generic_perform_write+0x292/0xa40 [ 462.461276][T10372] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 462.461294][T10372] ? __pfx_generic_perform_write+0x10/0x10 [ 462.461312][T10372] ? file_update_time_flags+0x38c/0x520 [ 462.461326][T10372] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 462.461340][T10372] shmem_file_write_iter+0x10e/0x140 [ 462.461355][T10372] __kernel_write_iter+0x2ac/0x930 [ 462.461370][T10372] ? __pfx___kernel_write_iter+0x10/0x10 [ 462.461385][T10372] ? __up_read+0x333/0x980 [ 462.461401][T10372] ? dump_user_range+0x65e/0xad0 [ 462.461420][T10372] dump_user_range+0x3f9/0xad0 [ 462.461437][T10372] ? __pfx_dump_user_range+0x10/0x10 [ 462.461458][T10372] ? __pfx_writenote+0x10/0x10 [ 462.461473][T10372] ? elf_core_dump+0x1f25/0x3d20 [ 462.461491][T10372] elf_core_dump+0x2d68/0x3d20 [ 462.461515][T10372] ? __pfx_elf_core_dump+0x10/0x10 [ 462.461530][T10372] ? kasan_save_stack+0x3f/0x50 [ 462.461544][T10372] ? kasan_save_stack+0x30/0x50 [ 462.461559][T10372] ? kasan_save_track+0x14/0x30 [ 462.461573][T10372] ? __kasan_kmalloc+0xaa/0xb0 [ 462.461590][T10372] ? vfs_coredump+0x21f6/0x54a0 [ 462.461604][T10372] ? get_signal+0x1f2a/0x21e0 [ 462.461615][T10372] ? arch_do_signal_or_restart+0x91/0x7e0 [ 462.461636][T10372] ? 0xffffffffff600000 [ 462.461663][T10372] ? lock_acquire+0x1d1/0x380 [ 462.461676][T10372] ? get_signal+0x1f2a/0x21e0 [ 462.461693][T10372] ? vfs_coredump+0x281a/0x54a0 [ 462.461707][T10372] vfs_coredump+0x281a/0x54a0 [ 462.461727][T10372] ? __pfx_vfs_coredump+0x10/0x10 [ 462.461741][T10372] ? __lock_acquire+0x5c0/0x1f40 [ 462.461758][T10372] ? __lock_acquire+0x5c0/0x1f40 [ 462.461773][T10372] ? lock_acquire+0x1d1/0x380 [ 462.461785][T10372] ? unwind_next_frame+0xbd/0x2090 [ 462.461804][T10372] ? lock_acquire+0x1d1/0x380 [ 462.461821][T10372] ? bpf_ksym_find+0x128/0x1c0 [ 462.461833][T10372] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 462.461850][T10372] ? arch_stack_walk+0xa6/0xf0 [ 462.461870][T10372] ? __sigqueue_free+0xbe/0x2a0 [ 462.461885][T10372] ? stack_trace_save+0x8e/0xc0 [ 462.461897][T10372] ? __pfx_stack_trace_save+0x10/0x10 [ 462.461909][T10372] ? stack_depot_save_flags+0x27/0x9f0 [ 462.461921][T10372] ? __lock_acquire+0x5c0/0x1f40 [ 462.461959][T10372] ? proc_coredump_connector+0x2d3/0x4f0 [ 462.461975][T10372] ? __pfx_proc_coredump_connector+0x10/0x10 [ 462.461993][T10372] ? rcu_is_watching+0x13/0xc0 [ 462.462013][T10372] get_signal+0x1f2a/0x21e0 [ 462.462031][T10372] ? __pfx_get_signal+0x10/0x10 [ 462.462049][T10372] arch_do_signal_or_restart+0x91/0x7e0 [ 462.462067][T10372] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 462.462094][T10372] irqentry_exit+0x402/0xa10 [ 462.462112][T10372] asm_exc_page_fault+0x26/0x30 [ 462.462123][T10372] RIP: 0033:0x7fc187b9e1e1 [ 462.462133][T10372] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 462.462143][T10372] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 462.462153][T10372] RAX: 0000000000000000 RBX: 00007fc187e26090 RCX: 00007fc187b9e1d9 [ 462.462160][T10372] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 462.462167][T10372] RBP: 00007fc187c35888 R08: 0000000000000000 R09: 0000000000000000 [ 462.462174][T10372] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 462.462181][T10372] R13: 00007fc187e26128 R14: 00007fc187e26090 R15: 00007fff5998d108 [ 462.462196][T10372] [ 462.462201][T10372] memory: usage 307200kB, limit 307200kB, failcnt 50875 [ 462.462208][T10372] memory+swap: usage 431676kB, limit 9007199254740988kB, failcnt 0 [ 462.462215][T10372] kmem: usage 3220kB, limit 9007199254740988kB, failcnt 0 [ 462.462221][T10372] Memory cgroup stats for /syz0: [ 462.462346][T10372] cache 310820864 [ 462.462352][T10372] rss 327680 [ 462.462356][T10372] rss_huge 0 [ 462.462360][T10372] shmem 310820864 [ 462.462364][T10372] mapped_file 109670400 [ 462.462368][T10372] dirty 0 [ 462.462372][T10372] writeback 0 [ 462.462376][T10372] workingset_refault_anon 9 [ 462.462381][T10372] workingset_refault_file 448 [ 462.462385][T10372] swap 127463424 [ 462.462389][T10372] swapcached 137687040 [ 462.462393][T10372] pgpgin 510068 [ 462.462397][T10372] pgpgout 434073 [ 462.462401][T10372] pgfault 201633 [ 462.462406][T10372] pgmajfault 15 [ 462.462409][T10372] inactive_anon 129380352 [ 462.462414][T10372] active_anon 181895168 [ 462.462418][T10372] inactive_file 0 [ 462.462422][T10372] active_file 0 [ 462.462426][T10372] unevictable 0 [ 462.462430][T10372] hierarchical_memory_limit 314572800 [ 462.462435][T10372] hierarchical_memsw_limit 9223372036854771712 [ 462.462440][T10372] total_cache 310820864 [ 462.462444][T10372] total_rss 327680 [ 462.462448][T10372] total_rss_huge 0 [ 462.462452][T10372] total_shmem 310820864 [ 462.462457][T10372] total_mapped_file 109670400 [ 462.462461][T10372] total_dirty 0 [ 462.462465][T10372] total_writeback 0 [ 462.462469][T10372] total_workingset_refault_anon 9 [ 462.462474][T10372] total_workingset_refault_file 448 [ 462.462479][T10372] total_swap 127463424 [ 462.462483][T10372] total_swapcached 137687040 [ 462.462487][T10372] total_pgpgin 510068 [ 462.462492][T10372] total_pgpgout 434073 [ 462.462496][T10372] total_pgfault 201633 [ 462.462500][T10372] total_pgmajfault 15 [ 462.462504][T10372] total_inactive_anon 129380352 [ 462.462509][T10372] total_active_anon 181895168 [ 462.462513][T10372] total_inactive_file 0 [ 462.462517][T10372] total_active_file 0 [ 462.462521][T10372] total_unevictable 0 [ 462.462526][T10372] anon_cost 0 [ 462.462530][T10372] file_cost 0 [ 462.462534][T10372] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.816,pid=9770,uid=0 [ 462.462704][T10372] Memory cgroup out of memory: Killed process 9770 (syz.0.816) total-vm:215208kB, anon-rss:1256kB, file-rss:20844kB, shmem-rss:55864kB, UID:0 pgtables:280kB oom_score_adj:1000 [ 578.398468][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 579.148609][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9770/1:b..l P9857/1:b..l [ 579.157650][ C0] rcu: (detected by 0, t=10572 jiffies, g=49517, q=1092 ncpus=2) [ 579.165443][ C0] task:syz.0.835 state:R running task stack:17336 pid:9857 tgid:9857 ppid:8589 task_flags:0x40064c flags:0x00080003 [ 579.178914][ C0] Call Trace: [ 579.182183][ C0] [ 579.185108][ C0] __schedule+0x1259/0x6920 [ 579.189607][ C0] ? ktime_get+0x1a4/0x320 [ 579.194030][ C0] ? __pfx___schedule+0x10/0x10 [ 579.198871][ C0] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 579.204583][ C0] ? rcu_is_watching+0x13/0xc0 [ 579.209349][ C0] preempt_schedule_irq+0x4e/0x90 [ 579.214368][ C0] irqentry_exit+0x205/0xa10 [ 579.218959][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 579.224930][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 579.230127][ C0] Code: 05 cf 2e a6 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 de f6 5d 10 0f 82 c9 02 00 00 8b 35 7e 28 5e 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 6d 2e a6 13 0f 85 09 03 00 00 48 83 c4 [ 579.249724][ C0] RSP: 0018:ffffc9000463f150 EFLAGS: 00000206 [ 579.255779][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 579.263736][ C0] RDX: 0000000000000000 RSI: ffffffff8e3bd310 RDI: ffffffff8c625580 [ 579.271694][ C0] RBP: ffffffff8fdec5a0 R08: 00000000ef9d33e4 R09: 0000000000000007 [ 579.279655][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 579.287613][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 579.295587][ C0] ? find_held_lock+0x2b/0x80 [ 579.300266][ C0] ? rcu_read_unlock+0x17/0x60 [ 579.305024][ C0] percpu_ref_put_many.constprop.0+0x2f/0x150 [ 579.311092][ C0] ? percpu_ref_put_many.constprop.0+0x1b/0x150 [ 579.317344][ C0] __mem_cgroup_uncharge_folios+0x11b/0x1e0 [ 579.323235][ C0] ? __pfx_lru_gen_del_folio.constprop.0+0x10/0x10 [ 579.329749][ C0] ? __pfx___mem_cgroup_uncharge_folios+0x10/0x10 [ 579.336179][ C0] ? find_held_lock+0x2b/0x80 [ 579.340854][ C0] ? folios_put_refs+0x51d/0xaa0 [ 579.345790][ C0] ? folios_put_refs+0x51d/0xaa0 [ 579.350715][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 579.356505][ C0] folios_put_refs+0x578/0xaa0 [ 579.361251][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 579.366515][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 579.372817][ C0] shmem_undo_range+0x5e5/0x1570 [ 579.377736][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 579.383090][ C0] ? lock_acquire+0x1d1/0x380 [ 579.387738][ C0] ? is_bpf_text_address+0x25/0x1a0 [ 579.392925][ C0] shmem_evict_inode+0x3b1/0xca0 [ 579.397841][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 579.403292][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 579.409356][ C0] ? lock_acquire+0x1d1/0x380 [ 579.414028][ C0] ? find_held_lock+0x2b/0x80 [ 579.418704][ C0] ? evict+0x37e/0xad0 [ 579.422770][ C0] ? evict+0x37e/0xad0 [ 579.426834][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 579.432283][ C0] evict+0x3c2/0xad0 [ 579.436170][ C0] ? fsnotify_grab_connector+0x4b/0x290 [ 579.441711][ C0] ? __pfx_evict+0x10/0x10 [ 579.446124][ C0] ? lock_acquire+0x1d1/0x380 [ 579.450801][ C0] ? iput.part.0+0x981/0x1050 [ 579.455478][ C0] iput.part.0+0x989/0x1050 [ 579.459982][ C0] iput+0x35/0x40 [ 579.463607][ C0] dentry_unlink_inode+0x284/0x470 [ 579.468711][ C0] dentry_kill+0x25d/0xc20 [ 579.473130][ C0] dput.part.0+0xd7/0x240 [ 579.477455][ C0] dput+0x1f/0x30 [ 579.481081][ C0] __fput+0x51a/0xb60 [ 579.485070][ C0] task_work_run+0x150/0x240 [ 579.489659][ C0] ? __pfx_task_work_run+0x10/0x10 [ 579.494772][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 579.499970][ C0] do_exit+0x8da/0x2a50 [ 579.504125][ C0] ? __pfx_do_exit+0x10/0x10 [ 579.508708][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 579.514698][ C0] do_group_exit+0xd5/0x2a0 [ 579.519203][ C0] get_signal+0x1ec7/0x21e0 [ 579.523709][ C0] ? __pfx_get_signal+0x10/0x10 [ 579.528563][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 579.534111][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 579.540276][ C0] irqentry_exit+0x402/0xa10 [ 579.544869][ C0] asm_exc_page_fault+0x26/0x30 [ 579.549709][ C0] RIP: 0033:0x7fc187a53c07 [ 579.554119][ C0] RSP: 002b:00007fc188a36160 EFLAGS: 00010206 [ 579.560180][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 579.568141][ C0] RDX: 00007fc188a36180 RSI: 00007fc188a362b0 RDI: 000000000000000b [ 579.576106][ C0] RBP: 00007fc187c35888 R08: 0000000000000000 R09: 0000000000000000 [ 579.584065][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 579.592023][ C0] R13: 00007fc187e26128 R14: 00007fc187e26090 R15: 00007fff5998d108 [ 579.599998][ C0] [ 579.603005][ C0] task:syz.0.816 state:R running task stack:17736 pid:9770 tgid:9770 ppid:8589 task_flags:0x400640 flags:0x0008000b [ 579.616473][ C0] Call Trace: [ 579.619739][ C0] [ 579.622662][ C0] __schedule+0x1259/0x6920 [ 579.627179][ C0] ? __pfx___schedule+0x10/0x10 [ 579.632029][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 579.638095][ C0] preempt_schedule_notrace+0x57/0xd0 [ 579.643464][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 579.649357][ C0] rcu_is_watching+0x90/0xc0 [ 579.653944][ C0] ? rcu_read_unlock+0x17/0x60 [ 579.658696][ C0] lock_release+0x24d/0x310 [ 579.663201][ C0] rcu_read_unlock+0x1c/0x60 [ 579.667778][ C0] charge_memcg+0x7e/0x210 [ 579.672187][ C0] __mem_cgroup_charge+0x2b/0x1c0 [ 579.677206][ C0] shmem_alloc_and_add_folio+0x451/0xd40 [ 579.682840][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 579.688991][ C0] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 579.694966][ C0] shmem_get_folio_gfp+0x75b/0x1980 [ 579.700163][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 579.705788][ C0] ? filemap_map_pages+0x1155/0x2060 [ 579.711094][ C0] shmem_fault+0x1fb/0xa30 [ 579.715505][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 579.720434][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 579.725892][ C0] ? find_held_lock+0x2b/0x80 [ 579.730571][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 579.736024][ C0] __do_fault+0x10b/0x440 [ 579.740349][ C0] do_fault+0xb3f/0x1830 [ 579.744590][ C0] ? __pfx_do_fault+0x10/0x10 [ 579.749262][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 579.754015][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 579.758769][ C0] ? __pte_offset_map+0x179/0x310 [ 579.763793][ C0] __handle_mm_fault+0x150b/0x2f60 [ 579.768901][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 579.774351][ C0] ? pte_offset_map_lock+0x174/0x320 [ 579.779633][ C0] ? find_held_lock+0x2b/0x80 [ 579.784309][ C0] ? find_held_lock+0x2b/0x80 [ 579.788986][ C0] ? follow_page_pte+0x536/0x1050 [ 579.794022][ C0] handle_mm_fault+0x363/0xa20 [ 579.798781][ C0] __get_user_pages+0x8ae/0x2c30 [ 579.803730][ C0] ? lock_acquire+0x1d1/0x380 [ 579.808400][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 579.813767][ C0] ? __pfx___might_resched+0x10/0x10 [ 579.819049][ C0] get_dump_page+0x27e/0x3d0 [ 579.823636][ C0] ? __pfx_get_dump_page+0x10/0x10 [ 579.828742][ C0] ? dump_user_range+0x65e/0xad0 [ 579.833672][ C0] ? copy_mc_enhanced_fast_string+0x6/0xf [ 579.839393][ C0] dump_user_range+0x18d/0xad0 [ 579.844158][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 579.849445][ C0] ? __pfx_writenote+0x10/0x10 [ 579.854208][ C0] ? elf_core_dump+0x1f25/0x3d20 [ 579.859149][ C0] elf_core_dump+0x2d68/0x3d20 [ 579.863921][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 579.869028][ C0] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 579.874914][ C0] ? rcu_is_watching+0x13/0xc0 [ 579.879680][ C0] ? __schedule+0x126b/0x6920 [ 579.884356][ C0] ? 0xffffffffff600000 [ 579.888529][ C0] ? lock_acquire+0x1d1/0x380 [ 579.893200][ C0] ? get_signal+0x1f2a/0x21e0 [ 579.897878][ C0] ? vfs_coredump+0x281a/0x54a0 [ 579.902725][ C0] vfs_coredump+0x281a/0x54a0 [ 579.907405][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 579.912426][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 579.917361][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 579.922293][ C0] ? lock_acquire+0x1d1/0x380 [ 579.926960][ C0] ? unwind_next_frame+0xbd/0x2090 [ 579.932081][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 579.936845][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 579.941778][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 579.946974][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 579.952783][ C0] ? rcu_is_watching+0x13/0xc0 [ 579.957560][ C0] ? trace_hrtimer_start+0x77/0x220 [ 579.962772][ C0] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 579.969029][ C0] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 579.974921][ C0] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 579.980811][ C0] ? rcu_is_watching+0x13/0xc0 [ 579.985574][ C0] ? trace_sched_exit_tp+0x120/0x160 [ 579.990869][ C0] ? __schedule+0x126b/0x6920 [ 579.995564][ C0] ? __pfx___schedule+0x10/0x10 [ 580.000415][ C0] ? proc_coredump_connector+0x2d3/0x4f0 [ 580.006050][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 580.012043][ C0] get_signal+0x1f2a/0x21e0 [ 580.016554][ C0] ? __pfx_get_signal+0x10/0x10 [ 580.021408][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 580.026953][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 580.033120][ C0] irqentry_exit+0x402/0xa10 [ 580.037713][ C0] asm_exc_page_fault+0x26/0x30 [ 580.042555][ C0] RIP: 0033:0x7fc187a53c07 [ 580.046962][ C0] RSP: 002b:00007fc188a36160 EFLAGS: 00010206 [ 580.053024][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 580.060998][ C0] RDX: 00007fc188a36180 RSI: 00007fc188a362b0 RDI: 000000000000000b [ 580.068960][ C0] RBP: 00007fc187c35888 R08: 0000000000000000 R09: 0000000000000000 [ 580.076929][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 580.084894][ C0] R13: 00007fc187e26128 R14: 00007fc187e26090 R15: 00007fff5998d108 [ 580.092877][ C0] [ 580.095888][ C0] rcu: rcu_preempt kthread starved for 10658 jiffies! g49517 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 580.106890][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 580.116844][ C0] rcu: RCU grace-period kthread stack dump: [ 580.122719][ C0] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 580.136203][ C0] Call Trace: [ 580.139468][ C0] [ 580.142391][ C0] __schedule+0x1259/0x6920 [ 580.146898][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 580.151846][ C0] ? __pfx___schedule+0x10/0x10 [ 580.156691][ C0] ? find_held_lock+0x2b/0x80 [ 580.161368][ C0] ? schedule+0x225/0x2c0 [ 580.165695][ C0] schedule+0xdd/0x2c0 [ 580.169760][ C0] schedule_timeout+0x127/0x280 [ 580.174604][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 580.179966][ C0] ? __pfx_process_timeout+0x10/0x10 [ 580.185245][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 580.191051][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 580.196505][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 580.201263][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 580.206545][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 580.211476][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 580.216671][ C0] rcu_gp_kthread+0x17a/0x220 [ 580.221338][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 580.226529][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 580.232332][ C0] ? __kthread_parkme+0x18f/0x230 [ 580.237355][ C0] ? kthread+0x13a/0x450 [ 580.241593][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 580.246782][ C0] kthread+0x373/0x450 [ 580.250846][ C0] ? __pfx_kthread+0x10/0x10 [ 580.255432][ C0] ret_from_fork+0x730/0xd60 [ 580.260017][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 580.265120][ C0] ? __switch_to+0x800/0x10f0 [ 580.269793][ C0] ? __pfx_kthread+0x10/0x10 [ 580.274379][ C0] ret_from_fork_asm+0x1a/0x30 [ 580.279148][ C0] [ 580.282154][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 580.288465][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.298953][ C0] Tainted: [L]=SOFTLOCKUP [ 580.303260][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 580.313300][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 580.318931][ C0] Code: a7 96 02 e9 53 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 48 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 580.338530][ C0] RSP: 0000:ffffffff8fa07cf0 EFLAGS: 00000246 [ 580.344598][ C0] RAX: 0000000001147303 RBX: ffffffff8fa91580 RCX: ffffffff8bd47235 [ 580.352562][ C0] RDX: 0000000000000001 RSI: ffffffff8e3e34cb RDI: ffffffff8c625580 [ 580.360526][ C0] RBP: fffffbfff1f522b0 R08: 0000000000000001 R09: ffffed10170467bd [ 580.368496][ C0] R10: ffff8880b8233deb R11: 0000000000000001 R12: 0000000000000000 [ 580.376474][ C0] R13: 0000000000000000 R14: 1ffffffff1f40fa2 R15: dffffc0000000000 [ 580.384444][ C0] FS: 0000000000000000(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 580.393368][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 580.399943][ C0] CR2: 000000110c453b68 CR3: 00000000781bd000 CR4: 00000000003526f0 [ 580.407916][ C0] Call Trace: [ 580.411209][ C0] [ 580.414139][ C0] default_idle+0x9/0x10 [ 580.418380][ C0] default_idle_call+0x6c/0xb0 [ 580.423132][ C0] do_idle+0x3ae/0x5b0 [ 580.427191][ C0] ? __pfx_do_idle+0x10/0x10 [ 580.431767][ C0] cpu_startup_entry+0x4f/0x60 [ 580.436505][ C0] rest_init+0x2d3/0x2e0 [ 580.440717][ C0] ? __pfx_rest_init+0x10/0x10 [ 580.445453][ C0] ? __pfx_acpi_read_bit_register+0x10/0x10 [ 580.451316][ C0] ? lock_acquire+0x1d1/0x380 [ 580.455970][ C0] ? __pfx_kernel_init+0x10/0x10 [ 580.460888][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 580.466179][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 580.471456][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 580.476924][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 580.482470][ C0] start_kernel+0x48e/0x490 [ 580.486969][ C0] x86_64_start_reservations+0x24/0x30 [ 580.492424][ C0] x86_64_start_kernel+0x12b/0x130 [ 580.497532][ C0] common_startup_64+0x13e/0x158 [ 580.502486][ C0] [ 582.685458][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 582.685504][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 582.688371][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 582.688415][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 582.897768][ T33] oom_reaper: reaped process 9770 (syz.0.816), now anon-rss:0kB, file-rss:20520kB, shmem-rss:47176kB [ 583.350232][ T31] audit: type=1400 audit(1791735968.479:908): avc: denied { write } for pid=5586 comm="syz-executor" path="pipe:[910]" dev="pipefs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to send rpc fd=3 want=129864 sent=0 n=-1 (errno 32: Broken pipe) [ 585.419845][ T1139] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.775386][ T7150] syz_tun (unregistering): left allmulticast mode [ 585.960059][ T1139] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.139963][ T1139] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.353101][ T1139] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.839291][ T1139] bridge_slave_1: left allmulticast mode [ 586.839309][ T1139] bridge_slave_1: left promiscuous mode [ 586.839415][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.878393][ T1139] bridge_slave_0: left allmulticast mode [ 586.878416][ T1139] bridge_slave_0: left promiscuous mode [ 586.878568][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.327701][ T31] audit: type=1400 audit(1791735972.151:909): avc: denied { write } for pid=10390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.406477][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.436483][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.451610][ T1139] bond0 (unregistering): Released all slaves [ 587.538089][ T31] audit: type=1400 audit(1791735972.354:910): avc: denied { write } for pid=10401 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.629427][ T5263] 8021q: adding VLAN 0 to HW filter on device eth17 [ 587.892961][ T1139] hsr_slave_0: left promiscuous mode [ 587.895055][ T1139] hsr_slave_1: left promiscuous mode [ 587.895745][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.895763][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.901188][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.901204][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.961330][ T1139] veth1_macvtap: left promiscuous mode [ 587.961380][ T1139] veth0_macvtap: left promiscuous mode [ 587.961462][ T1139] veth1_vlan: left promiscuous mode [ 587.961513][ T1139] veth0_vlan: left promiscuous mode [ 588.050605][ T31] audit: type=1400 audit(1791735972.825:911): avc: denied { write } for pid=10404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.168992][ T31] audit: type=1400 audit(1791735972.935:912): avc: denied { write } for pid=10415 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.427006][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 588.447252][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 588.590869][ T5263] 8021q: adding VLAN 0 to HW filter on device eth18 [ 588.864636][ T1139] IPVS: stop unused estimator thread 0... [ 588.897977][ T31] audit: type=1400 audit(1791735973.600:913): avc: denied { write } for pid=10418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.984521][ T31] audit: type=1400 audit(1791735973.683:914): avc: denied { write } for pid=10429 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 589.029541][ T1139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.045446][ T5263] 8021q: adding VLAN 0 to HW filter on device eth19