last executing test programs: 15.248200616s ago: executing program 2 (id=2373): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) dup3(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000010cc0), 0xffffffffffffffff) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[], 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$inet(r1, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b5950000", @ANYRES32, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) dup3(r2, r1, 0x0) 14.76591892s ago: executing program 1 (id=2376): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0xbc, 0x30, 0x1, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_ct={0x5c, 0x2, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "eda5c91eb723703eb487479dd87c7d59"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x9, 0x1, 0xc45, 0x1012, 0xc7, 0x2, 0x7, 'syz0\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) r7 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b37, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 10.954140224s ago: executing program 2 (id=2384): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r5, 0x0, 0xfffffffffffffff9}, 0x18) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@initdev, @in6=@empty}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000091) 10.66682502s ago: executing program 3 (id=2386): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x2c, 0x2000000, @void}, 0x10) 10.430067578s ago: executing program 3 (id=2387): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff56}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e20, @remote}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0xc, 0x6, 0xa4}) 10.425588389s ago: executing program 3 (id=2388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) setns(r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mbind(&(0x7f000012c000/0x2000)=nil, 0x2000, 0x3, 0x0, 0x86, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = io_uring_setup(0x1345, &(0x7f0000000580)={0x0, 0xa7c6, 0x2, 0x2, 0x379}) prctl$PR_SET_THP_DISABLE(0x42, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000600), 0x1) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 9.936078382s ago: executing program 2 (id=2389): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) msgsnd(0x0, 0xfffffffffffffffc, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', 0x1, 0x4000, r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000030000000000000000000002500feff00000000ff00000000000000"], 0x0}, 0x94) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r5}, &(0x7f0000000180), &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r5}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 9.370406144s ago: executing program 1 (id=2390): sendmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x2f, 0x0, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x73a, 0x0, 0x1, 0x1001, 0x8004, 0xffff, 0xffff, 0xffffffa8, 0x6, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x10000008, 0x5, 0x3, 0x0, 0x1, 0x8049]}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f0000000040)={0x11, 0xe, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xa) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, 0x0) r8 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r8, 0xab00, r9) ioctl$NBD_DO_IT(r8, 0xab03) ioctl$NBD_CLEAR_SOCK(r8, 0xab04) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r7, 0x7b2, &(0x7f0000001680)={0x0, 0x1}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @remote}, &(0x7f0000000200)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getqdisc={0x30, 0x26, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xf, 0xfff2}, {0x4, 0xa}, {0x3, 0x8}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="7a0af8ff7525732cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000f700000000b2595285fa97ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5956fc4a33ca263e2b5d47b2b00000000b1a297cfddd73f30f2382f6c2d3ffdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000010000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e3841bef895c5a637b0bf2eac3cb07b74a72291a1a2b523dd81b6651b1ee29e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c92cdfbea882b0b18914781ceb10814cf4ee23ddb79fff5eb156e0a000000000000f2bd164a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8fdf3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c980000cfb215af2c1a3c22243cce23b00000a857d61b0d66c3f6da8aed31027c33204ea0fa0620111920d3f24980e9995a510bd87b06440a0a26130098"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x20000, 0x0, 0x55, 0x0, &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x50) add_key$user(&(0x7f0000006400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 7.503919432s ago: executing program 4 (id=2393): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x101000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x9, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0xc8c9, 0x4002, 0x5e51, 0xfffffffffffffffe, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x2, 0x0, 0x5, 0x5}, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xe042, 0x0) (fail_nth: 4) 6.691244039s ago: executing program 2 (id=2395): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000000c726956cd1bce16d985fcb52f2743055a112ffb77850d8adca3a2c17b4ea0c0ed4a3f801b9b012c1ecb03ce4aa5669678e01ed487008000000b8b3057f0199156a1e98defdad5adc13e718cc33fd733daca041a339e577ffe6d3b8dd667800000000", @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x34, 0x0, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x89ea}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x89}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x84) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) bind$alg(r7, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(rfc4309(aegis128-generic))\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 6.33805821s ago: executing program 1 (id=2397): socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000540), 0x6700, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000540), 0x6700, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x403, 0xfffffffffffffffe, 0xfffffffc, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x403, 0xfffffffffffffffe, 0xfffffffc, 0xffffffff}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x4002) socket$inet6(0xa, 0x80002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) close(r3) (async) close(r3) syz_open_dev$MSR(0x0, 0x0, 0x0) 6.189430805s ago: executing program 4 (id=2399): syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x73, 0x0, @dev, @local}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x73, 0x0, @dev, @local}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x34]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000005e43bb387ffa6532000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) 5.718996925s ago: executing program 4 (id=2400): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x43c502, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setreuid(0x0, 0xee00) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000180000000", @ANYRES32, @ANYBLOB="0000eb810000000000ffffffffff000000000000", @ANYRES32], 0x50) 4.845108822s ago: executing program 4 (id=2402): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x43c502, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setreuid(0x0, 0xee00) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000180000000", @ANYRES32, @ANYBLOB="0000eb810000000000ffffffffff000000000000", @ANYRES32], 0x50) 4.516914904s ago: executing program 0 (id=2404): setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) (fail_nth: 4) 4.444824888s ago: executing program 1 (id=2405): sendmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x2f, 0x0, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x73a, 0x0, 0x1, 0x1001, 0x8004, 0xffff, 0xffff, 0xffffffa8, 0x6, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x10000008, 0x5, 0x3, 0x0, 0x1, 0x8049]}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f0000000040)={0x11, 0xe, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xa) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, 0x0) r8 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r8, 0xab00, r9) ioctl$NBD_DO_IT(r8, 0xab03) ioctl$NBD_CLEAR_SOCK(r8, 0xab04) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r7, 0x7b2, &(0x7f0000001680)={0x0, 0x1}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @remote}, &(0x7f0000000200)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getqdisc={0x30, 0x26, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xf, 0xfff2}, {0x4, 0xa}, {0x3, 0x8}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x20000, 0x0, 0x55, 0x0, &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x50) add_key$user(&(0x7f0000006400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 4.298406668s ago: executing program 0 (id=2406): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0xbe}, 0x18) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000726) 3.799423194s ago: executing program 0 (id=2407): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.637060501s ago: executing program 4 (id=2408): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b000100627269646765000048000280050019"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.387435863s ago: executing program 0 (id=2409): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) fanotify_init(0x16, 0x0) r4 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x1) r5 = dup(r4) execveat(r5, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) (fail_nth: 4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0xa, 0xffffffff, 0x40, 0x43053, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x800, 0x2}, 0x50) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2.851069849s ago: executing program 1 (id=2410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="f43df5093fc38ff8a54d508f5ad89d22daae2c8ac407d87d949ded6cda15921c58f5fa6b754dcce7ce", 0x29}, {&(0x7f0000000380)="d42c5861115c23078a8db418a44507b19377c8e1203eda233b2d159fb9d782e169028328beb6de73ec9f24baebb2d93b02960f13463ec804f6b6bca6dc29804b733d76d9ba92f1efc625ae", 0x4b}], 0x2, &(0x7f0000000a00)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @hopopts_2292={{0xea0, 0x29, 0x36, {0x87, 0x1d0, '\x00', [@ra={0x5, 0x2, 0xf5fa}, @generic={0x1, 0xe00, "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"}, @generic={0xfa, 0x6b, "fe08f70648cfc1cf54aad75352f4fe7d3fe25d95d4a232a8e2c453df46e5361528d32265bbe891d99a0184a203fa6a99cb352a7a77126140229c8f515ef3b021217bf1251887e36032cbacdcdd9cd21681a8a1553065e8564158f08adc7a8acf285ca86e871e92ae287fca"}, @hao={0xc9, 0x10, @mcast2}]}}}, @dstopts={{0x80, 0x29, 0x37, {0x2b, 0xc, '\x00', [@ra={0x5, 0x2, 0x8}, @generic={0xca, 0x39, "190ceec227b604d34c8ddd4b52f6274e3d26bad54ebdfe241cc8f97b1bb49106698c96bfa20c5a8dc574a19b8c06e81d006fe91ce19397842b"}, @jumbo={0xc2, 0x4, 0xffffff7f}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0xc0}, @jumbo={0xc2, 0x4, 0x7}]}}}, @dstopts={{0x78, 0x29, 0x37, {0x88, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x10}, @pad1, @calipso={0x7, 0x48, {0x0, 0x10, 0x5e, 0x4c3, [0x9d6, 0x10000, 0x5, 0x8, 0xdf7, 0x7, 0x1ff, 0x4]}}, @pad1]}}}, @dstopts_2292={{0xd0, 0x29, 0x4, {0x4, 0x16, '\x00', [@pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x27}}, @generic={0x5, 0x8d, "488e9843d783610ddd59a0b74ee806269f6462b79fe38afd54625b216ffae5f084918d6c00afa36324fb68fc6d5cdb886b405131bae50bf250ff1160966d41853b1667e35b25f51565e1e64dda27267f121644419905a1465f25b48e28d85345bcdf4a04028bc150332933d7d534030d1248f7785ea7fd2b5951e261ca25002e045a0c12a5a2a1cac0a223fe06"}, @pad1, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0xfffffff2}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7fffffff}}], 0x10a8}}, {{&(0x7f00000002c0)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c, &(0x7f0000000400)}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002d00)="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", 0xe00}], 0x1}}], 0x3, 0x20004804) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000540)=@framed={{}, [@map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f00000005c0)='syzkaller\x00', 0x7}, 0x94) 2.678108357s ago: executing program 0 (id=2411): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0xbc, 0x30, 0x1, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_ct={0x5c, 0x2, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "eda5c91eb723703eb487479dd87c7d59"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x9, 0x1, 0xc45, 0x1012, 0xc7, 0x2, 0x7, 'syz0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b37, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.96317375s ago: executing program 1 (id=2412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e01000008240201010210"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x40, r2, 0xe096044a3fc9e6f1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f5, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000004c00)=""/102392, 0x18ff8) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.861035033s ago: executing program 3 (id=2413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 1.795860591s ago: executing program 3 (id=2414): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141182, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000540)='%pS \x00'}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000006c0)={&(0x7f0000000000), &(0x7f0000000cc0)=""/4096, &(0x7f00000002c0)="145054f1745e729a89e472db38ca3944106c61a0f09f24dc14aa84534224b2ccc80c97c1b992f3424873a4eee35d7618b05579ff3a77950ac8c06f6e23de2135e5afdd22b39715a7ac8a22ef1acf6c8b5798368d3b84e1312023a67eee2fa12a23366f9a2430974f3e99413fc3f1eeebbbdaec77d1a2cd86045ec4c9f78e2cece4af41be52028fdd0d7ff0603be1e15fedb3a2530f58f47ccd96052698883bfb126d032dccb5ddd952df76242d04d44af73357819f09926529", &(0x7f0000000600), 0x7, r3}, 0x38) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xf, 0xfffffe0000000001, 0xfa15, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) lseek(r5, 0x1, 0x0) accept4(r4, 0x0, 0x0, 0x800) syz_open_dev$video4linux(&(0x7f0000000c80), 0x200007, 0x8482) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$packet(0x11, 0x2, 0x300) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xd40, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000fffffbff00000000000080a0affd2f7b"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r8 = dup3(r6, r7, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r8) ioctl$PPPIOCSACTIVE(r0, 0x40087446, 0x0) 712.195489ms ago: executing program 4 (id=2415): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) socket$kcm(0x2a, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@any, 0xffffffff}, 0x1, 0x0, 0x1000}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x1, 0x6, 0x80000001}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r5, r4, 0x0, 0x20000023893) 427.18441ms ago: executing program 2 (id=2416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x178, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HOOK={0x12c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'pimreg\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x28d8, 0xc, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x298, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xbbba}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}, {0x278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x5c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x41, 0x1, "f0e98176066d8f3a0ecac7fe9c6cf35378f5ab7a45f05d7a2444684d4e326bc4a54eab314d152cae63cae1a30cfe209f76f89c44de92987bf2cf287754"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_KEY_END={0x218, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xfc, 0x1, "9ceed2cee2fee7cb2ea71f52274b65a7965ccef03b9443421bbf6210b6013ea8cd157094a82e59ee053c6321da49c457d6aa8945bb16a57f9186ee4e414dacf2b00ed72f6e5372e19079eec4ed83e07c694f7dc2b97c591c9a724561f8dc34c9db59dfda55ea98fb4765802ac6867ad8ac9c2b88231980902ce80656ca82a6830a61561371376df80f8e4f5dc7c557a414b445f3bf0d22275f1dfa9dba0184535bd3c47aa4183d96d884e90ad574e14607d1210adb0d41d754e0b63ee8d26ba1a8c32ffb5ad03a582762240abb99d5cae50ed9671807a20a2929e16e1315ebf4eea0e479f59551656fcdeaf5a27f41c38128928747732f93"}, @NFTA_DATA_VALUE={0x35, 0x1, "988e00218277a3a0ee59749b77fdaf93fdc892805686c1c0b0d02e74f2c3b2475d70634ec3ef330f4edf158213a4de3a40"}, @NFTA_DATA_VALUE={0x5a, 0x1, "dda604f79d5e0cdb8be2c817a8d2b89bb14a0d48fa6d535409cfb14c29460880c534cb64d7c9f9075fe2f147e30042282a096354c8539f2210b957d0486e1a8766c5b1214d25e63d718843c9e6ea5e24eacfcb767986"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x25dc, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x400}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @log={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x18a}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc}]}}}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, {0x660, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x16c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xed, 0x1, "45875d66f31f5993816874c284e8adfed7650be8a6b6dc70c06f03b74ff0e8fdcda1dd88ce7961ce30c43a290a4b304299db835eb7f12e05a09b84b2448303e3e8a8b25c84a1e4a7b1608b3d73bcb14c0f36a050cb96dd1b8ea80f582c7e77bdd030d0fe95196bd2e4f1926b72a2c6b4d7ed3418c2e48831f79e0740c43a5b03a22fa9b4893b25ecf781f942c74f91532bc5831c6f2479436198bb3adc5d33571c94ebf6a5b9e9b838bfd66547dc38a1dd6ac71205074b254b83a7365cb744e1121319e7d333f5efe54c684c92498b12cadf07c10bc658bfd7b25bc0b81cd125aa28eececf98c5ecd0"}]}, @NFTA_SET_ELEM_DATA={0x3a4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb0, 0x1, "35fd3daa304df30717067eae95e75be2e161a4f28032698e48522f3b2c0e6e47c41709295ef7e1fbcbd1d1c278c54e9c4d39e609088ccf3f94482f1f5a42b436ad4055f2106346b142139a675c80da6ca1ef07030981867bdfb2f0dea42312ae9c97921f336d8fa869cb0f0df5a1c8e6f5ce5e3c90f69b387cd3a704e6130a89514223cfef135e249a30e74764712a802f8aee4a31c0d7b6cfc7dcfce4dda96f8bef1532977eb6cd21a7bc1f"}, @NFTA_DATA_VALUE={0x54, 0x1, "5afbf095bb7d18c4637e1941c3ec5ad693b121c2c2651610bf373411b3b604e599795fa1523f121e97f16234150d999097113ec08789ac4de7507363d7889a5fcf7bde9990095f1270d4914a47e6f7d6"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x9e, 0x1, "1b619aee39e1738ab15ca9c422caad88008c669c053ef9c51947f46af521ebbf063589494e0c4f1dc3db291f3651b27ad147b4aacebe181f72e29c39939b3566018906cef62b1387a82f149016c9e673008a6f9cd23e1eac93adeb2864d174a6c49cd803b21053942a3d6970ca728123e8cfe2725d908fe5b5731b3ad2abc4a496392e106f97c79222bc2989d3f4cc55d09d6157066be8a400ed"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x35, 0x1, "b52e78896184559a794b4eeafb6cee1a284525ba4a22198a1ed6a1dc6d6146f9b825e57114c6954875d577cf5bfe62f20f"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xde, 0x1, "db7f7d0a32cf01fd5470d1796099106c3153ce2ab14fe7b645d6c5a28ecb3422cb25f599e0ea6d1eb6932fb542fcdf3f3869bba3946746b973909c2a96988b01d7c865ef232a0950e9590089d74851ef1db2de56690617c97a738e5ef1140e490524f6955dd160abb7a897061093c5cf17ec31ca1184cd2c699bc33392b0fbd88bbf525a3bce87af393003faac905780b79b7f1c47fcad605b838b030059e9ccae67970a6afe81ad2a77cd30c2d852b6efd027366ad9bf1d5ec632ffb940536918c0f4b986f405069c9b77f132ca90a2dddcac96d61ae8c10ead"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1b}]}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x50, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x64, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x51}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xf9}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xb4}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x6b}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}, {0x464, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1e0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd3, 0x1, "36d740b37e6a64cd5eba53b9ce96272cacd0e7ce34049d47e852c5a77244674904d5172a29293017d88235d802c4e227bd2d71f159a601f06828d7d4cfd159913bc4f2ffcef3cc1d73b6101a457ae19d229af80436353bf27383bf41fbb1210b265d9563dcb316ec758873a86d3283098d02331ca1db9610111d020a7f2aadaa8cdd9c0326a689135521741691ffc09ccd32397134a7f1bbfc0cff5db732b06127f77b39ffe1fab5837e7944be81c356487e9bc86b5b50d0e58f132ce3e43638e00040580b277f7ca3106840e50137"}, @NFTA_DATA_VALUE={0x4e, 0x1, "551315e24ab96348392581cf5efd5cf3e7b08c33c96fb59d179201c820987c7ddf6b9cc13a331f144b5bd245d93896b52993807ecdcc7943653cc3ad1d53e11471dba204b4fe97ecbb7a"}, @NFTA_DATA_VALUE={0xb6, 0x1, "c70898fdb70e7347bcf66788946797361d319afd42e34d297281f6f3aee48765bedd5d2d26a82bbfc65facf7a898e1905a1e2eec00ce4b47280d59e1cf1823c7fea083854bf40653d4e47dc2b6765262a0be6e71fea28146be2a0eecb328b7536c4e2507fb7eb5ac7d37bc598fcd5097da5e9c8f081f34849e8631fe3add6ed55eb4855714fe60946a58841f4282403239792bbf25d4e14d5480689851122e5a5776d8761ead9322e4d80dc4516116cb324b"}]}, @NFTA_SET_ELEM_DATA={0x1c0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8c, 0x1, "5e257647ffc5d8707a3cda795d225078065d9e0deb13be7bda901d70d40d9d38a1271ee62def45ee9b692bd55e2b50c692a92661a66c7ee5f3b15254fa62607c143fdc695f6cd573f63020d213e7365835be7c624e3b32996c65f79b2fbeb6886344a0433b296eb373883ac3315ce3e028a6087d1efa1a4327d54048969583375c174cf4287ce93f"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x4a, 0x1, "29e5e73c5da5825d555cb64edfd04e87050f72804b8f9b4463f7d1539f2365af663ca8cbf63e13a3115128091755f912b6767fe2b4a65ef34826eeb432ce4213d05e0e6acb6d"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x63, 0x1, "59b5b20765c237dd70c9464c376f33ea34d989471414dc40333fa0a802d9eef864d27e15494f9c591c422f4bc41c3443400c76460bea2b936254634fe3df2d24c4402b1d259dbaa6fb47c9ab3d7d513e35f046ec8569f4d2b408caea4910cb"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY={0x98, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x92, 0x1, "d73f694654e24534b429a52cee8205a24e097c899cf8de4e04e1240be0fc63a1d388d3959677361b77ded09bfd9dc8e7bc6a3b7c0b43b2d719718827962d30e7d7a5575cda1a8ba272501530fd443fe4be3a244222a77dbb7217bdad2db6dad4f40018c81fd99620e50a403bb28addf70a8f15e6b2071b182c1ff66292e4d121eb6a8dbcc01d77e41905124395d6"}]}, @NFTA_SET_ELEM_USERDATA={0x11, 0x6, 0x1, 0x0, "0708ffb2b697ed56b314013ddf"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xd1}]}, {0x1748, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x11d000000000}, @NFTA_SET_ELEM_KEY={0x130, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "ed93495e6e9e675a64f8462d30"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xcc, 0x1, "c49d3f76087b83bb980fbf36de6cc0c716f6dae7936ca12718f8776b441072c160eeb3636b30ddab4ab5d65400d82fe100125af9d79b6a4d5c2fc4492403babfc6ed875f35cdce05cd4ad7ab7c363f782f79141fdf7b238abdcdd8e276e9e61531416a58cc6b2266656964ebdf871316f9839ab84aa83ec4fcfa3de6251ba86715e0167d10654e53c2b6daba670d348354f64f5aec4474cd7c3838406955765259cbe143a9f67266ca4b181247f1af6efaff2c66a778b563a92cde4ba1b42adc52724bcc803ca659"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_USERDATA={0x5f, 0x6, 0x1, 0x0, "b65c153f9929664479a86ba990882f81623a3b944c826f0c51d1ecfbffd1e4bd77454e416e2372318df8917e647a7e067d59606b72ee765d6595421dc08562a9944b9aecf767234d26aae6582949fb7866823ecb4e894527ea061b"}, @NFTA_SET_ELEM_KEY={0x320, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe4, 0x1, "a189ab86935d42852eb731c86e247c33c414c25dc0bb3b8e72551bc807ee5c59e3d79c8cc1822661a34b59e13ebd6560370af4f85de13990586b0f761a1df4900f98414c4b7d4ab676fab2e3fd94cf6977aa6abd966447ad9d73cc623b03b0d42d039e9cda7f11e5d1787f30e9678b9a9eba1d9fbfad6f8e146c295904a15968e3fe024a8f151e7bf0918ab17e9437fdcb64d8989fddc2da8cf1f1d7ab95a66945e080ce3d037c1d4734b2beda40d78467520a5b99414dff50cd3e9dafdc7ac6291f49a76fa9d5d77a22975b4ee45005983018d6ad7c5e9d558a761960e03948"}, @NFTA_DATA_VALUE={0x102, 0x1, "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"}, @NFTA_DATA_VALUE={0xea, 0x1, "09db94dee7b7a29ca0d475b75b897911f9cd1762294e97341c360d73fb1dce351bc97d12679efd3272cff70996aef362ba914e6ba56e61d5eb2a8a86f50167b7c3a542a116480928e21e427fac1899047eb14f4a6063326b9e7147cf58e30f7a63b748c05e773957c3e96c6e9b5cb1432c60e8311c25e3a5fa177f17e4c2fb6ad9212007701ce02613514b15cd3eb2a97df8cb24e4394a27947e88d170a7b135021229dabd6b12c7d058682dc55833696dc9f0440717bbf5495cc785f4fa142dfff4c5f99d6f8b946747de94775788193afa74c4261c02b1f0ae8b3956b90b01b732d6bd85ac"}]}, @NFTA_SET_ELEM_USERDATA={0x5b, 0x6, 0x1, 0x0, "167c717f4741db03b043ab485ba6b732189b2b64306d2d237e1164bcfb3add86beb5703b482c98226addd7f1d4a3be2bcfd40eeee690a1a28fb6785b734cea0cd2cba6f8d891be47d9e279cde011d08abd09759e703d9e"}, @NFTA_SET_ELEM_DATA={0x1214, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x87, 0x1, "274a5f1b6d607471fdeb7cff32b29b5f98971cf7454e05739e018b3f161dbb5cc92d0cc62a8b311dc501251c244086aaf1050b79f70285cb37b123c0b79abd8f9f31dade6d2b900bc558834385108750bce991e3a566f379a2fa3eec4deb812f62d7c3af6342cf23455a16dd9dcbdb1ed148139cf7d2075f3a5b806b2d924ec083562a"}, @NFTA_DATA_VALUE={0x1004, 0x1, "c70d334514b7ff221b0962dcf8aa04d5d9f772de03c22ff48978ee22e93c1766bb240f01a6b955d5b93195b965026e338cee1c4024d977efdd8cee74ade15a572e30b0a81f611b5bc1ddc2792c8e0e1e3a84918abd90f0dd4e4530ed70307f0e2c8988ebdbe0cfbfc1340e52b5de10dbeafb875c4ff478deb14eb5194a5d2f2280f5933e8726d86637c4c3d3b621d2e837423fe99f2037bc49db48582d80229881a6855696359f1ec598e5e74b92a239a627386e6f5554e8a4ae8972c226690582d8b83f3f6b2d365067ddf096054e76d81f539bee3d4da8ef53feac95abfa905eef8848147175297604c3a4293c6d92d0ee7d257c60527559624d966c972e7b3d0d7119b9cca47a8f58e13a72be45c8c5c629859608479a56ed1fde4d77f146b0dca7b58a4c1ed6acbc918a4d4e6c8493dea2216662b490b33ff04b29a04a9bcbae59fa1815ae1bae095bc3839cc7ebf8d0c066217ad46745ceaf8d1f24679fdc815e73038a7002aed80339620ea0bdada6352192c4041a4ba00532d832c8625856aaa978b558f3d357e4344a54f42bb6f207815ec519800de6733e7a365d2406f207c643ce7b1a32a5fd0d32ce4cd53543f7df30548f1d69710b23e1de7476dee434ad3a356d9d200baa9c408174f3fa4f190ebec29377966cd43d65070339f3d75206364dd6e5c4e7984db20949fb1b9e06a603703ba3353d2f4ed546026eb7ed12beab27525881d359501b38cfdf9ffec40bd6486cd6556dc50dcb7d849e4c084b3a0ce6c4302b3a9285d2c61aeb849c299236b9aef59a5b20d45a7093c69b717c6efc8434fda34f37c35288dba51c37dcec49d8990545b6a45d839f188ff82c16d41e209def71a8aaa83724f940964e606136337ef97b9cfbec7579755ce1bda7dcdae79abd4ce1596b34476554507596ce83f0a5357fc1cc9215a5ac235b679b26e27921db5dd05f9fcc885597a9977cc45733acca6062926d3eb1dd795ebe2ed3c0ff13515278c3c001f1b95e71654083a1b2141eebd525f5f970a4f5e88e8ea1349729ca3c59408b5f38ef3b7b32c1f1276e0a1fc00d3fc6cdd5a2cba2a1f49cdba38f003c1b257ae17880a895f05b8213ff0ff6060a451c76853d51b8573d0477047fbd3d325e5c1319f45cbda0a43a78598eb48429e62731cc5778db0ce53e04ace325fa5dff4910c70364b51896f9ce4ffa8e60f1e5a45b800319b28d5095b8ee53285d26f1161bc968de5522b1acdc65baf3dd9086f71f296aaa1d3d03eaae54092ab50c27483be2fe093a83de0d3e8f774dfd3d2c820c7fe23103a96fafe4320b533edb854f2edd90a5f41ccebca1b6e167a90d5e7fc334273219070b804fc7355ba2639bf57cdf6e8a2094dfc098c41a5ef158ab9cf2c95412b51c0fb938faa6e776d00a7049ee9b5be7ef0fec664e1737b1af97bac2bc5df62d83f904c0a3893cc5bd1a71941aaad70e998125f06ac0f971473e075855ee5e8dc99d95b8819d2f02b0a6869deb7838a1d165fcc70a7c15291270c4641652e7330fa6da884e3f539b1d7699317ac87316e2b2e8af3f50186229acd58f1335ba52c8d6422021a77c61ba4101dc2a60a317779927de25c4a8962334bc93a067b5e6a15cbe93a096e62d6f1659be3a15ee4746d03aa35d49a386d5e081b9cfa8997bb7f2db92738d1b9c34007e0be724fe68df95b9877d38510ae33808ef476d89d10af0ecdd3ea6520f53b596a3bd74be80796941b3cdc1b1f89e50116ff13b4f47c770baa7328166404ac3e0e3581ea5874ceb93aade3025a942621f15f511f6c28316f26588297408104f64421753068daa4750376d6de99e572a5923719309963c6d412404bc1372350840f812b460c4ce4c3f48cc9f880527a5a0f642e060c62f729a93f1d5b96e6a9ecffc5451ce1af401ce49926dff60dbe3446ed3466a140b7f8e8b3f3f8c3488a48e4d0fbbcaaaad4aea422f17ae86a7d6b7861a7c18fa557c102b5de202dbf58047d687fc25558adbd41822551a0f1497472515b2f0fb2c85d4e686824401851ff148bd345eb211b0c02a8c01ed0c82d85bff0f00d78bb9754ea7daa69678fbf954d15825c2ab83b7cd52983283e3964bd5bf0e6891fc84631795bdf877bd1fe68bf36dfb76d326d5af4a1f7f7ea36ccdcf5fc58a214ff7fbcfc6b5316f012e9290fda69a0512903fb7a847efd282669013996a496d0d982a96186dc8104c3a4da63892fcb39e76fd06063e63ad6b1dd1fa094d246a7cd3878539efb415590f97ef8f919dc850d51bd9e8aa2986680624608c5a4a7e5113f8c171d2cf32bd7b4d785e19ab5404963070f84c38b1d4728ffde43b6e49934743036bdf5f1a5f2d2d74a2fe521dea6051431aa8720c154bb9e45d296e2f34fc6564225775f03786aec8c2ee88c9d3ae153413369fe56dae5aae047d7786268854d0e2d20863a84d83b5865fb2184f24e054746c833cb9acb88df4380d0c6408414a6ee87e60f3f9ef090fd4fcafd8ccbe0775df617e4d9ea1a05a9c07762dc5016822d83b1cb3a4ebd9b784c3f301e4b0834dfe063b523a3682d86a306c10037d1df54f99fe2638fd34d10d29cae677dade64da1ec0ae9c4bbc9874e2447b0e30a43887a5a3f82ffdb45328f2acb66766326369155d58bb2fade4a188604b66c78161111f3196b86b6778e060d8299964302edebb6d8ae8d570e9f222419172d85574b560aae6dcb28810999b3217e0878cd00b68654205ce23b7835f184c5dfae434f061e176b31bb638aff7882436caaff69057d6cc1bca1c9c08589dd4523ca07353c3d36e123ca7bec048223371739600f9808f0a7f0509cf0278ad6dcb340cb1566e5e3139f38e15f05d629640dc596cc3038d758b41151fc2c5f8db5da0a58ef72362036c8fe95d8ffab988de862cf524c5479e8c00eae8b85c4eac7733575ef3947e374c8e08dafd2cdcefc8d1cfb528d27c94710dbc42399f254f4a8e6f9b5c51dce095283f2a93eab56a51be7bc4b806490fc6ff5c79dd4a41a3b1372de795d8168beb4c2c547fa79bf18b1d70c851e4a29827cb04d2c24d6e7154307d9ef7ef08a8d78f0d02e6a6c1b78e78de93d762cbc8b7d7bcd5340318069f66c07b8421c174daf45eb5554cafee6837e38f5e76cae79b14a710822e489c1df73c81c5c3145219932935475d5d3404c235edab049746fd0f21e32d09dc6a7775df756014e0bd37f3a808221f630dbe0f4fb4246384a9eb1e51b78420925ffca4ffb1e2b43a1423540303a78b98a7f091b4db2ddd91115e1b9467d5152142dcae68fefe876e952141864a9bd0ab738dcba7c3e1304e2aefd98340e80991e431133fb73388c676847b1d913fe878f10e52034ffddb9f7a813683db310a187b6bb9e053ffd4b9edfa9fb6e13dd14c265334842beed12b50c26d249685ebb79f6ea813bf624f0ada955b9c12fb8d34e54b329457bcb89da4f4942781e52a22cfe833b066397b5bfbc56c2ae5c7e0b9806dd1ca2a90e1797ca488d9ff3db59715b6e999f4af8f0d8253028c87715b57e2014e251a3d334dfc278a7d1c5888eecf0c5a36ea4d56ea73f88520ba7f5f21bdf10345eaddc556e58b5bab2c673b6cc107a3433f1506da37c5a25600af0d45c829ab9b8f08b98055df40f00c5c455febe39105079f014ba34d06da54b0f74993b573af627f8d91ed9a2b1188c3483e77a7997dfe323f62881e7eee749e4aa0d1c18b7f03bac1fe51b8999adf5737c4d692b3e0fb725fdf0b0a6b9312d6ea92f60298ae0419477345ede5876f3d8b7dc35aab9277c06d0877dfca4822c361db80703d5d3b92dfe47be8529dd5b220dc7f74bbcef1a8989832cd33bebb6c9b94738d64f8696c828a21fa22e5082f09846ab79ab96003a66c65c9d0dc59a6d9a6233327b2ead95128344e57d44fd5e0ccab127eec1d0a45db258b358d63c2193f7d47eaed0e4d191ea14ab55b55bd9866c023b27ec90c9e3a30dae91000781629d5f8eb33a1b6dfee754c6db3d92ff8a963c0662d61521c0b9ae908753769b97964ad197fb10b364749b36fea075e8c62c00895e90f775f4bc9e1433333a72755fc86f74da262b6e94da66f36729531aa9d75c03c62b8f5d521a5bc9d426bf0deb568478f0ed904703d279ed36927f82d6fa56b96ad8c87dc94877430233fe9ff0a8f016f73a80f98f850620a302b54450c93b0f591c4585569f605e4dcbe2a12ead1780acbcd48131a68500ff0c68516002d6eb7f83e267085c0b10423d97b2fd79f3bc6a7312ef72fd3ed6662445e7814cc46e71439e32cbe8fea6ad0dc09c517dea7d5a8d5a7eacfbab3b7728de4e928b0f8512789a814e40e759a23367618d392eedc0eaa861bdeb8b3e94eb6102ce0be91e0e231c3614178d8f5243486daaab1e6816a94a01933256625cebf588985bee403cd07f6aa3fced4296967804953c34d80c6d4cd44d6258c6f9a6e14e85da0ca3762a83ceeaeeffd70e57fdafad448114f441b384bb56195c8f987cbdbc2466d4e2e0f25a8be4301f38461708be3e355ce153a1d7477bf98fcf36b7d60a7a40c00a2b30a97b6763fd7a97bcc26069713b4b052c2aa0d0291e53b138200a59eb2747c2bac541d86fc62e6db597b1998dc73d13fb16c5e6b482041af573f898331b3861539a5d6f91b102ac320dee8522a827af31e5f14102dc01cf0b8893ad2ad987e416ddab803796f230d2158778ca962bda914ca0f07f37dca2cbae1cf6d4b4edfb517ebe4ae950c8f275c335f07717bb93459f8af994d27ca040032ec299d038bb070c6a568b2c9e8e8ffd5d170acf351e72698f4f52a29e601cd406d0641178c650efe1ec0358ce7b198e9e048d36cee4296b23a1ca3d69fde293dba3a7672a26127d334bed7cc31b3012f89dbc61e5a65566e5c2d2e095210c3319478cc64457585e755bbf3cba41ac17ae69ef1af62599c573e26acb16cdb25699bc7d4756ca528e44fc99fd3512cf23768ec2dc04d809ce97bbc5a658ade08c821842f89ff581c46f4d29b6c5f2aae62ce8bf2a55b95ad31f539044c3b7e092d719947bb47d34987561af5097e4703a35ab2dc7865c654884208126935a8242285e644a1a0e4199a8ac00b1757455b91800b33f37f0dac46bed215f751ed9f71ffa5ef85b59c6017889a031d04d4ca181193fe46d8329b408059202556ccd12886cac1d37df9fb0ba66a8f4d5f5c19a1d35ce250c11280ecb7d2a98342f7dd78a87128b69db1a4d82a1311c70b26b8d4efa1bbe007437a5bf89be3a58c8a3c87ee6dde9426500f963d30579771d25a17f4e2f8923913b95c0ce22a8e3ab8021e1ab1d654579f474b473c96923146d5f9b2ad161891a4f1dd46e592985b1c07b47ed63a5ccf73295b2d7db0dec7fb6aebab765344c41dcd94068cce8fd7dd8b5506db8b9458652d63a73510adc808a410c4844df80e0a7d5789e700311d0148a8410c2759a4121a720f3f6af9448e243eba625915e152517805d3e04dc6af85e515b2beba09b9b38340dae23fbb71cb88c429286979d3fb7528b55b200ebc5d04eabe2c7c87460c5344fac84333782549b42f2c7f7d91c40a139ae85979193de90e1fabc205d9fd659b4ddf39aa9f2b3d8019ece1ebf7aa5371783bdbcc0c58a5fd8ca44691770920c4ab64cb8d8c600ef79b61307b4de9048b67593d993f13c81d36f984f84712d81d426e113fd2a2e367ee1dc497ee518267ea1335715b849033281fb979b978269c1db1c44c5c4b919045f595c125e185895b8703ef8a2cfe"}, @NFTA_DATA_VALUE={0x4d, 0x1, "04234ff95872aa995872f4f88aeeedf4bd6c8a54e67c88ee7240d798fab99d37eecd2129bb515d1038b1946ecd75da40fc962f69a5f5d74c5746c2e9eb586dfe98454aa13f3f787412"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6a208000}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x4e, 0x1, "112be36f9fa17e4c0f32ee75963fb096246939fbd27c782cb88a79e4d1bb985fb4e6d8b96fde2977588f6e1ab4b89ab3e0e7240086ba977934c9abc7c5b1091d4b4a5490a5bb763bc67c"}, @NFTA_DATA_VALUE={0x2d, 0x1, "2f7331ee0926fcf41471c17fc33e4e88e33aff6ed91be6d1bc1eb5e0f3f8d549a221e05c0a14ab74a6"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}, {0x370, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2a0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xa6, 0x1, "f2d2d6550bd819757ac138e84995a4fc0e9b0f2866785ac38580fc8441280434bda969160539ec70ee826b2956742dd1d79cee06d0c28c9494ded0178a007051355acb64417290b3218f38f4d1547e2ab4cf2c00d5359a9e0515d91d264b51caae97dbd5609f5469cfd547850e1d8d37e912bf57d9e0025cbd4cc453738bc765cd901f61408fe4d0dfb8a6f0bb56587348ee1b4d0da72b45d7b5b15263770e73b9f6"}, @NFTA_DATA_VALUE={0xc6, 0x1, "c98825859ae337f71c419b7a98aee8f97b5ee2982a8bdbb07576bd11b9eb8aa43ee9a4e7c44a7bde98a3acfcbb28a22b68863b0ef4e0aced13604f119254fb1ca1f47f4834bb28f4e258583ff9e17bb0b8fa59d362ebe4eb01782bc8c7ce4bd2ce2cf1a4bf37afc5412ff4e23a7b15dcd0cc5056a823fcb75cc653d75ff8bc3792d5db53e83f155bcf69d961e8d29e839c3d4d8ada9614037d96913019fa923eb45115815cbb27bb63603d3b03e3f0dcc2547dad8a1004154f1e0828d352aec75690"}, @NFTA_DATA_VALUE={0xb5, 0x1, "7e956f95443ec9ccc15e446239c7b74117d037bfde94777c9187f88b192595e5b018e4b006fc0620975b4e1fa2d9b282a3bc1f0a5634a4205a48773016a1c69757f3f5c3d5984b5d7fe83e067993b981993e22f785ad5a5da08c635c20bcb68868e899885f9b79c0e44491c5cfdd0ed9c5bd919bad478731409d38eed00b4d11b2cae81edc2f3cffb8cb085f91a1ac6a2de5156e6ea957b64358cc72047a08e8b41aa72864784fc9ed610abf96ae5d129b"}]}, @NFTA_SET_ELEM_USERDATA={0xaf, 0x6, 0x1, 0x0, "e0a485feac71fe8c32f83b9e1a877064a2a390cb26f12477626f9bf25393ce60f8f7518538bd3d06452c35de167314e92e725d5d1a8e3ab549141d586b9efb3cc7422f0d13b05f466ea12e1533475314d0e5f316a15ae7ac75cf31aeb74e2d889ad667998fde06d707826b280c5a619f828c8a77ca3f7b7c262297af27afcf501f7321046651d0bcf43ff0d3a93533669e7b676c742e33c855622a011a33c66d4d2407caa3935996fcd888"}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x11c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x90, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x5c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88b5}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}]}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWRULE={0x1c0, 0x6, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xe6, 0x7, 0x1, 0x0, "e4ca36fd4a3207cdc0e55b77b4435f788111b3b4679467f7fa8bfc8cae01d1445618ac18ea52b448e34ff314ba9afc8e1f93060f6224ddf5dfeb4ec2f2100a16664a3a0a36b29394b8d1199ca28f031b5ea63decc4f1a158116a466241f50f4c245057c434bf4339e7031fbaf8efdd3dcff56ae9eb586865352fe10577ec186ec6498cdb21400a8196b9303ac147195494afb4b62328542cb46326e12a1cf2479e555a9bced415e0c7cb9d627e126db8f5be0a3d8be6b3ccc89abe5c22ff7d4e95d647970174d2b713983e43e345f10111fe0fae6b26e84bd19be0b95d5ffb3e257d"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x40, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9000}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14}}, 0x2da0}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) 371.708739ms ago: executing program 0 (id=2417): fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setreuid(0x0, 0xee00) openat(0xffffffffffffff9c, 0x0, 0x0, 0x3f46137792f68265) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000180000000", @ANYRES32, @ANYBLOB="0000eb810000000000ffffffffff000000000000", @ANYRES32], 0x50) 327.421462ms ago: executing program 2 (id=2418): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/exec\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x4080, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=0x0]) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000200000000000000000000008500000011000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 0s ago: executing program 3 (id=2419): r0 = socket$kcm(0xf, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) setresuid(r3, r3, r3) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)=0x455853c1, 0x4) r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000040)=0x32402) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "87d52890d86dde1f66f6917dcad7d7ad92f7eb71ae6687481d34af7f8009c03e", "282e2debe5b6e2d9cad8f3518100f38f417d72544a2bb7fa11b662fef4dcc9a3", "cc23b1f369d519afed2d88adb87a656e4818391934fadf59616c097176643d4d", "fde867d2e299226caad10a947624655f91c4544c05b52b7ec7e68e27a55c6afb", "bee1fd21ead56db3e38ff37c0ad23d47f9aaeca9c5831008e79c20a71128d4c6", "0f0c3b4a2fe52f95297b7b93", 0x1, 0x4, 0x40, 0x5, 0xb0}}) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2008f76369641ed000108060018080006040009aaaaaaaaaaaaac1414bb0080c200"], 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x16, 0x1, 0x100, &(0x7f0000000040)="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"}) ioctl$VT_DISALLOCATE(r7, 0x5608) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller1\x00', 0x0}) r9 = accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x80800) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @local}, 0x10) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80020}, 0xc, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB='d\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="000026bd7000fedbdf250200000008000100", @ANYRES32=r8, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="d40002804c000100000001006e6f746966795f70656572735f636f756e740000000000000000000000000000000003000300000000000400fbffffff4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r10, @ANYBLOB="9c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="6c000100000001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000000030003000000000004000600000040000100000001006c625f686173685f737461747300000000000000000000000000000000000000000003000b0000000000040001000000000007000000000005000100", @ANYRES32=r8, @ANYBLOB="f00002803c00010024000100757365725f6c696e6b7570000000000000000000000000000000000000000000050003000600000004000400080006", @ANYRES32=r8, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10, @ANYRESOCT=r6, @ANYRES32=r10, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="c401028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008000000008000600", @ANYRES32=r10, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173680000000040000100000001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000000030003000000000004000000006808000100", @ANYRES32=r8, @ANYBLOB="f400028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f696e7465727661", @ANYRES32=r12, @ANYBLOB="34000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="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"], 0x964}, 0x1, 0x0, 0x0, 0x40010}, 0x8040) ioctl$DRM_IOCTL_MODE_ADDFB(r11, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x5, 0x2, 0x100, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000002a00)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 495][T13086] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000001 [ 671.775501][T13086] R13: 00007f2b9abd6038 R14: 00007f2b9abd5fa0 R15: 00007ffef4c59898 [ 671.775514][T13086] [ 672.073381][ T44] IPVS: starting estimator thread 0... [ 672.231638][T13092] IPVS: using max 39 ests per chain, 93600 per kthread [ 674.814757][T13125] netlink: 'syz.0.1580': attribute type 3 has an invalid length. [ 674.830346][T13125] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1580'. [ 674.852993][T13125] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 675.271206][T13133] netlink: 'syz.2.1582': attribute type 3 has an invalid length. [ 675.280944][T13133] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1582'. [ 675.293393][T13133] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 676.736212][T13160] comedi comedi0: Minor 47 could not be opened [ 677.404199][T13160] block nbd2: shutting down sockets [ 679.282929][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1597'. [ 680.002269][T13221] netlink: 'syz.1.1601': attribute type 12 has an invalid length. [ 680.584064][ T5865] Bluetooth: hci3: command 0x0406 tx timeout [ 682.162488][T13242] fuse: Bad value for 'rootmode' [ 684.177189][T13268] netlink: 'syz.3.1613': attribute type 3 has an invalid length. [ 684.201437][T13268] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1613'. [ 684.412695][T13268] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 685.393677][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.400013][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.055571][T13329] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 689.180357][ T30] audit: type=1400 audit(1758512493.816:495): avc: denied { connect } for pid=13333 comm="syz.0.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 689.253486][T13328] comedi comedi0: Minor 47 could not be opened [ 689.295269][T13337] tipc: Started in network mode [ 689.300216][T13337] tipc: Node identity 6, cluster identity 4711 [ 689.306516][T13337] tipc: Node number set to 6 [ 690.130813][ T5849] block nbd4: Receive control failed (result -32) [ 690.165283][T13343] block nbd4: shutting down sockets [ 690.288719][ T30] audit: type=1400 audit(1758512494.926:496): avc: denied { mount } for pid=13345 comm="syz.2.1630" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 690.385876][ T30] audit: type=1400 audit(1758512494.966:497): avc: denied { unmount } for pid=13345 comm="syz.2.1630" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 690.650836][ T44] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 691.233517][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 691.440794][ T44] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 691.471012][ T44] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 691.511366][ T44] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 691.603563][ T30] audit: type=1400 audit(1758512496.226:498): avc: denied { read } for pid=13361 comm="syz.0.1633" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 691.633318][ T44] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.674911][ T44] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 691.693292][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.701388][ T30] audit: type=1400 audit(1758512496.226:499): avc: denied { open } for pid=13361 comm="syz.0.1633" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 692.056087][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1636'. [ 692.408861][T13362] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 692.439454][T13362] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 692.473259][ T30] audit: type=1400 audit(1758512497.106:500): avc: denied { read } for pid=13379 comm="syz.3.1640" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 692.523725][T13362] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 692.547147][T13362] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 692.558352][T13362] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 692.564691][T13362] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 693.308270][ T44] usb 3-1: usb_control_msg returned -71 [ 693.317538][ T44] usbtmc 3-1:16.0: can't read capabilities [ 693.367698][ T44] usb 3-1: USB disconnect, device number 17 [ 693.773773][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 693.811076][T13352] syzkaller0: tun_net_xmit 76 [ 693.878066][ T30] audit: type=1400 audit(1758512498.506:501): avc: denied { ioctl } for pid=13373 comm="syz.4.1638" path="socket:[37294]" dev="sockfs" ino=37294 ioctlcmd=0x8b37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 693.911813][ T5904] syzkaller0: tun_net_xmit 76 [ 693.916718][T13352] syzkaller0: tun_net_xmit 48 [ 694.154277][ T44] syzkaller0: tun_net_xmit 76 [ 694.363267][ T5928] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 694.573403][ T5865] Bluetooth: hci3: command 0x0406 tx timeout [ 694.579705][ T5865] Bluetooth: hci4: command 0x0406 tx timeout [ 694.587065][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 694.596377][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 694.608146][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 694.631165][T13413] fuse: Bad value for 'rootmode' [ 694.738753][ T5928] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 694.796697][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 695.165233][ T5928] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 695.175426][ T5928] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 695.728466][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.809378][ T5928] usb 1-1: config 0 descriptor?? [ 695.832415][T13405] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 695.853331][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 696.227134][T13412] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 696.359990][ T44] libceph: connect (1)[c::]:6789 error -101 [ 696.366695][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 696.746461][ T5859] Bluetooth: hci3: command 0x0406 tx timeout [ 696.746621][ T44] libceph: connect (1)[c::]:6789 error -101 [ 696.752547][T13412] Bluetooth: hci4: command 0x0406 tx timeout [ 696.768242][ T5904] usb 1-1: USB disconnect, device number 21 [ 696.768728][ T5849] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 696.799070][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 696.958359][T13429] ceph: No mds server is up or the cluster is laggy [ 697.318891][ T30] audit: type=1400 audit(1758512501.956:502): avc: denied { write } for pid=13435 comm="syz.4.1652" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 698.007881][T13436] syz.4.1652 (13436): drop_caches: 2 [ 698.813354][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 698.972462][T13459] IPVS: rr: FWM 3 0x00000003 - no destination available [ 698.981443][T13459] FAULT_INJECTION: forcing a failure. [ 698.981443][T13459] name failslab, interval 1, probability 0, space 0, times 0 [ 698.994920][T13459] CPU: 0 UID: 0 PID: 13459 Comm: syz.2.1656 Not tainted syzkaller #0 PREEMPT(full) [ 698.994950][T13459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 698.994961][T13459] Call Trace: [ 698.994967][T13459] [ 698.994973][T13459] dump_stack_lvl+0x16c/0x1f0 [ 698.994999][T13459] should_fail_ex+0x512/0x640 [ 698.995020][T13459] ? __kmalloc_noprof+0xbf/0x510 [ 698.995039][T13459] ? lsm_blob_alloc+0x68/0x90 [ 698.995055][T13459] should_failslab+0xc2/0x120 [ 698.995074][T13459] __kmalloc_noprof+0xd2/0x510 [ 698.995096][T13459] lsm_blob_alloc+0x68/0x90 [ 698.995114][T13459] security_prepare_creds+0x30/0x270 [ 698.995131][T13459] prepare_creds+0x56f/0x7d0 [ 698.995151][T13459] __sys_setuid+0x9a/0x440 [ 698.995173][T13459] do_syscall_64+0xcd/0x4e0 [ 698.995197][T13459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.995213][T13459] RIP: 0033:0x7fb513d8ec29 [ 698.995227][T13459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.995243][T13459] RSP: 002b:00007fb514c3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 698.995259][T13459] RAX: ffffffffffffffda RBX: 00007fb513fd6090 RCX: 00007fb513d8ec29 [ 698.995270][T13459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 698.995280][T13459] RBP: 00007fb514c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 698.995289][T13459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.995299][T13459] R13: 00007fb513fd6128 R14: 00007fb513fd6090 R15: 00007fff1a147d58 [ 698.995321][T13459] [ 699.676273][ T44] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 699.833577][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 699.859460][ T44] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 699.871561][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.893503][ T44] usb 3-1: config 0 has no interface number 0 [ 699.906879][ T44] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 699.920104][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.932477][ T44] usb 3-1: Product: syz [ 699.940898][ T44] usb 3-1: Manufacturer: syz [ 699.949638][ T44] usb 3-1: SerialNumber: syz [ 699.984942][ T44] usb 3-1: config 0 descriptor?? [ 700.007663][ T44] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 700.016622][ T44] usb 3-1: No valid video chain found. [ 700.948576][ T44] usb 3-1: USB disconnect, device number 18 [ 701.442248][T13488] fuse: Unknown parameter 'group_i00000000000000000000' [ 702.543486][ T30] audit: type=1400 audit(1758512507.176:503): avc: denied { connect } for pid=13499 comm="syz.4.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 703.247013][T13515] syzkaller0: create flow: hash 389627375 index 1 [ 703.856465][T13352] syzkaller0: tun_net_xmit 76 [ 703.863501][T13352] syzkaller0: tun_net_xmit 48 [ 703.911818][T13519] comedi comedi0: Minor 47 could not be opened [ 703.940983][T12959] syzkaller0: tun_net_xmit 76 [ 704.064667][T13519] block nbd2: shutting down sockets [ 704.195860][T13508] syzkaller0: delete flow: hash 389627375 index 1 [ 704.313572][T13521] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 704.343387][ T30] audit: type=1400 audit(1758512508.976:504): avc: denied { load_policy } for pid=13520 comm="syz.3.1673" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 704.347770][T13521] SELinux: ebitmap start bit (4294967294) is not a multiple of the map unit size (64) [ 704.392430][T13521] SELinux: failed to load policy [ 705.169712][ T30] audit: type=1400 audit(1758512509.806:505): avc: denied { execute } for pid=13529 comm="syz.1.1676" dev="hugetlbfs" ino=37486 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 705.200143][ T30] audit: type=1400 audit(1758512509.826:506): avc: denied { execute_no_trans } for pid=13529 comm="syz.1.1676" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=37486 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 706.196026][T13547] block device autoloading is deprecated and will be removed. [ 706.693614][T13556] fuse: Unknown parameter 'use00000000000000000000' [ 708.272466][T13530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1676'. [ 708.459632][T13574] fuse: Unknown parameter 'group_id00000000000000000000' [ 708.684418][T13579] netlink: 'syz.4.1683': attribute type 12 has an invalid length. [ 708.776460][ T30] audit: type=1400 audit(1758512513.396:507): avc: denied { read } for pid=13569 comm="syz.0.1685" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 709.065352][ T30] audit: type=1400 audit(1758512513.396:508): avc: denied { open } for pid=13569 comm="syz.0.1685" path="/303/file0/file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 709.598636][ T30] audit: type=1400 audit(1758512513.996:509): avc: denied { setopt } for pid=13585 comm="syz.0.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 712.653373][ T44] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 712.858842][ T44] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 712.880248][ T44] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 712.928691][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.942150][T13630] fuse: Bad value for 'rootmode' [ 712.949684][ T44] usb 5-1: Product: syz [ 712.953932][ T44] usb 5-1: Manufacturer: syz [ 712.961359][ T44] usb 5-1: SerialNumber: syz [ 712.980481][ T44] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 713.467656][ T44] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 713.968177][ T30] audit: type=1400 audit(1758512518.606:510): avc: denied { mounton } for pid=13633 comm="syz.1.1700" path="/344/file0" dev="tmpfs" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 713.997952][ T30] audit: type=1400 audit(1758512518.636:511): avc: denied { read write } for pid=13633 comm="syz.1.1700" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 714.028458][ T30] audit: type=1400 audit(1758512518.636:512): avc: denied { open } for pid=13633 comm="syz.1.1700" path="/344/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 714.051450][ T30] audit: type=1800 audit(1758512518.636:513): pid=13634 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1700" name="/" dev="9p" ino=2 res=0 errno=0 [ 714.076964][ T30] audit: type=1400 audit(1758512518.706:514): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 715.378780][ T44] usb 5-1: USB disconnect, device number 17 [ 715.520868][T13657] netlink: 'syz.1.1706': attribute type 3 has an invalid length. [ 715.528746][T13657] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1706'. [ 715.539789][T13657] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 717.555851][T12959] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 717.945520][T12959] usb 4-1: unable to get BOS descriptor or descriptor too short [ 717.955893][T12959] usb 4-1: not running at top speed; connect to a high speed hub [ 717.968179][T12959] usb 4-1: config 1 has an invalid interface number: 113 but max is 0 [ 717.979685][T12959] usb 4-1: config 1 has no interface number 0 [ 717.995560][T12959] usb 4-1: config 1 interface 113 has no altsetting 0 [ 718.006264][T12959] usb 4-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice= 8.a7 [ 718.015856][T12959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.025011][T12959] usb 4-1: Product: syz [ 718.029805][T12959] usb 4-1: Manufacturer: syz [ 718.034646][T12959] usb 4-1: SerialNumber: syz [ 718.037567][T13691] 9pnet_fd: Insufficient options for proto=fd [ 718.303340][ T5928] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 718.378093][T12959] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 718.585885][T12959] gspca_sn9c2028: read1 error -71 [ 718.595723][T12959] gspca_sn9c2028: read1 error -71 [ 718.609727][ T5928] usb 2-1: Using ep0 maxpacket: 8 [ 718.663348][T12959] gspca_sn9c2028: read1 error -71 [ 718.673429][ T5928] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 718.683072][T12959] sn9c2028 4-1:1.113: probe with driver sn9c2028 failed with error -71 [ 718.692172][ T5928] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 718.695012][T13698] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 718.703626][T12959] usb 4-1: USB disconnect, device number 13 [ 718.714373][ T5928] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 718.731999][ T5928] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 718.745448][ T5928] usb 2-1: config 250 has no interface number 0 [ 718.762042][ T5928] usb 2-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 718.783422][ T5928] usb 2-1: config 250 interface 228 has no altsetting 0 [ 718.798638][ T5928] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 718.808047][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 718.818110][ T5928] usb 2-1: Product: syz [ 718.822329][ T5928] usb 2-1: SerialNumber: syz [ 718.839797][ T5928] hub 2-1:250.228: bad descriptor, ignoring hub [ 718.847366][ T5928] hub 2-1:250.228: probe with driver hub failed with error -5 [ 719.326417][T12959] usb 2-1: reset high-speed USB device number 16 using dummy_hcd [ 719.413264][ T5928] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 719.505493][T12959] usb 2-1: device firmware changed [ 719.519961][T12959] usb 2-1: USB disconnect, device number 16 [ 719.605519][ T5928] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 719.628963][ T5928] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 719.641118][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.649892][T13708] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 719.656385][T13708] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 719.663879][ T5928] usb 1-1: Product: syz [ 719.669049][ T5928] usb 1-1: Manufacturer: syz [ 719.674848][T13708] vhci_hcd vhci_hcd.0: Device attached [ 719.680301][ T5928] usb 1-1: SerialNumber: syz [ 719.692794][ T5928] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 719.719201][T13708] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 719.725820][T13708] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 719.733896][T13708] vhci_hcd vhci_hcd.0: Device attached [ 719.883407][ T5940] vhci_hcd: vhci_device speed not set [ 719.893291][T12959] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 719.943290][ T5940] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 720.183357][T12959] usb 2-1: Using ep0 maxpacket: 8 [ 720.194779][T12959] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.223371][T12959] usb 2-1: config 0 has no interfaces? [ 720.365203][T12959] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 720.374397][T12959] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 720.383111][T12959] usb 2-1: Product: syz [ 720.389909][ T5928] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 720.402521][T12959] usb 2-1: SerialNumber: syz [ 720.417587][T12959] usb 2-1: config 0 descriptor?? [ 720.773642][T13709] vhci_hcd: connection reset by peer [ 720.779008][T13712] vhci_hcd: connection closed [ 720.854921][ T154] vhci_hcd: stop threads [ 720.913235][ T154] vhci_hcd: release socket [ 720.918888][ T154] vhci_hcd: disconnect device [ 720.930517][ T154] vhci_hcd: stop threads [ 720.938518][ T154] vhci_hcd: release socket [ 720.948466][ T154] vhci_hcd: disconnect device [ 721.468080][T12959] usb 2-1: USB disconnect, device number 17 [ 722.943697][T13743] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 724.138976][ T44] usb 1-1: USB disconnect, device number 22 [ 725.153431][ T5940] vhci_hcd: vhci_device speed not set [ 725.336548][T13770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1736'. [ 725.345717][T13770] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1736'. [ 725.494880][T12959] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 725.913311][T12959] usb 3-1: Using ep0 maxpacket: 8 [ 725.921299][T12959] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.952004][T12959] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 726.032491][T12959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.072806][T12959] usb 3-1: config 0 descriptor?? [ 726.080362][T12959] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 727.030561][T13790] fuse: Bad value for 'fd' [ 728.632297][ T30] audit: type=1400 audit(1758512533.266:515): avc: denied { connect } for pid=13791 comm="syz.1.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 728.747140][T13819] netlink: 'syz.4.1746': attribute type 12 has an invalid length. [ 729.040541][T12959] usb 3-1: USB disconnect, device number 19 [ 729.132659][T13821] FAULT_INJECTION: forcing a failure. [ 729.132659][T13821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.150030][T13821] CPU: 0 UID: 0 PID: 13821 Comm: syz.2.1750 Not tainted syzkaller #0 PREEMPT(full) [ 729.150054][T13821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 729.150063][T13821] Call Trace: [ 729.150069][T13821] [ 729.150076][T13821] dump_stack_lvl+0x16c/0x1f0 [ 729.150103][T13821] should_fail_ex+0x512/0x640 [ 729.150127][T13821] strncpy_from_user+0x3b/0x2e0 [ 729.150149][T13821] getname_flags.part.0+0x8f/0x550 [ 729.150176][T13821] getname_flags+0x93/0xf0 [ 729.150194][T13821] user_path_at+0x24/0x60 [ 729.150213][T13821] __x64_sys_mount+0x1fc/0x310 [ 729.150238][T13821] ? __pfx___x64_sys_mount+0x10/0x10 [ 729.150268][T13821] do_syscall_64+0xcd/0x4e0 [ 729.150293][T13821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.150311][T13821] RIP: 0033:0x7fb513d8ec29 [ 729.150325][T13821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.150340][T13821] RSP: 002b:00007fb514c5f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 729.150358][T13821] RAX: ffffffffffffffda RBX: 00007fb513fd5fa0 RCX: 00007fb513d8ec29 [ 729.150368][T13821] RDX: 0000200000000080 RSI: 0000200000000380 RDI: 0000000000000000 [ 729.150379][T13821] RBP: 00007fb514c5f090 R08: 00002000000027c0 R09: 0000000000000000 [ 729.150389][T13821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.150398][T13821] R13: 00007fb513fd6038 R14: 00007fb513fd5fa0 R15: 00007fff1a147d58 [ 729.150421][T13821] [ 730.483449][ T30] audit: type=1400 audit(1758512535.116:516): avc: denied { map } for pid=13839 comm="syz.2.1756" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 730.513860][T13837] fuse: Bad value for 'fd' [ 732.105683][T13857] kAFS: unable to lookup cell '/,' [ 732.641028][T13858] ceph: No mds server is up or the cluster is laggy [ 732.654912][T12959] libceph: connect (1)[c::]:6789 error -101 [ 732.661117][T12959] libceph: mon0 (1)[c::]:6789 connect error [ 732.913898][ T5940] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 733.087382][ T5940] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 733.143895][ T5940] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 733.183420][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.195541][ T5940] usb 3-1: Product: syz [ 733.199726][ T5940] usb 3-1: Manufacturer: syz [ 733.204417][ T5940] usb 3-1: SerialNumber: syz [ 733.235033][ T5940] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 734.295555][ T5940] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 735.840595][ T44] usb 3-1: USB disconnect, device number 20 [ 736.238849][T13909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1771'. [ 736.384682][T13907] netlink: 'syz.2.1770': attribute type 3 has an invalid length. [ 736.444182][T13907] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1770'. [ 736.453630][T13907] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 737.319168][ T5940] libceph: connect (1)[c::]:6789 error -101 [ 737.325505][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 737.451522][T13930] ceph: No mds server is up or the cluster is laggy [ 738.051975][ T5940] libceph: connect (1)[c::]:6789 error -101 [ 738.110884][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 739.518836][T13955] netlink: 'syz.3.1782': attribute type 7 has an invalid length. [ 739.670545][ T30] audit: type=1400 audit(1758512544.166:517): avc: denied { watch watch_reads } for pid=13951 comm="syz.3.1782" path="/syzcgroup/unified/syz3" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 742.242546][T13992] kAFS: No cell specified [ 742.270929][ T30] audit: type=1400 audit(1758512546.886:518): avc: denied { map } for pid=13988 comm="syz.0.1792" path="pipe:[38656]" dev="pipefs" ino=38656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 742.662619][ T30] audit: type=1400 audit(1758512547.296:519): avc: denied { watch } for pid=14003 comm="syz.0.1796" path="/326/file0" dev="tmpfs" ino=1761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 744.253437][ T30] audit: type=1400 audit(1758512548.886:520): avc: denied { create } for pid=14015 comm="syz.1.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 744.577422][T14029] fuse: Unknown parameter '0x0000000000000004' [ 744.588277][ T44] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 744.803306][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 745.094180][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.112527][ T44] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d1.54 [ 745.121984][ T44] usb 4-1: New USB device strings: Mfr=222, Product=2, SerialNumber=3 [ 745.141263][ T44] usb 4-1: Product: syz [ 745.159918][ T44] usb 4-1: Manufacturer: syz [ 745.178391][ T44] usb 4-1: SerialNumber: syz [ 745.202244][ T44] usb 4-1: config 0 descriptor?? [ 745.225239][ T44] usb 4-1: invalid MIDI EP [ 745.236115][ T44] usb 4-1: snd-bcd2000: error during probing [ 745.266887][ T44] snd-bcd2000 4-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 745.871886][T14041] ceph: No mds server is up or the cluster is laggy [ 745.879637][ T44] libceph: connect (1)[c::]:6789 error -101 [ 745.954299][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 746.945238][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.951623][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.410644][ T5928] usb 4-1: USB disconnect, device number 14 [ 748.450538][T14082] fuse: Unknown parameter 'user_i00000000000000000000' [ 749.054073][ T30] audit: type=1400 audit(1758512553.686:521): avc: denied { mount } for pid=14086 comm="syz.3.1818" name="/" dev="rpc_pipefs" ino=38831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 749.786567][ T30] audit: type=1400 audit(1758512554.426:522): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 750.774186][ T30] audit: type=1400 audit(1758512555.416:523): avc: denied { read } for pid=14103 comm="syz.2.1825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 750.970638][T14114] FAULT_INJECTION: forcing a failure. [ 750.970638][T14114] name failslab, interval 1, probability 0, space 0, times 0 [ 751.036442][ T5940] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 751.081201][T14114] CPU: 1 UID: 0 PID: 14114 Comm: syz.2.1827 Not tainted syzkaller #0 PREEMPT(full) [ 751.081219][T14114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 751.081226][T14114] Call Trace: [ 751.081230][T14114] [ 751.081234][T14114] dump_stack_lvl+0x16c/0x1f0 [ 751.081253][T14114] should_fail_ex+0x512/0x640 [ 751.081267][T14114] ? __kmalloc_noprof+0xbf/0x510 [ 751.081279][T14114] ? nft_trans_alloc_gfp+0x26/0x2e0 [ 751.081293][T14114] should_failslab+0xc2/0x120 [ 751.081305][T14114] __kmalloc_noprof+0xd2/0x510 [ 751.081316][T14114] ? lockdep_init_map_type+0x5c/0x280 [ 751.081328][T14114] ? rhashtable_init_noprof+0x55e/0x7e0 [ 751.081343][T14114] nft_trans_alloc_gfp+0x26/0x2e0 [ 751.081357][T14114] nf_tables_newtable+0x139f/0x1b60 [ 751.081372][T14114] ? __pfx_nf_tables_newtable+0x10/0x10 [ 751.081386][T14114] ? __nla_parse+0x40/0x60 [ 751.081405][T14114] nfnetlink_rcv_batch+0x18ed/0x2330 [ 751.081424][T14114] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 751.081434][T14114] ? stack_depot_save_flags+0x29/0x9c0 [ 751.081457][T14114] ? avc_has_perm_noaudit+0x149/0x3b0 [ 751.081483][T14114] ? __nla_parse+0x40/0x60 [ 751.081501][T14114] nfnetlink_rcv+0x3c1/0x430 [ 751.081511][T14114] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 751.081522][T14114] ? selinux_netlink_send+0x578/0x830 [ 751.081536][T14114] ? is_vmalloc_addr+0x86/0xa0 [ 751.081551][T14114] netlink_unicast+0x5a7/0x870 [ 751.081568][T14114] ? __pfx_netlink_unicast+0x10/0x10 [ 751.081583][T14114] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 751.081602][T14114] netlink_sendmsg+0x8d1/0xdd0 [ 751.081619][T14114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.081639][T14114] ____sys_sendmsg+0xa95/0xc70 [ 751.081656][T14114] ? copy_msghdr_from_user+0x10a/0x160 [ 751.081670][T14114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 751.081693][T14114] ___sys_sendmsg+0x134/0x1d0 [ 751.081707][T14114] ? __pfx____sys_sendmsg+0x10/0x10 [ 751.081738][T14114] __sys_sendmsg+0x16d/0x220 [ 751.081752][T14114] ? __pfx___sys_sendmsg+0x10/0x10 [ 751.081774][T14114] do_syscall_64+0xcd/0x4e0 [ 751.081796][T14114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.081807][T14114] RIP: 0033:0x7fb513d8ec29 [ 751.081816][T14114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.081827][T14114] RSP: 002b:00007fb514c5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.081838][T14114] RAX: ffffffffffffffda RBX: 00007fb513fd5fa0 RCX: 00007fb513d8ec29 [ 751.081845][T14114] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 751.081852][T14114] RBP: 00007fb514c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 751.081858][T14114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.081864][T14114] R13: 00007fb513fd6038 R14: 00007fb513fd5fa0 R15: 00007fff1a147d58 [ 751.081877][T14114] [ 751.423354][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 751.432329][ T5940] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 751.440938][ T5940] usb 4-1: config 0 has no interface number 0 [ 751.464977][ T5940] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 751.548673][ T5940] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 751.587351][ T5940] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 751.625914][ T5940] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 751.655539][ T5940] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 751.675278][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.961939][ T5940] usb 4-1: config 0 descriptor?? [ 751.982152][ T5940] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 752.517304][T14129] netlink: 'syz.3.1826': attribute type 6 has an invalid length. [ 754.477467][ T5904] usb 4-1: USB disconnect, device number 15 [ 754.496023][ T5904] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 757.105473][T14181] netlink: 'syz.1.1846': attribute type 3 has an invalid length. [ 757.244366][T14181] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1846'. [ 757.253727][T14181] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 759.456507][T14201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 760.728911][T14225] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 764.268275][T14264] netlink: 'syz.1.1864': attribute type 12 has an invalid length. [ 764.359732][T14266] fuse: Unknown parameter 'fd0x0000000000000004' [ 765.301039][T14271] fuse: Unknown parameter '0x0000000000000004' [ 765.593620][T14259] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 765.612476][T14259] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 765.624025][T14259] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 766.932628][ T30] audit: type=1400 audit(1758512571.566:524): avc: denied { create } for pid=14277 comm="syz.1.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 767.423062][ T30] audit: type=1400 audit(1758512571.566:525): avc: denied { bind } for pid=14277 comm="syz.1.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 772.101164][T14363] fuse: Bad value for 'rootmode' [ 775.449411][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 775.467906][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 775.739230][T14416] IPVS: rr: FWM 3 0x00000003 - no destination available [ 775.916981][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 775.923054][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 775.991468][ T5940] libceph: connect (1)[c::]:6789 error -101 [ 775.998474][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 776.021136][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 776.070495][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 776.124796][T14401] ceph: No mds server is up or the cluster is laggy [ 776.335549][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 776.342950][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 776.346184][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 776.408833][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 776.821586][ T5940] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 776.954324][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 776.961842][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 776.962344][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 777.114692][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 777.514341][ T5940] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 777.543453][ T5940] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 777.563257][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.582441][ T5940] usb 1-1: Product: syz [ 777.594560][T14418] ceph: No mds server is up or the cluster is laggy [ 777.601275][ T5940] usb 1-1: Manufacturer: syz [ 777.638246][ T5940] usb 1-1: SerialNumber: syz [ 777.642962][T14413] ceph: No mds server is up or the cluster is laggy [ 777.711368][ T5940] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 778.049296][T14441] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 778.557913][ T5940] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 780.286679][ T5904] usb 1-1: USB disconnect, device number 23 [ 780.317247][T14451] netlink: 'syz.1.1915': attribute type 4 has an invalid length. [ 780.325142][T14451] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1915'. [ 780.543058][T14457] comedi comedi0: Minor 47 could not be opened [ 780.706595][T14457] block nbd0: shutting down sockets [ 782.051428][T14466] FAULT_INJECTION: forcing a failure. [ 782.051428][T14466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.064735][T14466] CPU: 1 UID: 0 PID: 14466 Comm: syz.3.1918 Not tainted syzkaller #0 PREEMPT(full) [ 782.064761][T14466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 782.064770][T14466] Call Trace: [ 782.064777][T14466] [ 782.064784][T14466] dump_stack_lvl+0x16c/0x1f0 [ 782.064811][T14466] should_fail_ex+0x512/0x640 [ 782.064837][T14466] _copy_to_user+0x32/0xd0 [ 782.064865][T14466] simple_read_from_buffer+0xcb/0x170 [ 782.064886][T14466] proc_fail_nth_read+0x197/0x240 [ 782.064909][T14466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 782.064932][T14466] ? rw_verify_area+0xcf/0x6c0 [ 782.064958][T14466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 782.064980][T14466] vfs_read+0x1e1/0xcf0 [ 782.065001][T14466] ? __pfx___mutex_lock+0x10/0x10 [ 782.065025][T14466] ? __pfx_vfs_read+0x10/0x10 [ 782.065050][T14466] ? __fget_files+0x20e/0x3c0 [ 782.065078][T14466] ksys_read+0x12a/0x250 [ 782.065096][T14466] ? __pfx_ksys_read+0x10/0x10 [ 782.065121][T14466] do_syscall_64+0xcd/0x4e0 [ 782.065147][T14466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.065165][T14466] RIP: 0033:0x7f9a9cf8d63c [ 782.065179][T14466] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 782.065195][T14466] RSP: 002b:00007f9a9b1ac030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 782.065212][T14466] RAX: ffffffffffffffda RBX: 00007f9a9d1d6180 RCX: 00007f9a9cf8d63c [ 782.065224][T14466] RDX: 000000000000000f RSI: 00007f9a9b1ac0a0 RDI: 000000000000000a [ 782.065234][T14466] RBP: 00007f9a9b1ac090 R08: 0000000000000000 R09: 0000000000000000 [ 782.065245][T14466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.065255][T14466] R13: 00007f9a9d1d6218 R14: 00007f9a9d1d6180 R15: 00007ffd98111888 [ 782.065280][T14466] [ 782.979882][T14451] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 783.024457][T14470] FAULT_INJECTION: forcing a failure. [ 783.024457][T14470] name failslab, interval 1, probability 0, space 0, times 0 [ 783.083361][T14470] CPU: 1 UID: 0 PID: 14470 Comm: syz.0.1920 Not tainted syzkaller #0 PREEMPT(full) [ 783.083386][T14470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 783.083396][T14470] Call Trace: [ 783.083402][T14470] [ 783.083408][T14470] dump_stack_lvl+0x16c/0x1f0 [ 783.083436][T14470] should_fail_ex+0x512/0x640 [ 783.083457][T14470] ? __kmalloc_noprof+0xbf/0x510 [ 783.083477][T14470] ? offload_action_alloc+0x29/0xf0 [ 783.083495][T14470] should_failslab+0xc2/0x120 [ 783.083516][T14470] __kmalloc_noprof+0xd2/0x510 [ 783.083535][T14470] ? __pfx_tcf_nat_init+0x10/0x10 [ 783.083559][T14470] offload_action_alloc+0x29/0xf0 [ 783.083579][T14470] tcf_action_offload_add_ex+0x1b5/0x660 [ 783.083608][T14470] ? __pfx_tcf_action_offload_add_ex+0x10/0x10 [ 783.083657][T14470] ? tcf_action_fill_size+0x110/0x340 [ 783.083687][T14470] tcf_action_init+0x674/0xa50 [ 783.083711][T14470] ? __pfx_tcf_action_init+0x10/0x10 [ 783.083745][T14470] ? lock_acquire+0x179/0x350 [ 783.083770][T14470] ? __lock_acquire+0x62e/0x1ce0 [ 783.083789][T14470] tcf_action_add+0xee/0x5c0 [ 783.083805][T14470] ? __pfx_tcf_action_add+0x10/0x10 [ 783.083835][T14470] ? __nla_parse+0x40/0x60 [ 783.083854][T14470] tc_ctl_action+0x35b/0x470 [ 783.083865][T14470] ? __pfx_tc_ctl_action+0x10/0x10 [ 783.083880][T14470] ? __pfx_tc_ctl_action+0x10/0x10 [ 783.083891][T14470] rtnetlink_rcv_msg+0x3c9/0xe90 [ 783.083907][T14470] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 783.083925][T14470] ? __lock_acquire+0x62e/0x1ce0 [ 783.083944][T14470] netlink_rcv_skb+0x158/0x420 [ 783.083959][T14470] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 783.083974][T14470] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 783.083994][T14470] ? netlink_deliver_tap+0x1ae/0xd30 [ 783.084007][T14470] ? selinux_netlink_send+0x578/0x830 [ 783.084021][T14470] ? is_vmalloc_addr+0x86/0xa0 [ 783.084034][T14470] netlink_unicast+0x5a7/0x870 [ 783.084050][T14470] ? __pfx_netlink_unicast+0x10/0x10 [ 783.084065][T14470] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 783.084084][T14470] netlink_sendmsg+0x8d1/0xdd0 [ 783.084101][T14470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 783.084120][T14470] ____sys_sendmsg+0xa95/0xc70 [ 783.084138][T14470] ? copy_msghdr_from_user+0x10a/0x160 [ 783.084152][T14470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 783.084175][T14470] ___sys_sendmsg+0x134/0x1d0 [ 783.084189][T14470] ? __pfx____sys_sendmsg+0x10/0x10 [ 783.084219][T14470] __sys_sendmsg+0x16d/0x220 [ 783.084233][T14470] ? __pfx___sys_sendmsg+0x10/0x10 [ 783.084255][T14470] do_syscall_64+0xcd/0x4e0 [ 783.084271][T14470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.084282][T14470] RIP: 0033:0x7f2b9a98ec29 [ 783.084291][T14470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.084302][T14470] RSP: 002b:00007f2b9b791038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.084312][T14470] RAX: ffffffffffffffda RBX: 00007f2b9abd5fa0 RCX: 00007f2b9a98ec29 [ 783.084319][T14470] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 783.084330][T14470] RBP: 00007f2b9b791090 R08: 0000000000000000 R09: 0000000000000000 [ 783.084336][T14470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 783.084342][T14470] R13: 00007f2b9abd6038 R14: 00007f2b9abd5fa0 R15: 00007ffef4c59898 [ 783.084356][T14470] [ 783.088240][ T30] audit: type=1400 audit(1758512587.696:526): avc: denied { map } for pid=14475 comm="syz.1.1921" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 784.058853][ T5904] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 784.157075][T14491] comedi comedi0: Minor 47 could not be opened [ 784.250926][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 784.310223][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 784.555230][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 784.582609][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 784.615886][ T30] audit: type=1326 audit(1758512589.256:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14498 comm="syz.2.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb513d8ec29 code=0x7ffc0000 [ 784.682139][ T5904] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 785.031217][ T30] audit: type=1326 audit(1758512589.256:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14498 comm="syz.2.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb513d8ec29 code=0x7ffc0000 [ 785.063253][ T30] audit: type=1326 audit(1758512589.256:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14498 comm="syz.2.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fb513d8ec29 code=0x7ffc0000 [ 785.097749][ T30] audit: type=1326 audit(1758512589.256:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14498 comm="syz.2.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb513d8ec29 code=0x7ffc0000 [ 785.582585][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.629845][ T30] audit: type=1326 audit(1758512589.256:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14498 comm="syz.2.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb513d8ec29 code=0x7ffc0000 [ 785.691009][ T5904] usb 2-1: config 0 descriptor?? [ 785.713426][T14482] block nbd3: shutting down sockets [ 785.843272][ T30] audit: type=1326 audit(1758512589.256:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14498 comm="syz.2.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb513d8ec29 code=0x7ffc0000 [ 786.148331][ T5904] usbhid 2-1:0.0: can't add hid device: -71 [ 786.159157][ T5904] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 786.416762][ T30] audit: type=1326 audit(1758512589.256:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14498 comm="syz.2.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb513d8ec29 code=0x7ffc0000 [ 786.451041][ T30] audit: type=1326 audit(1758512589.256:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14498 comm="syz.2.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb513d8ec29 code=0x7ffc0000 [ 786.540258][ T5904] usb 2-1: USB disconnect, device number 18 [ 786.709211][T14521] netlink: 'syz.3.1933': attribute type 3 has an invalid length. [ 786.717043][T14521] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1933'. [ 786.729096][T14521] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 786.959326][T14522] netlink: 'syz.1.1932': attribute type 12 has an invalid length. [ 788.239577][T14538] netlink: 'syz.2.1937': attribute type 12 has an invalid length. [ 789.574601][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1942'. [ 789.623490][T14558] FAULT_INJECTION: forcing a failure. [ 789.623490][T14558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.658053][T14558] CPU: 0 UID: 0 PID: 14558 Comm: syz.0.1942 Not tainted syzkaller #0 PREEMPT(full) [ 789.658080][T14558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 789.658091][T14558] Call Trace: [ 789.658096][T14558] [ 789.658103][T14558] dump_stack_lvl+0x16c/0x1f0 [ 789.658131][T14558] should_fail_ex+0x512/0x640 [ 789.658156][T14558] _copy_to_user+0x32/0xd0 [ 789.658181][T14558] simple_read_from_buffer+0xcb/0x170 [ 789.658199][T14558] proc_fail_nth_read+0x197/0x240 [ 789.658218][T14558] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.658239][T14558] ? rw_verify_area+0xcf/0x6c0 [ 789.658263][T14558] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.658281][T14558] vfs_read+0x1e1/0xcf0 [ 789.658300][T14558] ? __pfx___mutex_lock+0x10/0x10 [ 789.658321][T14558] ? __pfx_vfs_read+0x10/0x10 [ 789.658343][T14558] ? __fget_files+0x20e/0x3c0 [ 789.658367][T14558] ksys_read+0x12a/0x250 [ 789.658381][T14558] ? __pfx_ksys_read+0x10/0x10 [ 789.658403][T14558] do_syscall_64+0xcd/0x4e0 [ 789.658425][T14558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.658441][T14558] RIP: 0033:0x7f2b9a98d63c [ 789.658453][T14558] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 789.658468][T14558] RSP: 002b:00007f2b9b791030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 789.658483][T14558] RAX: ffffffffffffffda RBX: 00007f2b9abd5fa0 RCX: 00007f2b9a98d63c [ 789.658494][T14558] RDX: 000000000000000f RSI: 00007f2b9b7910a0 RDI: 0000000000000004 [ 789.658503][T14558] RBP: 00007f2b9b791090 R08: 0000000000000000 R09: 0000000000000000 [ 789.658512][T14558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 789.658522][T14558] R13: 00007f2b9abd6038 R14: 00007f2b9abd5fa0 R15: 00007ffef4c59898 [ 789.658548][T14558] [ 789.923899][T14559] syzkaller0: create flow: hash 389627375 index 1 [ 790.947511][T14556] syzkaller0: delete flow: hash 389627375 index 1 [ 793.552067][ T30] audit: type=1400 audit(1758512598.166:535): avc: denied { bind } for pid=14598 comm="syz.0.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 793.777897][ T30] audit: type=1400 audit(1758512598.166:536): avc: denied { node_bind } for pid=14598 comm="syz.0.1952" saddr=fc00::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 794.224376][ T30] audit: type=1400 audit(1758512598.856:537): avc: denied { mount } for pid=14613 comm="syz.2.1954" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 794.967309][T14625] netlink: 'syz.0.1955': attribute type 12 has an invalid length. [ 795.227746][T14629] netlink: 'syz.2.1956': attribute type 10 has an invalid length. [ 795.837791][T14622] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 795.853074][T14629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.860806][T14622] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 795.872726][T14629] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 795.893615][T14622] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 796.001514][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1957'. [ 796.202882][T14637] FAULT_INJECTION: forcing a failure. [ 796.202882][T14637] name failslab, interval 1, probability 0, space 0, times 0 [ 796.217081][T14637] CPU: 1 UID: 0 PID: 14637 Comm: syz.4.1959 Not tainted syzkaller #0 PREEMPT(full) [ 796.217106][T14637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 796.217116][T14637] Call Trace: [ 796.217123][T14637] [ 796.217129][T14637] dump_stack_lvl+0x16c/0x1f0 [ 796.217157][T14637] should_fail_ex+0x512/0x640 [ 796.217179][T14637] ? fs_reclaim_acquire+0xae/0x150 [ 796.217204][T14637] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 796.217230][T14637] should_failslab+0xc2/0x120 [ 796.217255][T14637] __kmalloc_noprof+0xd2/0x510 [ 796.217280][T14637] tomoyo_realpath_from_path+0xc2/0x6e0 [ 796.217308][T14637] ? tomoyo_profile+0x47/0x60 [ 796.217328][T14637] tomoyo_path_number_perm+0x245/0x580 [ 796.217349][T14637] ? tomoyo_path_number_perm+0x237/0x580 [ 796.217374][T14637] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 796.217397][T14637] ? find_held_lock+0x2b/0x80 [ 796.217440][T14637] ? find_held_lock+0x2b/0x80 [ 796.217459][T14637] ? hook_file_ioctl_common+0x145/0x410 [ 796.217482][T14637] ? __fget_files+0x20e/0x3c0 [ 796.217505][T14637] security_file_ioctl+0x9b/0x240 [ 796.217529][T14637] __x64_sys_ioctl+0xb7/0x210 [ 796.217557][T14637] do_syscall_64+0xcd/0x4e0 [ 796.217582][T14637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.217598][T14637] RIP: 0033:0x7f5a05f8ec29 [ 796.217611][T14637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.217625][T14637] RSP: 002b:00007f5a06e6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 796.217640][T14637] RAX: ffffffffffffffda RBX: 00007f5a061d6090 RCX: 00007f5a05f8ec29 [ 796.217650][T14637] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 796.217660][T14637] RBP: 00007f5a06e6d090 R08: 0000000000000000 R09: 0000000000000000 [ 796.217670][T14637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.217679][T14637] R13: 00007f5a061d6128 R14: 00007f5a061d6090 R15: 00007fff7cbf7a58 [ 796.217703][T14637] [ 796.217724][T14637] ERROR: Out of memory at tomoyo_realpath_from_path. [ 798.012571][T14657] comedi comedi0: Minor 47 could not be opened [ 798.353246][ T44] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 798.464778][T14657] block nbd2: shutting down sockets [ 798.783203][ T44] usb 4-1: device descriptor read/64, error -71 [ 799.073332][ T44] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 799.089491][T14674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=14674 comm=syz.2.1970 [ 799.494019][ T44] usb 4-1: device descriptor read/64, error -71 [ 800.344435][ T44] usb usb4-port1: attempt power cycle [ 800.400830][T14685] netlink: 'syz.2.1972': attribute type 1 has an invalid length. [ 800.408975][T14685] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1972'. [ 800.714241][ T44] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 801.195906][ T44] usb 4-1: device descriptor read/8, error -71 [ 801.723561][ T5940] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 801.873270][ T5940] usb 1-1: Using ep0 maxpacket: 8 [ 801.880456][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 801.901400][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 801.922741][ T5940] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 801.952765][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 801.983300][ T5940] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 801.983342][ T5940] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 802.433303][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.442573][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 802.448852][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 802.510238][ T5940] usb 1-1: config 0 descriptor?? [ 802.516331][T14696] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 802.732867][T14711] ceph: No mds server is up or the cluster is laggy [ 802.773411][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 802.789960][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 804.603858][ T5849] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 804.624980][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 804.812828][ T30] audit: type=1400 audit(1758512609.446:538): avc: denied { bind } for pid=14727 comm="syz.1.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 805.216618][ T5940] usb 1-1: USB disconnect, device number 24 [ 805.718807][T14750] fuse: Unknown parameter '0x0000000000000004' [ 806.738640][T14755] comedi comedi0: Minor 47 could not be opened [ 806.863490][T14763] block nbd2: shutting down sockets [ 808.263702][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.346457][T14786] netlink: 'syz.3.1998': attribute type 3 has an invalid length. [ 808.354446][T14786] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1998'. [ 808.364356][T14786] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 808.962282][ T30] audit: type=1400 audit(1758512613.596:539): avc: denied { mount } for pid=14797 comm="syz.1.2002" name="/" dev="configfs" ino=1202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 809.068248][T14799] audit: audit_backlog=65 > audit_backlog_limit=64 [ 809.074908][T14799] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 809.082511][T14799] audit: backlog limit exceeded [ 809.087516][T14799] audit: audit_backlog=65 > audit_backlog_limit=64 [ 809.094013][T14799] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 809.101615][T14799] audit: backlog limit exceeded [ 809.796687][ T5851] audit: audit_backlog=65 > audit_backlog_limit=64 [ 809.803663][ T5851] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 810.006161][T14807] FAULT_INJECTION: forcing a failure. [ 810.006161][T14807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.105170][T14807] CPU: 1 UID: 0 PID: 14807 Comm: syz.1.2004 Not tainted syzkaller #0 PREEMPT(full) [ 810.105197][T14807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 810.105206][T14807] Call Trace: [ 810.105212][T14807] [ 810.105219][T14807] dump_stack_lvl+0x16c/0x1f0 [ 810.105243][T14807] should_fail_ex+0x512/0x640 [ 810.105261][T14807] _copy_to_user+0x32/0xd0 [ 810.105278][T14807] simple_read_from_buffer+0xcb/0x170 [ 810.105292][T14807] proc_fail_nth_read+0x197/0x240 [ 810.105306][T14807] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 810.105320][T14807] ? rw_verify_area+0xcf/0x6c0 [ 810.105340][T14807] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 810.105352][T14807] vfs_read+0x1e1/0xcf0 [ 810.105365][T14807] ? __pfx___mutex_lock+0x10/0x10 [ 810.105380][T14807] ? __pfx_vfs_read+0x10/0x10 [ 810.105399][T14807] ? __fget_files+0x20e/0x3c0 [ 810.105416][T14807] ksys_read+0x12a/0x250 [ 810.105427][T14807] ? __pfx_ksys_read+0x10/0x10 [ 810.105442][T14807] do_syscall_64+0xcd/0x4e0 [ 810.105458][T14807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.105469][T14807] RIP: 0033:0x7f56ae78d63c [ 810.105479][T14807] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 810.105489][T14807] RSP: 002b:00007f56af5c2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 810.105500][T14807] RAX: ffffffffffffffda RBX: 00007f56ae9d5fa0 RCX: 00007f56ae78d63c [ 810.105507][T14807] RDX: 000000000000000f RSI: 00007f56af5c20a0 RDI: 0000000000000004 [ 810.105513][T14807] RBP: 00007f56af5c2090 R08: 0000000000000000 R09: 0000000000000000 [ 810.105520][T14807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.105526][T14807] R13: 00007f56ae9d6038 R14: 00007f56ae9d5fa0 R15: 00007ffed41ff308 [ 810.105540][T14807] [ 810.780000][T14812] kAFS: No cell specified [ 810.786435][T14814] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2005'. [ 810.865852][T14814] team0: Mode "ÿÿÿÿ" not found [ 811.657969][ T44] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 811.810291][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 811.810328][ T30] audit: type=1400 audit(1758512616.366:605): avc: denied { ioctl } for pid=14826 comm="syz.3.2011" path="socket:[43121]" dev="sockfs" ino=43121 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 811.931886][ T44] usb 3-1: config 62 has too many interfaces: 189, using maximum allowed: 32 [ 812.033028][ T44] usb 3-1: config 62 has 1 interface, different from the descriptor's value: 189 [ 812.183279][ T44] usb 3-1: config 62 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.307655][ T44] usb 3-1: config 62 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.426198][ T44] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 812.438768][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.157962][ T5940] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 813.234481][ T5940] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 813.715805][ T44] elecom 0003:056E:011C.0008: unknown main item tag 0x0 [ 813.785036][T14863] FAULT_INJECTION: forcing a failure. [ 813.785036][T14863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.844503][T14863] CPU: 0 UID: 0 PID: 14863 Comm: syz.0.2019 Not tainted syzkaller #0 PREEMPT(full) [ 813.844520][T14863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 813.844527][T14863] Call Trace: [ 813.844531][T14863] [ 813.844535][T14863] dump_stack_lvl+0x16c/0x1f0 [ 813.844553][T14863] should_fail_ex+0x512/0x640 [ 813.844570][T14863] _copy_from_user+0x2e/0xd0 [ 813.844587][T14863] binder_ioctl+0x51c/0x71f0 [ 813.844610][T14863] ? tomoyo_path_number_perm+0x18d/0x580 [ 813.844630][T14863] ? __pfx_binder_ioctl+0x10/0x10 [ 813.844648][T14863] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 813.844662][T14863] ? do_vfs_ioctl+0x128/0x14f0 [ 813.844679][T14863] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 813.844696][T14863] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 813.844718][T14863] ? hook_file_ioctl_common+0x145/0x410 [ 813.844733][T14863] ? selinux_file_ioctl+0x180/0x270 [ 813.844748][T14863] ? selinux_file_ioctl+0xb4/0x270 [ 813.844765][T14863] ? __pfx_binder_ioctl+0x10/0x10 [ 813.844782][T14863] __x64_sys_ioctl+0x18e/0x210 [ 813.844800][T14863] do_syscall_64+0xcd/0x4e0 [ 813.844816][T14863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.844828][T14863] RIP: 0033:0x7f2b9a98ec29 [ 813.844837][T14863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.844848][T14863] RSP: 002b:00007f2b9b791038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 813.844860][T14863] RAX: ffffffffffffffda RBX: 00007f2b9abd5fa0 RCX: 00007f2b9a98ec29 [ 813.844867][T14863] RDX: 0000200000000240 RSI: 00000000c0306201 RDI: 0000000000000005 [ 813.844873][T14863] RBP: 00007f2b9b791090 R08: 0000000000000000 R09: 0000000000000000 [ 813.844880][T14863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.844886][T14863] R13: 00007f2b9abd6038 R14: 00007f2b9abd5fa0 R15: 00007ffef4c59898 [ 813.844900][T14863] [ 813.844905][T14863] binder: 14861:14863 ioctl c0306201 200000000240 returned -14 [ 814.175637][ T44] elecom 0003:056E:011C.0008: unknown main item tag 0x0 [ 814.298261][T14869] kAFS: No cell specified [ 814.326906][ T44] elecom 0003:056E:011C.0008: unknown main item tag 0x0 [ 814.363198][ T44] elecom 0003:056E:011C.0008: unknown main item tag 0x0 [ 814.400500][ T44] elecom 0003:056E:011C.0008: unknown main item tag 0x0 [ 814.672774][T14874] comedi comedi0: Minor 47 could not be opened [ 814.729945][ T44] elecom 0003:056E:011C.0008: unknown main item tag 0x0 [ 814.778474][T14876] FAULT_INJECTION: forcing a failure. [ 814.778474][T14876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.782537][ T44] elecom 0003:056E:011C.0008: unknown main item tag 0x0 [ 814.823827][T14874] block nbd0: shutting down sockets [ 814.843708][T14876] CPU: 1 UID: 0 PID: 14876 Comm: syz.1.2023 Not tainted syzkaller #0 PREEMPT(full) [ 814.843724][T14876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 814.843731][T14876] Call Trace: [ 814.843735][T14876] [ 814.843739][T14876] dump_stack_lvl+0x16c/0x1f0 [ 814.843759][T14876] should_fail_ex+0x512/0x640 [ 814.843775][T14876] _copy_from_user+0x2e/0xd0 [ 814.843792][T14876] copy_msghdr_from_user+0x98/0x160 [ 814.843807][T14876] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 814.843826][T14876] ___sys_sendmsg+0xfe/0x1d0 [ 814.843840][T14876] ? __pfx____sys_sendmsg+0x10/0x10 [ 814.843870][T14876] __sys_sendmsg+0x16d/0x220 [ 814.843886][T14876] ? __pfx___sys_sendmsg+0x10/0x10 [ 814.843908][T14876] do_syscall_64+0xcd/0x4e0 [ 814.843924][T14876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.843936][T14876] RIP: 0033:0x7f56ae78ec29 [ 814.843945][T14876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.843956][T14876] RSP: 002b:00007f56af5c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 814.843966][T14876] RAX: ffffffffffffffda RBX: 00007f56ae9d5fa0 RCX: 00007f56ae78ec29 [ 814.843974][T14876] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 814.843980][T14876] RBP: 00007f56af5c2090 R08: 0000000000000000 R09: 0000000000000000 [ 814.843986][T14876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.843993][T14876] R13: 00007f56ae9d6038 R14: 00007f56ae9d5fa0 R15: 00007ffed41ff308 [ 814.844006][T14876] [ 815.072076][ T44] elecom 0003:056E:011C.0008: hidraw1: USB HID v0.00 Device [HID 056e:011c] on usb-dummy_hcd.2-1/input0 [ 816.695688][T14889] netlink: 'syz.3.2026': attribute type 4 has an invalid length. [ 816.712165][ T5904] usb 3-1: USB disconnect, device number 21 [ 816.735467][T14884] netlink: 'syz.3.2026': attribute type 4 has an invalid length. [ 816.915836][ T30] audit: type=1400 audit(1758512621.556:606): avc: denied { watch watch_reads } for pid=14882 comm="syz.3.2026" path="/syzcgroup/net/syz3/syz0" dev="cgroup" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 817.287531][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 817.305250][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 817.734417][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 817.740519][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 817.884038][T14897] ceph: No mds server is up or the cluster is laggy [ 818.096693][T14908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2031'. [ 818.313535][T14908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2031'. [ 818.746028][ T30] audit: type=1400 audit(1758512623.376:607): avc: denied { execmem } for pid=14921 comm="syz.3.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 819.035754][T14930] FAULT_INJECTION: forcing a failure. [ 819.035754][T14930] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 819.091565][T14930] CPU: 0 UID: 0 PID: 14930 Comm: syz.4.2037 Not tainted syzkaller #0 PREEMPT(full) [ 819.091587][T14930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 819.091594][T14930] Call Trace: [ 819.091598][T14930] [ 819.091602][T14930] dump_stack_lvl+0x16c/0x1f0 [ 819.091621][T14930] should_fail_ex+0x512/0x640 [ 819.091638][T14930] should_fail_alloc_page+0xe7/0x130 [ 819.091653][T14930] prepare_alloc_pages+0x3c2/0x610 [ 819.091671][T14930] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 819.091684][T14930] ? rcu_is_watching+0x12/0xc0 [ 819.091699][T14930] ? trace_mm_page_alloc+0x11f/0x1a0 [ 819.091714][T14930] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 819.091725][T14930] ? alloc_file_pseudo+0x13a/0x230 [ 819.091740][T14930] ? __x64_sys_io_setup+0xc9/0x210 [ 819.091753][T14930] ? do_syscall_64+0xcd/0x4e0 [ 819.091767][T14930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.091780][T14930] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 819.091799][T14930] ? __lock_acquire+0x62e/0x1ce0 [ 819.091816][T14930] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 819.091830][T14930] ? policy_nodemask+0xea/0x4e0 [ 819.091844][T14930] alloc_pages_mpol+0x1fb/0x550 [ 819.091857][T14930] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 819.091871][T14930] ? filemap_get_entry+0x1a7/0x3b0 [ 819.091886][T14930] folio_alloc_noprof+0x20/0x2d0 [ 819.091902][T14930] filemap_alloc_folio_noprof+0x3a1/0x470 [ 819.091920][T14930] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 819.091937][T14930] ? rcu_is_watching+0x12/0xc0 [ 819.091953][T14930] __filemap_get_folio+0x5e1/0xc30 [ 819.091969][T14930] ioctx_alloc+0x761/0x2120 [ 819.091988][T14930] ? __pfx_ioctx_alloc+0x10/0x10 [ 819.092000][T14930] ? __might_fault+0x13b/0x190 [ 819.092015][T14930] __x64_sys_io_setup+0xc9/0x210 [ 819.092030][T14930] do_syscall_64+0xcd/0x4e0 [ 819.092045][T14930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.092056][T14930] RIP: 0033:0x7f5a05f8ec29 [ 819.092065][T14930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.092076][T14930] RSP: 002b:00007f5a06e8e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 819.092087][T14930] RAX: ffffffffffffffda RBX: 00007f5a061d5fa0 RCX: 00007f5a05f8ec29 [ 819.092094][T14930] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000010000 [ 819.092105][T14930] RBP: 00007f5a06e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 819.092112][T14930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 819.092118][T14930] R13: 00007f5a061d6038 R14: 00007f5a061d5fa0 R15: 00007fff7cbf7a58 [ 819.092131][T14930] [ 819.353401][T14935] loop6: detected capacity change from 0 to 524287487 [ 819.360718][T14935] buffer_io_error: 40 callbacks suppressed [ 819.360731][T14935] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.374583][T14935] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.382456][T14935] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.390386][T14935] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.398280][T14935] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.417640][ T5904] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 819.426321][ T30] audit: type=1400 audit(1758512623.986:608): avc: denied { read write } for pid=14929 comm="syz.4.2037" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 819.461877][T14935] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.470022][T14935] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.479489][T14935] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.489894][T14935] ldm_validate_partition_table(): Disk read failed. [ 819.499186][T14935] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.507415][T14935] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.517956][T14935] Dev loop6: unable to read RDB block 0 [ 819.524054][T14935] loop6: unable to read partition table [ 819.529914][T14935] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 819.541667][ T30] audit: type=1400 audit(1758512623.986:609): avc: denied { open } for pid=14929 comm="syz.4.2037" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 819.663378][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 819.690203][ T5904] usb 3-1: unable to get BOS descriptor or descriptor too short [ 819.702570][ T5904] usb 3-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 819.747131][ T5904] usb 3-1: config 12 interface 0 has no altsetting 0 [ 819.783219][ T5904] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 819.800451][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.854164][ T5904] usb 3-1: Product: syz [ 819.863388][ T5904] usb 3-1: Manufacturer: syz [ 819.868007][ T5904] usb 3-1: SerialNumber: syz [ 820.296617][T14933] block nbd2: shutting down sockets [ 820.312313][ T5904] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 820.359678][ T5904] usb 3-1: selecting invalid altsetting 0 [ 820.613547][ T5904] usb 3-1: USB disconnect, device number 22 [ 820.820850][ T5220] ldm_validate_partition_table(): Disk read failed. [ 820.849053][ T5220] Dev loop6: unable to read RDB block 0 [ 820.881967][ T5220] loop6: unable to read partition table [ 822.101542][ T30] audit: type=1326 audit(1758512626.136:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14948 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a05f8ec29 code=0x7ffc0000 [ 823.033782][ T30] audit: type=1326 audit(1758512626.136:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14948 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a05f8ec29 code=0x7ffc0000 [ 823.057618][ T30] audit: type=1326 audit(1758512626.146:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14948 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f5a05f8ec29 code=0x7ffc0000 [ 823.081075][ T30] audit: type=1326 audit(1758512626.146:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14948 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a05f8ec29 code=0x7ffc0000 [ 823.104526][ T5904] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 823.112161][ T30] audit: type=1326 audit(1758512626.146:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14948 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a05f8ec29 code=0x7ffc0000 [ 823.147099][ T30] audit: type=1326 audit(1758512626.146:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14948 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a05f8ec29 code=0x7ffc0000 [ 823.171316][ T30] audit: type=1326 audit(1758512626.146:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14948 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a05f8ec29 code=0x7ffc0000 [ 823.195081][ T30] audit: type=1326 audit(1758512626.146:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14948 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a05f8ec29 code=0x7ffc0000 [ 823.314291][ T30] audit: type=1326 audit(1758512626.146:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14948 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5a05f8ec29 code=0x7ffc0000 [ 823.364514][ T5904] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 823.373757][ T30] audit: type=1326 audit(1758512626.156:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14948 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a05f8ec29 code=0x7ffc0000 [ 823.380476][ T5904] usb 3-1: can't read configurations, error -61 [ 823.403737][ T44] libceph: connect (1)[c::]:6789 error -101 [ 823.449266][T14961] ceph: No mds server is up or the cluster is laggy [ 823.523860][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 823.663261][ T5904] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 823.930982][ T5904] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 823.950616][ T5904] usb 3-1: can't read configurations, error -61 [ 823.991302][ T5904] usb usb3-port1: attempt power cycle [ 824.820895][T14983] kAFS: No cell specified [ 827.617593][T15019] kAFS: No cell specified [ 829.794835][T15044] netlink: 'syz.1.2063': attribute type 12 has an invalid length. [ 830.833293][ T5940] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 830.976102][T15074] comedi comedi0: Minor 47 could not be opened [ 831.083396][ T5940] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 831.112803][ T5940] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 831.132277][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.145828][ T5940] usb 3-1: Product: syz [ 831.164804][ T5940] usb 3-1: Manufacturer: syz [ 831.171623][ T5940] usb 3-1: SerialNumber: syz [ 831.285763][T15074] block nbd4: shutting down sockets [ 831.360636][ T5940] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 831.423888][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 831.423902][ T30] audit: type=1400 audit(1758512636.066:626): avc: denied { map } for pid=15045 comm="syz.3.2066" path="socket:[43578]" dev="sockfs" ino=43578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 831.855404][ T5940] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 831.862365][T15086] netlink: 'syz.1.2074': attribute type 3 has an invalid length. [ 831.931223][T15086] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2074'. [ 831.983307][T15086] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 833.383750][T15105] fuse: Unknown parameter 'fd0x0000000000000004' [ 833.611666][ T44] usb 3-1: USB disconnect, device number 26 [ 833.709257][T15111] tc_dump_action: action bad kind [ 834.083241][ T30] audit: type=1400 audit(1758512638.686:627): avc: denied { remove_name } for pid=15110 comm="syz.2.2080" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 834.126720][ T30] audit: type=1400 audit(1758512638.686:628): avc: denied { unlink } for pid=15110 comm="syz.2.2080" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 837.059392][T15154] comedi comedi0: Minor 47 could not be opened [ 837.890585][T13412] block nbd4: Receive control failed (result -32) [ 838.238816][T15152] block nbd4: shutting down sockets [ 839.737603][T15177] netlink: 'syz.3.2093': attribute type 4 has an invalid length. [ 839.748988][T15177] netlink: 'syz.3.2093': attribute type 4 has an invalid length. [ 839.763184][ T30] audit: type=1400 audit(1758512644.346:629): avc: denied { bind } for pid=15171 comm="syz.3.2093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 839.770103][T15177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=15177 comm=syz.3.2093 [ 840.306828][T15187] overlayfs: failed to resolve './file1': -2 [ 841.517510][ T44] libceph: connect (1)[c::]:6789 error -101 [ 841.523666][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 841.739293][T15202] ceph: No mds server is up or the cluster is laggy [ 842.516136][T15219] comedi comedi0: Minor 47 could not be opened [ 842.743958][T15219] block nbd1: shutting down sockets [ 844.492257][T15232] comedi comedi0: Minor 47 could not be opened [ 845.096376][ T30] audit: type=1400 audit(1758512649.726:630): avc: denied { ioctl } for pid=15245 comm="syz.1.2114" path="socket:[44391]" dev="sockfs" ino=44391 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 845.182353][ T30] audit: type=1400 audit(1758512649.776:631): avc: denied { setopt } for pid=15245 comm="syz.1.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 845.678952][T15235] block nbd3: shutting down sockets [ 849.434017][T15312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2129'. [ 849.789608][T15320] netlink: 'syz.2.2132': attribute type 3 has an invalid length. [ 849.868688][T15314] comedi comedi0: Minor 47 could not be opened [ 849.878145][T15314] binder: 15310:15314 ioctl 4018620d 0 returned -22 [ 849.936951][T15320] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2132'. [ 850.046559][T15320] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 850.071748][T15314] block nbd3: shutting down sockets [ 852.306169][ T30] audit: type=1400 audit(1758512656.946:632): avc: denied { accept } for pid=15350 comm="syz.3.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 852.326066][ C1] vkms_vblank_simulate: vblank timer overrun [ 853.203993][T15367] netlink: 'syz.1.2143': attribute type 12 has an invalid length. [ 855.040958][T15391] UBIFS error (pid: 15391): cannot open "c:::", error -22 [ 855.043342][T15391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2148'. [ 856.429181][T15408] netlink: 'syz.2.2152': attribute type 3 has an invalid length. [ 856.437073][T15408] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2152'. [ 856.464104][T15408] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 856.507050][T15406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=15406 comm=syz.0.2151 [ 856.544699][T15406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2151'. [ 856.773825][T15406] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 856.788843][T15406] block device autoloading is deprecated and will be removed. [ 857.225044][T15417] kAFS: No cell specified [ 858.966697][ T30] audit: type=1400 audit(1758512663.606:633): avc: denied { getopt } for pid=15418 comm="syz.3.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 858.971346][T15439] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2161'. [ 862.071815][T15460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2165'. [ 862.373096][T15470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 864.054304][T15484] overlayfs: missing 'lowerdir' [ 864.294268][ T30] audit: type=1400 audit(1758512668.666:634): avc: denied { ioctl } for pid=15479 comm="syz.4.2171" path="socket:[44915]" dev="sockfs" ino=44915 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 864.319228][ T30] audit: type=1400 audit(1758512668.686:635): avc: denied { mount } for pid=15479 comm="syz.4.2171" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 864.417332][ T30] audit: type=1400 audit(1758512668.686:636): avc: denied { mounton } for pid=15479 comm="syz.4.2171" path="/437/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 864.441345][ T30] audit: type=1400 audit(1758512668.766:637): avc: denied { remount } for pid=15479 comm="syz.4.2171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 864.661884][ T30] audit: type=1400 audit(1758512669.296:638): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 867.188967][ T30] audit: type=1400 audit(1758512671.826:639): avc: granted { setsecparam } for pid=15505 comm="syz.3.2178" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 869.398820][T15500] tipc: Started in network mode [ 869.405377][T15500] tipc: Node identity 3a9083e54e4, cluster identity 4711 [ 869.412540][T15500] tipc: Enabled bearer , priority 0 [ 869.466952][T15500] tipc: Disabling bearer [ 869.714908][T15536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2186'. [ 869.862449][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.896172][ T30] audit: type=1400 audit(1758512680.536:640): avc: denied { shutdown } for pid=15590 comm="syz.3.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 876.189166][T15586] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2199'. [ 876.616295][T15601] block nbd3: Attempted send on invalid socket [ 876.638433][ T30] audit: type=1400 audit(1758512681.256:641): avc: denied { mounton } for pid=15600 comm="syz.3.2202" path="/syzcgroup/unified/syz3" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 876.669641][T15601] blk_print_req_error: 121 callbacks suppressed [ 876.669656][T15601] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 876.725725][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2202'. [ 879.859864][T15635] netlink: 'syz.2.2209': attribute type 12 has an invalid length. [ 880.617417][T15638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2210'. [ 888.188018][T15729] FAULT_INJECTION: forcing a failure. [ 888.188018][T15729] name failslab, interval 1, probability 0, space 0, times 0 [ 888.201205][T15729] CPU: 1 UID: 0 PID: 15729 Comm: syz.4.2234 Not tainted syzkaller #0 PREEMPT(full) [ 888.201231][T15729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 888.201241][T15729] Call Trace: [ 888.201248][T15729] [ 888.201255][T15729] dump_stack_lvl+0x16c/0x1f0 [ 888.201283][T15729] should_fail_ex+0x512/0x640 [ 888.201304][T15729] ? fs_reclaim_acquire+0xae/0x150 [ 888.201329][T15729] ? tomoyo_encode2+0x100/0x3e0 [ 888.201353][T15729] should_failslab+0xc2/0x120 [ 888.201374][T15729] __kmalloc_noprof+0xd2/0x510 [ 888.201400][T15729] tomoyo_encode2+0x100/0x3e0 [ 888.201428][T15729] tomoyo_encode+0x29/0x50 [ 888.201452][T15729] tomoyo_realpath_from_path+0x18f/0x6e0 [ 888.201481][T15729] ? tomoyo_profile+0x47/0x60 [ 888.201500][T15729] tomoyo_path_number_perm+0x245/0x580 [ 888.201520][T15729] ? tomoyo_path_number_perm+0x237/0x580 [ 888.201545][T15729] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 888.201569][T15729] ? find_held_lock+0x2b/0x80 [ 888.201614][T15729] ? find_held_lock+0x2b/0x80 [ 888.201634][T15729] ? hook_file_ioctl_common+0x145/0x410 [ 888.201658][T15729] ? __fget_files+0x20e/0x3c0 [ 888.201683][T15729] security_file_ioctl+0x9b/0x240 [ 888.201709][T15729] __x64_sys_ioctl+0xb7/0x210 [ 888.201738][T15729] do_syscall_64+0xcd/0x4e0 [ 888.201764][T15729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.201782][T15729] RIP: 0033:0x7f5a05f8ec29 [ 888.201797][T15729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.201813][T15729] RSP: 002b:00007f5a06e8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 888.201831][T15729] RAX: ffffffffffffffda RBX: 00007f5a061d5fa0 RCX: 00007f5a05f8ec29 [ 888.201842][T15729] RDX: 0000200000000100 RSI: 00000000000089ef RDI: 0000000000000004 [ 888.201853][T15729] RBP: 00007f5a06e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 888.201863][T15729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.201874][T15729] R13: 00007f5a061d6038 R14: 00007f5a061d5fa0 R15: 00007fff7cbf7a58 [ 888.201897][T15729] [ 888.201917][T15729] ERROR: Out of memory at tomoyo_realpath_from_path. [ 889.950005][T15753] i2c i2c-0: Invalid block write size 33 [ 893.247221][T15798] FAULT_INJECTION: forcing a failure. [ 893.247221][T15798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.274559][T15798] CPU: 1 UID: 0 PID: 15798 Comm: syz.3.2254 Not tainted syzkaller #0 PREEMPT(full) [ 893.274583][T15798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 893.274594][T15798] Call Trace: [ 893.274600][T15798] [ 893.274606][T15798] dump_stack_lvl+0x16c/0x1f0 [ 893.274633][T15798] should_fail_ex+0x512/0x640 [ 893.274659][T15798] _copy_from_iter+0x29f/0x1720 [ 893.274688][T15798] ? __alloc_skb+0x200/0x380 [ 893.274709][T15798] ? __pfx__copy_from_iter+0x10/0x10 [ 893.274735][T15798] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 893.274766][T15798] netlink_sendmsg+0x829/0xdd0 [ 893.274793][T15798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 893.274825][T15798] ____sys_sendmsg+0xa95/0xc70 [ 893.274852][T15798] ? copy_msghdr_from_user+0x10a/0x160 [ 893.274873][T15798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 893.274916][T15798] ___sys_sendmsg+0x134/0x1d0 [ 893.274939][T15798] ? __pfx____sys_sendmsg+0x10/0x10 [ 893.274989][T15798] __sys_sendmsg+0x16d/0x220 [ 893.275011][T15798] ? __pfx___sys_sendmsg+0x10/0x10 [ 893.275048][T15798] do_syscall_64+0xcd/0x4e0 [ 893.275073][T15798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.275091][T15798] RIP: 0033:0x7f9a9cf8ec29 [ 893.275106][T15798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 893.275123][T15798] RSP: 002b:00007f9a9b1ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 893.275140][T15798] RAX: ffffffffffffffda RBX: 00007f9a9d1d5fa0 RCX: 00007f9a9cf8ec29 [ 893.275151][T15798] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 893.275162][T15798] RBP: 00007f9a9b1ee090 R08: 0000000000000000 R09: 0000000000000000 [ 893.275172][T15798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.275182][T15798] R13: 00007f9a9d1d6038 R14: 00007f9a9d1d5fa0 R15: 00007ffd98111888 [ 893.275206][T15798] [ 893.772904][T15809] FAULT_INJECTION: forcing a failure. [ 893.772904][T15809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.802378][T15809] CPU: 1 UID: 0 PID: 15809 Comm: syz.3.2259 Not tainted syzkaller #0 PREEMPT(full) [ 893.802406][T15809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 893.802416][T15809] Call Trace: [ 893.802422][T15809] [ 893.802428][T15809] dump_stack_lvl+0x16c/0x1f0 [ 893.802455][T15809] should_fail_ex+0x512/0x640 [ 893.802480][T15809] _copy_to_user+0x32/0xd0 [ 893.802506][T15809] simple_read_from_buffer+0xcb/0x170 [ 893.802528][T15809] proc_fail_nth_read+0x197/0x240 [ 893.802549][T15809] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 893.802573][T15809] ? rw_verify_area+0xcf/0x6c0 [ 893.802599][T15809] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 893.802620][T15809] vfs_read+0x1e1/0xcf0 [ 893.802650][T15809] ? __pfx___mutex_lock+0x10/0x10 [ 893.802672][T15809] ? __pfx_vfs_read+0x10/0x10 [ 893.802695][T15809] ? __fget_files+0x20e/0x3c0 [ 893.802723][T15809] ksys_read+0x12a/0x250 [ 893.802740][T15809] ? __pfx_ksys_read+0x10/0x10 [ 893.802764][T15809] do_syscall_64+0xcd/0x4e0 [ 893.802788][T15809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.802805][T15809] RIP: 0033:0x7f9a9cf8d63c [ 893.802819][T15809] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 893.802836][T15809] RSP: 002b:00007f9a9b1ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 893.802853][T15809] RAX: ffffffffffffffda RBX: 00007f9a9d1d5fa0 RCX: 00007f9a9cf8d63c [ 893.802864][T15809] RDX: 000000000000000f RSI: 00007f9a9b1ee0a0 RDI: 0000000000000003 [ 893.802872][T15809] RBP: 00007f9a9b1ee090 R08: 0000000000000000 R09: 0000000000000000 [ 893.802881][T15809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.802891][T15809] R13: 00007f9a9d1d6038 R14: 00007f9a9d1d5fa0 R15: 00007ffd98111888 [ 893.802914][T15809] [ 894.043214][ T5928] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 894.273295][ T5928] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 894.351965][ T5928] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 894.361825][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.370359][ T5928] usb 2-1: Product: syz [ 894.743358][ T5928] usb 2-1: Manufacturer: syz [ 894.750807][ T5928] usb 2-1: SerialNumber: syz [ 894.766105][ T5928] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 894.852404][T12683] syzkaller0: tun_net_xmit 76 [ 894.877856][T12683] syzkaller0: tun_net_xmit 48 [ 894.882651][ T5940] syzkaller0: tun_net_xmit 76 [ 894.913417][ T5940] syzkaller0: tun_net_xmit 76 [ 895.577471][ T5928] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 896.759427][ T5928] usb 2-1: USB disconnect, device number 19 [ 896.942755][ T30] audit: type=1400 audit(1758512701.576:642): avc: denied { write } for pid=15846 comm="syz.1.2269" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 897.464549][ T30] audit: type=1400 audit(1758512701.576:643): avc: denied { open } for pid=15846 comm="syz.1.2269" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 898.753303][ T44] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 899.023557][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 899.059507][ T44] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 899.068365][ T44] usb 2-1: config 0 has an invalid descriptor of length 241, skipping remainder of the config [ 899.078737][ T44] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 899.175653][ T44] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 899.197552][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.222235][T15868] FAULT_INJECTION: forcing a failure. [ 899.222235][T15868] name failslab, interval 1, probability 0, space 0, times 0 [ 899.235573][ T44] usb 2-1: config 0 descriptor?? [ 899.256140][T15868] CPU: 1 UID: 0 PID: 15868 Comm: syz.4.2273 Not tainted syzkaller #0 PREEMPT(full) [ 899.256162][T15868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 899.256172][T15868] Call Trace: [ 899.256178][T15868] [ 899.256184][T15868] dump_stack_lvl+0x16c/0x1f0 [ 899.256209][T15868] should_fail_ex+0x512/0x640 [ 899.256229][T15868] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 899.256256][T15868] should_failslab+0xc2/0x120 [ 899.256274][T15868] __kmalloc_cache_noprof+0x6a/0x3e0 [ 899.256296][T15868] ? load_msg+0x2fe/0x4a0 [ 899.256324][T15868] ? do_mq_timedsend+0x89b/0xc40 [ 899.256344][T15868] do_mq_timedsend+0x89b/0xc40 [ 899.256364][T15868] ? __pfx_do_mq_timedsend+0x10/0x10 [ 899.256382][T15868] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 899.256405][T15868] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 899.256428][T15868] ? __fget_files+0x20e/0x3c0 [ 899.256452][T15868] __x64_sys_mq_timedsend+0x1cd/0x260 [ 899.256471][T15868] ? ksys_write+0x1ac/0x250 [ 899.256487][T15868] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 899.256512][T15868] do_syscall_64+0xcd/0x4e0 [ 899.256534][T15868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.256550][T15868] RIP: 0033:0x7f5a05f8ec29 [ 899.256563][T15868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 899.256578][T15868] RSP: 002b:00007f5a06e8e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 899.256593][T15868] RAX: ffffffffffffffda RBX: 00007f5a061d5fa0 RCX: 00007f5a05f8ec29 [ 899.256603][T15868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 899.256611][T15868] RBP: 00007f5a06e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 899.256620][T15868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.256629][T15868] R13: 00007f5a061d6038 R14: 00007f5a061d5fa0 R15: 00007fff7cbf7a58 [ 899.256651][T15868] [ 901.684317][T15896] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2279'. [ 901.693864][T15896] unsupported nlmsg_type 40 [ 902.015067][ T30] audit: type=1400 audit(1758512706.316:644): avc: denied { create } for pid=15893 comm="syz.3.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 902.041801][ T44] usb 2-1: USB disconnect, device number 20 [ 902.051975][ T30] audit: type=1400 audit(1758512706.326:645): avc: denied { write } for pid=15893 comm="syz.3.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 902.073742][ T30] audit: type=1400 audit(1758512706.326:646): avc: denied { nlmsg_write } for pid=15893 comm="syz.3.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 902.721315][T15911] comedi comedi0: Minor 47 could not be opened [ 902.863198][ T44] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 903.120338][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 903.262484][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.272785][ T44] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 903.306070][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.322801][ T44] usb 4-1: config 0 descriptor?? [ 903.340977][ T44] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22 [ 903.349854][T15911] block nbd2: shutting down sockets [ 903.824315][T15925] netlink: 'syz.3.2283': attribute type 25 has an invalid length. [ 903.916049][T15925] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 903.925550][T15925] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 904.165866][ T44] usb 4-1: USB disconnect, device number 20 [ 905.253829][ T30] audit: type=1400 audit(1758512709.856:647): avc: denied { setopt } for pid=15937 comm="syz.0.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 905.539832][T15944] comedi comedi0: Minor 47 could not be opened [ 913.974300][T12683] syzkaller0: tun_net_xmit 76 [ 913.980419][T12683] syzkaller0: tun_net_xmit 48 [ 914.003359][ T5928] syzkaller0: tun_net_xmit 76 [ 914.723325][ T5940] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 915.395772][ T5940] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 915.586173][ T5940] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 915.623185][ T5940] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 915.689147][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.753986][T16031] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 915.893234][ T5940] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 915.974466][T16031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.986501][T16031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.011478][ T30] audit: type=1326 audit(1758512720.636:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a98ec29 code=0x7ffc0000 [ 916.085932][ T30] audit: type=1326 audit(1758512720.636:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f2b9a98ec29 code=0x7ffc0000 [ 916.150976][ T5940] usb 1-1: USB disconnect, device number 25 [ 916.256975][ T30] audit: type=1326 audit(1758512720.636:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a98ec29 code=0x7ffc0000 [ 916.320664][ T30] audit: type=1326 audit(1758512720.636:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2b9a98ec29 code=0x7ffc0000 [ 916.345301][ T30] audit: type=1326 audit(1758512720.636:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a98ec29 code=0x7ffc0000 [ 916.452716][ T30] audit: type=1326 audit(1758512720.636:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2b9a98ec29 code=0x7ffc0000 [ 916.478326][ T30] audit: type=1326 audit(1758512720.636:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a98ec29 code=0x7ffc0000 [ 916.508580][ T30] audit: type=1326 audit(1758512720.636:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b9a98ec29 code=0x7ffc0000 [ 916.582991][ T30] audit: type=1326 audit(1758512720.636:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a98ec29 code=0x7ffc0000 [ 916.731433][ T30] audit: type=1326 audit(1758512720.646:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2b9a98ec29 code=0x7ffc0000 [ 917.168385][ T5928] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 917.361955][ T5928] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 917.388017][ T5928] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 917.401547][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.426700][ T5928] usb 3-1: Product: syz [ 917.463181][ T5928] usb 3-1: Manufacturer: syz [ 917.469919][ T5928] usb 3-1: SerialNumber: syz [ 917.596000][ T5928] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 918.106125][ T5928] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 919.526210][T16083] syz_tun: entered allmulticast mode [ 919.547698][T16081] syz_tun: left allmulticast mode [ 920.003181][ T44] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 920.281593][ T5928] usb 3-1: USB disconnect, device number 27 [ 920.423267][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 920.526254][ T44] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 920.534845][ T44] usb 5-1: config 0 has no interface number 0 [ 920.543344][ T44] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 920.554853][ T44] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8A has invalid maxpacket 3292, setting to 1024 [ 921.078226][ T44] usb 5-1: config 0 interface 8 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 921.090625][ T44] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 921.100034][ T44] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 921.187023][ T44] usb 5-1: Product: syz [ 921.339816][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 921.339830][ T30] audit: type=1400 audit(1758512725.846:664): avc: denied { firmware_load } for pid=16089 comm="syz.2.2324" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 921.853804][ T44] usb 5-1: SerialNumber: syz [ 922.215864][ T44] usb 5-1: config 0 descriptor?? [ 922.224296][T16078] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 922.235397][ T44] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 922.307019][ T44] usb 5-1: USB disconnect, device number 18 [ 926.320307][T16153] comedi comedi3: ni_at_a2150: I/O port conflict (0x8,28) [ 931.134516][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.578269][ T30] audit: type=1400 audit(1758512736.196:665): avc: denied { write } for pid=16219 comm="syz.1.2361" path="socket:[47830]" dev="sockfs" ino=47830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 931.971250][ T30] audit: type=1400 audit(1758512736.206:666): avc: denied { read } for pid=16219 comm="syz.1.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 932.408359][T16226] netlink: 'syz.1.2362': attribute type 11 has an invalid length. [ 932.735486][T16215] lo speed is unknown, defaulting to 1000 [ 932.754533][T16215] lo speed is unknown, defaulting to 1000 [ 932.769016][T16215] lo speed is unknown, defaulting to 1000 [ 932.811566][T16215] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 933.046750][T16215] lo speed is unknown, defaulting to 1000 [ 933.496962][T16215] lo speed is unknown, defaulting to 1000 [ 933.516627][T16215] lo speed is unknown, defaulting to 1000 [ 933.535758][T16215] lo speed is unknown, defaulting to 1000 [ 933.554014][T16215] lo speed is unknown, defaulting to 1000 [ 935.023213][T12959] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 935.153246][T12959] usb 5-1: device descriptor read/64, error -71 [ 935.393321][T12959] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 935.993387][T12959] usb 5-1: device descriptor read/64, error -71 [ 936.103995][T12959] usb usb5-port1: attempt power cycle [ 936.534561][T16279] netlink: 'syz.0.2377': attribute type 1 has an invalid length. [ 936.542346][T16279] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2377'. [ 936.834786][T12959] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 936.846121][ T30] audit: type=1400 audit(1758512741.166:667): avc: denied { write } for pid=16276 comm="syz.0.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 936.880377][T12959] usb 5-1: device descriptor read/8, error -71 [ 937.162416][T12959] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 937.195210][T12959] usb 5-1: device descriptor read/8, error -71 [ 937.450205][T12959] usb usb5-port1: unable to enumerate USB device [ 937.530812][T16288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2378'. [ 937.541111][T16288] openvswitch: netlink: Flow actions attr not present in new flow. [ 937.558605][T16287] trusted_key: encrypted_key: master key parameter 'deÏê@r>€‹fault' is invalid [ 938.215235][ T30] audit: type=1400 audit(1758512742.496:668): avc: denied { ioctl } for pid=16289 comm="syz.0.2379" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 938.342290][T16296] FAULT_INJECTION: forcing a failure. [ 938.342290][T16296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.373087][T16296] CPU: 0 UID: 0 PID: 16296 Comm: syz.4.2380 Not tainted syzkaller #0 PREEMPT(full) [ 938.373110][T16296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 938.373119][T16296] Call Trace: [ 938.373124][T16296] [ 938.373131][T16296] dump_stack_lvl+0x16c/0x1f0 [ 938.373157][T16296] should_fail_ex+0x512/0x640 [ 938.373183][T16296] _copy_from_iter+0x29f/0x1720 [ 938.373209][T16296] ? __alloc_skb+0x200/0x380 [ 938.373229][T16296] ? __pfx__copy_from_iter+0x10/0x10 [ 938.373257][T16296] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 938.373288][T16296] netlink_sendmsg+0x829/0xdd0 [ 938.373315][T16296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 938.373353][T16296] ____sys_sendmsg+0xa95/0xc70 [ 938.373381][T16296] ? copy_msghdr_from_user+0x10a/0x160 [ 938.373402][T16296] ? __pfx_____sys_sendmsg+0x10/0x10 [ 938.373440][T16296] ___sys_sendmsg+0x134/0x1d0 [ 938.373462][T16296] ? __pfx____sys_sendmsg+0x10/0x10 [ 938.373516][T16296] __sys_sendmsg+0x16d/0x220 [ 938.373537][T16296] ? __pfx___sys_sendmsg+0x10/0x10 [ 938.373576][T16296] do_syscall_64+0xcd/0x4e0 [ 938.373600][T16296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.373617][T16296] RIP: 0033:0x7f5a05f8ec29 [ 938.373632][T16296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 938.373648][T16296] RSP: 002b:00007f5a06e8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.373664][T16296] RAX: ffffffffffffffda RBX: 00007f5a061d5fa0 RCX: 00007f5a05f8ec29 [ 938.373676][T16296] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 938.373686][T16296] RBP: 00007f5a06e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 938.373697][T16296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.373707][T16296] R13: 00007f5a061d6038 R14: 00007f5a061d5fa0 R15: 00007fff7cbf7a58 [ 938.373730][T16296] [ 939.223504][T13412] Bluetooth: hci3: command 0x0406 tx timeout [ 939.379080][ T30] audit: type=1400 audit(1758512743.996:669): avc: denied { read write } for pid=5845 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 939.427745][ T30] audit: type=1400 audit(1758512744.006:670): avc: denied { open } for pid=5845 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 939.453634][ T30] audit: type=1400 audit(1758512744.006:671): avc: denied { ioctl } for pid=5845 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 939.628475][ T30] audit: type=1400 audit(1758512744.026:672): avc: denied { create } for pid=16309 comm="syz.0.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 939.683816][ T30] audit: type=1400 audit(1758512744.026:673): avc: denied { prog_load } for pid=16309 comm="syz.0.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 939.709675][ T30] audit: type=1400 audit(1758512744.026:674): avc: denied { bpf } for pid=16309 comm="syz.0.2385" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 939.732663][ T30] audit: type=1400 audit(1758512744.026:675): avc: denied { perfmon } for pid=16309 comm="syz.0.2385" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 939.758774][ T30] audit: type=1400 audit(1758512744.026:676): avc: denied { prog_run } for pid=16309 comm="syz.0.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 940.396769][T16322] syzkaller0: create flow: hash 389627375 index 1 [ 940.732372][T16321] syzkaller0: delete flow: hash 389627375 index 1 [ 941.181708][T16333] comedi comedi0: Minor 47 could not be opened [ 941.374233][T16333] block nbd1: shutting down sockets [ 942.968594][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 942.968604][ T30] audit: type=1400 audit(1758512747.606:716): avc: denied { read } for pid=16344 comm="syz.4.2393" name="video9" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 943.437455][ T30] audit: type=1400 audit(1758512747.606:717): avc: denied { open } for pid=16344 comm="syz.4.2393" path="/dev/video9" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 943.466048][ T30] audit: type=1400 audit(1758512747.846:718): avc: denied { read } for pid=16346 comm="syz.0.2394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 943.610144][T16355] FAULT_INJECTION: forcing a failure. [ 943.610144][T16355] name failslab, interval 1, probability 0, space 0, times 0 [ 943.623231][T16355] CPU: 0 UID: 0 PID: 16355 Comm: syz.4.2393 Not tainted syzkaller #0 PREEMPT(full) [ 943.623255][T16355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 943.623265][T16355] Call Trace: [ 943.623271][T16355] [ 943.623278][T16355] dump_stack_lvl+0x16c/0x1f0 [ 943.623311][T16355] should_fail_ex+0x512/0x640 [ 943.623333][T16355] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 943.623354][T16355] should_failslab+0xc2/0x120 [ 943.623374][T16355] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 943.623393][T16355] ? security_file_alloc+0x34/0x2b0 [ 943.623424][T16355] security_file_alloc+0x34/0x2b0 [ 943.623449][T16355] init_file+0x93/0x4c0 [ 943.623472][T16355] alloc_empty_file+0x73/0x1e0 [ 943.623497][T16355] path_openat+0xda/0x2cb0 [ 943.623515][T16355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.623543][T16355] ? __pfx_path_openat+0x10/0x10 [ 943.623568][T16355] do_filp_open+0x20b/0x470 [ 943.623589][T16355] ? __pfx_do_filp_open+0x10/0x10 [ 943.623627][T16355] ? alloc_fd+0x471/0x7d0 [ 943.623654][T16355] do_sys_openat2+0x11b/0x1d0 [ 943.623678][T16355] ? __pfx_do_sys_openat2+0x10/0x10 [ 943.623704][T16355] ? __fget_files+0x20e/0x3c0 [ 943.623728][T16355] __x64_sys_openat+0x174/0x210 [ 943.623752][T16355] ? __pfx___x64_sys_openat+0x10/0x10 [ 943.623774][T16355] ? ksys_write+0x1ac/0x250 [ 943.623800][T16355] do_syscall_64+0xcd/0x4e0 [ 943.623826][T16355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.623843][T16355] RIP: 0033:0x7f5a05f8ec29 [ 943.623857][T16355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 943.623873][T16355] RSP: 002b:00007f5a06e6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 943.623890][T16355] RAX: ffffffffffffffda RBX: 00007f5a061d6090 RCX: 00007f5a05f8ec29 [ 943.623901][T16355] RDX: 000000000000e042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 943.623912][T16355] RBP: 00007f5a06e6c090 R08: 0000000000000000 R09: 0000000000000000 [ 943.623922][T16355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.623932][T16355] R13: 00007f5a061d6128 R14: 00007f5a061d6090 R15: 00007fff7cbf7a58 [ 943.623956][T16355] [ 943.975562][ T30] audit: type=1400 audit(1758512748.616:719): avc: denied { read } for pid=16353 comm="syz.2.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 944.023249][ T30] audit: type=1400 audit(1758512748.656:720): avc: denied { ioctl } for pid=16353 comm="syz.2.2395" path="socket:[48607]" dev="sockfs" ino=48607 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 944.114380][ T30] audit: type=1400 audit(1758512748.756:721): avc: denied { bind } for pid=16362 comm="syz.0.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 944.164566][T16366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2395'. [ 944.288972][ T30] audit: type=1400 audit(1758512748.756:722): avc: denied { setopt } for pid=16362 comm="syz.0.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 944.310289][ T30] audit: type=1400 audit(1758512748.756:723): avc: denied { module_request } for pid=16362 comm="syz.0.2398" kmod="nfnetlink-subsys-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 944.375826][ T30] audit: type=1400 audit(1758512748.926:724): avc: denied { create } for pid=16362 comm="syz.0.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 945.026358][ T30] audit: type=1400 audit(1758512749.636:725): avc: denied { read } for pid=16379 comm="syz.0.2401" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 945.133818][T16380] FAULT_INJECTION: forcing a failure. [ 945.133818][T16380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 945.163641][T16380] CPU: 0 UID: 0 PID: 16380 Comm: syz.0.2401 Not tainted syzkaller #0 PREEMPT(full) [ 945.163665][T16380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 945.163675][T16380] Call Trace: [ 945.163681][T16380] [ 945.163687][T16380] dump_stack_lvl+0x16c/0x1f0 [ 945.163713][T16380] should_fail_ex+0x512/0x640 [ 945.163738][T16380] _copy_to_user+0x32/0xd0 [ 945.163764][T16380] simple_read_from_buffer+0xcb/0x170 [ 945.163783][T16380] proc_fail_nth_read+0x197/0x240 [ 945.163804][T16380] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 945.163825][T16380] ? rw_verify_area+0xcf/0x6c0 [ 945.163854][T16380] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 945.163873][T16380] vfs_read+0x1e1/0xcf0 [ 945.163893][T16380] ? __pfx___mutex_lock+0x10/0x10 [ 945.163915][T16380] ? __pfx_vfs_read+0x10/0x10 [ 945.163938][T16380] ? __fget_files+0x20e/0x3c0 [ 945.163965][T16380] ksys_read+0x12a/0x250 [ 945.163981][T16380] ? __pfx_ksys_read+0x10/0x10 [ 945.163998][T16380] ? fput+0x9b/0xd0 [ 945.164024][T16380] do_syscall_64+0xcd/0x4e0 [ 945.164048][T16380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.164065][T16380] RIP: 0033:0x7f2b9a98d63c [ 945.164078][T16380] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 945.164094][T16380] RSP: 002b:00007f2b9b791030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 945.164110][T16380] RAX: ffffffffffffffda RBX: 00007f2b9abd5fa0 RCX: 00007f2b9a98d63c [ 945.164121][T16380] RDX: 000000000000000f RSI: 00007f2b9b7910a0 RDI: 0000000000000008 [ 945.164131][T16380] RBP: 00007f2b9b791090 R08: 0000000000000000 R09: 0000000000000000 [ 945.164140][T16380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.164150][T16380] R13: 00007f2b9abd6038 R14: 00007f2b9abd5fa0 R15: 00007ffef4c59898 [ 945.164174][T16380] [ 946.225096][T16394] comedi comedi0: Minor 47 could not be opened [ 946.523568][T16394] block nbd1: shutting down sockets [ 946.688721][T16398] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2408'. [ 947.073336][T16402] FAULT_INJECTION: forcing a failure. [ 947.073336][T16402] name failslab, interval 1, probability 0, space 0, times 0 [ 947.086183][T16402] CPU: 0 UID: 0 PID: 16402 Comm: syz.0.2409 Not tainted syzkaller #0 PREEMPT(full) [ 947.086204][T16402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 947.086213][T16402] Call Trace: [ 947.086220][T16402] [ 947.086226][T16402] dump_stack_lvl+0x16c/0x1f0 [ 947.086254][T16402] should_fail_ex+0x512/0x640 [ 947.086274][T16402] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 947.086294][T16402] should_failslab+0xc2/0x120 [ 947.086315][T16402] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 947.086334][T16402] ? security_file_alloc+0x34/0x2b0 [ 947.086364][T16402] security_file_alloc+0x34/0x2b0 [ 947.086389][T16402] init_file+0x93/0x4c0 [ 947.086413][T16402] alloc_empty_file+0x73/0x1e0 [ 947.086437][T16402] path_openat+0xda/0x2cb0 [ 947.086463][T16402] ? stack_trace_save+0x8e/0xc0 [ 947.086486][T16402] ? __pfx_path_openat+0x10/0x10 [ 947.086506][T16402] ? stack_depot_save_flags+0x29/0x9c0 [ 947.086533][T16402] do_filp_open+0x20b/0x470 [ 947.086551][T16402] ? kasan_save_track+0x14/0x30 [ 947.086569][T16402] ? __pfx_do_filp_open+0x10/0x10 [ 947.086591][T16402] ? __x64_sys_execveat+0xc4/0x120 [ 947.086609][T16402] ? do_syscall_64+0xcd/0x4e0 [ 947.086630][T16402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.086674][T16402] do_open_execat+0xf9/0x3a0 [ 947.086690][T16402] ? __pfx_do_open_execat+0x10/0x10 [ 947.086717][T16402] alloc_bprm+0x2d/0x710 [ 947.086737][T16402] do_execveat_common.isra.0+0x1ce/0x610 [ 947.086760][T16402] __x64_sys_execveat+0xda/0x120 [ 947.086781][T16402] do_syscall_64+0xcd/0x4e0 [ 947.086806][T16402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.086822][T16402] RIP: 0033:0x7f2b9a98ec29 [ 947.086836][T16402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 947.086852][T16402] RSP: 002b:00007f2b9b770038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 947.086869][T16402] RAX: ffffffffffffffda RBX: 00007f2b9abd6090 RCX: 00007f2b9a98ec29 [ 947.086880][T16402] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 947.086891][T16402] RBP: 00007f2b9b770090 R08: 0000000000001000 R09: 0000000000000000 [ 947.086901][T16402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.086911][T16402] R13: 00007f2b9abd6128 R14: 00007f2b9abd6090 R15: 00007ffef4c59898 [ 947.086935][T16402] [ 948.349449][T16354] team0: left allmulticast mode [ 948.354449][T16354] C: left allmulticast mode [ 948.360030][T16354] team_slave_1: left allmulticast mode [ 948.371146][T16354] team0: left promiscuous mode [ 948.376249][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 948.376258][ T30] audit: type=1400 audit(1758512753.016:734): avc: denied { connect } for pid=16407 comm="syz.0.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 948.410032][T16354] C: left promiscuous mode [ 948.423966][T16354] team_slave_1: left promiscuous mode [ 948.431955][T16354] bridge0: port 3(team0) entered disabled state [ 948.449744][T16354] bond0: (slave batadv0): Releasing backup interface [ 948.472761][ T30] audit: type=1400 audit(1758512753.106:735): avc: denied { ioctl } for pid=16407 comm="syz.0.2411" path="socket:[49205]" dev="sockfs" ino=49205 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 948.508039][T16354] : left allmulticast mode [ 948.512982][T16354] : left promiscuous mode [ 948.518271][T16354] bridge0: port 1() entered disabled state [ 948.535813][ T30] audit: type=1400 audit(1758512753.106:736): avc: denied { create } for pid=16407 comm="syz.0.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 948.565742][ T30] audit: type=1400 audit(1758512753.106:737): avc: denied { ioctl } for pid=16407 comm="syz.0.2411" path="socket:[49207]" dev="sockfs" ino=49207 ioctlcmd=0x8b37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 948.591370][T16354] bridge_slave_1: left allmulticast mode [ 948.597044][T16354] bridge_slave_1: left promiscuous mode [ 948.602655][T16354] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.613336][ T44] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 948.615515][ T30] audit: type=1400 audit(1758512753.196:738): avc: denied { read write } for pid=16417 comm="syz.3.2414" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 948.648241][T16354] bond0: (slave bond_slave_0): Releasing backup interface [ 948.664172][T16354] bond0: (slave bond_slave_1): Releasing backup interface [ 948.676092][T16354] team0: Port device C removed [ 948.833151][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 948.884062][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.895289][ T44] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 948.914348][ T30] audit: type=1400 audit(1758512753.196:739): avc: denied { open } for pid=16417 comm="syz.3.2414" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 948.915419][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.023823][T16354] team0: Port device team_slave_1 removed [ 949.029841][T16354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.053310][ T30] audit: type=1400 audit(1758512753.196:740): avc: denied { ioctl } for pid=16417 comm="syz.3.2414" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 949.151572][T16354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.158885][ T30] audit: type=1400 audit(1758512753.366:741): avc: denied { create } for pid=16417 comm="syz.3.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 949.188550][ T30] audit: type=1400 audit(1758512753.376:742): avc: denied { bind } for pid=16417 comm="syz.3.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 949.188918][ T44] usb 2-1: config 0 descriptor?? [ 949.229403][ T30] audit: type=1400 audit(1758512753.376:743): avc: denied { setopt } for pid=16417 comm="syz.3.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 949.252264][ T44] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -22 [ 949.939539][T12959] usb 2-1: USB disconnect, device number 21 [ 992.576406][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.015859][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.413052][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1056.419997][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13352/1:b..l [ 1056.428310][ C0] rcu: (detected by 0, t=10502 jiffies, g=80661, q=331 ncpus=2) [ 1056.435993][ C0] task:kworker/u8:12 state:R running task stack:24216 pid:13352 tgid:13352 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1056.449917][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1056.457701][ C0] Call Trace: [ 1056.460951][ C0] [ 1056.463868][ C0] __schedule+0x1190/0x5de0 [ 1056.468342][ C0] ? worker_thread+0x6c8/0xf10 [ 1056.473077][ C0] ? kthread+0x3c2/0x780 [ 1056.477288][ C0] ? ret_from_fork+0x56a/0x730 [ 1056.482019][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1056.486936][ C0] ? __pfx___schedule+0x10/0x10 [ 1056.491769][ C0] ? mark_held_locks+0x49/0x80 [ 1056.496506][ C0] preempt_schedule_irq+0x51/0x90 [ 1056.501502][ C0] irqentry_exit+0x36/0x90 [ 1056.505888][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1056.511835][ C0] RIP: 0010:lock_release+0x183/0x2f0 [ 1056.517091][ C0] Code: 0f c1 05 f8 4d 3f 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 0d 0c 3f 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 1056.536667][ C0] RSP: 0018:ffffc90000ad7a78 EFLAGS: 00000206 [ 1056.542700][ C0] RAX: 13b87c3472fe4e00 RBX: ffffffff8e5c15a0 RCX: ffffc90000ad7a84 [ 1056.550647][ C0] RDX: 0000000000000003 RSI: ffffffff8de2d740 RDI: ffffffff8c163400 [ 1056.558586][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1056.566527][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8b5c8280 [ 1056.574466][ C0] R13: 0000000000000202 R14: ffff88803070a440 R15: 0000000000000004 [ 1056.582408][ C0] ? batadv_iv_ogm_schedule_buff+0x780/0x14c0 [ 1056.588453][ C0] batadv_iv_ogm_schedule_buff+0x785/0x14c0 [ 1056.594320][ C0] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 1056.600616][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 1056.606219][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x329/0x920 [ 1056.613212][ C0] ? rcu_is_watching+0x12/0xc0 [ 1056.617948][ C0] process_one_work+0x9cc/0x1b70 [ 1056.622858][ C0] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 1056.630382][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1056.635726][ C0] ? assign_work+0x1a0/0x250 [ 1056.640285][ C0] worker_thread+0x6c8/0xf10 [ 1056.644849][ C0] ? __kthread_parkme+0x19e/0x250 [ 1056.649846][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1056.654926][ C0] kthread+0x3c2/0x780 [ 1056.658964][ C0] ? __pfx_kthread+0x10/0x10 [ 1056.663522][ C0] ? rcu_is_watching+0x12/0xc0 [ 1056.668260][ C0] ? __pfx_kthread+0x10/0x10 [ 1056.672821][ C0] ret_from_fork+0x56a/0x730 [ 1056.677379][ C0] ? __pfx_kthread+0x10/0x10 [ 1056.681939][ C0] ret_from_fork_asm+0x1a/0x30 [ 1056.686690][ C0] [ 1056.689692][ C0] rcu: rcu_preempt kthread starved for 7048 jiffies! g80661 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1056.700782][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1056.710718][ C0] rcu: RCU grace-period kthread stack dump: [ 1056.716581][ C0] task:rcu_preempt state:R running task stack:28096 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1056.730024][ C0] Call Trace: [ 1056.733279][ C0] [ 1056.736185][ C0] __schedule+0x1190/0x5de0 [ 1056.740670][ C0] ? __pfx___schedule+0x10/0x10 [ 1056.745492][ C0] ? find_held_lock+0x2b/0x80 [ 1056.750139][ C0] ? schedule+0x2d7/0x3a0 [ 1056.754439][ C0] schedule+0xe7/0x3a0 [ 1056.758478][ C0] schedule_timeout+0x123/0x290 [ 1056.763297][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1056.768639][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1056.773905][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1056.779679][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1056.785112][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 1056.789857][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1056.795110][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1056.800277][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1056.805192][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1056.810014][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1056.815794][ C0] rcu_gp_kthread+0x270/0x380 [ 1056.820441][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1056.825609][ C0] ? rcu_is_watching+0x12/0xc0 [ 1056.830343][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1056.835523][ C0] ? __kthread_parkme+0x19e/0x250 [ 1056.840521][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1056.845689][ C0] kthread+0x3c2/0x780 [ 1056.849740][ C0] ? __pfx_kthread+0x10/0x10 [ 1056.854298][ C0] ? rcu_is_watching+0x12/0xc0 [ 1056.859033][ C0] ? __pfx_kthread+0x10/0x10 [ 1056.863592][ C0] ret_from_fork+0x56a/0x730 [ 1056.868151][ C0] ? __pfx_kthread+0x10/0x10 [ 1056.872734][ C0] ret_from_fork_asm+0x1a/0x30 [ 1056.877475][ C0] [ 1056.880464][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1056.886753][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1056.891931][ C1] NMI backtrace for cpu 1 [ 1056.891942][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1056.891956][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1056.891963][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1056.891979][ C1] Code: 6d 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 46 15 00 fb f4 cc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1056.891991][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 1056.892002][ C1] RAX: 00000000051ffb93 RBX: 0000000000000001 RCX: ffffffff8b94cb49 [ 1056.892010][ C1] RDX: 0000000000000000 RSI: ffffffff8de52cd1 RDI: ffffffff8c163400 [ 1056.892018][ C1] RBP: ffffed1003cdf488 R08: 0000000000000001 R09: ffffed10170a6655 [ 1056.892026][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 1056.892033][ C1] R13: ffff88801e6fa440 R14: ffffffff90ab7590 R15: 0000000000000000 [ 1056.892041][ C1] FS: 0000000000000000(0000) GS:ffff8881247b2000(0000) knlGS:0000000000000000 [ 1056.892054][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1056.892062][ C1] CR2: 000055ffcf52abe0 CR3: 0000000033f9b000 CR4: 00000000003526f0 [ 1056.892070][ C1] Call Trace: [ 1056.892075][ C1] [ 1056.892079][ C1] default_idle+0x13/0x20 [ 1056.892096][ C1] default_idle_call+0x6d/0xb0 [ 1056.892112][ C1] do_idle+0x391/0x510 [ 1056.892128][ C1] ? __pfx_do_idle+0x10/0x10 [ 1056.892143][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 1056.892158][ C1] cpu_startup_entry+0x4f/0x60 [ 1056.892172][ C1] start_secondary+0x21d/0x2b0 [ 1056.892190][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1056.892209][ C1] common_startup_64+0x13e/0x148 [ 1056.892227][ C1]