last executing test programs: 17m32.437125835s ago: executing program 3 (id=80): io_uring_setup(0x167c, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x131}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) 17m31.783941416s ago: executing program 3 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(0x0, 0x0) socket(0x10, 0x3, 0x0) ioprio_set$pid(0x3, 0x0, 0x2000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) read(r4, &(0x7f0000000240)=""/254, 0xfe) 17m29.429923424s ago: executing program 3 (id=85): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) socket$inet(0x2, 0x1, 0x0) syz_emit_ethernet(0x3d, &(0x7f00000001c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2f, 0x67, 0x4000, 0x0, 0x2f, 0x0, @private=0xa010100, @broadcast}, {0x0, 0x883e, 0x1b, 0x0, @gue={{0x2, 0x1, 0x0, 0x1, 0x100}, "fb167879d2c27e362a1d42"}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x1, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xb}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x81, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40054}, 0xc010) shutdown(r0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x12, 0xffffffffffffffff, 0x6e29c000) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x1b7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, &(0x7f00000001c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x8, 0x7, 0xd, 0xffff, {{0x9, 0x4, 0x2, 0xa, 0x24, 0x64, 0x0, 0x2, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x89, 0x3, ' '}, @noop, @timestamp={0x44, 0xc, 0xf0, 0x0, 0x1, [0x7ff, 0x10001]}]}}}}}) 17m27.739064482s ago: executing program 3 (id=89): r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) gettid() r1 = getpgrp(0x0) syz_open_procfs(r1, &(0x7f00000000c0)='pagemap\x00') sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c0004001400010002004e0f7f00000100000000000000001400020002004e207f0000020000000000000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000280)={&(0x7f0000000a80)={0x78, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '1234567890123456'}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "00172233f60ad0b992422bc1ccddeeff13596dbe548e3414b3da8002d1d36b2c9fcfea65"}}]}]}, 0x78}}, 0x0) 17m25.560034948s ago: executing program 3 (id=90): syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='0', 0x1) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r1, 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 17m22.427305183s ago: executing program 3 (id=92): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(0x0, 0x0) socket(0x10, 0x3, 0x0) ioprio_set$pid(0x3, 0x0, 0x2000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) read(r4, &(0x7f0000000240)=""/254, 0xfe) 17m5.66899218s ago: executing program 32 (id=92): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(0x0, 0x0) socket(0x10, 0x3, 0x0) ioprio_set$pid(0x3, 0x0, 0x2000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) read(r4, &(0x7f0000000240)=""/254, 0xfe) 5m47.996989368s ago: executing program 0 (id=1258): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff00070581024000000705020240"], 0x0) syz_usb_control_io(r2, &(0x7f00000006c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0xe1, {0xe1, 0x31, "3cfea9b9c3f9227f6e5996cf9afc604be66cb6f865a370959edf043f830ea040d94caf25ad87336fd9df516cc5b79f04522e63a02570a80902d15ced8adab0af892d55c902e560fa13e104cc870c2fbfcdadc0d9677ce0bc555d174652c220435b794b2f0db408d0573c041ada7921916ec908615cb051c11fbba8042ddb64465d06a199ebedcd1e91ea680dce8a168461e102cc4d5b087238f4174f12196564c0535ab872a302bd768581c246718e186868f9c0866dcdfb3423fcf4bcfcdf7737cff1dcb9a7a2289cfae32f20f9036a9e85f63deec317ae87efbbdc5bc6f2"}}, &(0x7f0000000500)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "7c2a6ef3243afa4a730ab823afef41367f1128a8b8dc1a78e43148a035d5c3581dbe957fc1cd1d8a39c09f5d02a02d9088994a6d746a08b3f1947735f8b02d5bcc006897b7fdcdf34f93b9d184e43770ce05eeca3c37932a6a5c6a5e2cbbfd5b67daa8883d339b012e5a89fb40158078c17d3900852db1cab15c017a0e6fe1589bef9a26441b9cf3410f894797102c2a55dfdd1d3a756eb74419ec31c9"}}, &(0x7f00000005c0)={0x0, 0xf, 0x4e, {0x5, 0xf, 0x4e, 0x5, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0xf2, 0xff07, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0xb7, 0x4, 0x0, 0x65}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x2, 0xe66bfc70adf4ad9e, 0xffff, [0x0, 0xffff3f, 0x0, 0xff0000, 0x3fc7, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0xfd, 0x5, 0xd7, 0x4d}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x7a, 0x2, "27400ba5", "7c242b8d"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x6, 0x0, 0x0, 0xa, 0x6}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x20, 0x15, 0x88, "5ec4b9bc6ea63a2557486b1b95694f87a34e60ae490f648d0c8faf0335d1c707d8718673aabf8fd6b890a500a203b0208a0ddb11446163099e8d0d2f474ec76431ccd782d5dccd3fdc65eb1083f2ab0ae078014f34ca22c741face7eb59dc068942b4cf6c658dc3cdb21de41ff54368a45e528d1331784cc08b37a45bf4f51ef6593d0c02ae1b7f6"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x45}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x1c00, 0x4}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0xf801}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000940)={0x40, 0xb, 0x2, "90c3"}, &(0x7f0000000980)={0x40, 0xf, 0x2}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "a3b7"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x1}}) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="666f6f23646e736572726f723d3100a11909b98b6beb329196f9ebdda50c906a5588df6996f431972ae2e0562c4bbf91f648e52712e630a2a4e61cee9abcc8dc8fd958ba81afcc3c2ec38670a5a73af75f8d1f4cc923e4c715a93f6fc8eb839f57bdce1c83de28f664ee0ff01c12cc9bd4cf7002f85ec3af38c609dd1ff5584b0ed274d40f2e2e2b6a1758167073ed7ad1d4fb180db81bd4ff6788487b93e926b77d9628da7f299365d2d3482f0c06cf6b3b524518c18aa8e3c218c91710063c00", 0xc1, 0xfffffffffffffffe) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r3, 0x0, 0x100000) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000c40)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x6, 0x401, 0x6, 0x8000, 0x40}, &(0x7f0000000d00)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000d40)={r4, @in6={{0xa, 0x4e22, 0x6, @local, 0x1f46}}, 0x3b5, 0x3}, 0x90) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x8081, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000e00)="000000000000000000000000000000000a000000000400000200000002") ioctl(r5, 0x40140921, &(0x7f0000000e80)="8b72172ce2cc690112d97b6b72b634dde7ef9827d778974f6fc46ad9cbb81d17233f956ff2d5405801ad9a6ce80c") sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 5m38.502380993s ago: executing program 0 (id=1274): r0 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) r6 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x5, 0x0) 5m36.216398104s ago: executing program 0 (id=1278): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) close(0x3) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_ife={0x30, 0x1, 0x0, 0x0, {{0x8}, {0x8, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0xbc}}, 0x0) r3 = epoll_create(0x752) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000000), 0x80080) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)) 5m32.577913236s ago: executing program 0 (id=1285): setns(0xc9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x17) read$dsp(r1, &(0x7f0000000100)=""/134, 0x86) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000006c0)='.\x00', 0x40001a2) r5 = open(&(0x7f0000000580)='./file0\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r5, r5, &(0x7f00000000c0)=0x10000000004, 0x8112) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003f000500010000000000000001010000000000000f0001006f76732d73797374656d00000800020000000000080009002a"], 0x38}}, 0x20008040) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r8}, 0x4) 5m31.579930248s ago: executing program 0 (id=1286): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, r0) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r5, 0x20, &(0x7f0000000100)={0x40001, 0x2000004, 0x8, 0x1, 0x0, 0x0, {0x0, 0xfffffffc}, 0x0, 0x1000}, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) pipe(&(0x7f0000000000)) r6 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000180)) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="000013", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000000000000029000000360000002b020000000000000502000505020021010a00000000000000000000000000009f41cbf4904fe8659a41752daa0f209da7e63fdc73c2955f83885df9067ab4e01e01a919581c4fbc7fb0722b6295ac9389"], 0x30}}], 0x2, 0xc8040) 5m30.478972818s ago: executing program 0 (id=1287): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000a80)={{r1}, "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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr(r5, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x3) write$sndseq(r0, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(r0, 0xffffffffffffffff, 0x0) 5m24.527350656s ago: executing program 5 (id=1295): sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x300, 0x70bd27, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x400d1}, 0x20000010) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x801) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8045) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x2c}}, 0x850) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x4000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2b) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "5d3c3bac08f89f752f723e2f6fa2394f"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "5e92221acb702509b87b920afdfdcf3f"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000020}, 0x4004) fsetxattr(r4, &(0x7f00000006c0)=@random={'osx.', '-\x00'}, &(0x7f0000000700)='bridge_slave_1\x00', 0xf, 0x3) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r4, 0x8010aebb, &(0x7f0000000740)={0x4000, 0x103000}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f00000007c0)={'tunl0\x00', 0x0, 0x8, 0x700, 0xb71, 0x3, {{0x34, 0x4, 0x0, 0x5, 0xd0, 0x68, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@cipso={0x86, 0x25, 0x0, [{0x1, 0xb, "a255f25e510b2f114a"}, {0x0, 0x6, "d4c31c2d"}, {0x5, 0x6, "5acdf06b"}, {0x0, 0x8, "fc91e1c530a7"}]}, @timestamp_addr={0x44, 0x2c, 0x60, 0x1, 0x0, [{@loopback, 0x5}, {@local, 0xaa}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x101}, {@broadcast}, {@empty, 0x5}]}, @lsrr={0x83, 0x13, 0xfe, [@dev={0xac, 0x14, 0x14, 0x2c}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @broadcast]}, @timestamp_addr={0x44, 0x34, 0xe5, 0x1, 0x9, [{@empty}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e5a}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}]}, @rr={0x7, 0x1f, 0x14, [@local, @local, @multicast2, @empty, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @noop]}}}}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000780), 0xc, &(0x7f0000000b40)={&(0x7f0000000900)=@newae={0x204, 0x1e, 0x800, 0x70bd28, 0x25dfdbfc, {{@in6=@local, 0x4d5, 0xa, 0x3c}, @in=@private=0xa010102, 0xf4ea, 0x3506}, [@replay_esn_val={0x44, 0x17, {0xa, 0x70bd2b, 0x70bd25, 0x70bd28, 0x70bd2a, 0x101, [0x9, 0x0, 0x6, 0x7ff, 0x100, 0xdf19, 0x100, 0x9, 0x7, 0x1]}}, @offload={0xc, 0x1c, {r6, 0x3}}, @etimer_thresh={0x8, 0xc, 0x3}, @algo_crypt={0x9f, 0x2, {{'lrw(adiantum(cbc(twofish),camellia-asm,blake2b-160-generic))\x00'}, 0x2b8, "cc7e8b9bedf99c24310eb88b6dff9818e4271cbc6945505f6bbb06bdff8026b2be1be16a9326c0f8b20428044ebc4413e878bd7b6b15015301d0e2b378cb454d934349e644450b318dbccd892a48c91367744198973105"}}, @iptfs_reorder_window={0x6, 0x25, 0x1}, @tmpl={0xc4, 0x5, [{{@in6=@local, 0x4d2, 0x6c}, 0xa, @in=@multicast2, 0x3505, 0x0, 0x3, 0x9, 0x7, 0x8}, {{@in6=@loopback, 0x4d6, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x3505, 0x5, 0x1, 0x4, 0x6, 0x2, 0xb5ed}, {{@in=@empty, 0x4d5, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x34ff, 0x1, 0x3, 0x1, 0x1, 0x4, 0x9deb}]}]}, 0x204}}, 0x4000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c40)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x50, r8, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040814}, 0x4008080) timer_create(0x6, &(0x7f0000000e40)={0x0, 0x15, 0x4, @thr={&(0x7f0000000dc0)="21acf126dc865f", &(0x7f0000000e00)="0486b80725d93f8a59fde002935220a0c22a48b109f5fb"}}, &(0x7f0000000e80)) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000ec0), r11) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000f00), r12) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000f40)=0xb8, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000f80)={0xa, 0x4e20, 0x80000000, @mcast2, 0xfffffff9}, 0x1c) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x48, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x48}, 0x1, 0x0, 0x0, 0x4954}, 0x800) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000011c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xa4, '\x00', r6, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) 5m20.564074291s ago: executing program 5 (id=1305): r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) gettid() r1 = getpgrp(0x0) syz_open_procfs(r1, &(0x7f00000000c0)='pagemap\x00') sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000100)=r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c0004001400010002004e0f7f00000100000000000000001400020002004e207f000002000000000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000280)={&(0x7f0000000a80)={0x78, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '1234567890123456'}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "00172233f60ad0b992422bc1ccddeeff13596dbe548e3414b3da8002d1d36b2c9fcfea65"}}]}]}, 0x78}}, 0x0) 5m19.504366832s ago: executing program 5 (id=1307): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount$cgroup2(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB='memory_hugetlb_accounting,pids_localevents,favor']) 5m15.973161629s ago: executing program 5 (id=1313): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) write(r0, &(0x7f00000217c0)="3199c7", 0x3) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0), 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000071c0)={0x2020}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x26d01, 0x0) 5m14.421759616s ago: executing program 33 (id=1287): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000a80)={{r1}, "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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr(r5, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x3) write$sndseq(r0, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(r0, 0xffffffffffffffff, 0x0) 5m11.260558023s ago: executing program 5 (id=1320): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = socket$inet6(0xa, 0x800, 0xfff7fffe) sendmsg$inet6(r2, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x50ca800}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x28}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x7) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1) r10 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033"], 0xfe33) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r11, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r11, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) ioctl$KVM_IOEVENTFD(r9, 0x40a0ae49, &(0x7f0000000080)={0x803, 0x80a0000}) 5m9.659838333s ago: executing program 5 (id=1323): pipe2(0x0, 0x80080) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0xfffffff5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) close_range(r1, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5a551d6ff2fe4ca522bc6dda783ffe78cff0a6874a7f36b23dec8d16df0178718752d86fddec95407dc08b764d91c635f41dba59ef17dcad01e0fe691aa35a98f7687d2306009cfbeba8ac1cc3c14e42e17baacf6b5096d435fd34111bc8e7ef290aeb5341dc2c690650383e6f55d4f1b9ed3958a1ae9e5c2a2a92ef7e33873f8389a6404a983963ace4bdc0be0f03e5aa4afee88ec9499a40e8085363d8edf635615c4eb5f07fb949ec40a4c69d4b21dc0b8bc3bf85a8982e2b409b2813bc1b9cd14efeb5bf7703681df7e1562495aafe08f0be497d764a94c11c206b6e74a5efa776d34d2022d2d2fca9c5dcf3df5b1ee222f8e65a6ae123", @ANYBLOB="dc40be1c9094f98956e7ab8004d4e730f8c81141b1489a0c7478d5b79a2216b0d6aacb6cb528089b4bc054b69acabe9d2ed0f83623f5161e2e77ca114b2c9c6708d99dd17c61efa6155e8693fcd229db1434ec0afadc43c3637c9471e97b4ce488b8058424898a858ed469f7675508714a6215b8030a945b24bbbab7fb6272f39416", @ANYRES32=r0, @ANYRES8=r0], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000180)=0x4c) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') r5 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$proc_mixer(r5, 0x0, 0x8c) close(r5) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r6, &(0x7f0000001280)={0xf, {"a2e3ad214fc752f91b29090942f70e0dd038e7ff7fc6e5539b3267078b089b34083b681a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b313b0d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910de85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520008008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600071a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45fdcfe6180a8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c1173ea68e93b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20870800000000000000939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a520f9506711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8393c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df7227fff687e39e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f", 0x1000}}, 0x1006) r7 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f00000013c0)={0x2, 0x2, 0x4, {0x5, @pix_mp={0x80000001, 0x1, 0x494e4f4b, 0x5dd54d94a6bc8a44, 0x0, [{0x6, 0x6}, {0x6, 0x7fff}, {0x6}, {0x69, 0x1ff}, {0x7}, {0x3, 0x2b5}, {0x1, 0x248b51a2}, {0x8, 0x8}], 0x3, 0x54, 0x1, 0x2, 0x1}}, 0x3}) ioctl$VIDIOC_QBUF(r8, 0xc058565d, &(0x7f0000000200)=@mmap={0x7, 0x9, 0x4, 0x2000, 0x29, {}, {0x0, 0x0, 0x3d, 0x6, 0xc, 0xf9, "aa114a80"}, 0x7, 0x1, {}, 0x60000000, 0x0, r4}) 4m54.425083359s ago: executing program 34 (id=1323): pipe2(0x0, 0x80080) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0xfffffff5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) close_range(r1, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5a551d6ff2fe4ca522bc6dda783ffe78cff0a6874a7f36b23dec8d16df0178718752d86fddec95407dc08b764d91c635f41dba59ef17dcad01e0fe691aa35a98f7687d2306009cfbeba8ac1cc3c14e42e17baacf6b5096d435fd34111bc8e7ef290aeb5341dc2c690650383e6f55d4f1b9ed3958a1ae9e5c2a2a92ef7e33873f8389a6404a983963ace4bdc0be0f03e5aa4afee88ec9499a40e8085363d8edf635615c4eb5f07fb949ec40a4c69d4b21dc0b8bc3bf85a8982e2b409b2813bc1b9cd14efeb5bf7703681df7e1562495aafe08f0be497d764a94c11c206b6e74a5efa776d34d2022d2d2fca9c5dcf3df5b1ee222f8e65a6ae123", @ANYBLOB="dc40be1c9094f98956e7ab8004d4e730f8c81141b1489a0c7478d5b79a2216b0d6aacb6cb528089b4bc054b69acabe9d2ed0f83623f5161e2e77ca114b2c9c6708d99dd17c61efa6155e8693fcd229db1434ec0afadc43c3637c9471e97b4ce488b8058424898a858ed469f7675508714a6215b8030a945b24bbbab7fb6272f39416", @ANYRES32=r0, @ANYRES8=r0], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000180)=0x4c) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') r5 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$proc_mixer(r5, 0x0, 0x8c) close(r5) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r6, &(0x7f0000001280)={0xf, {"a2e3ad214fc752f91b29090942f70e0dd038e7ff7fc6e5539b3267078b089b34083b681a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b313b0d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910de85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520008008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600071a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45fdcfe6180a8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c1173ea68e93b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20870800000000000000939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a520f9506711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8393c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df7227fff687e39e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f", 0x1000}}, 0x1006) r7 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f00000013c0)={0x2, 0x2, 0x4, {0x5, @pix_mp={0x80000001, 0x1, 0x494e4f4b, 0x5dd54d94a6bc8a44, 0x0, [{0x6, 0x6}, {0x6, 0x7fff}, {0x6}, {0x69, 0x1ff}, {0x7}, {0x3, 0x2b5}, {0x1, 0x248b51a2}, {0x8, 0x8}], 0x3, 0x54, 0x1, 0x2, 0x1}}, 0x3}) ioctl$VIDIOC_QBUF(r8, 0xc058565d, &(0x7f0000000200)=@mmap={0x7, 0x9, 0x4, 0x2000, 0x29, {}, {0x0, 0x0, 0x3d, 0x6, 0xc, 0xf9, "aa114a80"}, 0x7, 0x1, {}, 0x60000000, 0x0, r4}) 2m42.736190889s ago: executing program 2 (id=1531): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1fb;(\xb5\xe1jS\xd6\x91B\xb4\xe5=\xc1+\xb9\x12\xde0\x02\xcc\x18\xae%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa7^\xff\xf5\x95\xd2q#\xc6\xca\x97\b\x00\x00\x00\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdlC\xec\xe4\x9a\xc2\fX\x0e\xbc\xa4$\x9dU\xab\xbf\xbb\x12\xe6\x9f\x1d\xe4\x8a\x00\x00\x00\x00\x00\x00\x00\xa0W\xf1H\xb4~$\x05bIp+\x81Y\x9d\xd2!\"\x9d]zs\xb7\xfc,\b\xdd9\xc6\xe03t9\tT\n\xe8\x1f\x84\x1f\xf5\xc5\xf6}\xd7\xa3SL\xfa\xda\x97\x84\xa5Oj\x9by\xd3\x03 u(\x19\xd1\xc0\x8dG\xd8a\xad\x90jz\x12\xbc\xc3\xd7\x04~\xbe\xba\xccTO\xc1\xb2:\xdd\xc1M$\xbb\xe1{\x04\xb3\x13>\xf2n\xee\xab\x83%k\x92\x16\t\xe0\xe1\xa0\xa62\xef\x12\x96\x8b\x1es:\xfe&\x00'/318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000020c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e0, 0x0, 0xf8, 0x390, 0x390, 0x0, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8, 0x7, @empty, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x24}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, 0xff000000, 0x0, 'veth1_to_team\x00', 'rose0\x00', {0xff}, {0xff}, 0x73, 0x1, 0x27}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00', {0x6adc}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x23}, @remote, 0xffffff00, 0x0, 'ip6tnl0\x00', 'geneve0\x00', {}, {0xff}, 0x21, 0x3, 0x1e3524369b1f37b0}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x400, 0xe5e, @empty, 0x4e20}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_hsr\x00', 'gre0\x00', {0xff}, {}, 0x2, 0x2, 0x53}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x38}, 'pimreg\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) write(r0, &(0x7f00000000c0)="9bd250e4b51f4ca48e", 0x9) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000000380)=ANY=[@ANYBLOB="0416"], 0x2, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = syz_open_dev$dvb_dvr(0x0, 0x0, 0x0) mmap(&(0x7f00000bc000/0x2000)=nil, 0x2000, 0x1000004, 0x2010, r3, 0x70a4f000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000000c0)={0x1}) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0xc3ca, 0x400, 0x2, 0x53}, 0x0, &(0x7f0000000040)=0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="280000002100050100000000000000000200000000000000010001000c001400ead0c1db330d50f6"], 0x28}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, 0x0, &(0x7f0000000580)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0, 0x80000080}) 2m40.427985941s ago: executing program 2 (id=1536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r4 = socket(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000300)={0x200000}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10023}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r5}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) 2m36.985141072s ago: executing program 2 (id=1540): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000080)=0xfd8) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x2025}], 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x1c0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000019000100000000000000001002180000000bff000000000208000100ac1414"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000004001000050000000400000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) dup3(r1, r3, 0xe0bf6bb1bf115848) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r6}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, 0x0, 0x0}, 0x20) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000140)={0xb6, 0x0, 0x7}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newnexthop={0x90, 0x68, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xe}}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x1}]}, @NHA_RES_GROUP={0x3c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1ff}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x2}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x7}]}, @NHA_FDB={0x4}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_TTL={0x5}}]}, 0x90}}, 0x0) 2m33.274004742s ago: executing program 2 (id=1547): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) connect$unix(0xffffffffffffffff, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r1, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000680)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f0000000180)={0x8, r4}) 2m32.627479663s ago: executing program 2 (id=1549): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r5, 0x20, &(0x7f0000000100)={0x40001, 0x2000004, 0x8, 0x1, 0x0, 0x0, {0x0, 0xfffffffc}, 0x0, 0x1000}, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) pipe(&(0x7f0000000000)) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) pipe(&(0x7f0000000180)) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="000013", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000000000000029000000360000002b020000000000000502000505020021010a00000000000000000000000000009f41cbf4904fe8659a41752daa0f209da7e63fdc73c2955f83885df9067ab4e01e01a919581c4fbc7fb0722b6295ac9389"], 0x30}}], 0x2, 0xc8040) 2m30.473869635s ago: executing program 2 (id=1551): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) r2 = socket$inet6(0xa, 0x800, 0xfff7fffe) sendmsg$inet6(r2, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x50ca800}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x28}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x7) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) 2m14.884017639s ago: executing program 35 (id=1551): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) r2 = socket$inet6(0xa, 0x800, 0xfff7fffe) sendmsg$inet6(r2, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x50ca800}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x28}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x7) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) 1m41.356932536s ago: executing program 1 (id=1620): openat(0xffffffffffffffff, 0x0, 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2020, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x2, {0xa, 0x4e22, 0x2, @loopback, 0x6}}}, 0x80) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="e02753e868a10000000000000000", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0200001a000100feffffff00010000e0000002000000000000000000000000ac14141c0000000000000000000000004e20071a4e2300050a0000203a000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x844) unshare(0x26020480) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c20000010011ab01ec4fb4788e667e5651d5390e7961c6bdeaf9f998a7ef852e97a8f58a79153cae7c113be28f86199888f1c60d67aed97739de3d0833be8cb2a05e15"], 0x0) 1m36.489575131s ago: executing program 1 (id=1629): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = socket$inet6(0xa, 0x800, 0xfff7fffe) sendmsg$inet6(r2, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x50ca800}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x28}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x7) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1) r10 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033"], 0xfe33) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r11, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r11, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) r12 = eventfd(0xf9) ioctl$KVM_IOEVENTFD(r9, 0x40a0ae49, &(0x7f0000000080)={0x803, 0x80a0000, 0x0, r12}) 1m35.170739377s ago: executing program 1 (id=1630): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socket$inet6(0xa, 0x800, 0xfff7fffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) 1m30.012939781s ago: executing program 1 (id=1635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/events/msr/read_msr/enable\x00', 0x1, 0x0) write(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/eprobes/my_read_msr2/enable\x00', 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r3, &(0x7f0000000180), 0x1000) (fail_nth: 1) 1m23.65590687s ago: executing program 1 (id=1641): memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x389802, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in=@private, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f0000000540)=0xe8) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, r1, &(0x7f0000000580)='./pipefs/gssd/clntXX/gssd\x00') mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x80}, 0x28) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x9a, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2000004}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="796112000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="ca68201a3d94ea508ad56fba7f7364d5fe547c347172be31c3007dab19e9bb34e90200bba04ea1d5e0d1800fdc4a677072"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040810) sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x4c, 0x0, 0x50b, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40, 0x5e}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "7d5bfd9fb4b15e0e2ee5bd18"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) close_range(r8, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m19.382724759s ago: executing program 1 (id=1647): r0 = syz_open_dev$loop(0x0, 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = socket$inet6(0xa, 0x800, 0xfff7fffe) sendmsg$inet6(r2, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x50ca800}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x28}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x7) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1) socket$kcm(0x10, 0x400000002, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) 1m3.161499265s ago: executing program 36 (id=1647): r0 = syz_open_dev$loop(0x0, 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = socket$inet6(0xa, 0x800, 0xfff7fffe) sendmsg$inet6(r2, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x50ca800}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x28}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x7) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1) socket$kcm(0x10, 0x400000002, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) 27.571732924s ago: executing program 7 (id=1709): setns(0xc9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x17) read$dsp(r0, &(0x7f0000000100)=""/134, 0x86) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) inotify_init1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x10000000004, 0x8112) pwritev2(0xffffffffffffffff, &(0x7f00000020c0)=[{&(0x7f0000000180)="c1781283a3b0774fa68bb716beca1c5781d63a9ed0438129d734048a0563eeb966301f195d6039952c3c4d31f5a93c", 0x2f}, {&(0x7f0000000240)="bdfd39f1cf6d76a3d3327e", 0xb}, {&(0x7f0000001f00)}, {&(0x7f0000002000)}], 0x4, 0x10, 0x4, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003f000500010000000000000001010000000000000f0001006f76732d73797374656d00000800020000000000080009002a"], 0x38}}, 0x20008040) 23.350779677s ago: executing program 4 (id=1714): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x401, 0x7, 0x0, 0x0, 0xd, "cfef1fbe3bc9747c0a502a5b00d97d71ec9719"}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r4, r5, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, r8}, 0x40) syz_emit_ethernet(0x66, &(0x7f00000005c0)=ANY=[], 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000180)=@routing={0x6c, 0x6, 0x1, 0x7e, 0x0, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote]}, 0x38) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r4, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) 22.086893161s ago: executing program 7 (id=1716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r4 = socket(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000300)={0x200000}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10023}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r5}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) 21.081228053s ago: executing program 7 (id=1717): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) 21.037306616s ago: executing program 4 (id=1718): setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, &(0x7f0000000300)="89", 0x3f0c) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x10082, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9024, 0x0, 0x7, 0x5, 0x5, 0x49, 0x400, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0xb, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffefffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x8, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc01, 0x2, 0x4, 0x4, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x3, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xfdffffffffffff81, 0x9, 0x4, 0x2000000000000006, 0x1, 0x5, 0x400000000008061f, 0x3, 0x8, 0xf6, 0x4, 0x6, 0xffffffffffffffff, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332d, 0x6, 0x5, 0xb, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x0, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcd, 0x8, 0x3]}) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r6, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r7, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r4, 0x0, r5, 0x0, 0xfffd, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) 19.572286191s ago: executing program 8 (id=1719): r0 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) r5 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x5, 0x0) 19.381494463s ago: executing program 4 (id=1720): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = socket$inet6(0xa, 0x800, 0xfff7fffe) sendmsg$inet6(r2, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x50ca800}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x28}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x7) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r8 = openat$kvm(0x0, 0x0, 0x1a8043, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1) r10 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033"], 0xfe33) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r11, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r11, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) r12 = eventfd(0xf9) ioctl$KVM_IOEVENTFD(r9, 0x40a0ae49, &(0x7f0000000080)={0x803, 0x80a0000, 0x0, r12}) 18.477569158s ago: executing program 8 (id=1721): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x40}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160a62) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4c20, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x200004}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f00350100007b00000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e20, @private=0xa010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x9f05) write$sndseq(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x85) lseek(r6, 0x101, 0x1) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000340)='htcp', 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r7, &(0x7f0000000240)="c927", 0x2, 0x4044880, 0x0, 0x0) 17.696601044s ago: executing program 4 (id=1722): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = socket$inet6(0xa, 0x800, 0xfff7fffe) sendmsg$inet6(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x7) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033"], 0xfe33) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r10, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) r11 = eventfd(0xf9) ioctl$KVM_IOEVENTFD(r8, 0x40a0ae49, &(0x7f0000000080)={0x803, 0x80a0000, 0x0, r11}) 15.003217801s ago: executing program 9 (id=1724): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000740)="00a02173601000e859fc01e341244e11e2d23b8ae7e58c194ecbb3e213df3128dea90388a597845ab3ce05f0168d3e0f9b", 0x31) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28011, r1, 0x2cb25000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 13.895247333s ago: executing program 7 (id=1725): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r1, 0x5, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x3, 0x12) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) madvise(&(0x7f00001ae000/0x1000)=nil, 0x1000, 0xb) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000680)={0x48, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r5, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) ioctl$IOMMU_DESTROY$stdev(r4, 0x3b80, &(0x7f0000000180)={0x8, r6}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 13.006814622s ago: executing program 4 (id=1726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r4 = socket(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000300)={0x200000}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10023}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r5}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) 12.463234612s ago: executing program 8 (id=1727): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0x2, "fd"}, @main=@item_012={0x2, 0x0, 0xb, '\x004'}]}}, 0x0}, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) close(0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000280)='proc\x00', 0x3000002, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000000)='comm\x00') write(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r6, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32], 0x34}}, 0x4008000) 12.232757544s ago: executing program 9 (id=1728): openat(0xffffffffffffffff, 0x0, 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2020, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x2, {0xa, 0x4e22, 0x2, @loopback, 0x6}}}, 0x80) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="e02753e868a10000000000000000", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0200001a000100feffffff00010000e0000002000000000000000000000000ac14141c0000000000000000000000004e20071a4e2300050a0000203a000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x844) unshare(0x26020480) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) fchdir(0xffffffffffffffff) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c20000010011ab01ec4fb4788e667e5651d5390e7961c6bdeaf9f998a7ef852e97a8f58a79153cae7c113be28f86199888f1c60d67aed97739de3d0833be8cb2a05e15"], 0x0) 12.212387881s ago: executing program 6 (id=1729): setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, &(0x7f0000000300)="89", 0x3f0c) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x10082, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9024, 0x0, 0x7, 0x5, 0x5, 0x49, 0x400, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0xb, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffefffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x8, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc01, 0x2, 0x4, 0x4, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x3, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xfdffffffffffff81, 0x9, 0x4, 0x2000000000000006, 0x1, 0x5, 0x400000000008061f, 0x3, 0x8, 0xf6, 0x4, 0x6, 0xffffffffffffffff, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332d, 0x6, 0x5, 0xb, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x0, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcd, 0x8, 0x3]}) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r6, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r7, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r4, 0x0, r5, 0x0, 0xfffd, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 11.914880847s ago: executing program 7 (id=1730): r0 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) r5 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x5, 0x0) 8.819550543s ago: executing program 7 (id=1731): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) syz_open_dev$usbfs(0x0, 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000d00)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xe1>8\x94\x02O\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xd7\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xb3\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8jN\x9a8\xab\xc6\x86\xab\xdbWyNd,\x97\xea\xb4(\x97x\x98#\xca\xf0N%X\x01.\xc4M\x9ajWT\xf2\xf7\xbb8\xb2\xcc<]\x06\b\xc4\xd5\xde\xf4\xb5\xdd\x7f\xf2\xf8S}q\xe7\xcdZ\xee\xe5\x9f\x19\x11S\x9fVzv\xf7\x04\xe8\xeb\x10z\xd7qy\x17r\x1bV\xb1\xd8\xdb\x061h\xc6\xfb\x84\b\x1a\xd6\x10\xdd\x95$$\xa1\x91=\xa67\xb6\xd8\x12\x88c\xa1\xbe[\xe4\xe0\xc7G\xca\xe3U\xde\xa9\xafU\x15\x93\xed},\xcaE\xba;\xc7yk\xaf8\xa4*Je\x13J\x88\x8bR2\xc0LV\xc1P\\\xe3\xec\x954\x8e>\xa4\xd80\x97\x963f\xdd\x8e\xc5\xdf\x9a.F\x06\x82\xcfg\xe8\xb6V\x92\x944K9F#\xdc\xf4\"', 0x3a, './file0'}, 0x2b0) chroot(0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000009050000000000000000000000000a0900010073797a3100000000240002000c000280050001000600000014000180080001006401010108000200ac14143908000540000000030c000480"], 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x20044082) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sched_setscheduler(0x0, 0x1, 0x0) r4 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r4, 0x1269, &(0x7f00000000c0)={0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 8.63688357s ago: executing program 9 (id=1732): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0xfe, "07ec685224472d3ce62614a517a532cfa6faa7f4f33fb9fdc06c584b134c2a90b2a009126445277df563f444ba32540429912475d90df0e9844f65bf11763185", 0x2a}, 0x48, 0xffffffffffffffff) 8.457857679s ago: executing program 6 (id=1733): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) 8.208343959s ago: executing program 9 (id=1734): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) close(0x3) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_ife={0x30, 0x1, 0x0, 0x0, {{0x8}, {0x8, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0xbc}}, 0x0) r3 = epoll_create(0x752) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000000), 0x80080) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)) 7.905802026s ago: executing program 6 (id=1735): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) 6.750058541s ago: executing program 9 (id=1736): syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000400)=ANY=[@ANYBLOB="1201100300000020ba0d001040000102030109027d000301061002080b0100010c200009040000000101200009240180ff071d00040c2403020c03050400ff"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x800, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000003060303000000000000af75ad3fd0e4"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}]}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r2}, &(0x7f00000000c0)=0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2, 0x63) write$P9_RLERRORu(r3, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r3, &(0x7f0000000900)=ANY=[@ANYBLOB="5302"], 0x253) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) write(r6, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/custom1\x00', 0x800, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa080, 0xff) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f00000006c0)={0x4, 0x101, 0x7, 0x1ff, 0x9}) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000080)="5d1b57d101ea0be5b8ba0ec6b0dcc58cf4f9dc0effb8d97a8c8e", 0x1a}, {&(0x7f00000000c0)="f7e008980d5dbc895323bcbe408e002e97f100ccd28c8deb79b3c0cf5f0489ba6c78d807cddc614463b20b4850efbb51772e3d1487dbdf078725cb41761ee29672d3abd335ac41f67311a64fd37373e3ba6c31bf8f9d25bf7c5ae6b210876f143f58c17767dfc0d684960b5d77a7c844ea90f7ca85a132d3df059c46604cb994fbb59cb2c31fbda28d201f18d9764ac645c9b47f2ead3e2b29ab9db3cf295add5cd711a764f0cae11dd5babbd35f52d2b9055d57e4d85139f23e790906dccd966627b65da4a06c70034c501d3b6ecc0eb02e96b40af347d283a04a7d7ed9dde7035f268e599700ef3e7bdba45b", 0xed}], 0x2) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x4e20c0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0245720, &(0x7f0000000580)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r7, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e8c}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000c9fc730000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 6.572227142s ago: executing program 8 (id=1737): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x40}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160a62) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4c20, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x200004}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f00350100007b00000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e20, @private=0xa010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x9f05) write$sndseq(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x85) lseek(r6, 0x101, 0x1) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000340)='htcp', 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r7, &(0x7f0000000240)="c927", 0x2, 0x4044880, 0x0, 0x0) 5.310161621s ago: executing program 6 (id=1738): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xf0f046, 0x100410}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) 4.471723922s ago: executing program 4 (id=1739): listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) (fail_nth: 4) 4.225960901s ago: executing program 8 (id=1740): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socket$inet6(0xa, 0x800, 0xfff7fffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) socket$kcm(0x10, 0x400000002, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) 2.896298004s ago: executing program 6 (id=1741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x17) read$dsp(r1, &(0x7f0000000100)=""/134, 0x86) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000006c0)='.\x00', 0x40001a2) r5 = open(&(0x7f0000000580)='./file0\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r5, r5, &(0x7f00000000c0)=0x10000000004, 0x8112) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003f000500010000000000000001010000000000000f0001006f76732d73797374656d00000800020000000000080009002a"], 0x38}}, 0x20008040) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r8}, 0x4) 2.816440983s ago: executing program 9 (id=1742): r0 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) r6 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x5, 0x0) 1.100046575s ago: executing program 6 (id=1743): r0 = syz_open_dev$midi(&(0x7f0000000100), 0x2, 0x40c01) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='`', 0x1}, {&(0x7f0000002240)="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", 0x1000}], 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)='nilfs2\x00', 0x1820010, &(0x7f00000002c0)='os2.') r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r6, 0x1, &(0x7f0000000040), 0x0) geteuid() recvmsg$unix(r2, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x40000001) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) removexattr(&(0x7f0000000080)='mtd0\x00', &(0x7f00000000c0)=@random={'os2.', 'jffs2\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) 0s ago: executing program 8 (id=1744): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1b000000000000000000000000200000000000", @ANYRES32, @ANYBLOB="000000000000000000000000e3000000000000004e8441", @ANYRES32=0x0], 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000000140)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000d80)={0x0, 0x7fffffff}, &(0x7f0000000dc0)=0x8) socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x80001, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020bb509050000002cbd7000fbdbdf39030002"], 0x28}}, 0x10) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') timer_create(0x7, 0x0, 0x0) gettid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) kernel console output (not intermixed with test programs): f1e6a626038 R14: 00007f1e6a625fa0 R15: 00007ffc95fa1e38 [ 970.201956][T11681] [ 970.450196][ T4968] Dev loop4: unable to read RDB block 7 [ 970.450250][ T4968] loop4: unable to read partition table [ 970.450426][ T4968] loop4: partition table beyond EOD, truncated [ 970.697422][ T31] audit: type=1400 audit(1788378591.391:659): avc: denied { write } for pid=11687 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 970.764539][ T4968] Dev loop4: unable to read RDB block 7 [ 970.764586][ T4968] loop4: unable to read partition table [ 970.764770][ T4968] loop4: partition table beyond EOD, truncated [ 970.810164][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1424'. [ 970.810216][T11693] IPv6: NLM_F_CREATE should be specified when creating new route [ 971.951474][T11407] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 971.951594][ T5612] Bluetooth: hci4: command 0x0c1a tx timeout [ 971.951627][ T5612] Bluetooth: hci1: command 0x0c1a tx timeout [ 972.174728][T11407] usb 8-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 972.186735][T11407] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 972.186779][T11407] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 972.224088][T11407] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.224127][T11407] usb 8-1: Product: syz [ 972.224155][T11407] usb 8-1: Manufacturer: syz [ 972.224173][T11407] usb 8-1: SerialNumber: syz [ 972.566711][T11710] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1416'. [ 973.220010][T11407] kaweth 8-1:1.0: Firmware present in device. [ 973.224197][T11407] kaweth 8-1:1.0: Error reading configuration (-71), no net device created [ 973.244728][T11407] kaweth 8-1:1.0: probe with driver kaweth failed with error -5 [ 973.327239][T11407] usb 8-1: USB disconnect, device number 2 [ 973.515725][ T31] audit: type=1400 audit(1788378594.201:660): avc: denied { wake_alarm } for pid=11706 comm="syz.2.1416" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 974.802902][T11407] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 974.953791][T11407] usb 3-1: Using ep0 maxpacket: 16 [ 975.913262][T11733] netlink: 17279 bytes leftover after parsing attributes in process `syz.6.1433'. [ 976.290878][ T31] audit: type=1400 audit(1788378596.981:661): avc: denied { write } for pid=11705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 976.323328][T11734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.339140][T11734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.405178][T11734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.405619][T11734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.467505][T11734] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1430'. [ 977.080577][T11742] xt_connbytes: Forcing CT accounting to be enabled [ 977.882527][T11407] usb 3-1: unable to get BOS descriptor or descriptor too short [ 977.882598][T11407] usb 3-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 977.883462][T11407] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 977.883493][T11407] usb 3-1: can't read configurations, error -71 [ 978.064171][ T31] audit: type=1400 audit(1788378598.741:662): avc: denied { write } for pid=11744 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 978.339486][T11748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 978.466819][ T4968] Dev loop4: unable to read RDB block 7 [ 978.466872][ T4968] loop4: unable to read partition table [ 978.467039][ T4968] loop4: partition table beyond EOD, truncated [ 980.048821][ T30] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 980.058791][T11761] busy [ 980.283543][ T30] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 980.297621][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.308146][ T30] usb 5-1: Product: syz [ 980.313452][ T30] usb 5-1: Manufacturer: syz [ 980.359420][ T30] usb 5-1: SerialNumber: syz [ 980.797143][ T30] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 980.797190][ T30] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 980.835798][ T31] audit: type=1400 audit(1788378601.531:663): avc: denied { write } for pid=11754 comm="syz.4.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 981.971232][ T4968] Dev loop4: unable to read RDB block 7 [ 981.984410][ T4968] loop4: unable to read partition table [ 981.999207][ T4968] loop4: partition table beyond EOD, truncated [ 982.174794][T11757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.275227][T11757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.853113][ T5603] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 983.008907][ T31] audit: type=1400 audit(1788378603.701:664): avc: denied { write } for pid=11772 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 983.035624][ T5603] usb 8-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 983.045818][ T5603] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 983.058922][ T5603] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 983.090048][ T5603] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.090080][ T5603] usb 8-1: Product: syz [ 983.090102][ T5603] usb 8-1: Manufacturer: syz [ 983.090141][ T5603] usb 8-1: SerialNumber: syz [ 983.187857][ T30] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 983.325230][ T31] audit: type=1400 audit(1788378604.021:665): avc: denied { setopt } for pid=11790 comm="syz.1.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 983.351716][ T31] audit: type=1400 audit(1788378604.041:666): avc: denied { ioctl } for pid=11790 comm="syz.1.1445" path="socket:[42846]" dev="sockfs" ino=42846 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 983.431733][ T5603] kaweth 8-1:1.0: Firmware present in device. [ 983.443186][ T5603] kaweth 8-1:1.0: Error reading configuration (-71), no net device created [ 983.443411][ T5603] kaweth 8-1:1.0: probe with driver kaweth failed with error -5 [ 983.489682][ T5603] usb 8-1: USB disconnect, device number 3 [ 983.582374][ T31] audit: type=1400 audit(1788378604.271:667): avc: denied { write } for pid=11792 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 983.706705][T11266] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 983.736101][T11797] 0x00000000000a-0x000000000309 : "" [ 983.771423][T11797] ftl_cs: FTL header corrupt! [ 983.888415][T11266] usb 3-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 983.924137][T11266] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 983.924235][T11266] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 983.995252][T11266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.995331][T11266] usb 3-1: Product: syz [ 983.995426][T11266] usb 3-1: Manufacturer: syz [ 983.995503][T11266] usb 3-1: SerialNumber: syz [ 984.295686][ T30] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 984.386103][ T30] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 984.386193][ T30] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 984.387332][ T30] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 984.636002][T11266] kaweth 3-1:1.0: Firmware present in device. [ 984.647782][T11266] kaweth 3-1:1.0: Error reading configuration (-71), no net device created [ 984.679146][T11266] kaweth 3-1:1.0: probe with driver kaweth failed with error -5 [ 984.985909][T11266] usb 3-1: USB disconnect, device number 35 [ 985.790192][ T30] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 986.144655][ T30] usb 5-1: USB disconnect, device number 23 [ 986.159854][ T4968] Dev loop4: unable to read RDB block 7 [ 986.159898][ T4968] loop4: unable to read partition table [ 986.160092][ T4968] loop4: partition table beyond EOD, truncated [ 986.417765][T11809] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.1447'. [ 987.743196][T11814] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1449'. [ 987.839399][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.839453][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 988.567667][T11825] 0x00000000000a-0x000000000309 : "" [ 988.605674][T11825] ftl_cs: FTL header corrupt! [ 990.423838][ T31] audit: type=1400 audit(1788378611.111:668): avc: denied { connect } for pid=11831 comm="syz.6.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 990.589042][T11840] FAULT_INJECTION: forcing a failure. [ 990.589042][T11840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.605412][T11840] CPU: 1 UID: 0 PID: 11840 Comm: syz.1.1452 Not tainted syzkaller #0 PREEMPT(full) [ 990.605438][T11840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 990.605451][T11840] Call Trace: [ 990.605457][T11840] [ 990.605465][T11840] dump_stack_lvl+0x100/0x190 [ 990.605499][T11840] should_fail_ex.cold+0x5/0xa [ 990.605526][T11840] _copy_from_user+0x2e/0xd0 [ 990.605555][T11840] copy_msghdr_from_user+0x9f/0x4c0 [ 990.605582][T11840] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 990.605613][T11840] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 990.605639][T11840] ___sys_sendmsg+0x106/0x1e0 [ 990.605666][T11840] ? __pfx____sys_sendmsg+0x10/0x10 [ 990.605705][T11840] ? find_held_lock+0x2b/0x80 [ 990.605749][T11840] __sys_sendmsg+0x160/0x210 [ 990.605770][T11840] ? __pfx___sys_sendmsg+0x10/0x10 [ 990.605804][T11840] do_syscall_64+0x123/0x790 [ 990.605828][T11840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.605848][T11840] RIP: 0033:0x7ff0ecf9e159 [ 990.605865][T11840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.605883][T11840] RSP: 002b:00007ff0edf10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 990.605902][T11840] RAX: ffffffffffffffda RBX: 00007ff0ed226090 RCX: 00007ff0ecf9e159 [ 990.605916][T11840] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 990.605928][T11840] RBP: 00007ff0edf10090 R08: 0000000000000000 R09: 0000000000000000 [ 990.605939][T11840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.605950][T11840] R13: 00007ff0ed226128 R14: 00007ff0ed226090 R15: 00007ffd5a247ce8 [ 990.605977][T11840] [ 991.044960][T11843] bridge_slave_0: left allmulticast mode [ 991.044989][T11843] bridge_slave_0: left promiscuous mode [ 991.045156][T11843] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.084727][ T31] audit: type=1400 audit(1788378611.781:669): avc: denied { write } for pid=11806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 991.111594][T11843] bridge_slave_1: left allmulticast mode [ 991.111619][T11843] bridge_slave_1: left promiscuous mode [ 991.111813][T11843] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.239358][T11843] bond0: (slave bond_slave_0): Releasing backup interface [ 991.365513][T11843] bond0: (slave bond_slave_1): Releasing backup interface [ 991.387902][ T31] audit: type=1400 audit(1788378612.081:670): avc: denied { write } for pid=11847 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 991.497489][T11843] team0: Port device team_slave_0 removed [ 991.550255][T11843] team0: Port device team_slave_1 removed [ 991.565963][T11843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 991.565989][T11843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.595811][T11843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.595853][T11843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.666695][T11843] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 991.789531][T11853] busy [ 994.737259][T11862] loop4: detected capacity change from 0 to 7 [ 996.181079][T11862] Dev loop4: unable to read RDB block 7 [ 996.181132][T11862] loop4: unable to read partition table [ 996.181271][T11862] loop4: partition table beyond EOD, truncated [ 996.181295][T11862] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 996.512433][T11874] xt_cgroup: invalid path, errno=-2 [ 996.623368][ T5603] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 996.777950][ T5603] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 996.781803][ T5603] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 996.781843][ T5603] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 996.792292][ T5603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.792317][ T5603] usb 5-1: Product: syz [ 996.792331][ T5603] usb 5-1: Manufacturer: syz [ 996.792345][ T5603] usb 5-1: SerialNumber: syz [ 996.921414][ T31] audit: type=1400 audit(1788378617.611:671): avc: denied { write } for pid=11852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 997.107271][ T5603] usb 5-1: Limiting number of CPorts to U8_MAX [ 997.107995][ T5603] usb 5-1: Not enough endpoints found in device, aborting! [ 997.273268][T11881] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 997.893454][ T31] audit: type=1400 audit(1788378618.591:672): avc: denied { write } for pid=11886 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 997.915969][T11890] overlayfs: failed to resolve './file0/file1': -2 [ 997.937111][ T31] audit: type=1400 audit(1788378618.631:673): avc: denied { read write } for pid=11887 comm="syz.7.1461" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 997.937165][ T31] audit: type=1400 audit(1788378618.631:674): avc: denied { open } for pid=11887 comm="syz.7.1461" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 998.518407][T11896] tipc: Enabling of bearer rejected, already enabled [ 999.311712][ T31] audit: type=1400 audit(1788378620.001:675): avc: denied { read } for pid=11873 comm="syz.6.1460" name="mtd5" dev="devtmpfs" ino=2841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 999.463938][ T5603] usb 5-1: USB disconnect, device number 24 [ 999.708338][T11902] ubi0: attaching mtd0 [ 999.709757][T11902] ubi0: scanning is finished [ 999.709819][T11902] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 999.850151][T11907] UBIFS error (pid: 11907): cannot open "ubi0:testvol", error -19 [ 999.927810][ T31] audit: type=1400 audit(1788378620.621:676): avc: denied { bind } for pid=11903 comm="syz.6.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1000.029536][ T31] audit: type=1400 audit(1788378620.711:677): avc: denied { read } for pid=11903 comm="syz.6.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1000.319594][T11902] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1000.650054][T11910] loop4: detected capacity change from 0 to 7 [ 1000.671931][T11910] Dev loop4: unable to read RDB block 7 [ 1000.671965][T11910] loop4: unable to read partition table [ 1000.672082][T11910] loop4: partition table beyond EOD, truncated [ 1000.672103][T11910] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1000.722944][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1000.928599][ T10] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1000.984412][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.984474][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1001.067238][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.067275][ T10] usb 2-1: Product: syz [ 1001.067311][ T10] usb 2-1: Manufacturer: syz [ 1001.067326][ T10] usb 2-1: SerialNumber: syz [ 1001.826981][ T31] audit: type=1400 audit(1788378622.451:678): avc: denied { shutdown } for pid=11901 comm="syz.4.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1002.133447][ T10] usb 2-1: Cannot retrieve CPort count: -110 [ 1002.133501][ T10] usb 2-1: Cannot retrieve CPort count: -110 [ 1002.133934][ T10] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 1003.289713][ T31] audit: type=1400 audit(1788378623.981:679): avc: denied { watch_reads } for pid=11915 comm="syz.7.1467" path="/19" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1003.559860][T11925] overlayfs: failed to resolve './file0/file1': -2 [ 1003.710127][T11926] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1003.785638][ T7604] tipc: Resetting bearer [ 1003.819918][ T31] audit: type=1400 audit(1788378624.511:680): avc: denied { mount } for pid=11929 comm="syz.7.1471" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1003.832188][T11926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1463'. [ 1003.950216][ T31] audit: type=1400 audit(1788378624.641:681): avc: denied { unmount } for pid=11152 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1004.135696][T11934] FAULT_INJECTION: forcing a failure. [ 1004.135696][T11934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1004.154255][T11934] CPU: 0 UID: 0 PID: 11934 Comm: syz.7.1472 Not tainted syzkaller #0 PREEMPT(full) [ 1004.154281][T11934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1004.154293][T11934] Call Trace: [ 1004.154300][T11934] [ 1004.154308][T11934] dump_stack_lvl+0x100/0x190 [ 1004.154340][T11934] should_fail_ex.cold+0x5/0xa [ 1004.154367][T11934] _copy_from_user+0x2e/0xd0 [ 1004.154397][T11934] copy_msghdr_from_user+0x9f/0x4c0 [ 1004.154423][T11934] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1004.154456][T11934] ? lock_acquire+0x1d1/0x380 [ 1004.154476][T11934] ? get_pid_task+0x2a/0x250 [ 1004.154503][T11934] ___sys_sendmsg+0x106/0x1e0 [ 1004.154530][T11934] ? __pfx____sys_sendmsg+0x10/0x10 [ 1004.154562][T11934] ? get_pid_task+0x106/0x250 [ 1004.154596][T11934] ? find_held_lock+0x2b/0x80 [ 1004.154639][T11934] __sys_sendmsg+0x160/0x210 [ 1004.154660][T11934] ? __pfx___sys_sendmsg+0x10/0x10 [ 1004.154694][T11934] do_syscall_64+0x123/0x790 [ 1004.154720][T11934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.154740][T11934] RIP: 0033:0x7f06cf39e159 [ 1004.154757][T11934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.154775][T11934] RSP: 002b:00007f06d0270028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1004.154795][T11934] RAX: ffffffffffffffda RBX: 00007f06cf625fa0 RCX: 00007f06cf39e159 [ 1004.154808][T11934] RDX: 0000000020040040 RSI: 0000200000000500 RDI: 0000000000000003 [ 1004.154820][T11934] RBP: 00007f06d0270090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.154832][T11934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.154844][T11934] R13: 00007f06cf626038 R14: 00007f06cf625fa0 R15: 00007ffc1c4085a8 [ 1004.154871][T11934] [ 1004.805944][T11937] tipc: Enabling of bearer rejected, already enabled [ 1005.633955][T11407] usb 2-1: USB disconnect, device number 26 [ 1008.479874][ T4968] Dev loop4: unable to read RDB block 7 [ 1008.487531][ T4968] loop4: unable to read partition table [ 1008.495932][ T4968] loop4: partition table beyond EOD, truncated [ 1009.475777][ T4968] Dev loop4: unable to read RDB block 7 [ 1009.475831][ T4968] loop4: unable to read partition table [ 1009.476026][ T4968] loop4: partition table beyond EOD, truncated [ 1010.285667][T11959] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.1470'. [ 1010.876345][T11950] netlink: 17279 bytes leftover after parsing attributes in process `syz.7.1478'. [ 1010.899020][ T4968] Dev loop4: unable to read RDB block 7 [ 1010.905614][ T4968] loop4: unable to read partition table [ 1010.905743][ T4968] loop4: partition table beyond EOD, truncated [ 1011.313221][T11967] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1013.776986][T11976] FAULT_INJECTION: forcing a failure. [ 1013.776986][T11976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1013.790387][T11976] CPU: 0 UID: 0 PID: 11976 Comm: syz.1.1484 Not tainted syzkaller #0 PREEMPT(full) [ 1013.790416][T11976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1013.790428][T11976] Call Trace: [ 1013.790436][T11976] [ 1013.790445][T11976] dump_stack_lvl+0x100/0x190 [ 1013.790479][T11976] should_fail_ex.cold+0x5/0xa [ 1013.790507][T11976] _copy_from_user+0x2e/0xd0 [ 1013.790537][T11976] ucma_write+0x128/0x330 [ 1013.790568][T11976] ? __pfx_ucma_write+0x10/0x10 [ 1013.790603][T11976] ? __pfx_ucma_write+0x10/0x10 [ 1013.790629][T11976] vfs_writev+0x5ed/0xdd0 [ 1013.790664][T11976] ? __pfx_vfs_writev+0x10/0x10 [ 1013.790697][T11976] ? lock_acquire+0x1d1/0x380 [ 1013.790716][T11976] ? __fget_files+0x34/0x3d0 [ 1013.790748][T11976] ? __fget_files+0x21f/0x3d0 [ 1013.790776][T11976] ? do_writev+0x28a/0x340 [ 1013.790801][T11976] do_writev+0x28a/0x340 [ 1013.790829][T11976] ? __pfx_do_writev+0x10/0x10 [ 1013.790864][T11976] do_syscall_64+0x123/0x790 [ 1013.790889][T11976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.790910][T11976] RIP: 0033:0x7ff0ecf9e159 [ 1013.790927][T11976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1013.790945][T11976] RSP: 002b:00007ff0edf31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1013.790965][T11976] RAX: ffffffffffffffda RBX: 00007ff0ed225fa0 RCX: 00007ff0ecf9e159 [ 1013.790977][T11976] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 1013.790989][T11976] RBP: 00007ff0edf31090 R08: 0000000000000000 R09: 0000000000000000 [ 1013.791001][T11976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1013.791012][T11976] R13: 00007ff0ed226038 R14: 00007ff0ed225fa0 R15: 00007ffd5a247ce8 [ 1013.791039][T11976] [ 1014.241835][ T31] audit: type=1400 audit(1788378634.931:682): avc: denied { ioctl } for pid=11977 comm="syz.1.1485" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1014.713249][T11407] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1014.731565][T11983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1487'. [ 1015.013537][T11989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1015.352505][T11407] usb 2-1: Using ep0 maxpacket: 16 [ 1015.353777][T11407] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1015.354927][T11407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1015.354959][T11407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1015.354997][T11407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.370837][T11407] usb 2-1: config 0 descriptor?? [ 1015.467417][ T5611] Bluetooth: hci3: Malformed LE Event: 0x1d [ 1015.476571][T11988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1487'. [ 1015.493309][T11993] FAULT_INJECTION: forcing a failure. [ 1015.493309][T11993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1015.493355][T11993] CPU: 0 UID: 0 PID: 11993 Comm: syz.6.1489 Not tainted syzkaller #0 PREEMPT(full) [ 1015.493381][T11993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1015.493393][T11993] Call Trace: [ 1015.493400][T11993] [ 1015.493408][T11993] dump_stack_lvl+0x100/0x190 [ 1015.493438][T11993] should_fail_ex.cold+0x5/0xa [ 1015.493469][T11993] _copy_from_user+0x2e/0xd0 [ 1015.493497][T11993] copy_msghdr_from_user+0x9f/0x4c0 [ 1015.493529][T11993] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1015.493560][T11993] ? lock_acquire+0x1d1/0x380 [ 1015.493579][T11993] ? get_pid_task+0x2a/0x250 [ 1015.493607][T11993] ___sys_sendmsg+0x106/0x1e0 [ 1015.493633][T11993] ? __pfx____sys_sendmsg+0x10/0x10 [ 1015.493658][T11993] ? get_pid_task+0x106/0x250 [ 1015.493693][T11993] ? find_held_lock+0x2b/0x80 [ 1015.493736][T11993] __sys_sendmsg+0x160/0x210 [ 1015.493756][T11993] ? __pfx___sys_sendmsg+0x10/0x10 [ 1015.493790][T11993] do_syscall_64+0x123/0x790 [ 1015.493815][T11993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.493835][T11993] RIP: 0033:0x7f4b3c39e159 [ 1015.493850][T11993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.493867][T11993] RSP: 002b:00007f4b3d2ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1015.493886][T11993] RAX: ffffffffffffffda RBX: 00007f4b3c625fa0 RCX: 00007f4b3c39e159 [ 1015.493898][T11993] RDX: 0000000000008800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1015.493909][T11993] RBP: 00007f4b3d2ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.493921][T11993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.493932][T11993] R13: 00007f4b3c626038 R14: 00007f4b3c625fa0 R15: 00007fff8d37db88 [ 1015.493959][T11993] [ 1015.619034][ T4968] Dev loop4: unable to read RDB block 7 [ 1015.619124][ T4968] loop4: unable to read partition table [ 1015.619321][ T4968] loop4: partition table beyond EOD, truncated [ 1016.859868][T11407] hid (null): invalid report_size 1516718460 [ 1016.859902][T11407] hid (null): bogus close delimiter [ 1016.881826][T11990] bond1 (unregistering): Released all slaves [ 1017.277194][ T4968] Dev loop4: unable to read RDB block 7 [ 1017.285666][ T4968] loop4: unable to read partition table [ 1017.291821][ T4968] loop4: partition table beyond EOD, truncated [ 1018.284405][ T5603] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1018.474543][ T5603] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1018.486173][ T5603] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.486219][ T5603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.518842][ T5603] usb 5-1: config 0 descriptor?? [ 1018.534052][ T5603] pwc: Askey VC010 type 2 USB webcam detected. [ 1018.565194][T11407] usb 2-1: string descriptor 0 read error: -71 [ 1018.596030][T11407] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 1018.596122][T11407] letsketch 0003:6161:4D15.0005: probe with driver letsketch failed with error -32 [ 1018.613157][T11407] usb 2-1: USB disconnect, device number 27 [ 1018.760088][ T31] audit: type=1400 audit(1788378639.451:683): avc: denied { write } for pid=12011 comm="syz.7.1495" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1018.781050][T12012] bridge0: entered allmulticast mode [ 1018.783550][ T5611] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 1018.899525][T12013] fuse: Bad value for 'fd' [ 1018.936575][ T5603] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1018.945261][T12004] netlink: 'syz.4.1492': attribute type 2 has an invalid length. [ 1018.956412][ T5603] pwc: recv_control_msg error -32 req 02 val 2700 [ 1018.967861][ T5603] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1018.976551][ T5603] pwc: recv_control_msg error -32 req 04 val 1000 [ 1018.984743][ T5603] pwc: recv_control_msg error -32 req 04 val 1300 [ 1018.991809][ T5603] pwc: recv_control_msg error -32 req 04 val 1400 [ 1019.002854][ T5603] pwc: recv_control_msg error -32 req 02 val 2000 [ 1019.217593][ T5603] pwc: recv_control_msg error -32 req 04 val 1500 [ 1019.229759][ T5603] pwc: recv_control_msg error -32 req 02 val 2500 [ 1019.498387][T11407] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1019.625199][ T5603] pwc: recv_control_msg error -71 req 02 val 2600 [ 1019.634622][ T5603] pwc: recv_control_msg error -71 req 02 val 2900 [ 1019.644386][ T5603] pwc: recv_control_msg error -71 req 02 val 2800 [ 1019.654587][ T5603] pwc: recv_control_msg error -71 req 04 val 1100 [ 1019.661264][ T5603] pwc: recv_control_msg error -71 req 04 val 1200 [ 1019.671260][ T5603] pwc: Registered as video103. [ 1019.671579][T11407] usb 8-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 1019.688716][T11407] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1019.688752][T11407] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1019.696694][T11407] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.696721][T11407] usb 8-1: Product: syz [ 1019.696735][T11407] usb 8-1: Manufacturer: syz [ 1019.696749][T11407] usb 8-1: SerialNumber: syz [ 1019.706783][T12017] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1019.706880][T12017] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1019.714764][ C0] port100 8-1:1.0: NFC: Urb failure (status -71) [ 1019.714809][ C0] port100 8-1:1.0: NFC: Urb failure (status -71) [ 1019.715350][T11407] port100 8-1:1.0: NFC: Could not get supported command types [ 1019.792048][ T5603] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 1019.912727][ T5603] usb 5-1: USB disconnect, device number 25 [ 1020.286896][ T4968] Dev loop4: unable to read RDB block 7 [ 1020.293319][ T4968] loop4: unable to read partition table [ 1020.299115][ T4968] loop4: partition table beyond EOD, truncated [ 1020.415270][T12026] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁЍãÂÉ<' to dns_resolver key: bad/missing value [ 1020.437877][T12026] ip_tables: iptables: counters copy to user failed while replacing table [ 1022.266813][T12036] FAULT_INJECTION: forcing a failure. [ 1022.266813][T12036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1022.266850][T12036] CPU: 1 UID: 0 PID: 12036 Comm: syz.2.1500 Not tainted syzkaller #0 PREEMPT(full) [ 1022.266872][T12036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1022.266881][T12036] Call Trace: [ 1022.266885][T12036] [ 1022.266891][T12036] dump_stack_lvl+0x100/0x190 [ 1022.266911][T12036] should_fail_ex.cold+0x5/0xa [ 1022.266927][T12036] _copy_from_user+0x2e/0xd0 [ 1022.266951][T12036] copy_msghdr_from_user+0x9f/0x4c0 [ 1022.266966][T12036] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1022.266983][T12036] ? _kstrtoull+0x144/0x200 [ 1022.266994][T12036] ? __pfx__kstrtoull+0x10/0x10 [ 1022.267009][T12036] ___sys_sendmsg+0x106/0x1e0 [ 1022.267024][T12036] ? __pfx____sys_sendmsg+0x10/0x10 [ 1022.267043][T12036] ? __fget_files+0x34/0x3d0 [ 1022.267066][T12036] __sys_sendmmsg+0x20c/0x440 [ 1022.267079][T12036] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1022.267089][T12036] ? ksys_write+0x190/0x250 [ 1022.267110][T12036] ? fput+0x7c/0x100 [ 1022.267123][T12036] ? ksys_write+0x1ac/0x250 [ 1022.267132][T12036] ? __pfx_ksys_write+0x10/0x10 [ 1022.267145][T12036] __x64_sys_sendmmsg+0x9c/0x100 [ 1022.267156][T12036] ? lockdep_hardirqs_on+0x7d/0x110 [ 1022.267169][T12036] do_syscall_64+0x123/0x790 [ 1022.267182][T12036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.267194][T12036] RIP: 0033:0x7f2a85b9e159 [ 1022.267204][T12036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.267215][T12036] RSP: 002b:00007f2a86b2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1022.267226][T12036] RAX: ffffffffffffffda RBX: 00007f2a85e25fa0 RCX: 00007f2a85b9e159 [ 1022.267234][T12036] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1022.267243][T12036] RBP: 00007f2a86b2a090 R08: 0000000000000000 R09: 0000000000000000 [ 1022.267250][T12036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1022.267256][T12036] R13: 00007f2a85e26038 R14: 00007f2a85e25fa0 R15: 00007fff58a5eb88 [ 1022.267271][T12036] [ 1022.698738][ T5603] usb 8-1: USB disconnect, device number 4 [ 1022.923112][T12039] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1023.108249][T12042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1023.276916][T12023] netlink: 17279 bytes leftover after parsing attributes in process `syz.6.1493'. [ 1023.296168][T12045] netlink: 'syz.2.1503': attribute type 2 has an invalid length. [ 1024.592298][ T4968] Dev loop4: unable to read RDB block 7 [ 1024.592335][ T4968] loop4: unable to read partition table [ 1024.592493][ T4968] loop4: partition table beyond EOD, truncated [ 1025.081678][ T4968] Dev loop4: unable to read RDB block 7 [ 1025.081730][ T4968] loop4: unable to read partition table [ 1025.081915][ T4968] loop4: partition table beyond EOD, truncated [ 1026.510869][ T4968] Dev loop4: unable to read RDB block 7 [ 1026.510923][ T4968] loop4: unable to read partition table [ 1026.511085][ T4968] loop4: partition table beyond EOD, truncated [ 1026.977170][T12082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1028.794020][ T4968] Dev loop4: unable to read RDB block 7 [ 1028.794075][ T4968] loop4: unable to read partition table [ 1028.794507][ T4968] loop4: partition table beyond EOD, truncated [ 1031.034986][T12100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1031.480933][ T31] audit: type=1400 audit(1788378652.171:684): avc: denied { mount } for pid=12102 comm="syz.2.1520" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1031.862988][ T10] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1032.186995][ T5712] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1032.205306][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 1032.205354][ T10] usb 8-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1032.225176][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.225254][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.267737][ T10] uvcvideo 8-1:1.0: Found UVC 1.00 device (046d:0825) [ 1032.275860][ T10] uvcvideo 8-1:1.0: No streaming interface found for terminal 32770. [ 1032.332959][ T5712] usb 2-1: Using ep0 maxpacket: 32 [ 1032.339503][ T5712] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1032.349303][ T5712] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1032.349334][ T5712] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1032.349372][ T5712] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1032.356261][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.356285][ T5712] usb 2-1: Product: syz [ 1032.356300][ T5712] usb 2-1: Manufacturer: syz [ 1032.356314][ T5712] usb 2-1: SerialNumber: syz [ 1032.389595][ T5712] usb 2-1: config 0 descriptor?? [ 1032.417015][ T31] audit: type=1400 audit(1788378653.111:685): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1032.485478][ T10] usb 8-1: USB disconnect, device number 5 [ 1032.783338][T12120] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.1519'. [ 1032.906584][T12109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.915484][T12109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.926476][ T5712] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 1033.114709][ T5698] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1033.205532][T12127] busy [ 1033.274015][ T5698] usb 7-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 1033.292260][ T5698] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1033.292377][ T5698] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1033.333079][ T5698] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.333158][ T5698] usb 7-1: Product: syz [ 1033.346287][ T5698] usb 7-1: Manufacturer: syz [ 1033.346380][ T5698] usb 7-1: SerialNumber: syz [ 1034.001772][ T5712] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-ETIMEDOUT) [ 1034.002280][ T5712] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 1034.070167][ T5698] kaweth 7-1:1.0: Firmware present in device. [ 1034.099285][ T5698] kaweth 7-1:1.0: Error reading configuration (-71), no net device created [ 1034.109484][ T5698] kaweth 7-1:1.0: probe with driver kaweth failed with error -5 [ 1034.548945][ T5698] usb 7-1: USB disconnect, device number 3 [ 1035.655890][ T5698] usb 2-1: USB disconnect, device number 28 [ 1036.377822][T12133] loop4: detected capacity change from 0 to 7 [ 1036.392901][T12133] Dev loop4: unable to read RDB block 7 [ 1036.392936][T12133] loop4: unable to read partition table [ 1036.393074][T12133] loop4: partition table beyond EOD, truncated [ 1036.393089][T12133] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1036.398306][T12133] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1527'. [ 1038.030810][T12145] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1038.065783][ T31] audit: type=1400 audit(1788378658.761:686): avc: denied { write } for pid=12144 comm="syz.4.1532" name="ports" dev="configfs" ino=3137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1038.149317][ T31] audit: type=1400 audit(1788378658.841:687): avc: denied { write } for pid=12144 comm="syz.4.1532" name="subsystems" dev="configfs" ino=44552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1038.194536][ T31] audit: type=1400 audit(1788378658.881:688): avc: denied { create } for pid=12144 comm="syz.4.1532" name="testnqn" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1038.483516][ T31] audit: type=1400 audit(1788378659.161:689): avc: denied { map } for pid=12146 comm="syz.2.1531" path="socket:[44557]" dev="sockfs" ino=44557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1038.507776][ T31] audit: type=1400 audit(1788378659.161:690): avc: denied { accept } for pid=12146 comm="syz.2.1531" path="socket:[44557]" dev="sockfs" ino=44557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1042.400177][T12172] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1538'. [ 1045.763153][T11407] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 1045.913741][T11407] usb 7-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 1045.924647][T11407] usb 7-1: config 0 interface 0 altsetting 31 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1045.936530][T11407] usb 7-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1045.949626][T11407] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1045.958990][T11407] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.970049][T11407] usb 7-1: config 0 descriptor?? [ 1045.976045][T12187] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1046.108720][T12191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1540'. [ 1046.428880][T11407] hid_parser_main: 4 callbacks suppressed [ 1046.434763][T11407] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 1046.441893][T11407] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 1046.449525][T11407] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 1046.456864][T11407] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 1046.464708][T11407] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 1046.474209][T11407] itetech 0003:258A:6A88.0006: unknown main item tag 0x5 [ 1046.481734][T11407] itetech 0003:258A:6A88.0006: item fetching failed at offset 20/40 [ 1046.496209][T11407] itetech 0003:258A:6A88.0006: probe with driver itetech failed with error -22 [ 1046.503603][ T5712] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1046.520066][T12198] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1046.919549][ T5712] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 1046.950908][ T5712] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1046.950939][ T5712] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1047.001429][ T31] audit: type=1400 audit(1788378667.611:691): avc: denied { ioctl } for pid=12201 comm="syz.7.1548" path="socket:[44642]" dev="sockfs" ino=44642 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1047.001570][ T31] audit: type=1400 audit(1788378667.681:692): avc: denied { ioctl } for pid=12195 comm="syz.1.1546" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1047.035876][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.036035][ T5712] usb 2-1: Product: syz [ 1047.036051][ T5712] usb 2-1: Manufacturer: syz [ 1047.036066][ T5712] usb 2-1: SerialNumber: syz [ 1047.039723][T12196] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1047.039843][T12196] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1047.041611][ C1] port100 2-1:1.0: NFC: Urb failure (status -71) [ 1047.041656][ C1] port100 2-1:1.0: NFC: Urb failure (status -71) [ 1047.045122][ T5712] port100 2-1:1.0: NFC: Could not get supported command types [ 1047.072131][T12203] FAULT_INJECTION: forcing a failure. [ 1047.072131][T12203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1047.072162][T12203] CPU: 1 UID: 0 PID: 12203 Comm: syz.4.1544 Not tainted syzkaller #0 PREEMPT(full) [ 1047.072184][T12203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1047.072194][T12203] Call Trace: [ 1047.072200][T12203] [ 1047.072208][T12203] dump_stack_lvl+0x100/0x190 [ 1047.072240][T12203] should_fail_ex.cold+0x5/0xa [ 1047.072266][T12203] _copy_to_user+0x32/0xd0 [ 1047.072296][T12203] simple_read_from_buffer+0xcb/0x170 [ 1047.072321][T12203] proc_fail_nth_read+0x1af/0x230 [ 1047.072344][T12203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1047.072365][T12203] ? rw_verify_area+0xce/0x6d0 [ 1047.072388][T12203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1047.072409][T12203] vfs_read+0x1e4/0xb40 [ 1047.072436][T12203] ? lock_acquire+0x1d1/0x380 [ 1047.072456][T12203] ? __fget_files+0x34/0x3d0 [ 1047.072477][T12203] ? __pfx_vfs_read+0x10/0x10 [ 1047.072502][T12203] ? find_held_lock+0x2b/0x80 [ 1047.072527][T12203] ? __fget_files+0x215/0x3d0 [ 1047.072553][T12203] ? __fget_files+0x21f/0x3d0 [ 1047.072582][T12203] ksys_read+0x12a/0x250 [ 1047.072598][T12203] ? __pfx_ksys_read+0x10/0x10 [ 1047.072630][T12203] do_syscall_64+0x123/0x790 [ 1047.072653][T12203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.072672][T12203] RIP: 0033:0x7f1e6a35e98e [ 1047.072688][T12203] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1047.072705][T12203] RSP: 002b:00007f1e6b1b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1047.072723][T12203] RAX: ffffffffffffffda RBX: 00007f1e6b1b66c0 RCX: 00007f1e6a35e98e [ 1047.072735][T12203] RDX: 000000000000000f RSI: 00007f1e6b1b60a0 RDI: 0000000000000005 [ 1047.072747][T12203] RBP: 00007f1e6b1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1047.072761][T12203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1047.072772][T12203] R13: 00007f1e6a626128 R14: 00007f1e6a626090 R15: 00007ffc95fa1e38 [ 1047.072799][T12203] [ 1047.336328][ T31] audit: type=1400 audit(1788378668.021:693): avc: denied { mount } for pid=12199 comm="syz.4.1544" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1047.444073][ T31] audit: type=1400 audit(1788378668.131:694): avc: denied { read write } for pid=5596 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1047.444136][ T31] audit: type=1400 audit(1788378668.131:695): avc: denied { open } for pid=5596 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1047.444188][ T31] audit: type=1400 audit(1788378668.131:696): avc: denied { ioctl } for pid=5596 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1047.512533][ T5712] usb 7-1: USB disconnect, device number 4 [ 1047.572999][ T31] audit: type=1400 audit(1788378668.231:697): avc: denied { setopt } for pid=12201 comm="syz.7.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1047.573078][ T31] audit: type=1400 audit(1788378668.231:698): avc: denied { mounton } for pid=12201 comm="syz.7.1548" path="/36/sys" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1048.843025][ T31] audit: type=1400 audit(1788378668.561:699): avc: denied { execmem } for pid=12212 comm="syz.2.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1048.862611][ T31] audit: type=1400 audit(1788378668.851:700): avc: denied { read } for pid=12212 comm="syz.2.1549" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1048.995133][T12216] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁЍãÂÉ<' to dns_resolver key: bad/missing value [ 1049.151280][T12216] ip_tables: iptables: counters copy to user failed while replacing table [ 1049.277030][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1049.277112][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1049.324665][T12207] ceph: No mds server is up or the cluster is laggy [ 1049.415508][T11266] libceph: connect (1)[c::]:6789 error -101 [ 1049.416534][T11266] libceph: mon0 (1)[c::]:6789 connect error [ 1049.728155][T11266] libceph: connect (1)[c::]:6789 error -101 [ 1049.728344][T11266] libceph: mon0 (1)[c::]:6789 connect error [ 1049.932963][T12224] 0x00000000000a-0x000000000309 : "" [ 1050.246858][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1050.247970][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1051.667685][T12224] ftl_cs: FTL header corrupt! [ 1053.108893][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1053.118609][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1053.122607][ T5603] usb 2-1: USB disconnect, device number 29 [ 1053.135375][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 1053.135409][ T31] audit: type=1400 audit(1788378673.831:721): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1053.142471][ T31] audit: type=1400 audit(1788378673.831:722): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1053.231443][T11266] libceph: connect (1)[c::]:6789 error -101 [ 1053.231637][T11266] libceph: mon0 (1)[c::]:6789 connect error [ 1053.331117][ T31] audit: type=1400 audit(1788378674.021:723): avc: denied { unmount } for pid=11001 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1053.385824][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1553'. [ 1053.402622][ T31] audit: type=1400 audit(1788378674.091:724): avc: denied { prog_load } for pid=12229 comm="syz.1.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1053.422448][ T31] audit: type=1400 audit(1788378674.111:725): avc: denied { bpf } for pid=12229 comm="syz.1.1553" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1053.567553][ T31] audit: type=1400 audit(1788378674.261:726): avc: denied { read write } for pid=12229 comm="syz.1.1553" name="video8" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1053.591627][ T31] audit: type=1400 audit(1788378674.281:727): avc: denied { open } for pid=12229 comm="syz.1.1553" path="/dev/video8" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1053.622698][ T31] audit: type=1400 audit(1788378674.311:728): avc: denied { mount } for pid=12229 comm="syz.1.1553" name="/" dev="ramfs" ino=44710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1053.656546][ T31] audit: type=1400 audit(1788378674.351:729): avc: denied { read } for pid=12229 comm="syz.1.1553" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1053.656903][ T31] audit: type=1400 audit(1788378674.351:730): avc: denied { open } for pid=12229 comm="syz.1.1553" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1054.872049][T12243] netlink: 17279 bytes leftover after parsing attributes in process `syz.7.1555'. [ 1056.558404][ T5611] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 1056.562015][T12253] bridge0: entered allmulticast mode [ 1057.208667][T12261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1058.587467][T12273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1059.058935][T12271] loop4: detected capacity change from 0 to 7 [ 1059.156046][T12271] Dev loop4: unable to read RDB block 7 [ 1059.292578][T12271] loop4: unable to read partition table [ 1059.292710][T12271] loop4: partition table beyond EOD, truncated [ 1059.292733][T12271] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1059.397852][T12278] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1059.855580][ T4968] Dev loop4: unable to read RDB block 7 [ 1059.855716][ T4968] loop4: unable to read partition table [ 1059.855904][ T4968] loop4: partition table beyond EOD, truncated [ 1060.086894][T12284] FAULT_INJECTION: forcing a failure. [ 1060.086894][T12284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1060.086933][T12284] CPU: 1 UID: 0 PID: 12284 Comm: syz.4.1564 Not tainted syzkaller #0 PREEMPT(full) [ 1060.086954][T12284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1060.086965][T12284] Call Trace: [ 1060.086971][T12284] [ 1060.086978][T12284] dump_stack_lvl+0x100/0x190 [ 1060.087005][T12284] should_fail_ex.cold+0x5/0xa [ 1060.087029][T12284] _copy_to_user+0x32/0xd0 [ 1060.087061][T12284] simple_read_from_buffer+0xcb/0x170 [ 1060.087085][T12284] proc_fail_nth_read+0x1af/0x230 [ 1060.087108][T12284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1060.087131][T12284] ? rw_verify_area+0xce/0x6d0 [ 1060.087156][T12284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1060.087177][T12284] vfs_read+0x1e4/0xb40 [ 1060.087205][T12284] ? lock_acquire+0x1d1/0x380 [ 1060.087224][T12284] ? __fget_files+0x34/0x3d0 [ 1060.087244][T12284] ? __pfx_vfs_read+0x10/0x10 [ 1060.087271][T12284] ? find_held_lock+0x2b/0x80 [ 1060.087296][T12284] ? __fget_files+0x215/0x3d0 [ 1060.087323][T12284] ? __fget_files+0x21f/0x3d0 [ 1060.087352][T12284] ksys_read+0x12a/0x250 [ 1060.087374][T12284] ? __pfx_ksys_read+0x10/0x10 [ 1060.087399][T12284] do_syscall_64+0x123/0x790 [ 1060.087425][T12284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.087444][T12284] RIP: 0033:0x7f1e6a35e98e [ 1060.087459][T12284] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1060.087476][T12284] RSP: 002b:00007f1e6b1b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1060.087494][T12284] RAX: ffffffffffffffda RBX: 00007f1e6b1b66c0 RCX: 00007f1e6a35e98e [ 1060.087507][T12284] RDX: 000000000000000f RSI: 00007f1e6b1b60a0 RDI: 0000000000000003 [ 1060.087518][T12284] RBP: 00007f1e6b1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.087529][T12284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.087540][T12284] R13: 00007f1e6a626128 R14: 00007f1e6a626090 R15: 00007ffc95fa1e38 [ 1060.087567][T12284] [ 1060.261791][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 1060.261807][ T31] audit: type=1400 audit(1788378680.951:756): avc: denied { read write } for pid=12283 comm="syz.7.1565" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1060.262176][ T31] audit: type=1400 audit(1788378680.951:757): avc: denied { open } for pid=12283 comm="syz.7.1565" path="/39/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1060.281285][ T31] audit: type=1400 audit(1788378680.971:758): avc: denied { ioctl } for pid=12283 comm="syz.7.1565" path="/39/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1060.316754][ T4968] Dev loop4: unable to read RDB block 7 [ 1060.316790][ T4968] loop4: unable to read partition table [ 1060.316960][ T4968] loop4: partition table beyond EOD, truncated [ 1060.748458][T12293] SET target dimension over the limit! [ 1063.079755][ T31] audit: type=1400 audit(1788378683.771:759): avc: denied { create } for pid=12290 comm="syz.7.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1064.266459][T12303] netlink: 17279 bytes leftover after parsing attributes in process `syz.6.1567'. [ 1064.607461][ T4968] Dev loop4: unable to read RDB block 7 [ 1064.607512][ T4968] loop4: unable to read partition table [ 1064.607692][ T4968] loop4: partition table beyond EOD, truncated [ 1064.809670][ T31] audit: type=1400 audit(1788378685.501:760): avc: denied { create } for pid=12310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1064.831100][ T31] audit: type=1400 audit(1788378685.531:761): avc: denied { read } for pid=12310 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1064.855927][ T31] audit: type=1400 audit(1788378685.551:762): avc: denied { open } for pid=12310 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1064.887931][ T31] audit: type=1400 audit(1788378685.581:763): avc: denied { ioctl } for pid=12310 comm="syz-executor" path="socket:[44874]" dev="sockfs" ino=44874 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1064.915143][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1064.922427][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1064.931251][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1064.941423][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1064.951928][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1064.990816][ T31] audit: type=1400 audit(1788378685.681:764): avc: denied { mounton } for pid=12310 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1065.020376][ T31] audit: type=1400 audit(1788378685.711:765): avc: denied { create } for pid=12309 comm="syz.4.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1065.440903][T12321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1065.913015][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 1065.913050][ T31] audit: type=1400 audit(1788378686.611:767): avc: denied { sys_module } for pid=12310 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1066.173109][ T31] audit: type=1400 audit(1788378686.861:768): avc: denied { shutdown } for pid=12324 comm="syz.1.1575" lport=262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1066.486996][ T5698] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1066.487154][ T985] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1066.522992][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1066.643695][ T5698] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 1066.645634][ T5698] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1066.645781][ T5698] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1066.647448][ T985] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1066.647488][ T985] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1066.648906][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.648928][ T5698] usb 5-1: Product: syz [ 1066.648942][ T5698] usb 5-1: Manufacturer: syz [ 1066.648957][ T5698] usb 5-1: SerialNumber: syz [ 1066.650714][ T985] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1066.656925][T12330] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1066.656984][T12330] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1066.659232][ T985] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.659254][ T985] usb 8-1: Product: syz [ 1066.659268][ T985] usb 8-1: Manufacturer: syz [ 1066.659283][ T985] usb 8-1: SerialNumber: syz [ 1066.667258][ C1] port100 5-1:1.0: NFC: Urb failure (status -71) [ 1066.667304][ C1] port100 5-1:1.0: NFC: Urb failure (status -71) [ 1066.669245][ T5698] port100 5-1:1.0: NFC: Could not get supported command types [ 1066.756152][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 1066.790253][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1066.790282][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1066.831103][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.831141][ T10] usb 2-1: Product: syz [ 1066.831169][ T10] usb 2-1: Manufacturer: syz [ 1066.831186][ T10] usb 2-1: SerialNumber: syz [ 1066.862383][T12325] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1066.862531][T12325] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1066.879857][ C0] port100 2-1:1.0: NFC: Urb failure (status -71) [ 1066.879904][ C0] port100 2-1:1.0: NFC: Urb failure (status -71) [ 1066.898140][ T10] port100 2-1:1.0: NFC: Could not get supported command types [ 1067.023363][ T5612] Bluetooth: hci5: command tx timeout [ 1068.011992][T12340] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁЍãÂÉ<' to dns_resolver key: bad/missing value [ 1068.223531][ T31] audit: type=1400 audit(1788378688.831:769): avc: denied { mount } for pid=12327 comm="syz.7.1576" name="/" dev="rpc_pipefs" ino=44959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1068.387354][ T985] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1068.407354][T12340] ip_tables: iptables: counters copy to user failed while replacing table [ 1068.420185][ T985] usb 8-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1068.420764][T12344] ip_tables: iptables: counters copy to user failed while replacing table [ 1068.454622][ T31] audit: type=1400 audit(1788378689.151:770): avc: denied { read } for pid=12341 comm="syz.6.1572" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1068.454695][ T31] audit: type=1400 audit(1788378689.151:771): avc: denied { open } for pid=12341 comm="syz.6.1572" path="/dev/rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1068.459189][ T31] audit: type=1400 audit(1788378689.151:772): avc: denied { ioctl } for pid=12341 comm="syz.6.1572" path="/dev/rtc0" dev="devtmpfs" ino=915 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1068.586552][ T985] usb 8-1: USB disconnect, device number 6 [ 1068.672307][ T7180] udevd[7180]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1068.799788][T12310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.801623][T12310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.801739][T12310] bridge_slave_0: entered allmulticast mode [ 1068.803587][T12310] bridge_slave_0: entered promiscuous mode [ 1068.806407][T12310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.806535][T12310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.806852][T12310] bridge_slave_1: entered allmulticast mode [ 1068.808379][T12310] bridge_slave_1: entered promiscuous mode [ 1068.841084][T12310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1068.844118][T12310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1068.879739][T12310] team0: Port device team_slave_0 added [ 1068.888180][T12310] team0: Port device team_slave_1 added [ 1068.930213][T12310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1068.938352][T12310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.964514][T12310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1068.978497][T12310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1068.985696][T12310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.012735][T12310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.043686][T11266] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1069.073374][T12310] hsr_slave_0: entered promiscuous mode [ 1069.079870][T12310] hsr_slave_1: entered promiscuous mode [ 1069.086199][T12310] debugfs: 'hsr0' already exists in 'hsr' [ 1069.091993][T12310] Cannot create hsr debugfs directory [ 1069.102892][ T5612] Bluetooth: hci5: command tx timeout [ 1069.203992][T11266] usb 7-1: Using ep0 maxpacket: 32 [ 1069.206311][T11266] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1069.209678][T11266] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1069.209702][T11266] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1069.209722][T11266] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1069.209761][T11266] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1069.209781][T11266] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1069.209803][T11266] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1069.209839][T11266] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.220982][T11266] usb 7-1: config 0 descriptor?? [ 1069.381884][T12310] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1069.394044][T12310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1069.401936][T12310] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1069.412291][T12310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1069.420783][T12310] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1069.432442][T12310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1069.451800][T12310] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1069.453016][T11266] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1069.481745][T12310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1069.563370][ T985] usb 2-1: USB disconnect, device number 30 [ 1069.639883][ T31] audit: type=1400 audit(1788378690.331:773): avc: denied { unmount } for pid=11152 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1069.640213][T11266] usb 5-1: USB disconnect, device number 26 [ 1069.762459][T12310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1069.800722][ T31] audit: type=1400 audit(1788378690.481:774): avc: denied { read write } for pid=12347 comm="syz.6.1578" name="lp0" dev="devtmpfs" ino=3611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1069.800786][ T31] audit: type=1400 audit(1788378690.481:775): avc: denied { open } for pid=12347 comm="syz.6.1578" path="/dev/usb/lp0" dev="devtmpfs" ino=3611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1070.407881][T12310] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.424976][ T985] usb 7-1: USB disconnect, device number 5 [ 1070.432251][ T985] usblp0: removed [ 1071.127534][T12367] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.1581'. [ 1071.386529][ T5611] Bluetooth: hci5: command tx timeout [ 1071.410651][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.410757][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.442219][T10137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.442311][T10137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.464189][T11407] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1071.643965][T11407] usb 8-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 1071.656720][T11407] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1071.656765][T11407] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1071.693203][T11407] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.693253][T11407] usb 8-1: Product: syz [ 1071.693283][T11407] usb 8-1: Manufacturer: syz [ 1071.693302][T11407] usb 8-1: SerialNumber: syz [ 1071.975385][T11407] kaweth 8-1:1.0: Firmware present in device. [ 1071.984168][T11407] kaweth 8-1:1.0: Error reading configuration (-71), no net device created [ 1072.014249][T11407] kaweth 8-1:1.0: probe with driver kaweth failed with error -5 [ 1072.034516][T12376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1072.436322][T11407] usb 8-1: USB disconnect, device number 7 [ 1072.562994][ T5698] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 1072.764765][ T5698] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1072.775571][ T5698] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1072.775607][ T5698] usb 7-1: config 0 has no interface number 0 [ 1072.775654][ T5698] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1072.775682][ T5698] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1072.775720][ T5698] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.823942][ T5698] usb 7-1: config 0 descriptor?? [ 1072.829450][T12375] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1072.949887][ T5698] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1073.605127][ T5612] Bluetooth: hci5: command tx timeout [ 1073.619257][ T31] audit: type=1400 audit(1788378694.311:776): avc: denied { setopt } for pid=12385 comm="syz.4.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1073.619319][ T31] audit: type=1400 audit(1788378694.311:777): avc: denied { bind } for pid=12385 comm="syz.4.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1073.676724][ T31] audit: type=1400 audit(1788378694.311:778): avc: denied { write } for pid=12385 comm="syz.4.1582" path="socket:[47383]" dev="sockfs" ino=47383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1073.702625][ T31] audit: type=1400 audit(1788378694.361:779): avc: denied { write } for pid=12385 comm="syz.4.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1073.901697][T12389] 0x00000000000a-0x000000000309 : "" [ 1074.030185][T12392] overlayfs: failed to resolve './file0/file1': -2 [ 1074.184165][ T31] audit: type=1400 audit(1788378694.841:780): avc: denied { lock } for pid=12385 comm="syz.4.1582" path="socket:[47383]" dev="sockfs" ino=47383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1074.221279][T12389] ftl_cs: FTL header corrupt! [ 1074.389773][ T31] audit: type=1400 audit(1788378695.071:781): avc: denied { create } for pid=12374 comm="syz.6.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1074.420436][ T31] audit: type=1400 audit(1788378695.111:782): avc: denied { write } for pid=12374 comm="syz.6.1584" path="socket:[47419]" dev="sockfs" ino=47419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1075.508886][T12310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.888394][ T5712] usb 7-1: USB disconnect, device number 6 [ 1076.531751][T12403] 0x00000000000a-0x000000000309 : "" [ 1076.558697][T12403] ftl_cs: FTL header corrupt! [ 1077.186790][ T5612] Bluetooth: hci4: unexpected event for opcode 0x2042 [ 1077.258102][T12408] bridge0: entered allmulticast mode [ 1078.609257][T12310] veth0_vlan: entered promiscuous mode [ 1078.624663][T12310] veth1_vlan: entered promiscuous mode [ 1078.713098][T12417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1079.122538][T12310] veth0_macvtap: entered promiscuous mode [ 1079.131318][T12310] veth1_macvtap: entered promiscuous mode [ 1079.871552][T12420] netlink: 17279 bytes leftover after parsing attributes in process `syz.7.1591'. [ 1080.264358][T12310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1080.302318][T12310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.037876][ T5939] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.038269][ T5939] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.038519][ T5939] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.046734][ T5939] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.224645][ T6019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.224680][ T6019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.283398][ T5603] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1081.309360][ T31] audit: type=1400 audit(1788378702.001:783): avc: denied { mount } for pid=12427 comm="syz.4.1594" name="/" dev="configfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1081.333486][ T31] audit: type=1400 audit(1788378702.031:784): avc: denied { search } for pid=12427 comm="syz.4.1594" name="/" dev="configfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1081.360068][ T31] audit: type=1400 audit(1788378702.031:785): avc: denied { search } for pid=12427 comm="syz.4.1594" name="usb_gadget" dev="configfs" ino=3199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1081.360138][ T31] audit: type=1400 audit(1788378702.051:786): avc: denied { search } for pid=12427 comm="syz.4.1594" name="/" dev="configfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1081.360174][ T31] audit: type=1400 audit(1788378702.051:787): avc: denied { search } for pid=12427 comm="syz.4.1594" name="usb_gadget" dev="configfs" ino=3199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1081.383023][ T31] audit: type=1400 audit(1788378702.071:788): avc: denied { search } for pid=12427 comm="syz.4.1594" name="/" dev="configfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1081.383068][ T31] audit: type=1400 audit(1788378702.071:789): avc: denied { search } for pid=12427 comm="syz.4.1594" name="usb_gadget" dev="configfs" ino=3199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1081.436866][ T5603] usb 7-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=fe.f9 [ 1081.442489][ T5603] usb 7-1: config 2 has an invalid interface number: 50 but max is 0 [ 1081.442515][ T5603] usb 7-1: config 2 has no interface number 0 [ 1081.442541][ T5603] usb 7-1: config 2 interface 50 has no altsetting 0 [ 1081.444681][ T5603] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.444703][ T5603] usb 7-1: Product: syz [ 1081.444717][ T5603] usb 7-1: Manufacturer: syz [ 1081.444731][ T5603] usb 7-1: SerialNumber: syz [ 1081.514799][ T6019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.514818][ T6019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.549979][ T31] audit: type=1400 audit(1788378702.231:790): avc: denied { mounton } for pid=12310 comm="syz-executor" path="/root/syzkaller.wRObov/syz-tmp" dev="sda1" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1081.550056][ T31] audit: type=1400 audit(1788378702.231:791): avc: denied { mount } for pid=12310 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1081.554177][ T31] audit: type=1400 audit(1788378702.251:792): avc: denied { mounton } for pid=12310 comm="syz-executor" path="/root/syzkaller.wRObov/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1082.741559][ T5603] usb 7-1: USB disconnect, device number 7 [ 1083.214248][T12435] loop4: detected capacity change from 0 to 7 [ 1083.447871][T12437] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.1596'. [ 1083.841854][T12435] Dev loop4: unable to read RDB block 7 [ 1083.841902][T12435] loop4: unable to read partition table [ 1083.842045][T12435] loop4: partition table beyond EOD, truncated [ 1083.842065][T12435] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1084.135355][T12443] jffs2: notice: (12443) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1084.644401][T12451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1085.333907][T12462] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1086.509221][T12463] netlink: 17279 bytes leftover after parsing attributes in process `syz.8.1599'. [ 1087.457783][T12468] loop4: detected capacity change from 0 to 7 [ 1087.803174][T12467] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1600'. [ 1087.953168][T12468] Dev loop4: unable to read RDB block 7 [ 1087.953218][T12468] loop4: unable to read partition table [ 1087.953341][T12468] loop4: partition table beyond EOD, truncated [ 1087.953355][T12468] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1090.686967][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 1090.687011][ T31] audit: type=1400 audit(1788378711.381:802): avc: denied { ioctl } for pid=12480 comm="syz.6.1605" path="/dev/vhost-net" dev="devtmpfs" ino=1271 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1090.720074][T12481] FAULT_INJECTION: forcing a failure. [ 1090.720074][T12481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1090.733499][T12481] CPU: 1 UID: 0 PID: 12481 Comm: syz.6.1605 Not tainted syzkaller #0 PREEMPT(full) [ 1090.733527][T12481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1090.733540][T12481] Call Trace: [ 1090.733547][T12481] [ 1090.733556][T12481] dump_stack_lvl+0x100/0x190 [ 1090.733592][T12481] should_fail_ex.cold+0x5/0xa [ 1090.733621][T12481] _copy_from_iter+0x1f4/0x1690 [ 1090.733667][T12481] ? __pfx__copy_from_iter+0x10/0x10 [ 1090.733703][T12481] ? __pfx_futex_wake_mark+0x10/0x10 [ 1090.733734][T12481] ? iov_iter_advance+0xac/0x6d0 [ 1090.733766][T12481] vhost_chr_write_iter+0x21a/0x11d0 [ 1090.733801][T12481] ? __pfx_vhost_chr_write_iter+0x10/0x10 [ 1090.733827][T12481] ? avc_policy_seqno+0x9/0x20 [ 1090.733855][T12481] ? bpf_lsm_file_permission+0x9/0x10 [ 1090.733879][T12481] ? security_file_permission+0x76/0x210 [ 1090.733901][T12481] ? rw_verify_area+0xce/0x6d0 [ 1090.733931][T12481] vfs_write+0x6af/0x1050 [ 1090.733962][T12481] ? __pfx_vhost_net_chr_write_iter+0x10/0x10 [ 1090.733989][T12481] ? __pfx_vfs_write+0x10/0x10 [ 1090.734017][T12481] ? find_held_lock+0x2b/0x80 [ 1090.734074][T12481] ksys_write+0x12a/0x250 [ 1090.734092][T12481] ? __pfx_ksys_write+0x10/0x10 [ 1090.734137][T12481] do_syscall_64+0x123/0x790 [ 1090.734166][T12481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.734189][T12481] RIP: 0033:0x7f4b3c39e159 [ 1090.734207][T12481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1090.734228][T12481] RSP: 002b:00007f4b3d2ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1090.734249][T12481] RAX: ffffffffffffffda RBX: 00007f4b3c625fa0 RCX: 00007f4b3c39e159 [ 1090.734264][T12481] RDX: 0000000000000048 RSI: 0000200000000540 RDI: 0000000000000004 [ 1090.734277][T12481] RBP: 00007f4b3c435024 R08: 0000000000000000 R09: 0000000000000000 [ 1090.734289][T12481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1090.734301][T12481] R13: 00007f4b3c626038 R14: 00007f4b3c625fa0 R15: 00007fff8d37db88 [ 1090.734329][T12481] [ 1090.943285][ T31] audit: type=1400 audit(1788378711.641:803): avc: denied { ioctl } for pid=12483 comm="syz.4.1598" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=47740 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1091.084014][ T31] audit: type=1400 audit(1788378711.751:804): avc: denied { prog_run } for pid=12483 comm="syz.4.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1092.243107][ T31] audit: type=1400 audit(1788378712.931:805): avc: denied { create } for pid=12487 comm="syz.6.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1092.285740][T12490] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1606'. [ 1092.297217][ T31] audit: type=1400 audit(1788378712.981:806): avc: denied { write } for pid=12487 comm="syz.6.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1092.322264][ T31] audit: type=1400 audit(1788378712.981:807): avc: denied { nlmsg_write } for pid=12487 comm="syz.6.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1092.381741][ T31] audit: type=1400 audit(1788378713.051:808): avc: denied { mount } for pid=12487 comm="syz.6.1606" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1092.381933][ T31] audit: type=1400 audit(1788378713.061:809): avc: denied { wake_alarm } for pid=12487 comm="syz.6.1606" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1092.737964][ T31] audit: type=1400 audit(1788378713.431:810): avc: denied { create } for pid=12491 comm="syz.4.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1092.899237][ T31] audit: type=1400 audit(1788378713.581:811): avc: denied { ioctl } for pid=12491 comm="syz.4.1608" path="/dev/video2" dev="devtmpfs" ino=928 ioctlcmd=0x5612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1093.850663][T12495] netlink: 180 bytes leftover after parsing attributes in process `syz.7.1607'. [ 1093.854911][T12497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1609'. [ 1094.805943][T12514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1094.982888][ T5612] Bluetooth: hci0: Malformed LE Event: 0x1d [ 1095.097244][T12497] bond1 (unregistering): Released all slaves [ 1095.586029][T12523] netlink: 'syz.7.1613': attribute type 9 has an invalid length. [ 1096.367197][T12515] netlink: 17279 bytes leftover after parsing attributes in process `syz.8.1602'. [ 1098.288636][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 1098.288686][ T31] audit: type=1400 audit(1788378718.981:817): avc: denied { read } for pid=12538 comm="syz.7.1618" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1098.472935][ T31] audit: type=1400 audit(1788378719.021:818): avc: denied { open } for pid=12538 comm="syz.7.1618" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1098.664130][ T31] audit: type=1400 audit(1788378719.351:819): avc: denied { ioctl } for pid=12538 comm="syz.7.1618" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1100.401793][T12551] loop4: detected capacity change from 0 to 7 [ 1100.753135][T12550] netlink: 17279 bytes leftover after parsing attributes in process `syz.7.1623'. [ 1100.944199][T12551] Dev loop4: unable to read RDB block 7 [ 1100.944245][T12551] loop4: unable to read partition table [ 1100.944364][T12551] loop4: partition table beyond EOD, truncated [ 1100.944402][T12551] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1100.989036][ T4968] Dev loop4: unable to read RDB block 7 [ 1100.989098][ T4968] loop4: unable to read partition table [ 1100.989259][ T4968] loop4: partition table beyond EOD, truncated [ 1101.782713][T12555] cgroup2: Unknown parameter 'pids_l' [ 1101.813067][T12544] xt_connbytes: Forcing CT accounting to be enabled [ 1101.822912][ T31] audit: type=1400 audit(1788378722.491:820): avc: denied { mount } for pid=12537 comm="syz.6.1619" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1101.822962][ T31] audit: type=1400 audit(1788378722.501:821): avc: denied { search } for pid=12537 comm="syz.6.1619" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1101.822999][ T31] audit: type=1400 audit(1788378722.501:822): avc: denied { search } for pid=12537 comm="syz.6.1619" name="instances" dev="tracefs" ino=1773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1102.164531][T12562] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1620'. [ 1103.612891][T12568] loop4: detected capacity change from 0 to 7 [ 1103.784282][T12570] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1629'. [ 1104.165524][T12568] Dev loop4: unable to read RDB block 7 [ 1104.166953][T12568] loop4: unable to read partition table [ 1104.167064][T12568] loop4: partition table beyond EOD, truncated [ 1104.167088][T12568] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1104.197175][ T4968] Dev loop4: unable to read RDB block 7 [ 1104.197228][ T4968] loop4: unable to read partition table [ 1104.197392][ T4968] loop4: partition table beyond EOD, truncated [ 1106.284083][ T4968] Dev loop4: unable to read RDB block 7 [ 1106.284136][ T4968] loop4: unable to read partition table [ 1106.284304][ T4968] loop4: partition table beyond EOD, truncated [ 1107.404115][ T4968] Dev loop4: unable to read RDB block 7 [ 1107.404170][ T4968] loop4: unable to read partition table [ 1107.404353][ T4968] loop4: partition table beyond EOD, truncated [ 1107.752835][ T31] audit: type=1400 audit(1788378728.431:823): avc: denied { unmount } for pid=11001 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1107.837922][T12584] CIFS: VFS: bad security option: krb5iý [ 1107.849206][ T31] audit: type=1400 audit(1788378728.501:824): avc: denied { create } for pid=12581 comm="syz.7.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1111.533245][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1111.533310][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1111.586162][ T4968] Dev loop4: unable to read RDB block 7 [ 1111.586220][ T4968] loop4: unable to read partition table [ 1111.586385][ T4968] loop4: partition table beyond EOD, truncated [ 1111.758639][ T31] audit: type=1400 audit(1788378732.451:825): avc: denied { setopt } for pid=12598 comm="syz.6.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1112.990370][ T31] audit: type=1400 audit(1788378733.681:826): avc: denied { bind } for pid=12598 comm="syz.6.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1113.487009][ T31] audit: type=1400 audit(1788378734.181:827): avc: denied { append } for pid=12598 comm="syz.6.1637" name="video7" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1114.020949][T12611] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1114.441640][ T31] audit: type=1400 audit(1788378735.131:828): avc: denied { write } for pid=12612 comm="syz.1.1635" name="dynamic_events" dev="tracefs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1114.467654][ T31] audit: type=1400 audit(1788378735.161:829): avc: denied { open } for pid=12612 comm="syz.1.1635" path="/331/tracing/dynamic_events" dev="tracefs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1114.505740][ T31] audit: type=1400 audit(1788378735.191:830): avc: denied { read } for pid=12612 comm="syz.1.1635" name="trace" dev="tracefs" ino=1711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1114.528619][T12613] FAULT_INJECTION: forcing a failure. [ 1114.528619][T12613] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.528641][T12613] CPU: 1 UID: 0 PID: 12613 Comm: syz.1.1635 Not tainted syzkaller #0 PREEMPT(full) [ 1114.528655][T12613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1114.528663][T12613] Call Trace: [ 1114.528667][T12613] [ 1114.528672][T12613] dump_stack_lvl+0x100/0x190 [ 1114.528693][T12613] should_fail_ex.cold+0x5/0xa [ 1114.528709][T12613] should_failslab+0xc2/0x120 [ 1114.528724][T12613] __kvmalloc_node_noprof+0x113/0x9b0 [ 1114.528736][T12613] ? lock_acquire+0x1d1/0x380 [ 1114.528757][T12613] ? __might_fault+0xc5/0x140 [ 1114.528772][T12613] ? seq_read_iter+0x819/0x1270 [ 1114.528788][T12613] seq_read_iter+0x819/0x1270 [ 1114.528806][T12613] seq_read+0x344/0x4d0 [ 1114.528819][T12613] ? __pfx_seq_read+0x10/0x10 [ 1114.528831][T12613] ? lock_acquire+0x1d1/0x380 [ 1114.528844][T12613] ? avc_policy_seqno+0x9/0x20 [ 1114.528857][T12613] ? selinux_file_permission+0x8f/0x6d0 [ 1114.528879][T12613] ? rw_verify_area+0xce/0x6d0 [ 1114.528894][T12613] ? __pfx_seq_read+0x10/0x10 [ 1114.528906][T12613] vfs_read+0x1e4/0xb40 [ 1114.528923][T12613] ? lock_acquire+0x1d1/0x380 [ 1114.528934][T12613] ? __fget_files+0x34/0x3d0 [ 1114.528947][T12613] ? __pfx_vfs_read+0x10/0x10 [ 1114.528962][T12613] ? find_held_lock+0x2b/0x80 [ 1114.528978][T12613] ? __fget_files+0x215/0x3d0 [ 1114.528993][T12613] ? __fget_files+0x21f/0x3d0 [ 1114.529009][T12613] ksys_read+0x12a/0x250 [ 1114.529019][T12613] ? __pfx_ksys_read+0x10/0x10 [ 1114.529034][T12613] do_syscall_64+0x123/0x790 [ 1114.529049][T12613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.529062][T12613] RIP: 0033:0x7ff0ecf9e159 [ 1114.529072][T12613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.529083][T12613] RSP: 002b:00007ff0edf31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1114.529095][T12613] RAX: ffffffffffffffda RBX: 00007ff0ed225fa0 RCX: 00007ff0ecf9e159 [ 1114.529103][T12613] RDX: 0000000000001000 RSI: 0000200000000180 RDI: 0000000000000007 [ 1114.529110][T12613] RBP: 00007ff0edf31090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.529117][T12613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.529124][T12613] R13: 00007ff0ed226038 R14: 00007ff0ed225fa0 R15: 00007ffd5a247ce8 [ 1114.529142][T12613] [ 1115.788738][ T31] audit: type=1400 audit(1788378736.481:831): avc: denied { bind } for pid=12609 comm="syz.7.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1115.849352][ T31] audit: type=1400 audit(1788378736.481:832): avc: denied { setopt } for pid=12609 comm="syz.7.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1115.870362][ T31] audit: type=1400 audit(1788378736.481:833): avc: denied { accept } for pid=12609 comm="syz.7.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1115.870497][ T31] audit: type=1400 audit(1788378736.491:834): avc: denied { write } for pid=12609 comm="syz.7.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1115.959880][ T4968] Dev loop4: unable to read RDB block 7 [ 1115.965839][ T4968] loop4: unable to read partition table [ 1115.966902][ T4968] loop4: partition table beyond EOD, truncated [ 1116.832955][T12619] netlink: 17279 bytes leftover after parsing attributes in process `syz.6.1640'. [ 1117.567610][ T4968] Dev loop4: unable to read RDB block 7 [ 1117.567646][ T4968] loop4: unable to read partition table [ 1117.567758][ T4968] loop4: partition table beyond EOD, truncated [ 1118.193072][ T31] audit: type=1400 audit(1788378738.881:835): avc: denied { create } for pid=12626 comm="syz.1.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1118.223948][ T31] audit: type=1400 audit(1788378738.911:836): avc: denied { setopt } for pid=12626 comm="syz.1.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1118.624916][ T31] audit: type=1400 audit(1788378739.321:837): avc: denied { write } for pid=12626 comm="syz.1.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1118.684787][ T4968] Dev loop4: unable to read RDB block 7 [ 1118.684832][ T4968] loop4: unable to read partition table [ 1118.690970][ T4968] loop4: partition table beyond EOD, truncated [ 1120.359113][T12651] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1120.774633][ T4968] Dev loop4: unable to read RDB block 7 [ 1120.774696][ T4968] loop4: unable to read partition table [ 1120.774866][ T4968] loop4: partition table beyond EOD, truncated [ 1121.104144][T12655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1122.740923][ T31] audit: type=1400 audit(1788378742.881:838): avc: denied { create } for pid=12656 comm="syz.7.1650" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1122.743197][ T31] audit: type=1400 audit(1788378743.431:839): avc: denied { unlink } for pid=11152 comm="syz-executor" name="file0" dev="tmpfs" ino=364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1122.809874][ T4968] Dev loop4: unable to read RDB block 7 [ 1122.809914][ T4968] loop4: unable to read partition table [ 1122.810094][ T4968] loop4: partition table beyond EOD, truncated [ 1123.022166][ T31] audit: type=1400 audit(1788378743.711:840): avc: denied { read write } for pid=12660 comm="syz.8.1653" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1123.026175][ T31] audit: type=1400 audit(1788378743.721:841): avc: denied { open } for pid=12660 comm="syz.8.1653" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1123.036130][ T31] audit: type=1400 audit(1788378743.731:842): avc: denied { ioctl } for pid=12660 comm="syz.8.1653" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1123.038423][ T31] audit: type=1400 audit(1788378743.731:843): avc: denied { map } for pid=12660 comm="syz.8.1653" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1123.038666][ T31] audit: type=1400 audit(1788378743.731:844): avc: denied { execute } for pid=12660 comm="syz.8.1653" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1124.215850][ T4968] Dev loop4: unable to read RDB block 7 [ 1124.215900][ T4968] loop4: unable to read partition table [ 1124.216083][ T4968] loop4: partition table beyond EOD, truncated [ 1125.413290][T12668] netlink: 17279 bytes leftover after parsing attributes in process `syz.6.1643'. [ 1126.843017][ T985] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1126.992902][ T985] usb 9-1: Using ep0 maxpacket: 8 [ 1126.998656][ T985] usb 9-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 1127.009289][ T985] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.019431][ T985] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1127.037739][ T985] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.056963][ T985] usb 9-1: config 0 descriptor?? [ 1127.941518][ T31] audit: type=1400 audit(1788378748.631:845): avc: denied { read write } for pid=12679 comm="syz.7.1658" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1127.941584][ T31] audit: type=1400 audit(1788378748.631:846): avc: denied { open } for pid=12679 comm="syz.7.1658" path="/dev/uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1127.999949][ T31] audit: type=1400 audit(1788378748.691:847): avc: denied { ioctl } for pid=12679 comm="syz.7.1658" path="/dev/uinput" dev="devtmpfs" ino=914 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1128.042981][T12680] Bluetooth: MGMT ver 1.23 [ 1128.062418][T12680] input: syz0 as /devices/virtual/input/input10 [ 1128.078157][ T31] audit: type=1400 audit(1788378748.771:848): avc: denied { read } for pid=4953 comm="acpid" name="event4" dev="devtmpfs" ino=3643 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1128.101670][ T31] audit: type=1400 audit(1788378748.771:849): avc: denied { open } for pid=4953 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3643 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1128.101701][ T31] audit: type=1400 audit(1788378748.771:850): avc: denied { ioctl } for pid=4953 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3643 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1129.060991][ T985] usbhid 9-1:0.0: can't add hid device: -71 [ 1129.061083][ T985] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1129.081061][ T985] usb 9-1: USB disconnect, device number 2 [ 1129.237857][ T31] audit: type=1400 audit(1788378749.931:851): avc: denied { create } for pid=12689 comm="syz.7.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1129.245673][ T31] audit: type=1400 audit(1788378749.941:852): avc: denied { connect } for pid=12689 comm="syz.7.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1129.497822][T12690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1129.807484][T12698] trusted_key: encrypted_key: key user:syz not found [ 1129.809670][ T31] audit: type=1400 audit(1788378750.471:853): avc: denied { create } for pid=12695 comm="syz.6.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1129.817848][ T31] audit: type=1400 audit(1788378750.481:854): avc: denied { write } for pid=12695 comm="syz.6.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1130.685100][T12703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1132.604298][T12713] 0x00000000000a-0x000000000309 : "" [ 1133.060794][T12715] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1654'. [ 1133.382238][T12713] ftl_cs: FTL header corrupt! [ 1134.088429][ T5612] Bluetooth: hci0: Unable to find connection for big 0x20 [ 1135.907260][T12724] netlink: 17279 bytes leftover after parsing attributes in process `syz.8.1668'. [ 1136.220336][T12715] bond1 (unregistering): Released all slaves [ 1136.843567][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1136.858411][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1136.867591][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1136.873496][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1136.873959][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1137.113979][ T31] audit: type=1400 audit(1788378757.801:855): avc: denied { create } for pid=12729 comm="syz.7.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1137.157666][ T31] audit: type=1400 audit(1788378757.841:856): avc: denied { write } for pid=12729 comm="syz.7.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1137.157847][ T31] audit: type=1400 audit(1788378757.851:857): avc: denied { bind } for pid=12729 comm="syz.7.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1137.159016][ T31] audit: type=1400 audit(1788378757.851:858): avc: denied { name_bind } for pid=12729 comm="syz.7.1671" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1137.160270][ T31] audit: type=1400 audit(1788378757.851:859): avc: denied { node_bind } for pid=12729 comm="syz.7.1671" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1138.942965][ T5611] Bluetooth: hci3: command tx timeout [ 1140.512955][T11266] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1140.662899][T11266] usb 5-1: Using ep0 maxpacket: 8 [ 1140.670272][T11266] usb 5-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 1140.682004][T11266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.682055][T11266] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1140.682097][T11266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.715345][T11266] usb 5-1: config 0 descriptor?? [ 1141.251981][ T5611] Bluetooth: hci3: command tx timeout [ 1142.194397][T12760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1142.232596][ T500] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.644168][ T500] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.984530][ T500] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.058693][T11266] usbhid 5-1:0.0: can't add hid device: -71 [ 1143.058803][T11266] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1143.074167][T11266] usb 5-1: USB disconnect, device number 27 [ 1143.323914][ T500] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.344649][ T5611] Bluetooth: hci3: command tx timeout [ 1144.017423][T12776] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.1679'. [ 1144.690037][T12781] 0x00000000000a-0x000000000309 : "" [ 1144.724635][T12781] ftl_cs: FTL header corrupt! [ 1145.446153][ T5611] Bluetooth: hci3: command tx timeout [ 1148.110082][ T31] audit: type=1400 audit(1788378768.791:860): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1148.128987][ T31] audit: type=1400 audit(1788378768.821:861): avc: denied { search } for pid=5263 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1148.157369][ T31] audit: type=1400 audit(1788378768.851:862): avc: denied { search } for pid=5263 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1148.157435][ T31] audit: type=1400 audit(1788378768.851:863): avc: denied { search } for pid=5263 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1148.157481][ T31] audit: type=1400 audit(1788378768.851:864): avc: denied { read } for pid=5263 comm="dhcpcd" name="n44" dev="tmpfs" ino=11878 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1148.157519][ T31] audit: type=1400 audit(1788378768.851:865): avc: denied { open } for pid=5263 comm="dhcpcd" path="/run/udev/data/n44" dev="tmpfs" ino=11878 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1148.157558][ T31] audit: type=1400 audit(1788378768.851:866): avc: denied { getattr } for pid=5263 comm="dhcpcd" path="/run/udev/data/n44" dev="tmpfs" ino=11878 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1148.400672][ T31] audit: type=1400 audit(1788378769.091:867): avc: denied { read } for pid=12802 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1148.400733][ T31] audit: type=1400 audit(1788378769.091:868): avc: denied { read open } for pid=12802 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1148.400769][ T31] audit: type=1400 audit(1788378769.091:869): avc: denied { getattr } for pid=12802 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1148.524073][T12801] fuse: Bad value for 'fd' [ 1150.269152][ T500] bond0 (unregistering): Released all slaves [ 1151.332154][T12828] FAULT_INJECTION: forcing a failure. [ 1151.332154][T12828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1151.332196][T12828] CPU: 0 UID: 0 PID: 12828 Comm: syz.8.1686 Not tainted syzkaller #0 PREEMPT(full) [ 1151.332210][T12828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1151.332218][T12828] Call Trace: [ 1151.332223][T12828] [ 1151.332228][T12828] dump_stack_lvl+0x100/0x190 [ 1151.332250][T12828] should_fail_ex.cold+0x5/0xa [ 1151.332266][T12828] _copy_from_user+0x2e/0xd0 [ 1151.332285][T12828] write_gssp+0x155/0x380 [ 1151.332299][T12828] ? __pfx_write_gssp+0x10/0x10 [ 1151.332315][T12828] ? lock_acquire+0x1d1/0x380 [ 1151.332327][T12828] ? ksys_write+0x12a/0x250 [ 1151.332339][T12828] ? __pfx_write_gssp+0x10/0x10 [ 1151.332352][T12828] proc_reg_write+0x240/0x330 [ 1151.332370][T12828] vfs_write+0x2aa/0x1050 [ 1151.332388][T12828] ? __pfx_proc_reg_write+0x10/0x10 [ 1151.332403][T12828] ? lock_acquire+0x1d1/0x380 [ 1151.332413][T12828] ? __fget_files+0x34/0x3d0 [ 1151.332426][T12828] ? __pfx_vfs_write+0x10/0x10 [ 1151.332442][T12828] ? find_held_lock+0x2b/0x80 [ 1151.332458][T12828] ? __fget_files+0x215/0x3d0 [ 1151.332473][T12828] ? __fget_files+0x21f/0x3d0 [ 1151.332490][T12828] ksys_write+0x12a/0x250 [ 1151.332501][T12828] ? __pfx_ksys_write+0x10/0x10 [ 1151.332516][T12828] do_syscall_64+0x123/0x790 [ 1151.332531][T12828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.332543][T12828] RIP: 0033:0x7f2d8259e159 [ 1151.332553][T12828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.332565][T12828] RSP: 002b:00007f2d8348e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1151.332576][T12828] RAX: ffffffffffffffda RBX: 00007f2d82826090 RCX: 00007f2d8259e159 [ 1151.332584][T12828] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 000000000000000a [ 1151.332591][T12828] RBP: 00007f2d8348e090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.332599][T12828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1151.332605][T12828] R13: 00007f2d82826128 R14: 00007f2d82826090 R15: 00007fff55172338 [ 1151.332621][T12828] [ 1151.667707][T12820] smpboot: CPU 1 is now offline [ 1151.771441][ T5263] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1152.417265][T12727] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.288222][T12727] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.288353][T12727] bridge_slave_0: entered allmulticast mode [ 1153.289169][T12727] bridge_slave_0: entered promiscuous mode [ 1153.467623][T12727] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.630659][T12727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.630767][T12727] bridge_slave_1: entered allmulticast mode [ 1153.789062][T12727] bridge_slave_1: entered promiscuous mode [ 1153.927002][T12727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1153.956873][T12727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.115888][ T500] tipc: Disabling bearer [ 1154.115987][ T500] tipc: Left network mode [ 1154.992937][T12838] 0x00000000000a-0x000000000309 : "" [ 1155.026100][ T500] rxrpc: Leaked peer 101 {1} 127.0.0.1:7003 [ 1155.168435][T12727] team0: Port device team_slave_0 added [ 1155.212664][T12838] ftl_cs: FTL header corrupt! [ 1155.404242][T12727] team0: Port device team_slave_1 added [ 1155.581636][T12727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1155.581660][T12727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.581684][T12727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1155.637538][T12727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1155.637562][T12727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.637586][T12727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.396429][T12853] netlink: 17279 bytes leftover after parsing attributes in process `syz.7.1690'. [ 1157.664146][T12856] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1691'. [ 1157.695685][ T500] hsr_slave_0: left promiscuous mode [ 1157.727347][ T500] hsr_slave_1: left promiscuous mode [ 1157.817492][ T500] veth1_macvtap: left promiscuous mode [ 1157.826612][ T500] veth0_macvtap: left promiscuous mode [ 1157.832232][ T500] veth1_vlan: left promiscuous mode [ 1157.832347][ T500] veth0_vlan: left promiscuous mode [ 1158.606326][T12863] netlink: 17279 bytes leftover after parsing attributes in process `syz.6.1684'. [ 1159.156963][T12871] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1159.229336][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 1159.229362][ T31] audit: type=1400 audit(1788378779.921:880): avc: denied { write } for pid=12845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1159.550825][ T31] audit: type=1400 audit(1788378780.241:881): avc: denied { write } for pid=12877 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1161.503306][T12884] netlink: 180 bytes leftover after parsing attributes in process `syz.7.1694'. [ 1161.538164][T12881] loop4: detected capacity change from 0 to 7 [ 1161.545549][T12881] Dev loop4: unable to read RDB block 7 [ 1161.545585][T12881] loop4: unable to read partition table [ 1161.545694][T12881] loop4: partition table beyond EOD, truncated [ 1161.545713][T12881] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1161.611675][ T5263] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1161.692699][T12727] hsr_slave_0: entered promiscuous mode [ 1161.709633][T12727] hsr_slave_1: entered promiscuous mode [ 1163.755495][ T4968] Dev loop4: unable to read RDB block 7 [ 1163.755532][ T4968] loop4: unable to read partition table [ 1163.755646][ T4968] loop4: partition table beyond EOD, truncated [ 1163.859774][ T31] audit: type=1400 audit(1788378784.551:882): avc: denied { write } for pid=12898 comm="syz.8.1700" name="subsystems" dev="configfs" ino=3136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1163.859817][ T31] audit: type=1400 audit(1788378784.551:883): avc: denied { add_name } for pid=12898 comm="syz.8.1700" name="testnqn" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1163.859847][ T31] audit: type=1400 audit(1788378784.551:884): avc: denied { create } for pid=12898 comm="syz.8.1700" name="testnqn" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 1163.864495][ T31] audit: type=1400 audit(1788378784.551:885): avc: denied { write } for pid=12898 comm="syz.8.1700" name="subsystems" dev="configfs" ino=3136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1163.864533][ T31] audit: type=1400 audit(1788378784.551:886): avc: denied { remove_name } for pid=12898 comm="syz.8.1700" name="testnqn" dev="configfs" ino=50677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1163.864559][ T31] audit: type=1400 audit(1788378784.551:887): avc: denied { rmdir } for pid=12898 comm="syz.8.1700" name="testnqn" dev="configfs" ino=50677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1163.866921][T12900] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1164.769873][ T31] audit: type=1400 audit(1788378785.461:888): avc: denied { bind } for pid=12898 comm="syz.8.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1164.770305][ T31] audit: type=1400 audit(1788378785.461:889): avc: denied { setopt } for pid=12898 comm="syz.8.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1166.918260][T12913] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.1703'. [ 1167.126796][ T31] audit: type=1400 audit(1788378787.821:890): avc: denied { write } for pid=12897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1167.448162][ T31] audit: type=1400 audit(1788378788.141:891): avc: denied { write } for pid=12917 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1167.497467][T12727] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1167.528300][T12727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1167.536147][T12727] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1167.560568][T12727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1167.561094][T12727] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1167.594860][T12727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1167.602721][T12727] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1167.640738][T12727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1167.728150][ T5263] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1167.936722][ T31] audit: type=1400 audit(1788378788.631:892): avc: denied { getopt } for pid=12925 comm="syz.7.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1167.989299][T12727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.985611][T12727] 8021q: adding VLAN 0 to HW filter on device team0 [ 1169.018377][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.018441][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.087524][ T6019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.087589][ T6019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.180794][ T31] audit: type=1400 audit(1788378789.871:893): avc: denied { mount } for pid=12925 comm="syz.7.1699" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1169.312696][ T31] audit: type=1400 audit(1788378790.001:894): avc: denied { unmount } for pid=11152 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1171.489182][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1171.489233][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1171.771901][T12953] cgroup2: Unknown parameter 'pids_localevent' [ 1171.995075][ T31] audit: type=1400 audit(1788378792.691:895): avc: denied { write } for pid=12929 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1173.308209][ T31] audit: type=1400 audit(1788378794.001:896): avc: denied { write } for pid=12968 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1174.495447][ T5263] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1174.638829][T12727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1177.267795][T12727] veth0_vlan: entered promiscuous mode [ 1177.319494][T12727] veth1_vlan: entered promiscuous mode [ 1177.417381][T12727] veth0_macvtap: entered promiscuous mode [ 1177.437307][T12727] veth1_macvtap: entered promiscuous mode [ 1178.399189][T12727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1178.428734][T12727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1178.522933][ T500] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.523984][ T500] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.524024][ T500] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.524046][ T500] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.101482][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.101505][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.150150][ T31] audit: type=1400 audit(1788378800.841:897): avc: denied { bind } for pid=13016 comm="syz.8.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1181.647054][T13019] loop4: detected capacity change from 0 to 7 [ 1181.670536][T13019] Dev loop4: unable to read RDB block 7 [ 1181.670574][T13019] loop4: unable to read partition table [ 1181.670686][T13019] loop4: partition table beyond EOD, truncated [ 1181.670707][T13019] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1181.671538][T13019] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.1720'. [ 1181.851398][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.851424][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.895098][T13034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1184.309974][T13036] loop4: detected capacity change from 0 to 7 [ 1184.320699][T13036] Dev loop4: unable to read RDB block 7 [ 1184.320736][T13036] loop4: unable to read partition table [ 1184.320849][T13036] loop4: partition table beyond EOD, truncated [ 1184.320865][T13036] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1186.261236][T13049] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.1722'. [ 1186.446328][ T4968] Dev loop4: unable to read RDB block 7 [ 1186.446362][ T4968] loop4: unable to read partition table [ 1186.446472][ T4968] loop4: partition table beyond EOD, truncated [ 1186.913719][T13058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1187.333597][ T903] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1187.682807][ T903] usb 9-1: Using ep0 maxpacket: 32 [ 1187.689451][ T903] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1188.150165][ T903] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.150198][ T903] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1188.150229][ T903] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.305940][ T5611] Bluetooth: hci5: command 0x0406 tx timeout [ 1188.327087][ T903] usb 9-1: config 0 descriptor?? [ 1190.642504][T13066] netlink: 180 bytes leftover after parsing attributes in process `syz.9.1728'. [ 1190.697599][ T31] audit: type=1400 audit(1788378811.391:898): avc: denied { write } for pid=13051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1190.757761][ T903] koneplus 0003:1E7D:2D51.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.8-1/input0 [ 1190.819602][ T31] audit: type=1400 audit(1788378811.511:899): avc: denied { mounton } for pid=13061 comm="syz.8.1727" path="/proc/96/task" dev="proc" ino=52209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1191.146489][T13062] sit0: entered promiscuous mode [ 1191.165761][T13062] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1727'. [ 1191.272906][ T903] koneplus 0003:1E7D:2D51.0007: couldn't init struct koneplus_device [ 1191.272982][ T903] koneplus 0003:1E7D:2D51.0007: couldn't install mouse [ 1191.312199][ T903] koneplus 0003:1E7D:2D51.0007: probe with driver koneplus failed with error -71 [ 1191.351380][ T903] usb 9-1: USB disconnect, device number 3 [ 1191.376329][ T31] audit: type=1400 audit(1788378812.071:900): avc: denied { write } for pid=13086 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1191.494590][ T31] audit: type=1400 audit(1788378812.191:901): avc: denied { ioctl } for pid=13089 comm="syz.9.1734" path="/dev/ptyr6" dev="devtmpfs" ino=141 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1193.829302][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1194.304286][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1194.640797][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1194.640841][ T9] usb 10-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1194.798583][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.798611][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1194.844762][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.844793][ T9] usb 10-1: Product: syz [ 1194.844812][ T9] usb 10-1: Manufacturer: syz [ 1194.844822][ T9] usb 10-1: SerialNumber: syz [ 1195.095553][ T31] audit: type=1400 audit(1788378815.791:902): avc: denied { shutdown } for pid=13097 comm="syz.9.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1195.122457][ T31] audit: type=1400 audit(1788378815.811:903): avc: denied { name_connect } for pid=13097 comm="syz.9.1736" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1195.487889][ T9] usb 10-1: unit 4 not found! [ 1195.487914][ T9] usb 10-1: unit 0 not found! [ 1196.136680][T13119] loop4: detected capacity change from 0 to 7 [ 1196.151813][T13119] Dev loop4: unable to read RDB block 7 [ 1196.151847][T13119] loop4: unable to read partition table [ 1196.151962][T13119] loop4: partition table beyond EOD, truncated [ 1196.151976][T13119] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1196.320812][ T9] usb 10-1: USB disconnect, device number 2 [ 1196.410958][ T7180] udevd[7180]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1196.501068][ T31] audit: type=1400 audit(1788378817.191:904): avc: denied { write } for pid=13100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1199.440579][ T31] audit: type=1400 audit(1788378820.131:905): avc: denied { write } for pid=13135 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1199.688769][T13128] 0x00000000000a-0x000000000309 : "" [ 1199.696245][T13128] ftl_cs: FTL header corrupt! [ 1304.912744][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1304.919803][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13143/1:b..l [ 1304.927789][ C0] rcu: (detected by 0, t=10502 jiffies, g=99137, q=780 ncpus=1) [ 1304.935563][ C0] task:mtd_probe state:R running task stack:27192 pid:13143 tgid:13143 ppid:5613 task_flags:0x400000 flags:0x00080000 [ 1304.949022][ C0] Call Trace: [ 1304.952296][ C0] [ 1304.955220][ C0] __schedule+0x1259/0x6920 [ 1304.959720][ C0] ? lapic_next_event+0x10/0x20 [ 1304.964564][ C0] ? find_held_lock+0x2b/0x80 [ 1304.969245][ C0] ? __pfx___schedule+0x10/0x10 [ 1304.974075][ C0] ? mark_held_locks+0x40/0x70 [ 1304.978817][ C0] preempt_schedule_irq+0x4e/0x90 [ 1304.983818][ C0] irqentry_exit+0x205/0xa10 [ 1304.988393][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1304.994349][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 1304.999531][ C0] Code: 05 4f cd a4 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 5e da 5d 0f 0f 82 c9 02 00 00 8b 35 fe 0b 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ed cc a4 12 0f 85 09 03 00 00 48 83 c4 [ 1305.019115][ C0] RSP: 0018:ffffc90004097380 EFLAGS: 00000206 [ 1305.025233][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 1305.033191][ C0] RDX: 0000000000000000 RSI: ffffffff8e3c4c52 RDI: ffffffff8c620e80 [ 1305.041140][ C0] RBP: ffffffff8edec060 R08: 0000000078f237e6 R09: 0000000000000007 [ 1305.049084][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 1305.057029][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1305.064988][ C0] ? unwind_next_frame+0x3be/0x2090 [ 1305.070170][ C0] ? unwind_next_frame+0x3be/0x2090 [ 1305.075350][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1305.081498][ C0] unwind_next_frame+0xd1/0x2090 [ 1305.086431][ C0] ? unwind_next_frame+0xbd/0x2090 [ 1305.091539][ C0] ? do_syscall_64+0x123/0x790 [ 1305.096286][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1305.102438][ C0] arch_stack_walk+0x94/0xf0 [ 1305.107012][ C0] ? do_syscall_64+0x123/0x790 [ 1305.111930][ C0] stack_trace_save+0x8e/0xc0 [ 1305.116586][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1305.121965][ C0] ? stack_trace_save+0x8e/0xc0 [ 1305.126795][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1305.132150][ C0] kasan_save_stack+0x30/0x50 [ 1305.136801][ C0] ? kasan_save_stack+0x30/0x50 [ 1305.141624][ C0] ? kasan_save_track+0x14/0x30 [ 1305.146455][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1305.151242][ C0] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1305.156786][ C0] ? kmem_cache_free+0x40f/0x6c0 [ 1305.161716][ C0] ? tear_down_vmas+0x2a5/0x610 [ 1305.166578][ C0] ? exit_mmap+0x469/0xa00 [ 1305.170989][ C0] ? __mmput+0x12a/0x410 [ 1305.175294][ C0] ? mmput+0x67/0x80 [ 1305.179181][ C0] ? setup_new_exec+0x1d9/0x2a0 [ 1305.184043][ C0] ? load_elf_binary+0x598/0x51a0 [ 1305.189099][ C0] ? bprm_execve+0x8cd/0x1940 [ 1305.193776][ C0] ? do_execveat_common.isra.0+0x4a5/0x580 [ 1305.199556][ C0] ? __x64_sys_execve+0x93/0xd0 [ 1305.204381][ C0] ? do_syscall_64+0x123/0x790 [ 1305.209164][ C0] kasan_save_track+0x14/0x30 [ 1305.213821][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1305.218388][ C0] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1305.223742][ C0] ? kmem_cache_free+0x40f/0x6c0 [ 1305.228660][ C0] ? tear_down_vmas+0x2a5/0x610 [ 1305.233515][ C0] kmem_cache_free+0x40f/0x6c0 [ 1305.238284][ C0] tear_down_vmas+0x2a5/0x610 [ 1305.242940][ C0] exit_mmap+0x469/0xa00 [ 1305.247164][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1305.251903][ C0] ? rcu_is_watching+0x13/0xc0 [ 1305.256661][ C0] ? uprobe_clear_state+0x49/0x250 [ 1305.261755][ C0] ? find_held_lock+0x2b/0x80 [ 1305.266411][ C0] ? uprobe_clear_state+0x5f/0x250 [ 1305.271527][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1305.277153][ C0] __mmput+0x12a/0x410 [ 1305.281207][ C0] mmput+0x67/0x80 [ 1305.284915][ C0] setup_new_exec+0x1d9/0x2a0 [ 1305.289575][ C0] load_elf_binary+0x598/0x51a0 [ 1305.294407][ C0] ? load_misc_binary+0x6f4/0x17d0 [ 1305.299493][ C0] ? put_binfmt_handler+0x87/0x310 [ 1305.304589][ C0] ? lock_acquire+0x1d1/0x380 [ 1305.309260][ C0] ? __pfx_load_elf_binary+0x10/0x10 [ 1305.314523][ C0] ? find_held_lock+0x2b/0x80 [ 1305.319208][ C0] ? bprm_execve+0x8a2/0x1940 [ 1305.323868][ C0] ? bprm_execve+0x8a2/0x1940 [ 1305.328530][ C0] bprm_execve+0x8cd/0x1940 [ 1305.333024][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 1305.337941][ C0] ? copy_strings.isra.0+0x491/0x790 [ 1305.343247][ C0] do_execveat_common.isra.0+0x4a5/0x580 [ 1305.348871][ C0] __x64_sys_execve+0x93/0xd0 [ 1305.353522][ C0] do_syscall_64+0x123/0x790 [ 1305.358091][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.363962][ C0] RIP: 0033:0x7f19e0ef2107 [ 1305.368353][ C0] RSP: 002b:00007ffc84eacb18 EFLAGS: 00000206 ORIG_RAX: 000000000000003b [ 1305.376740][ C0] RAX: ffffffffffffffda RBX: 000055f86fbc7140 RCX: 00007f19e0ef2107 [ 1305.384707][ C0] RDX: 000055f874945bd0 RSI: 00007ffc84eacc30 RDI: 00007ffc84ead430 [ 1305.392657][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1305.400605][ C0] R10: 0000000000000008 R11: 0000000000000206 R12: 000055f874945bd0 [ 1305.408572][ C0] R13: 00007ffc84eacc30 R14: 000000000000000d R15: 0000000000000009 [ 1305.416534][ C0] [ 1305.419552][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g99137 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 1305.430565][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1305.440513][ C0] rcu: RCU grace-period kthread stack dump: [ 1305.446405][ C0] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1305.459904][ C0] Call Trace: [ 1305.463185][ C0] [ 1305.466112][ C0] __schedule+0x1259/0x6920 [ 1305.470640][ C0] ? __pfx___schedule+0x10/0x10 [ 1305.475476][ C0] schedule+0xdd/0x2c0 [ 1305.479524][ C0] schedule_timeout+0x127/0x280 [ 1305.484362][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1305.489712][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1305.494983][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1305.500764][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1305.506207][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 1305.510960][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1305.516232][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1305.521146][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1305.526315][ C0] ? rcu_is_watching+0x13/0xc0 [ 1305.531060][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1305.536842][ C0] rcu_gp_kthread+0x17a/0x220 [ 1305.541499][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1305.546768][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1305.552604][ C0] ? __kthread_parkme+0x18f/0x230 [ 1305.557630][ C0] ? kthread+0x13a/0x450 [ 1305.561871][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1305.567069][ C0] kthread+0x373/0x450 [ 1305.571138][ C0] ? __pfx_kthread+0x10/0x10 [ 1305.575733][ C0] ret_from_fork+0x730/0xd60 [ 1305.580306][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1305.585396][ C0] ? __switch_to+0x800/0x10f0 [ 1305.590057][ C0] ? __pfx_kthread+0x10/0x10 [ 1305.594653][ C0] ret_from_fork_asm+0x1a/0x30 [ 1305.599400][ C0] [ 1305.602659][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1305.608961][ C0] CPU: 0 UID: 0 PID: 13145 Comm: syz.6.1743 Not tainted syzkaller #0 PREEMPT(full) [ 1305.618304][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1305.628341][ C0] RIP: 0033:0x7f4b3c39e157 [ 1305.632738][ C0] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 1305.652505][ C0] RSP: 002b:00007f4b3d26b0e8 EFLAGS: 00000246 [ 1305.658574][ C0] RAX: 00000000000000ca RBX: 00007f4b3c626188 RCX: 00007f4b3c39e159 [ 1305.666698][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4b3c626188 [ 1305.674676][ C0] RBP: 00007f4b3c626180 R08: 0000000000000000 R09: 0000000000000000 [ 1305.682641][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1305.690600][ C0] R13: 00007f4b3c626218 R14: 00007fff8d37daa0 R15: 00007fff8d37db88 [ 1305.698643][ C0] FS: 00007f4b3d26b6c0 GS: 0000000000000000 [ 1305.858570][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.865193][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.872713][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.880819][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.039539][ T31] audit: type=1400 audit(1788378926.731:906): avc: denied { write } for pid=13147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1306.109578][ T31] audit: type=1400 audit(1788378926.801:907): avc: denied { write } for pid=13158 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1306.317868][ T31] audit: type=1400 audit(1788378927.011:908): avc: denied { write } for pid=13161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1306.386090][ T31] audit: type=1400 audit(1788378927.081:909): avc: denied { write } for pid=13172 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1306.547928][ T4968] udevd[4968]: worker [5613] /devices/virtual/mtd/mtd44ro is taking a long time SYZFAIL: failed to send rpc fd=3 want=88480 sent=0 n=-1 (errno 32: Broken pipe) [ 1307.291898][ T31] audit: type=1400 audit(1788378927.981:910): avc: denied { write } for pid=5586 comm="syz-executor" path="pipe:[4497]" dev="pipefs" ino=4497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1307.903034][T13146] Bluetooth: hci3: command 0x0406 tx timeout [ 1309.561232][ T9988] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.686929][ T9988] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.795762][ T9988] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.925792][ T9988] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.246839][ T9988] bridge_slave_1: left allmulticast mode [ 1310.254739][ T9988] bridge_slave_1: left promiscuous mode [ 1310.260820][ T9988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.273973][ T9988] bridge_slave_0: left allmulticast mode [ 1310.279955][ T9988] bridge_slave_0: left promiscuous mode [ 1310.286210][ T9988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.632107][ T9988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1310.651671][ T9988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1310.665816][ T9988] bond0 (unregistering): Released all slaves [ 1310.689740][ T31] audit: type=1400 audit(1788378931.381:911): avc: denied { write } for pid=13187 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1310.878718][ T31] audit: type=1400 audit(1788378931.571:912): avc: denied { write } for pid=13198 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1310.961083][ T9988] hsr_slave_0: left promiscuous mode [ 1310.969537][ T9988] hsr_slave_1: left promiscuous mode [ 1310.979468][ T9988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1310.987638][ T9988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.997280][ T9988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1310.997316][ T9988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.034850][ T9988] veth1_macvtap: left promiscuous mode [ 1311.034892][ T9988] veth0_macvtap: left promiscuous mode [ 1311.034961][ T9988] veth1_vlan: left promiscuous mode [ 1311.034999][ T9988] veth0_vlan: left promiscuous mode [ 1311.227957][ T9988] team0 (unregistering): Port device team_slave_1 removed [ 1311.244688][ T9988] team0 (unregistering): Port device team_slave_0 removed [ 1311.329070][ T5263] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1311.778475][T12595] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.849310][ T31] audit: type=1400 audit(1788378932.541:913): avc: denied { write } for pid=13201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1311.941301][T12595] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.979587][ T31] audit: type=1400 audit(1788378932.671:914): avc: denied { write } for pid=13212 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1312.046412][T12595] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.081595][ T5263] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1312.168615][T12595] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.548814][ T31] audit: type=1400 audit(1788378933.241:915): avc: denied { write } for pid=13215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1312.660382][T12595] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.686755][ T31] audit: type=1400 audit(1788378933.371:916): avc: denied { write } for pid=13226 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1312.789807][ T5263] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1312.880482][T12595] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.984200][T12595] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.086244][T12595] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.230055][ T31] audit: type=1400 audit(1788378933.921:917): avc: denied { write } for pid=13229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1313.377971][ T31] audit: type=1400 audit(1788378934.071:918): avc: denied { write } for pid=13240 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1313.508228][ T5263] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1313.565696][T12595] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.715035][T12595] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.847499][T12595] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.952822][ T31] audit: type=1400 audit(1788378934.641:919): avc: denied { write } for pid=13243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1313.980966][T12595] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.074401][ T31] audit: type=1400 audit(1788378934.771:920): avc: denied { write } for pid=13254 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1314.196758][ T5263] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1314.282084][T12595] bridge_slave_1: left allmulticast mode [ 1314.282116][T12595] bridge_slave_1: left promiscuous mode [ 1314.282241][T12595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.306257][T12595] bridge_slave_0: left allmulticast mode [ 1314.306295][T12595] bridge_slave_0: left promiscuous mode [ 1314.318009][T12595] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.339356][T12595] bridge_slave_1: left allmulticast mode [ 1314.350741][T12595] bridge_slave_1: left promiscuous mode [ 1314.359210][T12595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.375245][T12595] bridge_slave_0: left allmulticast mode [ 1314.380931][T12595] bridge_slave_0: left promiscuous mode [ 1314.389172][T12595] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.401221][T12595] bridge_slave_1: left allmulticast mode [ 1314.407002][T12595] bridge_slave_1: left promiscuous mode [ 1314.416881][T12595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.425565][T12595] bridge_slave_0: left allmulticast mode [ 1314.431238][T12595] bridge_slave_0: left promiscuous mode [ 1314.437573][T12595] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.615858][T12595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1314.631596][T12595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1314.643626][T12595] bond0 (unregistering): Released all slaves [ 1314.768971][T12595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1314.779712][T12595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1314.791278][T12595] bond0 (unregistering): Released all slaves