last executing test programs: 2m40.583279673s ago: executing program 0 (id=382): io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x5eb2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xb, 0x1}, 0xe) close(r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fcd9df25800020000000000063c73c965ea2ea21fdd9d8d450596a7cd557c31c044c55de7b1d36b907c7692b72c22172c2509961a96909a68118d504e36d4f16c84561aa943dbd69fcdb824b27c4b3f2d9f55ecdd0df5783f9ce16e395dd886f5794a4cce7cfefb498aeacf6aafb0f3d994e5d0bf094158d5e264032ebc712d4c4af1b00b8212b0a176e63b08fa9f86788850db53f203f8c3bf86a6e7d7a4afc6349e61831c55c5997e2385a09b2efceeb56966ec6c170fdefe5197663026e076e39e41278c42d62cb9b7df35c30", @ANYRES32=r5, @ANYBLOB="0c0050800500090001000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, "7fefc0", 0xc, 0x11, 0x1, @private2, @local, {[], {0x4e23, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x8, 0x100, @void}}}}}}}}, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x1068, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 2m39.848008037s ago: executing program 0 (id=384): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m38.718165315s ago: executing program 0 (id=387): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@can_newroute={0x44, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0x1d, 0x1, 0x5}, [@CGW_MOD_UID={0x8, 0xe, 0xffffffffffffffff}, @CGW_DST_IF={0x8}, @CGW_MOD_SET={0x15, 0x4, {{{0x4}, 0x3, 0x3, 0x0, 0x0, "918a76e1efa19e91"}, 0x5}}, @CGW_SRC_IF={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair(0x6, 0x4, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$setregs(0xd, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x30b880, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0x18, 0x30, 0x25, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 2m37.573729703s ago: executing program 0 (id=390): socket(0x11, 0x5, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfad6f9fbd4492587, 0x13, r1, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 2m33.943006663s ago: executing program 0 (id=400): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000e9549866a769aa8c07000000000000000000000005000500000000000a00000000000000000000000000004e489a0000000000000000000000000000000000d0b32e222f6fb38f65d231e7c4b688ae5a192a47be431c969231"], 0x38}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x13, &(0x7f0000000780)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffff90}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0xf, 0xc0, 0x2, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x20, 0x20, 0x80, 0x7}}) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f00000000c0)={0x2c, 0x5, r3, 0x33, r4}, 0x10) 2m33.668516422s ago: executing program 0 (id=403): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = syz_open_pts(0xffffffffffffffff, 0x1) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hpfs\x00', 0x4080, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="400100001c000100feffffbf00010000fe88000a000000000000000000000001ac1414aa000000000000000000000000000107944e200005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700004350000020001fd2000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0060f50000"], 0x140}, 0x1, 0x0, 0x0, 0x8885}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r6, @ANYRES64, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x6, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x9, 0x1, 0x6, 0x5, 0x7, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x42, 0xf4, 0x4, 0x200}], 0xfffffffe}) getpid() 2m18.503743058s ago: executing program 32 (id=403): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = syz_open_pts(0xffffffffffffffff, 0x1) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hpfs\x00', 0x4080, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="400100001c000100feffffbf00010000fe88000a000000000000000000000001ac1414aa000000000000000000000000000107944e200005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700004350000020001fd2000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0060f50000"], 0x140}, 0x1, 0x0, 0x0, 0x8885}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r6, @ANYRES64, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x6, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x9, 0x1, 0x6, 0x5, 0x7, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x42, 0xf4, 0x4, 0x200}], 0xfffffffe}) getpid() 2m1.651427363s ago: executing program 3 (id=497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x4004804) mmap(&(0x7f0000569000/0x4000)=nil, 0x4000, 0x8, 0x10010, r3, 0xb2e30000) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x1, 0xa}, {0x0, 0x2, 0x3ff, 0xd23, 0xfff}}}}, 0x17) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) sendto$inet6(r4, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r4, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) 2m0.661670613s ago: executing program 3 (id=499): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x6c90, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000009001000280b000000dbdf2500080003004f97bfb570ef3d233e32f8c6c357f8419913b814930dfd362465857a51a7", @ANYRES32=r2, @ANYRES16=r0, @ANYBLOB="080001000300000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2c048010}, 0x20000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x5, 0x1) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000280)=""/34) ioctl$KVM_SET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea2, 0x7ff) r3 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) 1m55.529749854s ago: executing program 3 (id=515): r0 = socket(0x400000000010, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async, rerun: 32) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14e7e100158b010000000000000000000001fd"], 0x14}}, 0x0) connect$unix(r2, &(0x7f0000001240)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'sit0\x00'}) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) (async) socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x993568c40857f797, &(0x7f00000011c0)=""/57, &(0x7f0000001200)=0x39) 1m53.66374925s ago: executing program 3 (id=521): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ptrace$setopts(0x4206, r5, 0x4, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x138, 0x210, 0x2d8, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xff000000]}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x33}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x1, 0x3, 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x3}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="666086c42e9fb11a0eccc0a0e3f5af4791267debf59e59355a2ae59366d276311d2a4331911641a4eafce9cfbb8c2817c16bae7e2fcc4f2fe9971c7d2fc12367584e7419721cd7342805595f2d02d129c006c32e690d07912552cbe348074881d9859121a42d11ec0873e5a70c57076d4bcbc93c6b91a243facc8c419494981222012126eba5c1db1e62b0ec58532015afd8cdc544f1b00ec4cd0da945c8bb3d95585aa04ac9ac9c0cdfc1acda8f7bd8f49532047a9978b89117e292206417c7e9c83e", @ANYRES32=r1], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000010001fff26bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="05160000102f00002c0012800b00010067726574617000001c00028006000e000100000008000700e0000001060010000100000008000a00", @ANYRES32=r10, @ANYBLOB], 0x54}}, 0x4000) 1m49.334930264s ago: executing program 3 (id=539): dup(0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m47.650398039s ago: executing program 3 (id=541): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) syz_emit_ethernet(0x3fe, &(0x7f0000000340)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x3c8, 0x3a, 0x0, @private2, @mcast2, {[@fragment={0x11, 0x0, 0x3, 0x0, 0x0, 0x8, 0x65}, @dstopts={0x0, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @empty}]}, @fragment={0x67, 0x0, 0x0, 0x1, 0x0, 0x2, 0x68}, @hopopts={0x62, 0x54, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x44}}, @generic={0x7, 0xfd, "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"}, @generic={0x4, 0xb2, "ef49cf570eedd4d7404a3e4e4942b3af23e4ee38cc24676d03921b8f1c9efe4d0c99f44d74fa59c837b3fbf293cb71994ec49a856a5433a07e578b72ef902e12e0d34142d7efb24b81952d40d22d991fb01af5d356cd453f8a9b2a1b9eed973396002d67d5bb1449c00be752afb5d21ac8fa53feff0ae46ed9e0a85b5baef3f78427b9e3a870d3597783c45d8844898c778c62f7230192397221db79ac3a4b83dd8c5579f7bf7709b9d4fc8d8cb72f7b6e85"}, @jumbo={0xc2, 0x4, 0xba0b}, @enc_lim={0x4, 0x1, 0xf}, @generic={0xb7, 0xb3, "07c126a5daa32607141c593008dc32fd683a1e3f3efc45f3e958c43ce4f8303125262899bcc6a5b94b549317522e7ed38f884ac275f47fd405bc1653c154bbaae2ab5e5671935522a902621703c6855a5f40864f4fc0f33c59f00a5cbbadd080edd5aa528412340250cfd79a696b3bde2c25fe581e8b525480e03d2ea1ead83857a0831aaa382dbb54f7e7df48e7a68889b2971a22735bd8b767432d027ad8f7cc50272cda6203912688586e3a973f7fbcae6c"}, @hao={0xc9, 0x10, @mcast1}]}, @hopopts={0x88, 0x11, '\x00', [@hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x9f00}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x22}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn, @calipso={0x7, 0x20, {0x0, 0x6, 0x2, 0xff, [0x6, 0x3, 0x7]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x0, 0xa, 0x80, 0x7, [0xb5d0, 0x2, 0x6, 0x5, 0x3]}}]}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) openat$uinput(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) mknod$loop(0x0, 0x10, 0x0) socket$kcm(0x21, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x4004101) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000000), 0x320000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000280), &(0x7f0000000300)=0x4) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) sync() mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1) unlink(&(0x7f0000000040)='./file0\x00') 1m32.484310362s ago: executing program 33 (id=541): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) syz_emit_ethernet(0x3fe, &(0x7f0000000340)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x3c8, 0x3a, 0x0, @private2, @mcast2, {[@fragment={0x11, 0x0, 0x3, 0x0, 0x0, 0x8, 0x65}, @dstopts={0x0, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @empty}]}, @fragment={0x67, 0x0, 0x0, 0x1, 0x0, 0x2, 0x68}, @hopopts={0x62, 0x54, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x44}}, @generic={0x7, 0xfd, "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"}, @generic={0x4, 0xb2, "ef49cf570eedd4d7404a3e4e4942b3af23e4ee38cc24676d03921b8f1c9efe4d0c99f44d74fa59c837b3fbf293cb71994ec49a856a5433a07e578b72ef902e12e0d34142d7efb24b81952d40d22d991fb01af5d356cd453f8a9b2a1b9eed973396002d67d5bb1449c00be752afb5d21ac8fa53feff0ae46ed9e0a85b5baef3f78427b9e3a870d3597783c45d8844898c778c62f7230192397221db79ac3a4b83dd8c5579f7bf7709b9d4fc8d8cb72f7b6e85"}, @jumbo={0xc2, 0x4, 0xba0b}, @enc_lim={0x4, 0x1, 0xf}, @generic={0xb7, 0xb3, "07c126a5daa32607141c593008dc32fd683a1e3f3efc45f3e958c43ce4f8303125262899bcc6a5b94b549317522e7ed38f884ac275f47fd405bc1653c154bbaae2ab5e5671935522a902621703c6855a5f40864f4fc0f33c59f00a5cbbadd080edd5aa528412340250cfd79a696b3bde2c25fe581e8b525480e03d2ea1ead83857a0831aaa382dbb54f7e7df48e7a68889b2971a22735bd8b767432d027ad8f7cc50272cda6203912688586e3a973f7fbcae6c"}, @hao={0xc9, 0x10, @mcast1}]}, @hopopts={0x88, 0x11, '\x00', [@hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x9f00}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x22}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn, @calipso={0x7, 0x20, {0x0, 0x6, 0x2, 0xff, [0x6, 0x3, 0x7]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x0, 0xa, 0x80, 0x7, [0xb5d0, 0x2, 0x6, 0x5, 0x3]}}]}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) openat$uinput(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) mknod$loop(0x0, 0x10, 0x0) socket$kcm(0x21, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x4004101) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000000), 0x320000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000280), &(0x7f0000000300)=0x4) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) sync() mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1) unlink(&(0x7f0000000040)='./file0\x00') 9.043141655s ago: executing program 5 (id=920): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0}) io_uring_enter(0xffffffffffffffff, 0x44fd, 0x3, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) rt_sigsuspend(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000b80)={0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004a40)=ANY=[@ANYBLOB="d01000003f0007012dbd7000fbdbdf25047c00000400fc80"], 0x10d0}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000005bde0000"], &(0x7f0000000040)='syzkaller\x00', 0x208, 0xb, &(0x7f0000000080)=""/11, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0x5, 0x51fa, 0x6}, 0x10, 0x1b130, 0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x6}, 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) 8.957810539s ago: executing program 2 (id=921): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0}) io_uring_enter(0xffffffffffffffff, 0x44fd, 0x3, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) rt_sigsuspend(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000b80)={0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004a40)=ANY=[@ANYBLOB="d01000003f0007012dbd7000fbdbdf25047c00000400fc80"], 0x10d0}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000005bde0000"], &(0x7f0000000040)='syzkaller\x00', 0x208, 0xb, &(0x7f0000000080)=""/11, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0x5, 0x51fa, 0x6}, 0x10, 0x1b130, 0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x6}, 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) 8.472491535s ago: executing program 5 (id=923): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x1d, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x900, 0x7}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.956275221s ago: executing program 1 (id=925): creat(&(0x7f0000000000)='./file0\x00', 0x0) gettid() r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)={0x10000000}) signalfd4(r0, &(0x7f0000000180), 0x8, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000faff0018000000180000aa00000000000000000100008402000001"], 0x0, 0x32}, 0x28) io_uring_setup(0x456, &(0x7f00000000c0)={0x0, 0x3, 0x1000, 0x1004003, 0x3c}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) r4 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xf) quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000701, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)='%-5lx \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x7e1ee0b3, 0xfffff600, 0x8010, 0x1, 0xffff, '\x00', 0x0, r3, 0x2, 0x3, 0x2, 0x0, @value=r3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x13, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @jmp={0x5, 0x0, 0x7, 0x5, 0x0, 0x99f5f74b8ff05e9d, 0x10}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x759a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x2, 0x43, 0xf}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)=[{0x2, 0x4, 0xa, 0x5}, {0x5, 0x2, 0xf, 0xc}], 0x10, 0x100}, 0x94) prctl$PR_SET_SECUREBITS(0x1c, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x602, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464d2, 0x0) 7.412089581s ago: executing program 5 (id=926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003e00070100000000fcdbdf25047c000004000000140001800674405c57e0a99819f2ca"], 0x2c}}, 0x0) epoll_create(0x10000e9) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000b00)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000500)={{0x7, 0x0, 0x9da, 0x0, '\x00', 0xf400}, 0x1, [0x6, 0x5, 0xd, 0x5, 0x3, 0x8001, 0x495, 0x5, 0x3, 0x1ff, 0x4, 0x1, 0x9, 0xffffffffffffffff, 0x100, 0xa3d9, 0x5, 0x0, 0x469, 0x5, 0xc2, 0x8020d, 0x3, 0xfffffffffffffff9, 0x2, 0x1000, 0x9, 0x8, 0x4, 0x4, 0xd9, 0x5, 0x5, 0x8, 0x0, 0x4, 0x2, 0x9, 0x0, 0x3ff, 0x100, 0x7, 0x8001, 0x6, 0x5, 0xfffffffffffff66d, 0x7ff, 0x1, 0x100, 0x0, 0x9, 0x4, 0x9, 0x3, 0x0, 0x8, 0x2, 0xd3, 0x38, 0x7, 0xeddd, 0x4, 0xba6, 0x1000, 0xd, 0x2, 0x4, 0x7, 0xc, 0x6, 0x4, 0x3, 0xe, 0x9, 0xa, 0xc7b, 0x1000, 0x1000, 0xd5, 0xe63c, 0x4, 0x6, 0x8001, 0x2, 0x4, 0xffffffffffffffff, 0xb15e, 0x9, 0xace, 0x4, 0x5, 0xfffffffffffff11f, 0xa, 0x6, 0xfffffffffffff001, 0x6, 0x4, 0x200, 0x3, 0x690d, 0x7fff, 0xffffffff87c98a80, 0x100000000, 0x2c, 0x8, 0x7, 0x7, 0x9, 0x0, 0x0, 0x5, 0x100, 0x1, 0x2, 0x4, 0x4, 0x4, 0xfffffffffffffffe, 0x100000000, 0x7fffffff, 0x54, 0xf6e9, 0xfffffffffffffffd, 0x9d36, 0x4, 0x0, 0x8, 0xf1ed]}) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r7, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCVHANGUP(r8, 0x5437, 0x200000000000000) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r5, 0x0, 0x0, 0x1000}) syz_io_uring_setup(0x50ad, &(0x7f00000007c0)={0x0, 0x284b, 0x200, 0x2, 0x3df}, &(0x7f0000000240), &(0x7f0000000180)) 7.37855597s ago: executing program 4 (id=928): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0xa4, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xb0a3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0xffff, 0xfffffff3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.700043774s ago: executing program 4 (id=929): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() getrlimit(0xe, &(0x7f00000001c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sysfs$1(0x1, &(0x7f0000000080)='$[&{#!/\x00') sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SEM_INFO(0x0, 0x4, 0x13, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = semget(0x1, 0x2, 0x8d30a0a8790dd845) semctl$GETPID(r7, 0x0, 0xb, &(0x7f00000000c0)=""/40) semctl$GETNCNT(r7, 0x2, 0xe, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000a0002000080c20000000000070005"], 0x30}}, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r8, 0xc038563c, &(0x7f0000000340)={0x0, 0x1, "119f04499489f733dcaa932034d61433a5ba43d2103eb3221503dc2984dea6e2", 0x0, 0xfffffffffffffffc, 0x0, 0xff, 0x0, 0x0, 0x3, 0x0, [0x0, 0x800000]}) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r9, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r9, 0x8943, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000000)=0x7fff, 0x4) 6.656285335s ago: executing program 1 (id=930): socket$tipc(0x1e, 0x5, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, &(0x7f0000000040)=0x5, 0x5, 0x2) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000)) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000200)={0xf000500, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f910, 0x7fff, '\x00', @value64=0x2}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x1f, 0x101, 0x100}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x70, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x20044090) 6.367244838s ago: executing program 6 (id=931): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) mlockall(0x7) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r2 = eventfd2(0x8, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) mlockall(0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="34ce00000052d511dc7e8bd39f15cdd4e1fd69257ca51fcb3fdb1d57517110d99c2ab99bf1602605bf1e99a6bb62e7de9e236b9c941700c50626cef678b79e210a79088e517e5b0e1d13dd586485f9756c58f00205b66653250cf0e8da5aed3c44214a19a92f777fd9d99ede2546c6d2f5d64c04e4435e3551e735727d9d7dfe45b5e6c0d37c36b638fadd26067b9453", @ANYRES16=r4, @ANYBLOB="08002cbd7000fbdbdf25770000000800ef000f0000000800ef00060000000800ef00692f7f0d0500ee00000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4005) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x4, 0x1}) 6.238839873s ago: executing program 5 (id=932): syz_emit_ethernet(0x4a, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00090000000086edff0a843500142f00fe800000000000000000000c0000e11053d5fa715d00916f490ecc150b471f0000000019fb00aa000022eb9c7d65e4222733ee8317ad37e2e90851ef0a913cccf57a9f1c80c923b9df272ff7d0fbc5c1087c4e9a772a0e6806a4eea468d02634bd007fde123302000000913736e092f5695a15dfa1fda13c3b000000000000000000000a487a7d1ffc79a3f091053fd733387001e3dde8abba78ac82d28e3249c5a2773da457948df1aa25ddfec399946f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c0000001a00010028bd70000000000002202000000000000000000008000300", @ANYRES32=r4, @ANYBLOB="6429596cd613a14bb12447a80b89034fc4b8489d512719a86ac9cc59506bc655738a610d8b945d91275902ab41d97763e932a5a471dab041e4ca5a8dff4b83c937c4943a8baa2a8f115684bde9f2755ebaf558113634d43fecd6cb99d0e616b3262e16f1a806556058d916bc5324cd9b32558fafa06a69823dee72a68a886b801bc09f07cf65204ebd1a5918a5ca4b807f247bb30c855d3a91240d8fa803"], 0x2c}}, 0x0) socket$phonet(0x23, 0x2, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000440)=[{&(0x7f0000000180)=""/82, 0x52}], 0x1, 0xd651, 0x72b) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000540)="8c445b0404131cbfefbe83b6526dbf68e4c6595058d78b2ef9074e57610574f1cfa0fa9c60cf5b1c3034fa89babbd6120f9e009035030030eb2637aca608213064e26aa625b80a45682176dfc0904ef177ab68a647f3db3df134ec8f7841435ddcd18ba017c71fb159a86f004608556778eddd453efffaee961b9bbef5522b48a53d6e1e76f928e65ec8b6ad06d9aca8566ee6be9fd14fc8fad2995ede360bfa875444a20bc6c571c8061fdab8623dbfaa9e05f3a4a17887eac4599fd1e46af46dc87b762c95e1548f0b1ece", &(0x7f0000000040)=""/29, &(0x7f0000000480)="5f4bf6a0e62b34517cd4b2137095a3a89a2e34264bcbb51e69adb01e04d6bd0324ac11e47bb6e00861309b5e03e7a26e17eb4c59b4b60cd0a5d2af683feeadf3d1e7bf1c2e5b54c776565e4ee52edec4d5c7954485300ec9c74e493bdfb46516fcb8dc89c0bb113447db9da78b5a2ebe5121af700a3ca35bcf", &(0x7f0000000640)="ce6de1b50cbe2b636c31ec0dd8c31c478748d5c2fec2fcf2a7b7a0301e87d8ba77502b3c008f6e9e5b01eb4d427babfc4124456deaaff3fd37a06437fcfc76b5572af9a2d55be1d86ddbe1c81a6d68bbeb78a0", 0xfce7, r3, 0x4}, 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000036000701040000000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 5.479071409s ago: executing program 4 (id=933): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) write$nci(0xffffffffffffffff, 0x0, 0xfffffeea) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x2d, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x40004730) mmap(&(0x7f0000606000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0x800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video4linux(&(0x7f0000000040), 0x4, 0x44001) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r3) socket(0xa, 0x1, 0x0) r4 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000000)={0xfffffffffffffee0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0xfffffffffffffe9f, {0xff, 0x2070, 0x1000, 0x9, 0x4, 0x8000, 0xfffd, 0xec, 0x3906, 0xfffc, 0x3, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 5.445752702s ago: executing program 2 (id=934): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) timer_create(0x0, 0x0, &(0x7f0000001700)=0x0) clock_gettime(0x0, &(0x7f0000001740)={0x0, 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x11e, 0x1, &(0x7f0000000080)=0x5, 0x4) listen(r3, 0x400) timer_settime(r0, 0x1, &(0x7f0000001780)={{}, {r1, r2+10000000}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000004100)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000004140)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000140)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x10000008) 5.394941952s ago: executing program 6 (id=935): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x8, @none, 0x3ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3], [0x0, 0x8, 0x0, 0x0, 0x5]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) fsmount(0xffffffffffffffff, 0x1, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x41) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r7, 0x0) listen(r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) 5.320009613s ago: executing program 2 (id=936): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf256a00000008000300", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8004040) 5.292218543s ago: executing program 5 (id=937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x29) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000006c0)=0x9) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000540)={0xfffffff7, 0x200401, 0xfffffffd, 0xc6cf, 0x91, "0000080100", 0x240000, 0x1fd}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000680)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x17e) getdents64(r2, &(0x7f0000000200)=""/179, 0xb3) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYRES64=r0], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6021bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db86846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d500c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b184e93be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b2bf947206e8dbfeb40ca6f265a3485a652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c2f11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010000104000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="00000000060080000a872f0000180012800e00010077756103008000af3f73d82402f6e9a5e031180900000280e23d440e9c1497928990f7ced202e1cc29e412"], 0x44}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) chdir(&(0x7f00000005c0)='./file0\x00') capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0xfffffc46, 0x40200003, 0x0, 0x6, 0x3ff, 0x4}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x5, r7, &(0x7f0000000040)="5400ffff0000", 0x6}]) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000eccbc0fe0605f81105000000000000000000081022d8b27954e4a00c065b76756daab24609045200009a66"], 0x0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000280)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.88844898s ago: executing program 1 (id=938): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4080) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) io_setup(0xd6, &(0x7f0000000200)=0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x148, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x148, 0x0, {0x0, 0x4c00}, [@common=@dst={{0x48}, {0x6, 0x1, 0x1, [0x2, 0x5, 0xc, 0x6, 0x1, 0x80, 0x8, 0x7, 0x4b9, 0x8000, 0x9, 0xb1, 0x0, 0x5, 0x8, 0x1], 0xa}}, @common=@hl={{0x28}, {0x1, 0xff}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x0, 0x1}, {0x4, 0x1, 0x5}, 0xffff, 0x7fcc}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) (async) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="01", 0x2020}]) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1c9580, 0x0) r6 = dup(r5) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0xf8, 0xf8, 0xfeffffff, 0xf8, 0xf8, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)={0x20, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r6, 0x0) r9 = socket(0x10, 0x803, 0x0) fcntl$lock(r9, 0x403, &(0x7f0000000700)) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ec5000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r10, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r6, r5, 0x0, 0x40008) (async) write$FUSE_NOTIFY_DELETE(r6, &(0x7f00000001c0)={0x32, 0x6, 0x0, {0x3, 0x4, 0x9, 0x0, 'REDIRECT\x00'}}, 0x32) 4.831314187s ago: executing program 2 (id=939): sendmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)="6c74f7742c8f16590b9a41f38d5f71b068ab9a00e49176719650b90c0a27abd75988b092986aef141cc84a7c66d8a10d6066dbdcb03380eecf2ed7be49c88b84d64f00c3759235041a51dc019b98dd6bff6468453830f58f4bd0a2eb1d060b2def0c2f8c92e6bcc9014e37c369978af88826cbf0", 0x74}], 0x1}}], 0x1, 0x4000) r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x0, 0x9, 0x4, "fd980000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000300)={0x40, 0xb, 0x4, "ecae0aac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$printer(r1, 0x0, 0x0) (rerun: 64) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="00000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r1, 0x7f, 0xf9, &(0x7f0000000740)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7828e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") (async, rerun: 64) r2 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0xc0, 0xf6, [{{0x9, 0x4, 0x0, 0xc6, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x51, 0x7, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x2, 0x7f}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x6, 0x80, 0x0, 0xff, 0xa}, 0x4c, &(0x7f0000000140)={0x5, 0xf, 0x4c, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "55c8c20cf11e7cc1f219d1a632ea19c5"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0xe, 0x2}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x8001, 0xff0f, 0x7fff, [0xff7e38, 0xa122546d5f5eab54, 0xc030, 0xc030]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x5, 0x5, 0x81}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x410}}]}) (rerun: 64) syz_usb_control_io$printer(r2, &(0x7f0000000440)={0x14, &(0x7f0000000200)={0x20, 0x9, 0xa3, {0xa3, 0x9, "943626184e6b9b92af2b78d57dea78b94c2f3e2c1dc947507055bcb657f78e1554540fc1a7dcd0fbcf3c60c391e2bd5ede57724f02709455122ad2418f9cd5b1fa0564fa5162b9863941193e32bb1024fcb42b2fe91e665c3100236a4bce59dbd3938f28dd9591f4c817e93dd17afde38c9568dcfd19b871e1a51c78ec9711138b2f2b8a83dffc33f4aeb1d5d8b836c81962415a7a3e09b9fcaa8fe3871580960e"}}, &(0x7f00000003c0)={0x0, 0x3, 0x6b, @string={0x6b, 0x3, "b4ef74f1bb375672c27d8c311b14693f211cb1aac3f794af391436bb590784c85130da5d0b1d9222124124fdde2fe07a86cfed7217bbff31f40d0e29b80fbda9dd602bc818ac0068a68871e2f5908c470f793c7246f41e2be7633879e95075a43594f96d927a188039"}}}, &(0x7f0000000700)={0x34, &(0x7f0000000480)={0x0, 0xb, 0x6d, "17ce9f5e53564c595d4096338a4d0813e2e3fa7bb36c9c2434e2f25cba078a1baf410dc8aef8e97a1e2df84987b968e24ac128b6892cfffc9166eb71a9b1beb9e668a61b20eee153b4cbd0a8bf470451a97c4c53a48be07e4d188ff9d06c78be40f0bf21b18acec621fbffe544"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000580)={0x20, 0x0, 0xe8, {0xe6, "739e8e511ab0011594f5dc39625f0ec46c9cd5a692428928d30b805e097a590816ffbdf29fb379ca5ffbdfc731779d2b0c6e392f24fc0ea9f07d9c0ba99ad1e490450bee3e92517af66d756ae5f741bd8fe9cbef882c7862b3f7975064c9866793b7800d854c0603d402489da6dcdc3ba2086c1927c1180a7db420e254c0fa6e5b0790722ffda28bccd1d9d72f881f2881e61e02685f07e89a9cfb80817881c9ca3e0a06eb264ffa5e2e5e0a4584d7d83b5f2e9bba4384606aac632a72504cb8cdc9ac45e5bdecaf454e672cf99b9c22863ca35e22f24b5e1bff1cfb1b41fe7cfd5c483892a1"}}, &(0x7f0000000680)={0x20, 0x1, 0x1, 0x5}, &(0x7f00000006c0)={0x20, 0x0, 0x1, 0xb}}) 4.520864245s ago: executing program 1 (id=940): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x5, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)='D', 0x1, 0x404c814, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x880) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x800}) socket$kcm(0x2, 0xb, 0x2) r7 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r7, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x8, 0xb}}) 4.169667797s ago: executing program 6 (id=941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x4004804) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x1, 0xa}, {0x0, 0x2, 0x3ff, 0xd23, 0xfff}}}}, 0x17) socket(0x1d, 0x2, 0x6) sendto$inet6(r4, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r4, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) 3.944103228s ago: executing program 2 (id=942): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000000)=0x4000002, 0x4) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x583, @remote, 0x2}, 0x1c) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x44) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 3.268589876s ago: executing program 1 (id=943): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000034700)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8004) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r2, 0x5605) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x4000010) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09103b28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) 3.179663166s ago: executing program 6 (id=944): dup(0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.251582713s ago: executing program 6 (id=945): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x4000000}, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="041d0506c8f00700"], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="1400068064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x103103, 0x100) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r7, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045009, &(0x7f0000000040)) socket(0x10, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi5\x00', 0x10400, 0x0) 2.111238102s ago: executing program 4 (id=946): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x190, 0x9c0, 0x80, 0x240, 0x2, 0xfece, 0x8, 0x1, {0x103, 0x401, 0x9}, {0x7, 0x6, 0x7}, {0x6, 0x0, 0x1}, {0x731, 0x6, 0x1}, 0x0, 0x100, 0x62ae, 0x84b, 0x0, 0xc, 0x4, 0x3, 0x100, 0x0, 0xff, 0x3abe, 0x6b, 0x2, 0x3, 0xc}) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x200, 0x2, 0x3}, 0x18, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.103323936s ago: executing program 1 (id=947): r0 = dup(0xffffffffffffffff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) prlimit64(r2, 0xa, &(0x7f00000001c0)={0xffff, 0x2}, &(0x7f0000000200)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) pwritev2(r3, &(0x7f0000001140)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1, 0x6, 0xde, 0x30) r4 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5ca9e43b003cd351c9bcdb0000000206051700bd0081742f764750000004050001000900020073797a31000000000c00078008001200ffffffff050005000a000000050004000100000015000300686173683a69702c706f72742c6e6574000000006f75f582fd4eda7a5823dead9082f040a0c008064bc1b614"], 0x5c}}, 0x40000) r7 = dup2(r0, r1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)=0x29) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000540)={0xfffffff7, 0x8e9, 0x51c2, 0xc6cf, 0x91, "0000080100", 0x851b, 0x1fd}) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000040)={0x2, 0x63, 0xfffffffc, 0xc4cf, 0x7, "04010000000000780000000008f8ff00", 0x4, 0x200}) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000140)=0x8) socket$qrtr(0x2a, 0x2, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x3, 0xfffbfffd, 0x3, 0x4f, "1c419208876b000000820b0000000000000d00", 0x6, 0x200}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x72) 1.21753407s ago: executing program 5 (id=948): socket$tipc(0x1e, 0x5, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, &(0x7f0000000040)=0x5, 0x5, 0x2) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000)) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000200)={0xf000500, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f910, 0x7fff, '\x00', @value64=0x2}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x1f, 0x101, 0x100}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x70, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x20044090) 1.064863416s ago: executing program 6 (id=949): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='maps\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x1}]}) socket(0xa, 0x5, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r3, 0x80) accept4$netrom(r3, &(0x7f0000000080)={{}, [@netrom, @default, @bcast, @remote, @remote, @null, @bcast]}, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x437, 0x8, 0x0, {0x0, 0x0, 0x0, r4, 0x11543}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 994.178327ms ago: executing program 4 (id=950): setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = eventfd2(0x10000, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x9) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x90, 0x6ce4ce6705af0394, 0x2, 0xd59f82, 0x19ef, 0x6, 0x19ef, 0x3, 0xa, 0x27ff, 0x67ff, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f000000b3c0)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0xfeba}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000500)="105dac84bf5ee213af12cad9b04b23375e593788b1c9dd4d667aa7fdcdf21a15898d5da5c6725bcd06fc4c4c0422321acfe920856742b66838d4ee6ef607834766e62d6cc957e8768a5300b05c6e0a0dcec57674083553da663178a8a23d9c418a03e852a573cb695fa11dbf1951082db9163cd3136d62988ab5983e0d0bd720dea768708d7fd84ab13dddf7365b4f56bc51d6e5737a78eb7f2750b5fcc9f1f39319842653b7df", 0xa7}], 0x1, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20, 0x20000010}}, {{&(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000740)="abbe3ae914054a236f5a642fe68f41fffd337bb2a5edb679d96dab40199f99ee64cb76d39bbfc0bac071224a70730d36cc3aa5864a210a29b4eba5bd7deb2259c80a72ac804dfcda34328782020063b5fa06ea3d229206f2e01cde10ee2ed951cabf982fb3cf9963e3ca34da5fa928df24dc4600641e66bdd72c22d96f2f2f895304fe0e97af1c583eca70112194ddc7591f4fc6b08b07e39f9d3a3ff6", 0x9d}, {&(0x7f0000000840)="1454516ee1de300629ba6ef6b4e4e564decb830757bc9f6d0c30fe187f1d74747a89412b694262401565ce9538711190a598a242b8723137f44e69b17666115c8142dffb193283eeac75ce19af2a23de346225430dd2c0c31b", 0x59}, {&(0x7f00000008c0)="99828b0d8777d1d545d419ff1998a344ae589c1632842fd3caedd4d00649ec544125387180f5238187a2b59945d77f6e305ec6b8dd", 0x35}, {&(0x7f0000001a00)="1bdb8f0f40782803911ebfaa451ad03309150a872a5b2d6db2dc8e04fad2a4a0fadcc171bc872480bf4b8b1ea6772fc13386dda8bf71ca6afc768862df3d0b063644759fc3fac09e83e234549cd4eeb7463df56115ec4b6868375e374b6ab77b0af4cb126392c3ac5265b92c936b4c7c91c9130f24d940db96c2199d0be82ee02673adab0812a0bb397a0e488ace745c6b14e6d7b2489d8037b6c970c3c1cacce538b0d40812346767bd2a97c9dde07959b9718a81c367f98cc37894fc6e2feee064e1c6c493cb75ae83", 0xca}, {&(0x7f0000000900)="75a8bb1636babb3bcae59726972ca637accf15162766ff303dee5519073c8c03ad1583c07b6bd2775f92a21c4894382aa3eb723ebe16f329f60e6ae2a740752dc942b5d32e4337db04b8c49a464da41fd255e7848669b0d4a534a1509f793ac334bcb8a645ff31cb20b60b0f014b8952222ad5afe9ff", 0x76}], 0x6, 0x0, 0x0, 0x4}}, {{&(0x7f0000001b80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000980)="8f", 0x1}, {&(0x7f0000001c00)="d85067a94dbbaac8538a902641bd1737c806ce0044eb15c5adb61bb4327da96e0e98bbf42b02ea2f096f14e35da418e2afbfd690763dedff64", 0x39}, {&(0x7f0000001c40)="25d0cfd87bd2d2bd03d4220cb067401c74c2d0617b0190ee9f782456fc448583b719a39104619d1128bc025d0f8b1c8ce84d", 0x32}], 0x3, &(0x7f0000001cc0)=[@cred={{0x1c}}], 0x20, 0x400c0}}, {{&(0x7f0000001d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001d80)="c2acc369f70fbe94058674d7530c4f8794f15f22703a52472554d41cf0a79abc9e86824877e9e2f9ecb5abbff20886a57b16067ab875f7314872cb7e75a3b1786482458d95d8e342d04e428701212c8255063fae3ae9d64fd23b5e1b5f75644fe3d891047b285da4e28e8bf9e65e12148a788b87696bd51138d4c22b613fdcf5eb407a66f56ce7a692d2f42168aa4f27255f9a8a36dc71e199b6f707148716167034e7a94e", 0xa5}, {&(0x7f0000001e40)="0e9e8c872c3dda564714f481622476bcb57118ef0395355a1870c1eb6898982028292875172e03837abd731d21edc4fb68dd72c27056e8145d8c561089bb1a1b7f0bd0", 0x43}, {&(0x7f0000001ec0)="bd71084d708f99653be4f1c261be051e4987687d342387d99dcc80c2a285aaf87f6986897157356cbe42a935fce9800f228642502d29080860ea73cc8c80eb05bec2239db6", 0x45}, {&(0x7f0000001f40)="03e93578b959d476c902114d8d650d5b9240c5819c6e6ae8e2708e58ab3b9cffba8a82457c0ccab6f45ac58de24467fe831c9d765a307047faebb893ac36381c79fc1e1c51c0b59e045713bb43ac3e747bd65cc226e45537eec6f4a255e519d9777d0b7eff4a320f7046265a707fce67ee01fa9a4539614d60677d1981a254169014d435e0499e6405e1254758df9728d22cd869a3969972a3cd160c9bc3d597a208340c86cc8df9dec25a0a33b10a205226569b02439149d1bae61b8f2b32966b815b9c8092385cc1bf02f6", 0xcc}, {&(0x7f0000002100)="f0617f6a74797a629723aa2479a5f125e5e828e80dabf061bbc690d4910aa4e1b6c652299d31f6667f87d72a093d680b6dbefbf71afc0558245d372b9f03b5945d932d81179d5f49a16cbbb5706e6e761663c0e6dcfca70d708da41c52c1a24b5b93c011f61dcf18193e894c24af527eb945a97171924bd80b0398713bdb23201b1665b2cadc44c93b437f6d1936fc2236a5c34928419b8807af53493930eabdfc1b47cb4e06016b5e91c64c6609aa69a5b7c0", 0xb3}], 0x5, 0x0, 0x0, 0x1}}, {{&(0x7f00000021c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002480)=[{&(0x7f0000002240)="788f59b1cfc24b6c390b019a9505d676688f0e91739130bc3e34da292eef77dd200322f494698d7b01ebdd4da216cba85f41eecdc5de68bdda7a1fe823acd013b308d3f7784e0d2aad17f083647d0f97f13b1ae5650e89bd0611521082c21e653e404d48ae2b92a6b12e2f9c60a24c4e94e5648119c72326883d06c883f64a159665859c2e9d1bcf4284efe3d6a27e9228d438ea93f64713e2e4838861a7a08cd9132e8ea9f70f099d3df60de09ddf3b", 0xb0}, {&(0x7f0000002300)="794eb75bdea4b975fdf17e5197ce273628fc12f023054bde6c23b0bb923d54cdfb7f4457b4766b44e697ac836b773eabf575cdea78879e8d475ad0b860b957532eaa70a9edc25437988926eca9b155d7eb45571944aed98ff521e364ac088c4b9c5d0d36c64396cd277fea3cc53c5c3264768c6aa73949b3da7361fee823465d927463d07b7dfc85238703642b0fdc5b707019f5f8d2afaf0031c110d5f4d84f2bd60f77e05785809419fdf0b3650848b6a93aa62bc63b1ed9dd10bcfc27984a80f9b94ce4cc07c932dff2eb1d097a00f4ad4c5d8fa8e4d9875b", 0xda}, {&(0x7f0000002400)="d4995c7185e28d7c4facf969", 0xc}, {&(0x7f0000002440)="a13c4c4ededbb9dc303ccaf12e78c362661daea438328aadd55cc7da2804471d6613cb8a17e25a2419d99bd471034aa3afcff9c639dd917083", 0x39}], 0x4, &(0x7f0000004700)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, r0, r6, r0, r6, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r2, 0xffffffffffffffff, r6, 0xffffffffffffffff]}}], 0xd0, 0x800}}, {{&(0x7f0000004800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000049c0)=[{&(0x7f0000004880)="b5c7cdc89c7791202cdceb732463e5cf9c3830e8bfb9ae72d3dc385ea4deabd1db311f5b05ed6939119f16307887f36fc3f8d620a5525c0f64ad27b4c9f39b5eafb247052f1be7ae78723fc39a77ea3bb58eb423292d1b2d0e151db0f2ce3dbe5572fb416fe9f29209e3c9522cb4d425005d54cc80bc1d24b5b02a433623e7438a6c7d53e62d5c562ad72851f096fd333ab41b86f2da0dd056aa", 0x9a}, {&(0x7f0000004940)="16cedbcae1387ea791efd99c28eaee2b5c93592a8c0a83", 0x17}, {&(0x7f0000004980)="b7be08e4640d414c82865ad86facf2058ce005a2231047ea6d057f53e862811835a6a510fd20af5b6e", 0x29}], 0x3, 0x0, 0x0, 0x80}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000004a00)="dddd6b5bd7ca3647f6a44c5624167bb64dbe92b421769b79d084ad8c8252088ed71e1e72ccb79062e04f70b02e97c308ed07e66eef101745a9d0c7cdbeeeb298cd6612bcdce19f8c1cb731323b11c38d8036923200be241f59ace06dc73831fb02b72f84c534a2bbcaf8b8a12367ee6e94163073e4183be3ec3d9c99fd31b14dab3910327ffd2b6019c91559267ac374ad1106474bb1872adf22da9eb5067b987982e2e12559350895ff59c17a294f12f9f9828a4a3bbbc238fd4a55b35436944abcdacd42f617af2b34b0da16a0ac1aac12502bb89ed815f0a23c0145", 0xdd}], 0x1, &(0x7f0000004b40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r5, r1, r6]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r4, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0, 0x50}}, {{&(0x7f0000004c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005cc0)=[{&(0x7f0000004c80)="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", 0x1000}, {&(0x7f0000005c80)}], 0x2, 0x0, 0x0, 0x8041}}, {{&(0x7f0000005d00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005f40)=[{&(0x7f0000005d80)="b23cbded5ad08de8dcb7ab37b15e93342e8d1eb7a6b600412330558e340a9b5fa74db83ebcc7d3cb6341e9a83e2ce6383b1732110e77c616bb487efacfb9dd75b39920000fa27ab59106077cabcb1622a54943ca33c1a1193fff3d1511659740832e1504fa45f16ac2f4bf1e6b9a60ce9fab41c3ce89568645ad8552a5980f54e4a28ab284e0ce4167a014d4ae1941e2c32efa12374e64bff092216a7a6999022a03", 0xa2}, {&(0x7f0000005e40)="e576773322f2370000a40c181e7f377603f92ec54eea8e6083d32def2d4e3fdd1610f3394e0583c7ad5c246f6be1a649b6444946711fc5437760822afbc53a30358c676a16dda0f2181d9549b17f03cfcdac0a80797d775ef9e5fd1bc4871bdb0936aeb044e925c560d0af892105830bf8ed6867c5389db39cc15e85f00d4cf48eb6b2cd545b218b423bc3b580f5ed4f8a9fb90e8c001784c4b7af96c184f2c46e4d09b9a8ae9e618e5aec33f1440a859945fc4c75a8d568396ba227ed76853c026e3f1727", 0xc5}, {&(0x7f000000a3c0)="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", 0x1000}], 0x3, &(0x7f0000005f80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}], 0x40, 0x4000001}}, {{&(0x7f0000005fc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000006140)=[{&(0x7f0000006040)="42b0f439812b997b194eed9f842d50268f71c3f080b3db4cade45c7effeaa203", 0x20}, {&(0x7f0000006080)="32878ae83fae8f387e2f22b88e04ed9a64cdf71bc6e751d756dd1c72961a1797bc4eec6516303e3dc5f75879c41f2fd6eee9d9c77c5961caf5232ca11822f971df621da463893dc634867beeda12d149c8733147f388cf6c399fe648da91790e4e9825a65dfb36134e6b2b4197a0290314b9ba95bb37e3f8cb232084bdd1af92236172498f9e4b829b0083e44c869075d16f5cf474501aef487fdeae66c5ae540f661430173cbea39e6452", 0xab}], 0x2, &(0x7f0000006180)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x4084}}], 0xa, 0x8008041) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x960, 0x0, 0x1, 0x0, 0x0, {}, {}, {0x9}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x841, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1, &(0x7f0000000080)=ANY=[@ANYRES16=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x19, 0x0, 0x34652c59dd22359f, 0x28}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r7, 0x330b) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000800) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04000418"], 0x7) 136.322976ms ago: executing program 2 (id=951): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x1, [0x8, 0x3, 0x1, 0x5, 0x7f, 0x9]}) listen(r0, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000040), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 0s ago: executing program 4 (id=952): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) accept4(r1, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000100)=0x80, 0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_test', 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) kernel console output (not intermixed with test programs): 3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.395806][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.402874][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.458933][ T30] audit: type=1400 audit(1762158562.168:645): avc: denied { ioctl } for pid=7732 comm="syz.1.475" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17987 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 212.487849][ T7639] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 212.498469][ T7639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.973918][ T7639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.357470][ T7751] SET target dimension over the limit! [ 213.436133][ T7753] netlink: 44 bytes leftover after parsing attributes in process `syz.4.478'. [ 213.577052][ T30] audit: type=1400 audit(1762158563.298:646): avc: denied { mount } for pid=7756 comm="syz.2.479" name="/" dev="ramfs" ino=17235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 213.838741][ T7761] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 214.221770][ T30] audit: type=1400 audit(1762158563.598:647): avc: denied { create } for pid=7756 comm="syz.2.479" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 214.228806][ T5816] Bluetooth: hci5: command tx timeout [ 214.242192][ T30] audit: type=1400 audit(1762158563.608:648): avc: denied { link } for pid=7756 comm="syz.2.479" name="file1" dev="ramfs" ino=17239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 214.242234][ T30] audit: type=1400 audit(1762158563.618:649): avc: denied { rename } for pid=7756 comm="syz.2.479" name="file1" dev="overlay" ino=17239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 214.242573][ T30] audit: type=1400 audit(1762158563.618:650): avc: denied { unlink } for pid=7756 comm="syz.2.479" name="file0" dev="overlay" ino=17239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 214.242604][ T30] audit: type=1400 audit(1762158563.628:651): avc: denied { setattr } for pid=7756 comm="syz.2.479" name="#b" dev="tmpfs" ino=568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 214.459222][ T30] audit: type=1400 audit(1762158564.158:652): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 214.847017][ T7639] veth0_vlan: entered promiscuous mode [ 214.865303][ T7639] veth1_vlan: entered promiscuous mode [ 214.943632][ T7639] veth0_macvtap: entered promiscuous mode [ 214.954058][ T7639] veth1_macvtap: entered promiscuous mode [ 215.253986][ T7639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.796019][ T30] audit: type=1400 audit(1762158565.078:653): avc: denied { create } for pid=7774 comm="syz.3.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 215.827091][ T24] IPVS: starting estimator thread 0... [ 215.841574][ T7639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.863569][ T30] audit: type=1400 audit(1762158565.588:654): avc: denied { bind } for pid=7772 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 215.900516][ T30] audit: type=1400 audit(1762158565.608:655): avc: denied { write } for pid=7772 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 215.942309][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.968925][ T7786] IPVS: using max 44 ests per chain, 105600 per kthread [ 216.040798][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.072769][ T30] audit: type=1400 audit(1762158565.668:656): avc: denied { create } for pid=7787 comm="syz.3.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 216.105267][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.119192][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.403885][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.420934][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.558135][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.568946][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.086986][ T7797] netlink: 16 bytes leftover after parsing attributes in process `syz.5.486'. [ 217.431856][ T25] block nbd0: Possible stuck request ffff8880263ee000: control (read@0,4096B). Runtime 120 seconds [ 217.600445][ T5923] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 217.963221][ T5923] usb 3-1: device descriptor read/64, error -71 [ 218.230442][ T5923] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 218.390704][ T5923] usb 3-1: device descriptor read/64, error -71 [ 218.505570][ T5923] usb usb3-port1: attempt power cycle [ 219.206859][ T5923] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 219.243346][ T5923] usb 3-1: device descriptor read/8, error -71 [ 219.334244][ T7815] tipc: Started in network mode [ 219.339134][ T7815] tipc: Node identity 06a80e99875c, cluster identity 4711 [ 219.349861][ T7815] tipc: Enabled bearer , priority 0 [ 219.458094][ T7823] loop5: detected capacity change from 0 to 7 [ 219.464401][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 219.464417][ T30] audit: type=1400 audit(1762158569.178:668): avc: denied { bind } for pid=7813 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 219.501667][ T5923] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 219.624242][ T95] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.633788][ T95] buffer_io_error: 43 callbacks suppressed [ 219.633801][ T95] Buffer I/O error on dev loop5, logical block 0, async page read [ 219.667917][ T30] audit: type=1400 audit(1762158569.178:669): avc: denied { write } for pid=7813 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 219.672981][ T5923] usb 3-1: device descriptor read/8, error -71 [ 219.693575][ T7823] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.793197][ T5945] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 219.827626][ T7823] Buffer I/O error on dev loop5, logical block 0, async page read [ 219.840743][ T7823] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.850049][ T7823] Buffer I/O error on dev loop5, logical block 0, async page read [ 219.872031][ T7823] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.886223][ T7823] Buffer I/O error on dev loop5, logical block 0, async page read [ 219.894648][ T7823] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.904430][ T7823] Buffer I/O error on dev loop5, logical block 0, async page read [ 219.914067][ T7823] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.924157][ T7823] Buffer I/O error on dev loop5, logical block 0, async page read [ 219.932464][ T7823] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.952224][ T5923] usb usb3-port1: unable to enumerate USB device [ 220.030547][ T5945] usb 6-1: Using ep0 maxpacket: 8 [ 220.031988][ T7835] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.495'. [ 220.048929][ T5945] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 220.088570][ T7823] Buffer I/O error on dev loop5, logical block 0, async page read [ 220.118672][ T5945] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 220.290184][ T5945] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.321756][ T7823] ldm_validate_partition_table(): Disk read failed. [ 220.370007][ T5817] tipc: Node number set to 2180255385 [ 220.373970][ T5945] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.405637][ T7823] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.470203][ T5945] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.479284][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.551460][ T7823] Buffer I/O error on dev loop5, logical block 0, async page read [ 220.590312][ T7823] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.620392][ T7823] Buffer I/O error on dev loop5, logical block 0, async page read [ 220.651456][ T7823] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.696388][ T7823] Buffer I/O error on dev loop5, logical block 0, async page read [ 220.790413][ T7823] Dev loop5: unable to read RDB block 0 [ 220.841464][ T7823] loop5: unable to read partition table [ 220.869542][ T5945] usb 6-1: usb_control_msg returned -32 [ 221.010230][ T5945] usbtmc 6-1:16.0: can't read capabilities [ 221.082074][ T7823] loop5: partition table beyond EOD, truncated [ 221.374540][ T30] audit: type=1400 audit(1762158571.078:670): avc: denied { setopt } for pid=7814 comm="syz.5.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 221.394748][ T7823] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 221.471800][ T7847] 9pnet_fd: Insufficient options for proto=fd [ 221.915039][ T30] audit: type=1400 audit(1762158571.638:671): avc: denied { create } for pid=7852 comm="syz.2.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 222.005654][ T30] audit: type=1400 audit(1762158571.668:672): avc: denied { write } for pid=7852 comm="syz.2.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 222.117043][ T30] audit: type=1400 audit(1762158571.668:673): avc: denied { read } for pid=7852 comm="syz.2.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 222.260316][ T30] audit: type=1400 audit(1762158571.668:674): avc: denied { read } for pid=7849 comm="syz.3.499" dev="nsfs" ino=4026532992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 222.281267][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.292596][ T30] audit: type=1400 audit(1762158571.668:675): avc: denied { open } for pid=7849 comm="syz.3.499" path="net:[4026532992]" dev="nsfs" ino=4026532992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 222.319461][ T30] audit: type=1400 audit(1762158571.668:676): avc: denied { create } for pid=7849 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 222.340168][ T30] audit: type=1400 audit(1762158571.678:677): avc: denied { create } for pid=7849 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 222.586501][ T7865] netlink: 24 bytes leftover after parsing attributes in process `syz.4.504'. [ 222.601279][ T42] usb 6-1: USB disconnect, device number 2 [ 222.739569][ T7814] tipc: Disabling bearer [ 222.862923][ T7868] netlink: 'syz.4.504': attribute type 4 has an invalid length. [ 223.061334][ T7869] netlink: 'syz.4.504': attribute type 4 has an invalid length. [ 223.138124][ T42] lo speed is unknown, defaulting to 1000 [ 223.144235][ T42] syz0: Port: 1 Link DOWN [ 223.165483][ T5939] lo speed is unknown, defaulting to 1000 [ 223.176081][ T5939] syz0: Port: 1 Link ACTIVE [ 223.433150][ T5939] lo speed is unknown, defaulting to 1000 [ 223.548170][ T7877] overlay: Unknown parameter 'audit' [ 223.941904][ T5939] syz0: Port: 1 Link DOWN [ 224.089887][ T7879] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.507'. [ 224.494713][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 224.494745][ T30] audit: type=1400 audit(1762158574.208:728): avc: denied { shutdown } for pid=7880 comm="syz.1.508" lport=53368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.480280][ T30] audit: type=1400 audit(1762158574.668:729): avc: denied { read } for pid=7889 comm="syz.5.510" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 225.789780][ T30] audit: type=1400 audit(1762158574.668:730): avc: denied { open } for pid=7889 comm="syz.5.510" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 225.820246][ T30] audit: type=1400 audit(1762158574.668:731): avc: denied { ioctl } for pid=7889 comm="syz.5.510" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 226.404255][ T30] audit: type=1400 audit(1762158574.918:732): avc: denied { getopt } for pid=7886 comm="syz.2.509" lport=46039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 226.460328][ T30] audit: type=1400 audit(1762158575.278:733): avc: denied { write } for pid=7889 comm="syz.5.510" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 226.616968][ T30] audit: type=1400 audit(1762158575.498:734): avc: denied { create } for pid=7889 comm="syz.5.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 226.656744][ T30] audit: type=1400 audit(1762158575.498:735): avc: denied { setopt } for pid=7889 comm="syz.5.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 226.737850][ T30] audit: type=1400 audit(1762158575.618:736): avc: denied { ioctl } for pid=7895 comm="syz.1.511" path="socket:[19547]" dev="sockfs" ino=19547 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 226.787849][ T30] audit: type=1400 audit(1762158576.368:737): avc: denied { create } for pid=7905 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 229.399345][ T7945] xt_l2tp: invalid flags combination: 0 [ 229.406148][ T7945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.521'. [ 229.422147][ T7945] gretap1: entered allmulticast mode [ 229.588511][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 229.588525][ T30] audit: type=1400 audit(1762158579.308:759): avc: denied { map } for pid=7949 comm="syz.5.523" path="pipe:[17559]" dev="pipefs" ino=17559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 229.758842][ T30] audit: type=1400 audit(1762158579.308:760): avc: denied { read write } for pid=7949 comm="syz.5.523" name="comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.950030][ T30] audit: type=1400 audit(1762158579.308:761): avc: denied { open } for pid=7949 comm="syz.5.523" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 230.505324][ T30] audit: type=1400 audit(1762158579.328:762): avc: denied { ioctl } for pid=7949 comm="syz.5.523" path="/dev/comedi4" dev="devtmpfs" ino=1280 ioctlcmd=0x640b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 230.536619][ T30] audit: type=1400 audit(1762158579.328:763): avc: denied { append } for pid=7949 comm="syz.5.523" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.559922][ T30] audit: type=1400 audit(1762158579.438:764): avc: denied { create } for pid=7951 comm="syz.5.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 230.579390][ T30] audit: type=1400 audit(1762158579.438:765): avc: denied { bind } for pid=7951 comm="syz.5.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 230.603107][ T30] audit: type=1400 audit(1762158579.438:766): avc: denied { setopt } for pid=7951 comm="syz.5.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 230.646468][ T30] audit: type=1400 audit(1762158579.438:767): avc: denied { accept } for pid=7951 comm="syz.5.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 230.773664][ T30] audit: type=1400 audit(1762158579.448:768): avc: denied { write } for pid=7951 comm="syz.5.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 233.152636][ T7997] bridge1: entered promiscuous mode [ 233.157889][ T7997] bridge1: entered allmulticast mode [ 234.733507][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 234.733522][ T30] audit: type=1400 audit(1762158584.458:776): avc: denied { create } for pid=8006 comm="syz.3.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 235.292368][ T30] audit: type=1400 audit(1762158585.008:777): avc: denied { append } for pid=8006 comm="syz.3.541" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 235.922644][ T30] audit: type=1400 audit(1762158585.138:778): avc: denied { unlink } for pid=8015 comm="syz.4.544" name="#d" dev="tmpfs" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 236.068648][ T30] audit: type=1400 audit(1762158585.148:779): avc: denied { mount } for pid=8015 comm="syz.4.544" name="/" dev="overlay" ino=580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 236.090701][ T30] audit: type=1400 audit(1762158585.198:780): avc: denied { create } for pid=8015 comm="syz.4.544" name="#f" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 236.111141][ T30] audit: type=1400 audit(1762158585.198:781): avc: denied { link } for pid=8015 comm="syz.4.544" name="#f" dev="tmpfs" ino=586 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 236.155203][ T30] audit: type=1400 audit(1762158585.198:782): avc: denied { rename } for pid=8015 comm="syz.4.544" name="#10" dev="tmpfs" ino=586 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 236.223984][ T30] audit: type=1400 audit(1762158585.458:783): avc: denied { setopt } for pid=8015 comm="syz.4.544" lport=47111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 236.301357][ T30] audit: type=1400 audit(1762158585.678:784): avc: denied { create } for pid=8006 comm="syz.3.541" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 236.352792][ T8031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8031 comm=syz.4.548 [ 236.360151][ T30] audit: type=1400 audit(1762158585.678:785): avc: denied { unlink } for pid=8006 comm="syz.3.541" name="file0" dev="tmpfs" ino=553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 236.410402][ T5960] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 236.621052][ T8036] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.549'. [ 236.621370][ T5960] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 236.853419][ T5960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.873227][ T5960] usb 6-1: Product: syz [ 236.879317][ T5960] usb 6-1: Manufacturer: syz [ 236.886183][ T5960] usb 6-1: SerialNumber: syz [ 237.860308][ T5923] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 238.224806][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.236633][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.246761][ T5923] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 238.257125][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.274534][ T5923] usb 3-1: config 0 descriptor?? [ 238.703252][ T5923] arvo 0003:1E7D:30D4.000B: item fetching failed at offset 5/7 [ 238.711538][ T5923] arvo 0003:1E7D:30D4.000B: parse failed [ 238.717190][ T5923] arvo 0003:1E7D:30D4.000B: probe with driver arvo failed with error -22 [ 238.916594][ T8047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.927848][ T5868] usb 3-1: USB disconnect, device number 20 [ 239.056753][ T5960] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 239.082808][ T5960] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 239.096040][ T5960] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 239.109858][ T5960] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 239.120917][ T5960] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 239.133481][ T5960] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 239.389269][ T8064] FAULT_INJECTION: forcing a failure. [ 239.389269][ T8064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.402486][ T8064] CPU: 0 UID: 0 PID: 8064 Comm: syz.5.558 Not tainted syzkaller #0 PREEMPT(full) [ 239.402509][ T8064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 239.402519][ T8064] Call Trace: [ 239.402525][ T8064] [ 239.402532][ T8064] dump_stack_lvl+0x16c/0x1f0 [ 239.402563][ T8064] should_fail_ex+0x512/0x640 [ 239.402587][ T8064] _copy_to_user+0x32/0xd0 [ 239.402612][ T8064] simple_read_from_buffer+0xcb/0x170 [ 239.402642][ T8064] proc_fail_nth_read+0x197/0x240 [ 239.402664][ T8064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.402687][ T8064] ? rw_verify_area+0xcf/0x6c0 [ 239.402712][ T8064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.402733][ T8064] vfs_read+0x1e4/0xcf0 [ 239.402753][ T8064] ? __pfx___mutex_lock+0x10/0x10 [ 239.402770][ T8064] ? __pfx_vfs_read+0x10/0x10 [ 239.402794][ T8064] ? __fget_files+0x20e/0x3c0 [ 239.402826][ T8064] ksys_read+0x12a/0x250 [ 239.402842][ T8064] ? __pfx_ksys_read+0x10/0x10 [ 239.402866][ T8064] do_syscall_64+0xcd/0xfa0 [ 239.402895][ T8064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.402913][ T8064] RIP: 0033:0x7fe0ca38d9dc [ 239.402927][ T8064] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 239.402944][ T8064] RSP: 002b:00007fe0cb1e9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.402961][ T8064] RAX: ffffffffffffffda RBX: 00007fe0ca5e6090 RCX: 00007fe0ca38d9dc [ 239.402972][ T8064] RDX: 000000000000000f RSI: 00007fe0cb1e90a0 RDI: 0000000000000009 [ 239.402982][ T8064] RBP: 00007fe0cb1e9090 R08: 0000000000000000 R09: 0000000000000000 [ 239.402992][ T8064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.403002][ T8064] R13: 00007fe0ca5e6128 R14: 00007fe0ca5e6090 R15: 00007fff9761a098 [ 239.403027][ T8064] [ 239.416736][ T5960] usb 6-1: USB disconnect, device number 3 [ 239.764767][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 239.764782][ T30] audit: type=1400 audit(1762158589.468:790): avc: denied { create } for pid=8069 comm="syz.5.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 240.649379][ T30] audit: type=1400 audit(1762158590.368:791): avc: denied { read } for pid=8080 comm="syz.1.562" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 240.713599][ T30] audit: type=1400 audit(1762158590.368:792): avc: denied { open } for pid=8080 comm="syz.1.562" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 240.867746][ T8076] pim6reg: entered allmulticast mode [ 240.983478][ T30] audit: type=1400 audit(1762158590.608:793): avc: denied { write } for pid=8069 comm="syz.5.560" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 241.010219][ T30] audit: type=1400 audit(1762158590.708:794): avc: denied { read } for pid=8089 comm="syz.2.565" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 241.127995][ T30] audit: type=1400 audit(1762158590.738:795): avc: denied { bind } for pid=8089 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 241.148796][ T30] audit: type=1400 audit(1762158590.738:796): avc: denied { listen } for pid=8089 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 241.224636][ T30] audit: type=1400 audit(1762158590.738:797): avc: denied { write } for pid=8089 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 241.264934][ T30] audit: type=1400 audit(1762158590.738:798): avc: denied { accept } for pid=8089 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 241.534703][ T30] audit: type=1400 audit(1762158590.898:799): avc: denied { create } for pid=8092 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 242.562951][ T8105] syzkaller0: entered promiscuous mode [ 242.573378][ T8105] syzkaller0: entered allmulticast mode [ 242.623440][ T8084] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 243.266730][ T8116] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.570'. [ 244.088862][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 244.119960][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 244.907629][ T8144] netlink: 'syz.2.579': attribute type 21 has an invalid length. [ 244.916025][ T8144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.579'. [ 244.985638][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 244.985676][ T30] audit: type=1400 audit(1762158594.608:801): avc: denied { connect } for pid=8140 comm="syz.2.579" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 246.049995][ T8155] FAULT_INJECTION: forcing a failure. [ 246.049995][ T8155] name failslab, interval 1, probability 0, space 0, times 0 [ 246.080841][ T8155] CPU: 0 UID: 0 PID: 8155 Comm: syz.4.583 Not tainted syzkaller #0 PREEMPT(full) [ 246.080868][ T8155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 246.080879][ T8155] Call Trace: [ 246.080884][ T8155] [ 246.080891][ T8155] dump_stack_lvl+0x16c/0x1f0 [ 246.080923][ T8155] should_fail_ex+0x512/0x640 [ 246.080942][ T8155] ? fs_reclaim_acquire+0xae/0x150 [ 246.080965][ T8155] should_failslab+0xc2/0x120 [ 246.080986][ T8155] __kmalloc_noprof+0xdd/0x880 [ 246.081010][ T8155] ? tomoyo_encode2+0x100/0x3e0 [ 246.081035][ T8155] ? tomoyo_encode2+0x100/0x3e0 [ 246.081053][ T8155] tomoyo_encode2+0x100/0x3e0 [ 246.081077][ T8155] tomoyo_encode+0x29/0x50 [ 246.081096][ T8155] tomoyo_realpath_from_path+0x18f/0x6e0 [ 246.081124][ T8155] tomoyo_path2_perm+0x36a/0x710 [ 246.081143][ T8155] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 246.081160][ T8155] ? check_path.constprop.0+0x24/0x50 [ 246.081211][ T8155] ? do_raw_spin_lock+0x12c/0x2b0 [ 246.081230][ T8155] ? find_held_lock+0x2b/0x80 [ 246.081250][ T8155] ? find_held_lock+0x2b/0x80 [ 246.081271][ T8155] ? __d_lookup+0x25c/0x4a0 [ 246.081299][ T8155] tomoyo_path_rename+0x168/0x1a0 [ 246.081321][ T8155] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 246.081346][ T8155] ? d_lookup+0xe7/0x190 [ 246.081375][ T8155] security_path_rename+0x18e/0x3c0 [ 246.081398][ T8155] do_renameat2+0x73d/0xc20 [ 246.081432][ T8155] ? __pfx_do_renameat2+0x10/0x10 [ 246.081455][ T8155] ? find_held_lock+0x2b/0x80 [ 246.081475][ T8155] ? __might_fault+0xe3/0x190 [ 246.081500][ T8155] ? __might_fault+0x13b/0x190 [ 246.081540][ T8155] ? getname_flags.part.0+0x1c5/0x550 [ 246.081570][ T8155] __x64_sys_renameat2+0xe7/0x130 [ 246.081594][ T8155] do_syscall_64+0xcd/0xfa0 [ 246.081622][ T8155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.081640][ T8155] RIP: 0033:0x7f975b98efc9 [ 246.081654][ T8155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.081671][ T8155] RSP: 002b:00007f975c745038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 246.081688][ T8155] RAX: ffffffffffffffda RBX: 00007f975bbe5fa0 RCX: 00007f975b98efc9 [ 246.081699][ T8155] RDX: ffffffffffffff9c RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 246.081710][ T8155] RBP: 00007f975c745090 R08: 0000000000000002 R09: 0000000000000000 [ 246.081721][ T8155] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 246.081731][ T8155] R13: 00007f975bbe6038 R14: 00007f975bbe5fa0 R15: 00007ffcf3eb6f58 [ 246.081763][ T8155] [ 246.081781][ T8155] ERROR: Out of memory at tomoyo_realpath_from_path. [ 246.581696][ T30] audit: type=1400 audit(1762158596.308:802): avc: denied { create } for pid=8156 comm="syz.4.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 246.699806][ T30] audit: type=1400 audit(1762158596.348:803): avc: denied { write } for pid=8156 comm="syz.4.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 247.385535][ T30] audit: type=1400 audit(1762158597.108:804): avc: denied { sqpoll } for pid=8175 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 247.566609][ T25] block nbd0: Possible stuck request ffff8880263ee000: control (read@0,4096B). Runtime 150 seconds [ 247.582680][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 248.416536][ T8190] netlink: 36 bytes leftover after parsing attributes in process `syz.5.592'. [ 248.567035][ T8198] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.593'. [ 249.490358][ T8209] FAULT_INJECTION: forcing a failure. [ 249.490358][ T8209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.504078][ T8209] CPU: 1 UID: 0 PID: 8209 Comm: syz.1.597 Not tainted syzkaller #0 PREEMPT(full) [ 249.504100][ T8209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.504106][ T8209] Call Trace: [ 249.504110][ T8209] [ 249.504114][ T8209] dump_stack_lvl+0x16c/0x1f0 [ 249.504135][ T8209] should_fail_ex+0x512/0x640 [ 249.504150][ T8209] _copy_to_user+0x32/0xd0 [ 249.504165][ T8209] simple_read_from_buffer+0xcb/0x170 [ 249.504183][ T8209] proc_fail_nth_read+0x197/0x240 [ 249.504196][ T8209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.504209][ T8209] ? rw_verify_area+0xcf/0x6c0 [ 249.504224][ T8209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.504236][ T8209] vfs_read+0x1e4/0xcf0 [ 249.504247][ T8209] ? __pfx___mutex_lock+0x10/0x10 [ 249.504257][ T8209] ? __pfx_vfs_read+0x10/0x10 [ 249.504271][ T8209] ? __fget_files+0x20e/0x3c0 [ 249.504285][ T8209] ksys_read+0x12a/0x250 [ 249.504294][ T8209] ? __pfx_ksys_read+0x10/0x10 [ 249.504307][ T8209] do_syscall_64+0xcd/0xfa0 [ 249.504324][ T8209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.504335][ T8209] RIP: 0033:0x7f9807d8d9dc [ 249.504344][ T8209] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 249.504354][ T8209] RSP: 002b:00007f9808ba9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.504365][ T8209] RAX: ffffffffffffffda RBX: 00007f9807fe5fa0 RCX: 00007f9807d8d9dc [ 249.504371][ T8209] RDX: 000000000000000f RSI: 00007f9808ba90a0 RDI: 0000000000000004 [ 249.504377][ T8209] RBP: 00007f9808ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 249.504383][ T8209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.504389][ T8209] R13: 00007f9807fe6038 R14: 00007f9807fe5fa0 R15: 00007fff3a733738 [ 249.504403][ T8209] [ 250.168461][ T30] audit: type=1400 audit(1762158599.858:805): avc: denied { sys_module } for pid=8203 comm="syz.4.596" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 250.280351][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 250.620308][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 250.633292][ T24] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 250.659653][ T5822] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 250.670044][ T5822] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 250.678576][ T5822] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 250.690431][ T5822] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 250.793699][ T5822] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 250.801480][ T30] audit: type=1400 audit(1762158600.378:806): avc: denied { read } for pid=8228 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 250.830147][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.973280][ T24] usb 3-1: config 0 descriptor?? [ 251.357998][ T30] audit: type=1400 audit(1762158600.378:807): avc: denied { open } for pid=8228 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 251.381563][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.388942][ T30] audit: type=1400 audit(1762158600.558:808): avc: denied { mounton } for pid=8228 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 251.397021][ T24] gm12u320 3-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 251.410342][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.483135][ T8228] lo speed is unknown, defaulting to 1000 [ 251.539615][ T24] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5 [ 251.594606][ T24] usb-storage 3-1:0.0: USB Mass Storage device detected [ 251.615209][ T24] usb-storage 3-1:0.0: device ignored [ 251.622555][ T30] audit: type=1400 audit(1762158601.348:809): avc: denied { read } for pid=8233 comm="syz.1.605" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 251.645483][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.767199][ T24] usb 3-1: USB disconnect, device number 21 [ 251.800171][ T30] audit: type=1400 audit(1762158601.348:810): avc: denied { open } for pid=8233 comm="syz.1.605" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 251.823986][ T30] audit: type=1400 audit(1762158601.348:811): avc: denied { ioctl } for pid=8233 comm="syz.1.605" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 251.848819][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.106224][ T8228] chnl_net:caif_netlink_parms(): no params data found [ 252.365835][ T8258] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.607'. [ 252.866485][ T30] audit: type=1400 audit(1762158602.368:812): avc: denied { write } for pid=8262 comm="syz.4.609" name="udp6" dev="proc" ino=4026532910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 252.950212][ T5822] Bluetooth: hci6: command tx timeout [ 253.065489][ T8273] netlink: 'syz.2.611': attribute type 11 has an invalid length. [ 253.124717][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'. [ 253.281467][ T8228] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.381622][ T8282] fuse: Bad value for 'rootmode' [ 253.389429][ T30] audit: type=1400 audit(1762158603.098:813): avc: denied { read write } for pid=8262 comm="syz.4.609" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 253.412569][ C0] vkms_vblank_simulate: vblank timer overrun [ 253.421945][ T8228] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.484165][ T30] audit: type=1400 audit(1762158603.098:814): avc: denied { open } for pid=8262 comm="syz.4.609" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 253.576199][ T8228] bridge_slave_0: entered allmulticast mode [ 253.593337][ T8228] bridge_slave_0: entered promiscuous mode [ 253.612277][ T8228] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.619449][ T8228] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.635167][ T8228] bridge_slave_1: entered allmulticast mode [ 253.650528][ T8228] bridge_slave_1: entered promiscuous mode [ 253.686918][ T8228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.699754][ T8289] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 253.702865][ T8286] lo speed is unknown, defaulting to 1000 [ 253.710674][ T8228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.715364][ T8289] overlayfs: missing 'lowerdir' [ 253.769659][ T8228] team0: Port device team_slave_0 added [ 253.787802][ T8228] team0: Port device team_slave_1 added [ 253.807735][ T8291] random: crng reseeded on system resumption [ 253.879684][ T8228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.888701][ T8228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.929646][ T8228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.065751][ T8228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.079976][ T8228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.107195][ T8228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.210475][ T5923] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 254.237391][ T8228] hsr_slave_0: entered promiscuous mode [ 254.260798][ T8228] hsr_slave_1: entered promiscuous mode [ 254.267588][ T8228] debugfs: 'hsr0' already exists in 'hsr' [ 254.273742][ T8228] Cannot create hsr debugfs directory [ 254.370441][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 254.384326][ T5923] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 254.398138][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.449339][ T5923] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 254.765976][ T5923] gspca_nw80x: reg_r err -71 [ 254.783043][ T5923] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 254.814858][ T5923] usb 5-1: USB disconnect, device number 16 [ 254.973162][ T8228] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 255.050567][ T5822] Bluetooth: hci6: command tx timeout [ 255.179524][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 255.179552][ T30] audit: type=1400 audit(1762158604.898:851): avc: denied { ioctl } for pid=8305 comm="syz.4.620" path="socket:[20884]" dev="sockfs" ino=20884 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 255.211055][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.222115][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.228445][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.249415][ T8228] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 255.265611][ T8228] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 255.279766][ T8228] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 255.374319][ T8319] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.621'. [ 255.741640][ T8228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.802129][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 255.820005][ T8228] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.852944][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.860130][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.896227][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.903401][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.109534][ T8329] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.624'. [ 256.325827][ T8327] netlink: 'syz.5.625': attribute type 11 has an invalid length. [ 257.238933][ T5822] Bluetooth: hci6: command tx timeout [ 257.256179][ T8342] netlink: 48 bytes leftover after parsing attributes in process `syz.1.627'. [ 258.135986][ T5868] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 258.143876][ T8356] can: request_module (can-proto-3) failed. [ 258.224555][ T8228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.248062][ T30] audit: type=1400 audit(1762158607.968:852): avc: denied { mount } for pid=8364 comm="syz.5.633" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 258.273073][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 258.333110][ T30] audit: type=1400 audit(1762158608.058:853): avc: denied { read } for pid=8364 comm="syz.5.633" name="file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 258.369701][ T5868] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 258.391014][ T5868] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.423317][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 258.432209][ T5868] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 258.446146][ T30] audit: type=1400 audit(1762158608.058:854): avc: denied { open } for pid=8364 comm="syz.5.633" path="/36/file0/file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 258.500537][ T5868] usb 3-1: config 0 interface 0 has no altsetting 0 [ 258.507522][ T5868] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 258.530155][ T30] audit: type=1400 audit(1762158608.058:855): avc: denied { ioctl } for pid=8364 comm="syz.5.633" path="/36/file0/file0" dev="fuse" ino=288230376151711744 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 258.613914][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.640744][ T8379] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.635'. [ 258.854748][ T5868] usb 3-1: config 0 descriptor?? [ 258.881502][ T5945] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 258.930169][ T30] audit: type=1400 audit(1762158608.088:856): avc: denied { unmount } for pid=7639 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 259.070401][ T5945] usb 5-1: Using ep0 maxpacket: 8 [ 259.092551][ T5945] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 259.128996][ T5945] usb 5-1: config 179 has no interface number 0 [ 259.176153][ T5945] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 259.237454][ T5945] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 259.270297][ T5822] Bluetooth: hci6: command tx timeout [ 259.303033][ T5945] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 259.333268][ T8228] veth0_vlan: entered promiscuous mode [ 259.338877][ T5945] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 259.357254][ T8228] veth1_vlan: entered promiscuous mode [ 259.375226][ T5868] hid-alps 0003:044E:120C.000C: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.2-1/input0 [ 259.376727][ T5945] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 259.422243][ T5945] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 259.432838][ T8228] veth0_macvtap: entered promiscuous mode [ 259.442947][ T8228] veth1_macvtap: entered promiscuous mode [ 259.450344][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.524006][ T8377] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 259.542386][ T8390] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.638'. [ 259.544681][ T8228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.886258][ T5868] usb 3-1: USB disconnect, device number 22 [ 259.900760][ T8228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.936935][ T55] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.946795][ T55] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.958509][ T55] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.967961][ T55] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.033647][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.045903][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.070457][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.078392][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.097033][ T30] audit: type=1400 audit(1762158609.818:857): avc: denied { mounton } for pid=8228 comm="syz-executor" path="/root/syzkaller.h1eCsj/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 260.125829][ T30] audit: type=1400 audit(1762158609.818:858): avc: denied { mount } for pid=8228 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 260.152976][ T30] audit: type=1400 audit(1762158609.818:859): avc: denied { mount } for pid=8228 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 260.175624][ T30] audit: type=1400 audit(1762158609.828:860): avc: denied { mounton } for pid=8228 comm="syz-executor" path="/root/syzkaller.h1eCsj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 260.231982][ T30] audit: type=1400 audit(1762158609.828:861): avc: denied { mounton } for pid=8228 comm="syz-executor" path="/root/syzkaller.h1eCsj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 260.262493][ T30] audit: type=1400 audit(1762158609.848:862): avc: denied { mounton } for pid=8228 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 260.287264][ T30] audit: type=1400 audit(1762158609.848:863): avc: denied { mount } for pid=8228 comm="syz-executor" name="/" dev="gadgetfs" ino=7024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 260.315775][ T30] audit: type=1400 audit(1762158609.868:864): avc: denied { mount } for pid=8228 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 260.339990][ T30] audit: type=1400 audit(1762158609.868:865): avc: denied { mounton } for pid=8228 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 260.942890][ T8401] fuse: Bad value for 'fd' [ 261.531540][ T5817] usb 5-1: USB disconnect, device number 17 [ 261.531545][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 261.531580][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 261.760197][ T30] audit: type=1400 audit(1762158611.458:866): avc: denied { map } for pid=8396 comm="syz.6.639" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 261.839169][ T30] audit: type=1400 audit(1762158611.458:867): avc: denied { write } for pid=8396 comm="syz.6.639" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 261.903452][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 262.165109][ T8427] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.647'. [ 262.190285][ T5817] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 262.500171][ T5817] usb 6-1: device descriptor read/64, error -71 [ 262.740215][ T5817] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 263.001753][ T5817] usb 6-1: device descriptor read/64, error -71 [ 263.470219][ T5817] usb usb6-port1: attempt power cycle [ 263.788606][ T30] audit: type=1400 audit(1762158613.508:868): avc: denied { connect } for pid=8440 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 264.019314][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.657'. [ 264.029350][ T30] audit: type=1400 audit(1762158613.718:869): avc: denied { read write } for pid=8451 comm="syz.1.656" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 264.052629][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.079320][ T30] audit: type=1400 audit(1762158613.718:870): avc: denied { open } for pid=8451 comm="syz.1.656" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 264.097441][ T5817] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 264.102624][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.131644][ T5817] usb 6-1: device descriptor read/8, error -71 [ 264.600623][ T5817] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 264.647747][ T5817] usb 6-1: device descriptor read/8, error -71 [ 264.770679][ T5817] usb usb6-port1: unable to enumerate USB device [ 265.330243][ T30] audit: type=1400 audit(1762158614.948:871): avc: denied { setopt } for pid=8465 comm="syz.6.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 265.689967][ T8472] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.661'. [ 265.759290][ T30] audit: type=1400 audit(1762158615.388:872): avc: denied { write } for pid=8465 comm="syz.6.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 266.338961][ T8483] bridge1: entered promiscuous mode [ 266.344322][ T8483] bridge1: entered allmulticast mode [ 267.200165][ T5868] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 267.318122][ T8479] syzkaller0: entered promiscuous mode [ 267.326050][ T8479] syzkaller0: entered allmulticast mode [ 267.470936][ T5868] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 267.498870][ T5868] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.534604][ T5868] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 267.666230][ T5868] usb 6-1: config 0 interface 0 has no altsetting 0 [ 267.832569][ T5868] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 267.891343][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.664'. [ 267.932534][ T8503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.664'. [ 267.942331][ T30] audit: type=1400 audit(1762158617.628:873): avc: denied { create } for pid=8500 comm="syz.1.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 267.963267][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.979832][ T5868] usb 6-1: config 0 descriptor?? [ 268.310158][ T5817] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 268.408351][ T30] audit: type=1400 audit(1762158618.128:874): avc: denied { ioctl } for pid=8511 comm="syz.6.672" path="socket:[22933]" dev="sockfs" ino=22933 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 268.487039][ T5868] hid-alps 0003:044E:120C.000D: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.5-1/input0 [ 268.503171][ T5817] usb 5-1: Using ep0 maxpacket: 32 [ 268.510136][ T5817] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.526158][ T5817] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 268.535633][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.553481][ T5817] usb 5-1: config 0 descriptor?? [ 268.568330][ T5817] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 268.775942][ T24] usb 6-1: USB disconnect, device number 8 [ 268.777374][ T8505] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 271.026972][ T30] audit: type=1400 audit(1762158620.748:875): avc: denied { mounton } for pid=8534 comm="syz.2.677" path="/147/file0" dev="tmpfs" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 271.313964][ T5896] usb 5-1: USB disconnect, device number 18 [ 271.334879][ T8544] lo speed is unknown, defaulting to 1000 [ 271.789287][ T8553] netlink: 72 bytes leftover after parsing attributes in process `syz.5.685'. [ 271.798219][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.685'. [ 271.827634][ T30] audit: type=1400 audit(1762158621.528:876): avc: denied { ioctl } for pid=8551 comm="syz.5.685" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 272.057020][ T30] audit: type=1400 audit(1762158621.778:877): avc: denied { create } for pid=8555 comm="syz.2.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 272.114678][ T30] audit: type=1400 audit(1762158621.778:878): avc: denied { ioctl } for pid=8555 comm="syz.2.686" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 272.143728][ T30] audit: type=1400 audit(1762158621.778:879): avc: denied { setopt } for pid=8555 comm="syz.2.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 272.164587][ T30] audit: type=1400 audit(1762158621.778:880): avc: denied { setopt } for pid=8555 comm="syz.2.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 272.245141][ T5896] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 272.278287][ T30] audit: type=1400 audit(1762158621.988:881): avc: denied { create } for pid=8566 comm="syz.4.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 272.301733][ T30] audit: type=1400 audit(1762158622.008:882): avc: denied { bind } for pid=8566 comm="syz.4.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 272.393394][ T30] audit: type=1400 audit(1762158622.008:883): avc: denied { listen } for pid=8566 comm="syz.4.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 272.592164][ T5896] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 272.613237][ T5896] usb 7-1: config 0 has no interface number 0 [ 272.620273][ T5896] usb 7-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 272.672967][ T5896] usb 7-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 272.683212][ T30] audit: type=1400 audit(1762158622.008:884): avc: denied { connect } for pid=8566 comm="syz.4.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 272.710807][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.730992][ T5896] usb 7-1: Product: syz [ 272.739658][ T5896] usb 7-1: Manufacturer: syz [ 272.839866][ T5896] usb 7-1: SerialNumber: syz [ 272.850461][ T5896] usb 7-1: config 0 descriptor?? [ 272.856107][ T8558] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 272.892018][ T5896] plusb 7-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.6-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 6a:dc:13:93:9f:7b [ 273.482184][ T5822] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 273.492189][ T5822] CPU: 1 UID: 0 PID: 5822 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 273.492215][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 273.492229][ T5822] Workqueue: hci2 hci_rx_work [ 273.492262][ T5822] Call Trace: [ 273.492268][ T5822] [ 273.492275][ T5822] dump_stack_lvl+0x16c/0x1f0 [ 273.492306][ T5822] sysfs_warn_dup+0x7f/0xa0 [ 273.492330][ T5822] sysfs_create_dir_ns+0x24b/0x2b0 [ 273.492354][ T5822] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 273.492375][ T5822] ? find_held_lock+0x2b/0x80 [ 273.492408][ T5822] ? do_raw_spin_unlock+0x172/0x230 [ 273.492429][ T5822] kobject_add_internal+0x2c4/0x9b0 [ 273.492453][ T5822] kobject_add+0x16e/0x240 [ 273.492471][ T5822] ? __pfx_kobject_add+0x10/0x10 [ 273.492491][ T5822] ? do_raw_spin_unlock+0x172/0x230 [ 273.492512][ T5822] ? kobject_put+0xab/0x5a0 [ 273.492537][ T5822] device_add+0x288/0x1aa0 [ 273.492560][ T5822] ? __pfx_dev_set_name+0x10/0x10 [ 273.492584][ T5822] ? __pfx_device_add+0x10/0x10 [ 273.492605][ T5822] ? mgmt_send_event_skb+0x2fb/0x460 [ 273.492637][ T5822] hci_conn_add_sysfs+0x17e/0x230 [ 273.492666][ T5822] le_conn_complete_evt+0x1260/0x2150 [ 273.492697][ T5822] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 273.492722][ T5822] ? hci_event_packet+0x459/0x11c0 [ 273.492754][ T5822] hci_le_conn_complete_evt+0x23c/0x370 [ 273.492785][ T5822] hci_le_meta_evt+0x357/0x5e0 [ 273.492812][ T5822] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 273.492841][ T5822] hci_event_packet+0x685/0x11c0 [ 273.492868][ T5822] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 273.492898][ T5822] ? __pfx_hci_event_packet+0x10/0x10 [ 273.492928][ T5822] ? kcov_remote_start+0x3c9/0x6d0 [ 273.492951][ T5822] ? lockdep_hardirqs_on+0x7c/0x110 [ 273.492986][ T5822] hci_rx_work+0x2c5/0x16b0 [ 273.493016][ T5822] ? rcu_is_watching+0x12/0xc0 [ 273.493044][ T5822] process_one_work+0x9cf/0x1b70 [ 273.493076][ T5822] ? __pfx_process_one_work+0x10/0x10 [ 273.493105][ T5822] ? assign_work+0x1a0/0x250 [ 273.493126][ T5822] worker_thread+0x6c8/0xf10 [ 273.493162][ T5822] ? __pfx_worker_thread+0x10/0x10 [ 273.493183][ T5822] kthread+0x3c5/0x780 [ 273.493201][ T5822] ? __pfx_kthread+0x10/0x10 [ 273.493221][ T5822] ? rcu_is_watching+0x12/0xc0 [ 273.493245][ T5822] ? __pfx_kthread+0x10/0x10 [ 273.493264][ T5822] ret_from_fork+0x675/0x7d0 [ 273.493280][ T5822] ? __pfx_kthread+0x10/0x10 [ 273.493299][ T5822] ret_from_fork_asm+0x1a/0x30 [ 273.493340][ T5822] [ 273.493420][ T5822] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 273.757353][ T5822] Bluetooth: hci2: failed to register connection device [ 274.587847][ T8612] lo speed is unknown, defaulting to 1000 [ 274.928816][ T8622] netlink: 'syz.2.701': attribute type 11 has an invalid length. [ 274.980380][ T5939] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 275.904419][ T5817] usb 7-1: USB disconnect, device number 2 [ 275.912413][ T5817] plusb 7-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.6-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 275.943176][ T8627] loop3: detected capacity change from 0 to 7 [ 275.952273][ T8627] Dev loop3: unable to read RDB block 7 [ 275.958421][ T8627] loop3: unable to read partition table [ 275.964144][ T8627] loop3: partition table beyond EOD, truncated [ 275.970305][ T8627] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 276.000336][ T5939] usb 5-1: Using ep0 maxpacket: 32 [ 276.022698][ T5939] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.061091][ T5939] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 276.088472][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.165571][ T5939] usb 5-1: config 0 descriptor?? [ 276.178267][ T5939] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 276.356404][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 276.356419][ T30] audit: type=1400 audit(1762158626.078:902): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 276.412517][ T8616] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 276.785400][ T5817] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 276.954632][ T5817] usb 7-1: Using ep0 maxpacket: 8 [ 276.964161][ T8658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.974112][ T5817] usb 7-1: config 8 has an invalid interface number: 160 but max is 0 [ 277.045641][ T5817] usb 7-1: config 8 has no interface number 0 [ 277.089123][ T5817] usb 7-1: config 8 interface 160 has no altsetting 0 [ 277.121079][ T5817] usb 7-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=82.ee [ 277.130341][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.138857][ T5817] usb 7-1: Product: syz [ 277.144246][ T5817] usb 7-1: Manufacturer: syz [ 277.158854][ T5817] usb 7-1: SerialNumber: syz [ 277.427641][ T8634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.460804][ T8634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.615453][ T25] block nbd0: Possible stuck request ffff8880263ee000: control (read@0,4096B). Runtime 180 seconds [ 277.617697][ T30] audit: type=1400 audit(1762158627.308:903): avc: denied { write } for pid=8672 comm="syz.2.713" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 277.985205][ T30] audit: type=1400 audit(1762158627.308:904): avc: denied { open } for pid=8672 comm="syz.2.713" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 278.009752][ T30] audit: type=1400 audit(1762158627.308:905): avc: denied { write } for pid=8672 comm="syz.2.713" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 278.154160][ T30] audit: type=1400 audit(1762158627.448:906): avc: denied { create } for pid=8633 comm="syz.6.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 278.366575][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.714'. [ 279.283091][ T5817] usb 7-1: Invalid firmware size=18. [ 279.356995][ T5817] usb 7-1: USB disconnect, device number 3 [ 279.364485][ T30] audit: type=1400 audit(1762158629.068:907): avc: denied { create } for pid=8699 comm="syz.5.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 279.570179][ T30] audit: type=1400 audit(1762158629.088:908): avc: denied { bind } for pid=8699 comm="syz.5.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 279.669361][ T30] audit: type=1400 audit(1762158629.238:909): avc: denied { bind } for pid=8701 comm="syz.6.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 279.698719][ T42] usb 5-1: USB disconnect, device number 19 [ 279.772411][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'. [ 279.850889][ T30] audit: type=1400 audit(1762158629.238:910): avc: denied { node_bind } for pid=8701 comm="syz.6.718" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 279.959114][ T8722] FAULT_INJECTION: forcing a failure. [ 279.959114][ T8722] name failslab, interval 1, probability 0, space 0, times 0 [ 280.013882][ T8722] CPU: 0 UID: 0 PID: 8722 Comm: syz.1.724 Not tainted syzkaller #0 PREEMPT(full) [ 280.013905][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 280.013914][ T8722] Call Trace: [ 280.013919][ T8722] [ 280.013925][ T8722] dump_stack_lvl+0x16c/0x1f0 [ 280.013955][ T8722] should_fail_ex+0x512/0x640 [ 280.013975][ T8722] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 280.014002][ T8722] should_failslab+0xc2/0x120 [ 280.014022][ T8722] kmem_cache_alloc_noprof+0x75/0x6e0 [ 280.014051][ T8722] ? create_new_namespaces+0x30/0xa90 [ 280.014078][ T8722] ? create_new_namespaces+0x30/0xa90 [ 280.014098][ T8722] create_new_namespaces+0x30/0xa90 [ 280.014127][ T8722] __do_sys_setns+0x210/0x1920 [ 280.014150][ T8722] ? __x64_sys_openat+0x174/0x210 [ 280.014173][ T8722] ? __pfx___do_sys_setns+0x10/0x10 [ 280.014192][ T8722] ? ksys_write+0x1ac/0x250 [ 280.014217][ T8722] do_syscall_64+0xcd/0xfa0 [ 280.014244][ T8722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.014271][ T8722] RIP: 0033:0x7f9807d907f7 [ 280.014285][ T8722] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.014301][ T8722] RSP: 002b:00007f9808ba8fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 280.014317][ T8722] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f9807d907f7 [ 280.014327][ T8722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 280.014336][ T8722] RBP: 00007f9808ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 280.014346][ T8722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 280.014356][ T8722] R13: 00007f9807fe6038 R14: 00007f9807fe5fa0 R15: 00007fff3a733738 [ 280.014380][ T8722] [ 280.191064][ T5896] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 280.195604][ T30] audit: type=1400 audit(1762158629.238:911): avc: denied { read } for pid=8701 comm="syz.6.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 280.203043][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 280.394072][ T8729] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1540 sclass=netlink_tcpdiag_socket pid=8729 comm=syz.2.725 [ 280.513377][ T5896] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 280.554639][ T5896] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 280.669831][ T5896] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.697979][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 280.727284][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.6.730'. [ 280.747318][ T5896] usb 6-1: SerialNumber: syz [ 280.790004][ T5896] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 281.135742][ T8753] input: syz1 as /devices/virtual/input/input13 [ 281.330409][ T5923] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 281.343927][ T8757] ./file0: Can't lookup blockdev [ 281.390202][ T5868] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 281.482791][ T5923] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 281.506449][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.525115][ T5923] usb 3-1: config 0 descriptor?? [ 281.550216][ T5868] usb 7-1: Using ep0 maxpacket: 32 [ 281.562251][ T5868] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 281.577520][ T5868] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 281.597036][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.626362][ T5868] usb 7-1: config 0 descriptor?? [ 281.648486][ T5868] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 281.724924][ T8761] tipc: Enabled bearer , priority 0 [ 281.732246][ T8761] syzkaller0: entered promiscuous mode [ 281.737782][ T8761] syzkaller0: entered allmulticast mode [ 281.752237][ T5923] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 281.759893][ T8761] syzkaller0: mtu greater than device maximum [ 281.766788][ T8760] tipc: Resetting bearer [ 281.779490][ T8760] tipc: Disabling bearer [ 281.855921][ T8752] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 282.268015][ T5923] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 282.312787][ T5923] [drm] Initialized udl on minor 2 [ 282.505830][ T5923] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 282.523944][ T5923] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 282.539130][ T42] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 282.557385][ T5923] usb 3-1: USB disconnect, device number 23 [ 282.571749][ T42] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 282.815568][ T5896] usb 6-1: USB disconnect, device number 9 [ 283.639252][ T8783] binder: BINDER_SET_CONTEXT_MGR already set [ 283.667627][ T8783] binder: 8782:8783 ioctl 4018620d 200000000200 returned -16 [ 283.769207][ T8787] ªªªªªª: renamed from wg2 (while UP) [ 284.043030][ T8797] netlink: 5 bytes leftover after parsing attributes in process `syz.2.742'. [ 284.060115][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 284.060129][ T30] audit: type=1400 audit(1762158633.768:921): avc: denied { write } for pid=8781 comm="syz.2.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 284.128757][ T8797] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 284.341028][ T8797] 0ªX¹¦D: entered allmulticast mode [ 284.351617][ T8797] veth0_macvtap: entered allmulticast mode [ 284.431419][ T8803] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.742' sets config #0 [ 284.433675][ T8797] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 284.594087][ T5896] usb 7-1: USB disconnect, device number 4 [ 284.780176][ T5817] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 284.951711][ T5817] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 284.960027][ T5817] usb 6-1: config 0 has no interface number 0 [ 284.986697][ T5817] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 285.020216][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.192153][ T5817] usb 6-1: config 0 descriptor?? [ 285.209317][ T5817] usb 6-1: selecting invalid altsetting 1 [ 285.220883][ T5817] dvb_ttusb_budget: ttusb_init_controller: error [ 285.248790][ T5817] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 285.398094][ T5817] DVB: Unable to find symbol cx22700_attach() [ 285.425536][ T8805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.434146][ T8805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.668156][ T5817] DVB: Unable to find symbol tda10046_attach() [ 285.708424][ T5817] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 285.737743][ T5817] usb 6-1: USB disconnect, device number 10 [ 285.926486][ T8823] FAULT_INJECTION: forcing a failure. [ 285.926486][ T8823] name failslab, interval 1, probability 0, space 0, times 0 [ 286.101828][ T8823] CPU: 0 UID: 0 PID: 8823 Comm: syz.1.752 Not tainted syzkaller #0 PREEMPT(full) [ 286.101844][ T8823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.101850][ T8823] Call Trace: [ 286.101853][ T8823] [ 286.101858][ T8823] dump_stack_lvl+0x16c/0x1f0 [ 286.101878][ T8823] should_fail_ex+0x512/0x640 [ 286.101891][ T8823] ? fs_reclaim_acquire+0xae/0x150 [ 286.101905][ T8823] should_failslab+0xc2/0x120 [ 286.101918][ T8823] __kmalloc_noprof+0xdd/0x880 [ 286.101932][ T8823] ? tomoyo_encode2+0x100/0x3e0 [ 286.101947][ T8823] ? tomoyo_encode2+0x100/0x3e0 [ 286.101957][ T8823] tomoyo_encode2+0x100/0x3e0 [ 286.101971][ T8823] tomoyo_encode+0x29/0x50 [ 286.101982][ T8823] tomoyo_realpath_from_path+0x18f/0x6e0 [ 286.101995][ T8823] ? tomoyo_profile+0x47/0x60 [ 286.102010][ T8823] tomoyo_path_number_perm+0x245/0x580 [ 286.102026][ T8823] ? tomoyo_path_number_perm+0x237/0x580 [ 286.102044][ T8823] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 286.102075][ T8823] ? hook_file_ioctl_common+0x145/0x410 [ 286.102090][ T8823] ? __rcu_read_unlock+0x2bc/0x550 [ 286.102102][ T8823] ? __fget_files+0x20e/0x3c0 [ 286.102115][ T8823] security_file_ioctl+0x9b/0x240 [ 286.102128][ T8823] __x64_sys_ioctl+0xb7/0x210 [ 286.102144][ T8823] do_syscall_64+0xcd/0xfa0 [ 286.102162][ T8823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.102172][ T8823] RIP: 0033:0x7f9807d8efc9 [ 286.102181][ T8823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.102190][ T8823] RSP: 002b:00007f9808ba9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.102200][ T8823] RAX: ffffffffffffffda RBX: 00007f9807fe5fa0 RCX: 00007f9807d8efc9 [ 286.102207][ T8823] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000003 [ 286.102213][ T8823] RBP: 00007f9808ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 286.102218][ T8823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.102230][ T8823] R13: 00007f9807fe6038 R14: 00007f9807fe5fa0 R15: 00007fff3a733738 [ 286.102244][ T8823] [ 286.102440][ T8823] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.446525][ T30] audit: type=1400 audit(1762158636.168:922): avc: denied { ioctl } for pid=8822 comm="syz.1.752" path="socket:[23953]" dev="sockfs" ino=23953 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 286.471147][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.607983][ T8840] overlayfs: missing 'lowerdir' [ 288.312816][ T8865] tipc: Enabled bearer , priority 0 [ 288.497782][ T8865] tipc: Resetting bearer [ 288.516734][ T8864] tipc: Disabling bearer [ 290.066618][ T30] audit: type=1400 audit(1762158639.788:923): avc: denied { write } for pid=8888 comm="syz.5.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 290.085747][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.238992][ T8898] netlink: 'syz.4.774': attribute type 11 has an invalid length. [ 291.447216][ T8910] tipc: Enabled bearer , priority 0 [ 292.852582][ T8914] tipc: Resetting bearer [ 292.862407][ T5923] tipc: Node number set to 1689237147 [ 292.923746][ T8909] tipc: Disabling bearer [ 293.894708][ T30] audit: type=1400 audit(1762158643.418:924): avc: denied { nlmsg_read } for pid=8913 comm="syz.5.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 294.269334][ T8948] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 294.345716][ T30] audit: type=1400 audit(1762158643.988:925): avc: denied { mount } for pid=8947 comm="syz.5.783" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 294.390255][ T30] audit: type=1400 audit(1762158644.098:926): avc: denied { unmount } for pid=7639 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 294.521017][ T8952] overlay: Unknown parameter 'obj_user' [ 294.747092][ T30] audit: type=1400 audit(1762158644.448:927): avc: denied { read write } for pid=8962 comm="syz.2.787" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 294.859924][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.787'. [ 294.921192][ T8966] vlan2: entered allmulticast mode [ 294.929965][ T8966] hsr_slave_1: entered allmulticast mode [ 295.047028][ T30] audit: type=1400 audit(1762158644.448:928): avc: denied { open } for pid=8962 comm="syz.2.787" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 295.171352][ T30] audit: type=1400 audit(1762158644.448:929): avc: denied { append } for pid=8962 comm="syz.2.787" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.039720][ T8980] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.790'. [ 297.635271][ T30] audit: type=1400 audit(1762158647.358:930): avc: denied { map } for pid=8992 comm="syz.2.794" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 297.724058][ T30] audit: type=1400 audit(1762158647.378:931): avc: denied { execute } for pid=8992 comm="syz.2.794" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 297.747198][ C0] vkms_vblank_simulate: vblank timer overrun [ 297.764907][ T8997] tipc: Enabled bearer , priority 0 [ 297.820915][ T30] audit: type=1400 audit(1762158647.398:932): avc: denied { ioctl } for pid=8992 comm="syz.2.794" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 297.845638][ T30] audit: type=1400 audit(1762158647.398:933): avc: denied { ioctl } for pid=8993 comm="syz.1.795" path="socket:[25029]" dev="sockfs" ino=25029 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 297.884805][ T8997] tipc: Resetting bearer [ 297.941545][ T8996] tipc: Disabling bearer [ 298.021816][ T30] audit: type=1400 audit(1762158647.748:934): avc: denied { write } for pid=8990 comm="syz.6.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 298.444035][ T9013] netlink: 'syz.1.797': attribute type 1 has an invalid length. [ 298.444076][ T9001] netlink: 'syz.1.797': attribute type 1 has an invalid length. [ 298.736371][ T9001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 299.012476][ T30] audit: type=1400 audit(1762158648.738:935): avc: denied { mount } for pid=9020 comm="syz.5.801" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 299.036741][ T9025] netlink: 12 bytes leftover after parsing attributes in process `syz.5.801'. [ 299.046562][ T9025] netlink: 12 bytes leftover after parsing attributes in process `syz.5.801'. [ 299.077425][ T9023] FAULT_INJECTION: forcing a failure. [ 299.077425][ T9023] name failslab, interval 1, probability 0, space 0, times 0 [ 299.090213][ T9023] CPU: 0 UID: 0 PID: 9023 Comm: syz.1.802 Not tainted syzkaller #0 PREEMPT(full) [ 299.090234][ T9023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 299.090243][ T9023] Call Trace: [ 299.090249][ T9023] [ 299.090255][ T9023] dump_stack_lvl+0x16c/0x1f0 [ 299.090284][ T9023] should_fail_ex+0x512/0x640 [ 299.090303][ T9023] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 299.090329][ T9023] should_failslab+0xc2/0x120 [ 299.090348][ T9023] kmem_cache_alloc_noprof+0x75/0x6e0 [ 299.090372][ T9023] ? __kernfs_new_node+0xd2/0x8e0 [ 299.090400][ T9023] ? __kernfs_new_node+0xd2/0x8e0 [ 299.090421][ T9023] __kernfs_new_node+0xd2/0x8e0 [ 299.090445][ T9023] ? kernfs_add_one+0x37d/0x840 [ 299.090470][ T9023] ? __pfx___kernfs_new_node+0x10/0x10 [ 299.090498][ T9023] ? find_held_lock+0x2b/0x80 [ 299.090520][ T9023] ? kernfs_root+0xee/0x2a0 [ 299.090548][ T9023] kernfs_new_node+0x13c/0x1e0 [ 299.090576][ T9023] __kernfs_create_file+0x53/0x350 [ 299.090596][ T9023] sysfs_add_file_mode_ns+0x207/0x3c0 [ 299.090623][ T9023] sysfs_create_file_ns+0x13d/0x1d0 [ 299.090642][ T9023] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 299.090662][ T9023] ? down_read+0x13d/0x480 [ 299.090679][ T9023] ? __pfx___up_read+0x10/0x10 [ 299.090698][ T9023] ? acpi_device_notify+0x351/0x480 [ 299.090722][ T9023] device_create_file+0xf2/0x1e0 [ 299.090748][ T9023] device_add+0x2bf/0x1aa0 [ 299.090772][ T9023] ? __pfx_device_add+0x10/0x10 [ 299.090789][ T9023] ? __pfx___mutex_lock+0x10/0x10 [ 299.090815][ T9023] input_register_device+0x7e8/0x1180 [ 299.090843][ T9023] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 299.090864][ T9023] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 299.090888][ T9023] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 299.090904][ T9023] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 299.090941][ T9023] ? selinux_file_ioctl+0x180/0x270 [ 299.090957][ T9023] ? selinux_file_ioctl+0xb4/0x270 [ 299.090977][ T9023] ? __pfx_uinput_ioctl+0x10/0x10 [ 299.090995][ T9023] __x64_sys_ioctl+0x18e/0x210 [ 299.091019][ T9023] do_syscall_64+0xcd/0xfa0 [ 299.091053][ T9023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.091071][ T9023] RIP: 0033:0x7f9807d8efc9 [ 299.091085][ T9023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.091101][ T9023] RSP: 002b:00007f9808ba9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.091117][ T9023] RAX: ffffffffffffffda RBX: 00007f9807fe5fa0 RCX: 00007f9807d8efc9 [ 299.091127][ T9023] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 299.091136][ T9023] RBP: 00007f9808ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 299.091146][ T9023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.091156][ T9023] R13: 00007f9807fe6038 R14: 00007f9807fe5fa0 R15: 00007fff3a733738 [ 299.091181][ T9023] [ 299.378497][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.321129][ T30] audit: type=1400 audit(1762158649.958:936): avc: denied { getopt } for pid=9048 comm="syz.4.807" lport=48 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 300.453547][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.805'. [ 300.462694][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.805'. [ 300.476508][ T9043] pim6reg: entered allmulticast mode [ 300.496835][ T9051] netlink: 'syz.5.805': attribute type 11 has an invalid length. [ 300.504756][ T9051] netlink: 'syz.5.805': attribute type 13 has an invalid length. [ 301.480194][ T9072] ./file0: Can't lookup blockdev [ 302.229357][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 302.287357][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 302.300161][ T30] audit: type=1400 audit(1762158652.028:937): avc: denied { mounton } for pid=9078 comm="syz.6.815" path="/proc/110/task" dev="proc" ino=24505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 302.734938][ T30] audit: type=1400 audit(1762158652.028:938): avc: denied { mount } for pid=9078 comm="syz.6.815" name="/" dev="configfs" ino=1168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 302.758033][ T30] audit: type=1400 audit(1762158652.048:939): avc: denied { search } for pid=9078 comm="syz.6.815" name="/" dev="configfs" ino=1168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.780030][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.786657][ T30] audit: type=1400 audit(1762158652.048:940): avc: denied { search } for pid=9078 comm="syz.6.815" name="/" dev="configfs" ino=1168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.872413][ T30] audit: type=1400 audit(1762158652.408:941): avc: denied { create } for pid=9083 comm="syz.1.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 302.896771][ T30] audit: type=1400 audit(1762158652.408:942): avc: denied { ioctl } for pid=9083 comm="syz.1.814" path="socket:[25290]" dev="sockfs" ino=25290 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 303.682653][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.6.821'. [ 303.689084][ T9100] netlink: 132 bytes leftover after parsing attributes in process `syz.1.819'. [ 304.070656][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.6.821'. [ 304.100182][ T30] audit: type=1400 audit(1762158653.808:943): avc: denied { read write } for pid=9102 comm="syz.2.820" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 304.161338][ T30] audit: type=1400 audit(1762158653.808:944): avc: denied { open } for pid=9102 comm="syz.2.820" path="/178/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 305.007993][ T9120] fuse: Bad value for 'rootmode' [ 305.519718][ T5945] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 306.000104][ T30] audit: type=1400 audit(1762158655.668:945): avc: denied { read } for pid=9133 comm="syz.1.831" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 306.194451][ T30] audit: type=1400 audit(1762158655.668:946): avc: denied { open } for pid=9133 comm="syz.1.831" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 306.291750][ T9130] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.828'. [ 306.339595][ T30] audit: type=1400 audit(1762158655.668:947): avc: denied { mount } for pid=9133 comm="syz.1.831" name="/" dev="autofs" ino=25373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 306.361839][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.522602][ T5945] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.790437][ T5945] usb 5-1: config 0 has no interfaces? [ 306.795926][ T5945] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 306.851913][ T9144] FAULT_INJECTION: forcing a failure. [ 306.851913][ T9144] name failslab, interval 1, probability 0, space 0, times 0 [ 306.857559][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.872202][ T30] audit: type=1400 audit(1762158655.668:948): avc: denied { ioctl } for pid=9133 comm="syz.1.831" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 306.897398][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.927226][ T9144] CPU: 0 UID: 0 PID: 9144 Comm: syz.1.833 Not tainted syzkaller #0 PREEMPT(full) [ 306.927249][ T9144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 306.927260][ T9144] Call Trace: [ 306.927266][ T9144] [ 306.927273][ T9144] dump_stack_lvl+0x16c/0x1f0 [ 306.927305][ T9144] should_fail_ex+0x512/0x640 [ 306.927327][ T9144] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 306.927356][ T9144] should_failslab+0xc2/0x120 [ 306.927376][ T9144] kmem_cache_alloc_noprof+0x75/0x6e0 [ 306.927401][ T9144] ? __pmd_alloc+0xbf/0x8b0 [ 306.927426][ T9144] ? __pmd_alloc+0xbf/0x8b0 [ 306.927443][ T9144] __pmd_alloc+0xbf/0x8b0 [ 306.927461][ T9144] ? __pud_alloc+0x51f/0x6b0 [ 306.927482][ T9144] __handle_mm_fault+0xada/0x2aa0 [ 306.927508][ T9144] ? mt_find+0x3e2/0xa20 [ 306.927526][ T9144] ? __pfx___handle_mm_fault+0x10/0x10 [ 306.927547][ T9144] ? __pfx_mt_find+0x10/0x10 [ 306.927578][ T9144] ? find_vma+0xbf/0x140 [ 306.927594][ T9144] ? __pfx_find_vma+0x10/0x10 [ 306.927612][ T9144] handle_mm_fault+0x589/0xd10 [ 306.927636][ T9144] ? __pkru_allows_pkey+0x11/0xb0 [ 306.927658][ T9144] do_user_addr_fault+0x7a6/0x1370 [ 306.927679][ T9144] ? rcu_is_watching+0x12/0xc0 [ 306.927705][ T9144] exc_page_fault+0x64/0xc0 [ 306.927731][ T9144] asm_exc_page_fault+0x26/0x30 [ 306.927747][ T9144] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 306.927766][ T9144] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 306.927782][ T9144] RSP: 0018:ffffc9001cb9fd90 EFLAGS: 00050212 [ 306.927797][ T9144] RAX: 0000000000000001 RBX: 0000200000000000 RCX: 0000000000000010 [ 306.927807][ T9144] RDX: fffff52003973fc3 RSI: 0000200000000000 RDI: ffffc9001cb9fe08 [ 306.927818][ T9144] RBP: 0000000000000010 R08: 0000000000000001 R09: fffff52003973fc2 [ 306.927828][ T9144] R10: ffffc9001cb9fe17 R11: 0000000000000001 R12: 0000000000000000 [ 306.927837][ T9144] R13: ffffc9001cb9fe08 R14: 0000000000000010 R15: 0000000000000000 [ 306.927861][ T9144] _copy_from_user+0x98/0xd0 [ 306.927883][ T9144] move_addr_to_kernel+0x65/0x170 [ 306.927903][ T9144] __sys_connect+0xb1/0x160 [ 306.927923][ T9144] ? __pfx___sys_connect+0x10/0x10 [ 306.927953][ T9144] ? __pfx_ksys_write+0x10/0x10 [ 306.927975][ T9144] __x64_sys_connect+0x72/0xb0 [ 306.927992][ T9144] ? lockdep_hardirqs_on+0x7c/0x110 [ 306.928011][ T9144] do_syscall_64+0xcd/0xfa0 [ 306.928032][ T9144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.928044][ T9144] RIP: 0033:0x7f9807d8efc9 [ 306.928055][ T9144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.928067][ T9144] RSP: 002b:00007f9808ba9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 306.928078][ T9144] RAX: ffffffffffffffda RBX: 00007f9807fe5fa0 RCX: 00007f9807d8efc9 [ 306.928087][ T9144] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 306.928095][ T9144] RBP: 00007f9808ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 306.928102][ T9144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.928110][ T9144] R13: 00007f9807fe6038 R14: 00007f9807fe5fa0 R15: 00007fff3a733738 [ 306.928135][ T9144] [ 306.975913][ T5945] usb 5-1: config 0 descriptor?? [ 306.980298][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.296689][ T9146] overlayfs: conflicting options: nfs_export=on,index=off [ 307.326558][ T30] audit: type=1400 audit(1762158656.108:949): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 307.346419][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.462644][ T9149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.660560][ T5939] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 307.772695][ T25] block nbd0: Possible stuck request ffff8880263ee000: control (read@0,4096B). Runtime 210 seconds [ 307.972527][ T5939] usb 7-1: config 0 has an invalid interface number: 168 but max is 0 [ 307.981907][ T5939] usb 7-1: config 0 has no interface number 0 [ 307.988629][ T5939] usb 7-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 308.014845][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.073750][ T9161] netlink: 165 bytes leftover after parsing attributes in process `syz.1.838'. [ 308.556559][ T5816] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 308.743899][ T5939] usb 7-1: config 0 descriptor?? [ 308.921494][ T5945] usb 5-1: USB disconnect, device number 20 [ 309.043797][ T9165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.839'. [ 309.072572][ T9167] dummy0: Caught tx_queue_len zero misconfig [ 309.119297][ T5816] Bluetooth: hci6: Malformed LE Event: 0x0d [ 309.125848][ T5939] usb 7-1: string descriptor 0 read error: -71 [ 309.146783][ T5939] usb-storage 7-1:0.168: USB Mass Storage device detected [ 309.168862][ T5939] usb-storage 7-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 309.464259][ T5939] usb 7-1: USB disconnect, device number 5 [ 309.537049][ T9172] serio: Serial port ttyS3 [ 310.544879][ T9186] netlink: 'syz.1.845': attribute type 11 has an invalid length. [ 311.398147][ T9191] netlink: 24 bytes leftover after parsing attributes in process `syz.6.844'. [ 311.409244][ T9191] netlink: 16 bytes leftover after parsing attributes in process `syz.6.844'. [ 311.480485][ T30] audit: type=1400 audit(1762158661.108:950): avc: denied { getopt } for pid=9187 comm="syz.5.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 311.631416][ T30] audit: type=1400 audit(1762158661.138:951): avc: denied { bind } for pid=9180 comm="syz.6.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 311.670717][ T30] audit: type=1400 audit(1762158661.138:952): avc: denied { name_bind } for pid=9180 comm="syz.6.844" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 311.692258][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.709919][ T30] audit: type=1400 audit(1762158661.148:953): avc: denied { node_bind } for pid=9180 comm="syz.6.844" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 312.962860][ T30] audit: type=1400 audit(1762158662.038:954): avc: denied { ioctl } for pid=9198 comm="syz.5.848" path="socket:[25701]" dev="sockfs" ino=25701 ioctlcmd=0x5101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 313.088607][ T30] audit: type=1400 audit(1762158662.808:955): avc: denied { setopt } for pid=9199 comm="syz.1.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 313.410468][ T42] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 313.614385][ T42] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.652810][ T42] usb 6-1: config 0 has no interfaces? [ 313.825851][ T42] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 313.840209][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.957908][ T42] usb 6-1: config 0 descriptor?? [ 314.015260][ T30] audit: type=1400 audit(1762158663.738:956): avc: denied { name_bind } for pid=9216 comm="syz.4.852" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 314.718735][ T9231] lo speed is unknown, defaulting to 1000 [ 314.892201][ T30] audit: type=1400 audit(1762158664.618:957): avc: denied { setopt } for pid=9237 comm="syz.2.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 315.142907][ T30] audit: type=1400 audit(1762158664.868:958): avc: denied { append } for pid=9216 comm="syz.4.852" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 315.200280][ T5817] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 315.362252][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.378158][ T5817] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 315.398979][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.428886][ T5817] usb 3-1: config 0 descriptor?? [ 315.637124][ T9245] FAULT_INJECTION: forcing a failure. [ 315.637124][ T9245] name failslab, interval 1, probability 0, space 0, times 0 [ 315.651432][ T9245] CPU: 0 UID: 0 PID: 9245 Comm: syz.6.859 Not tainted syzkaller #0 PREEMPT(full) [ 315.651458][ T9245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 315.651468][ T9245] Call Trace: [ 315.651472][ T9245] [ 315.651477][ T9245] dump_stack_lvl+0x16c/0x1f0 [ 315.651497][ T9245] should_fail_ex+0x512/0x640 [ 315.651510][ T9245] ? __kmalloc_cache_noprof+0x5f/0x780 [ 315.651526][ T9245] should_failslab+0xc2/0x120 [ 315.651539][ T9245] __kmalloc_cache_noprof+0x72/0x780 [ 315.651554][ T9245] ? ovl_init_fs_context+0x11f/0x5f0 [ 315.651567][ T9245] ? ovl_init_fs_context+0x11f/0x5f0 [ 315.651576][ T9245] ovl_init_fs_context+0x11f/0x5f0 [ 315.651586][ T9245] ? __pfx_ovl_init_fs_context+0x10/0x10 [ 315.651596][ T9245] alloc_fs_context+0x54d/0x9c0 [ 315.651611][ T9245] path_mount+0xe1b/0x23a0 [ 315.651626][ T9245] ? __pfx_path_mount+0x10/0x10 [ 315.651638][ T9245] ? kmem_cache_free+0x2d4/0x6c0 [ 315.651647][ T9245] ? putname+0x154/0x1a0 [ 315.651662][ T9245] ? putname+0x154/0x1a0 [ 315.651672][ T9245] ? putname+0x154/0x1a0 [ 315.651686][ T9245] ? __x64_sys_mount+0x293/0x310 [ 315.651697][ T9245] __x64_sys_mount+0x293/0x310 [ 315.651709][ T9245] ? __pfx___x64_sys_mount+0x10/0x10 [ 315.651727][ T9245] do_syscall_64+0xcd/0xfa0 [ 315.651745][ T9245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.651755][ T9245] RIP: 0033:0x7fe83358efc9 [ 315.651764][ T9245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.651774][ T9245] RSP: 002b:00007fe83435a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 315.651784][ T9245] RAX: ffffffffffffffda RBX: 00007fe8337e5fa0 RCX: 00007fe83358efc9 [ 315.651791][ T9245] RDX: 0000200000000080 RSI: 00002000000003c0 RDI: 0000000000000000 [ 315.651797][ T9245] RBP: 00007fe83435a090 R08: 0000200000000400 R09: 0000000000000000 [ 315.651803][ T9245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 315.651809][ T9245] R13: 00007fe8337e6038 R14: 00007fe8337e5fa0 R15: 00007fffb0704878 [ 315.651823][ T9245] [ 315.999314][ T5817] hid-picolcd 0003:04D8:C002.000E: No report with id 0x11 found [ 316.279229][ T30] audit: type=1326 audit(1762158665.978:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9237 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56d58efc9 code=0x7ffc0000 [ 316.638895][ T5939] usb 6-1: USB disconnect, device number 11 [ 316.646554][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.652893][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.889167][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 316.889180][ T30] audit: type=1400 audit(1762158666.588:967): avc: denied { setopt } for pid=9255 comm="syz.6.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 316.976740][ T9259] FAULT_INJECTION: forcing a failure. [ 316.976740][ T9259] name failslab, interval 1, probability 0, space 0, times 0 [ 316.989599][ T9259] CPU: 0 UID: 0 PID: 9259 Comm: syz.4.862 Not tainted syzkaller #0 PREEMPT(full) [ 316.989622][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 316.989632][ T9259] Call Trace: [ 316.989638][ T9259] [ 316.989645][ T9259] dump_stack_lvl+0x16c/0x1f0 [ 316.989675][ T9259] should_fail_ex+0x512/0x640 [ 316.989695][ T9259] ? fs_reclaim_acquire+0xae/0x150 [ 316.989717][ T9259] should_failslab+0xc2/0x120 [ 316.989737][ T9259] __kmalloc_cache_noprof+0x72/0x780 [ 316.989768][ T9259] ? inode_doinit_use_xattr+0x54/0x410 [ 316.989799][ T9259] ? inode_doinit_use_xattr+0x54/0x410 [ 316.989823][ T9259] inode_doinit_use_xattr+0x54/0x410 [ 316.989848][ T9259] ? ___free_pages+0xcd/0x220 [ 316.989871][ T9259] inode_doinit_with_dentry+0x10c8/0x12e0 [ 316.989895][ T9259] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 316.989915][ T9259] ? preempt_schedule_thunk+0x16/0x30 [ 316.989948][ T9259] selinux_d_instantiate+0x26/0x30 [ 316.989965][ T9259] security_d_instantiate+0x142/0x1a0 [ 316.989988][ T9259] d_splice_alias_ops+0x92/0x840 [ 316.990016][ T9259] kernfs_iop_lookup+0x23f/0x2d0 [ 316.990043][ T9259] __lookup_slow+0x251/0x460 [ 316.990070][ T9259] ? __pfx___lookup_slow+0x10/0x10 [ 316.990106][ T9259] ? lookup_fast+0x156/0x610 [ 316.990136][ T9259] walk_component+0x353/0x5b0 [ 316.990163][ T9259] path_lookupat+0x142/0x6d0 [ 316.990182][ T9259] filename_lookup+0x224/0x5f0 [ 316.990202][ T9259] ? __pfx_filename_lookup+0x10/0x10 [ 316.990242][ T9259] ? getname_flags.part.0+0x1c5/0x550 [ 316.990270][ T9259] user_path_at+0x3a/0x60 [ 316.990287][ T9259] __x64_sys_mount+0x1fb/0x310 [ 316.990308][ T9259] ? __pfx___x64_sys_mount+0x10/0x10 [ 316.990336][ T9259] do_syscall_64+0xcd/0xfa0 [ 316.990364][ T9259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.990380][ T9259] RIP: 0033:0x7f975b98efc9 [ 316.990394][ T9259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.990410][ T9259] RSP: 002b:00007f9759bd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 316.990427][ T9259] RAX: ffffffffffffffda RBX: 00007f975bbe6180 RCX: 00007f975b98efc9 [ 316.990438][ T9259] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 00002000000000c0 [ 316.990448][ T9259] RBP: 00007f9759bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 316.990458][ T9259] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000002 [ 316.990468][ T9259] R13: 00007f975bbe6218 R14: 00007f975bbe6180 R15: 00007ffcf3eb6f58 [ 316.990492][ T9259] [ 317.269134][ T30] audit: type=1400 audit(1762158666.968:968): avc: denied { mounton } for pid=9252 comm="syz.4.862" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 317.305927][ T24] usb 3-1: USB disconnect, device number 24 [ 317.528376][ T30] audit: type=1400 audit(1762158667.248:969): avc: denied { connect } for pid=9262 comm="syz.2.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 317.559562][ T30] audit: type=1400 audit(1762158667.278:970): avc: denied { bind } for pid=9250 comm="syz.5.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 317.920894][ T9268] lo speed is unknown, defaulting to 1000 [ 317.926910][ T30] audit: type=1400 audit(1762158667.508:971): avc: denied { create } for pid=9271 comm="syz.6.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 318.007461][ T9278] netlink: 165 bytes leftover after parsing attributes in process `syz.6.869'. [ 318.456356][ T30] audit: type=1400 audit(1762158667.638:972): avc: denied { setopt } for pid=9269 comm="syz.4.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 318.489474][ T30] audit: type=1400 audit(1762158667.678:973): avc: denied { create } for pid=9264 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 318.780028][ T30] audit: type=1400 audit(1762158668.488:974): avc: denied { create } for pid=9281 comm="syz.2.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 319.579119][ T9284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.870'. [ 319.614080][ T30] audit: type=1400 audit(1762158669.328:975): avc: denied { ioctl } for pid=9281 comm="syz.2.870" path="socket:[26954]" dev="sockfs" ino=26954 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 319.638965][ T9] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 319.694135][ T9292] netlink: 'syz.1.874': attribute type 11 has an invalid length. [ 319.834624][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.907066][ T9] usb 7-1: config 0 has no interfaces? [ 319.989223][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 320.104191][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.257148][ T9] usb 7-1: config 0 descriptor?? [ 321.019495][ T5816] Bluetooth: hci1: unexpected event 0x2f length: 1017 > 260 [ 321.090374][ T9] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 321.185311][ T9309] tipc: Enabling of bearer rejected, failed to enable media [ 321.332495][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 321.371489][ T9] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.415467][ T9] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 321.457712][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 321.464510][ T9] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 321.475102][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.500179][ T9] usb 6-1: config 0 descriptor?? [ 321.641971][ T5817] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 321.801813][ T5817] usb 5-1: Using ep0 maxpacket: 8 [ 321.887161][ T5817] usb 5-1: config 162 has an invalid interface number: 253 but max is 0 [ 321.895651][ T5817] usb 5-1: config 162 has no interface number 0 [ 321.910233][ T5817] usb 5-1: config 162 interface 253 has no altsetting 0 [ 321.940397][ T5817] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 321.949567][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.974079][ T5817] usb 5-1: Product: syz [ 321.981837][ T5817] usb 5-1: Manufacturer: syz [ 321.986567][ T5817] usb 5-1: SerialNumber: syz [ 322.006223][ T9] hid-alps 0003:044E:120C.000F: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.5-1/input0 [ 322.172107][ T42] usb 6-1: USB disconnect, device number 12 [ 322.227016][ T5817] go7007 5-1:162.253: probe with driver go7007 failed with error -12 [ 322.344586][ T5817] usb 5-1: USB disconnect, device number 21 [ 322.510331][ T30] audit: type=1400 audit(1762158672.218:976): avc: denied { accept } for pid=9334 comm="syz.2.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 323.012329][ T5817] usb 7-1: USB disconnect, device number 6 [ 323.919833][ T9348] netlink: 'syz.5.889': attribute type 11 has an invalid length. [ 323.940306][ T5896] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 325.000899][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 325.012824][ T9361] netlink: 'syz.6.891': attribute type 11 has an invalid length. [ 325.029155][ T9362] tipc: Enabling of bearer rejected, failed to enable media [ 325.030466][ T5896] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 325.046414][ T5896] usb 3-1: config 0 has no interface number 0 [ 325.053576][ T5896] usb 3-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.070595][ T5896] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 325.080213][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.088287][ T5896] usb 3-1: Product: syz [ 325.093761][ T5896] usb 3-1: Manufacturer: syz [ 325.145622][ T5896] usb 3-1: SerialNumber: syz [ 325.234229][ T5896] usb 3-1: config 0 descriptor?? [ 325.334473][ T5896] smsc95xx v2.0.0 [ 325.379151][ T5896] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 325.479988][ T5896] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 326.196991][ T30] audit: type=1400 audit(1762158675.918:977): avc: denied { create } for pid=9379 comm="syz.4.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 326.298958][ T30] audit: type=1400 audit(1762158675.918:978): avc: denied { write } for pid=9379 comm="syz.4.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 326.450672][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 326.545040][ T5817] usb 3-1: USB disconnect, device number 25 [ 327.650049][ T30] audit: type=1400 audit(1762158677.348:979): avc: denied { setattr } for pid=9392 comm="syz.2.901" name="NETLINK" dev="sockfs" ino=26032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 327.710002][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 327.742064][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 327.804827][ T9401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9401 comm=syz.2.903 [ 328.085988][ T9410] binder: 9409:9410 ioctl c018620c 200000000240 returned -22 [ 328.095928][ T9412] binder: 9409:9412 ioctl c018620c 200000000240 returned -22 [ 328.106226][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.680155][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 328.777084][ T24] usb 7-1: SerialNumber: syz [ 328.808292][ T9415] tipc: Enabling of bearer rejected, failed to enable media [ 329.190192][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 329.925328][ T30] audit: type=1400 audit(1762158679.648:980): avc: denied { block_suspend } for pid=9428 comm="syz.5.912" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 329.970658][ T9427] netlink: 'syz.1.911': attribute type 12 has an invalid length. [ 330.122597][ T30] audit: type=1400 audit(1762158679.838:981): avc: denied { bind } for pid=9429 comm="syz.2.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 330.214840][ T9439] usb usb5: usbfs: process 9439 (syz.4.913) did not claim interface 0 before use [ 330.230532][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'. [ 330.239431][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.913'. [ 330.526822][ T30] audit: type=1400 audit(1762158679.928:982): avc: denied { bind } for pid=9432 comm="syz.4.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 330.603117][ T30] audit: type=1400 audit(1762158680.298:983): avc: denied { setopt } for pid=9428 comm="syz.5.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 330.775980][ T30] audit: type=1400 audit(1762158680.498:984): avc: denied { mount } for pid=9428 comm="syz.5.912" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 330.869543][ T9448] netlink: 9 bytes leftover after parsing attributes in process `syz.1.914'. [ 330.964084][ T9445] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.971297][ T9445] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.983871][ T9450] netlink: 5 bytes leftover after parsing attributes in process `syz.1.914'. [ 331.842851][ T24] usb 7-1: can't set config #1, error -71 [ 331.891111][ T24] usb 7-1: USB disconnect, device number 7 [ 332.055978][ T9445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.125416][ T9445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.502466][ T30] audit: type=1326 audit(1762158682.108:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.6.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83358efc9 code=0x7ffc0000 [ 332.530091][ T30] audit: type=1326 audit(1762158682.108:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.6.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83358efc9 code=0x7ffc0000 [ 332.615108][ T30] audit: type=1326 audit(1762158682.108:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.6.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fe83358efc9 code=0x7ffc0000 [ 332.639201][ T30] audit: type=1326 audit(1762158682.108:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.6.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83358efc9 code=0x7ffc0000 [ 332.663169][ T30] audit: type=1326 audit(1762158682.108:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.6.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83358efc9 code=0x7ffc0000 [ 332.686991][ T30] audit: type=1326 audit(1762158682.108:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.6.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe83358efc9 code=0x7ffc0000 [ 332.713494][ T30] audit: type=1326 audit(1762158682.108:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.6.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83358efc9 code=0x7ffc0000 [ 332.737056][ T30] audit: type=1326 audit(1762158682.108:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.6.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83358efc9 code=0x7ffc0000 [ 332.763206][ T30] audit: type=1326 audit(1762158682.108:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.6.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe83358efc9 code=0x7ffc0000 [ 332.793702][ T30] audit: type=1326 audit(1762158682.158:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.6.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83358efc9 code=0x7ffc0000 [ 332.818113][ T30] audit: type=1326 audit(1762158682.158:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.6.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe83358efc9 code=0x7ffc0000 [ 332.819017][ T9445] veth0_macvtap: left allmulticast mode [ 332.847557][ T30] audit: type=1326 audit(1762158682.158:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.6.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83358efc9 code=0x7ffc0000 [ 332.875330][ T30] audit: type=1326 audit(1762158682.158:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.6.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe83358efc9 code=0x7ffc0000 [ 332.980504][ T9448] gretap0: entered promiscuous mode [ 332.995480][ T9450] 0ªî{X¹¦: renamed from gretap0 [ 333.075270][ T9450] 0ªî{X¹¦: left promiscuous mode [ 333.080803][ T9450] 0ªî{X¹¦: entered allmulticast mode [ 333.087358][ T9450] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 333.191613][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.202888][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.212132][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.221139][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.464320][ T9481] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.921'. [ 333.495698][ T9480] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.920'. [ 333.602964][ T9484] tipc: Enabling of bearer rejected, failed to enable media [ 334.037126][ T30] audit: type=1400 audit(1762158683.738:998): avc: denied { ioctl } for pid=9493 comm="syz.6.924" path="socket:[27318]" dev="sockfs" ino=27318 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 335.361762][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.6.927'. [ 336.450907][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.932'. [ 336.498951][ T9524] netlink: 16 bytes leftover after parsing attributes in process `syz.5.932'. [ 337.149715][ T9534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.158477][ T5817] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 337.366497][ T9538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.936'. [ 337.421929][ T5817] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.442290][ T5817] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.467784][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.478279][ T5817] usb 5-1: Product: syz [ 337.482735][ T5817] usb 5-1: Manufacturer: syz [ 337.487404][ T5817] usb 5-1: SerialNumber: syz [ 337.680117][ T9] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 337.710134][ T42] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 337.810732][ T9] usb 6-1: device descriptor read/64, error -71 [ 337.861760][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 337.868228][ T42] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 337.876508][ T42] usb 3-1: config 0 has no interface number 0 [ 337.882851][ T42] usb 3-1: config 0 interface 184 has no altsetting 0 [ 337.891627][ T42] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 337.900963][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.911986][ T42] usb 3-1: Product: syz [ 337.916167][ T42] usb 3-1: Manufacturer: syz [ 337.921145][ T42] usb 3-1: SerialNumber: syz [ 337.983994][ T42] usb 3-1: config 0 descriptor?? [ 337.995408][ T42] smsc75xx v1.0.0 [ 338.110179][ T9] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 338.280137][ T9] usb 6-1: device descriptor read/64, error -71 [ 338.331047][ T42] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 338.352478][ T42] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 338.372117][ T42] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 338.383768][ T42] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 338.503434][ T42] usb 3-1: USB disconnect, device number 26 [ 338.798746][ T25] block nbd0: Possible stuck request ffff8880263ee000: control (read@0,4096B). Runtime 240 seconds [ 338.798977][ T5817] cdc_ncm 5-1:1.0: bind() failure [ 338.816276][ T9] usb usb6-port1: attempt power cycle [ 338.864872][ T5817] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 338.880717][ T5817] cdc_ncm 5-1:1.1: bind() failure [ 338.910318][ T5817] usb 5-1: USB disconnect, device number 22 [ 339.250427][ T9] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 339.366779][ T9568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9568 comm=syz.6.944 [ 340.100170][ T42] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 340.100537][ T9] usb 6-1: device descriptor read/8, error -71 [ 340.173525][ T9573] netlink: 'syz.6.945': attribute type 11 has an invalid length. [ 340.306913][ T42] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 340.306969][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.307009][ T42] usb 3-1: config 0 has no interface number 0 [ 340.307114][ T42] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 340.307180][ T42] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.332383][ T42] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 340.332416][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.332541][ T42] usb 3-1: Product: syz [ 340.332582][ T42] usb 3-1: Manufacturer: syz [ 340.332617][ T42] usb 3-1: SerialNumber: syz [ 340.420509][ T42] usb 3-1: config 0 descriptor?? [ 340.595971][ T9] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 340.675363][ T42] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 340.762922][ T42] usb 3-1: USB disconnect, device number 27 [ 340.848636][ T9] usb 6-1: device descriptor read/8, error -71 [ 340.950359][ T9] usb usb6-port1: unable to enumerate USB device [ 341.298488][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 341.298502][ T30] audit: type=1326 audit(1762158690.998:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9582 comm="syz.6.949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe83358efc9 code=0x0 [ 341.496525][ T30] audit: type=1400 audit(1762158691.218:1001): avc: denied { connect } for pid=9582 comm="syz.6.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 341.570497][ T9591] random: crng reseeded on system resumption [ 342.061726][ T30] audit: type=1400 audit(1762158691.278:1002): avc: denied { bind } for pid=9582 comm="syz.6.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 342.082139][ T30] audit: type=1400 audit(1762158691.278:1003): avc: denied { listen } for pid=9582 comm="syz.6.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 342.082176][ T30] audit: type=1400 audit(1762158691.278:1004): avc: denied { accept } for pid=9582 comm="syz.6.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 342.082210][ T30] audit: type=1400 audit(1762158691.308:1005): avc: denied { ioctl } for pid=9585 comm="syz.4.950" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 342.129792][ T30] audit: type=1400 audit(1762158691.848:1006): avc: denied { accept } for pid=9593 comm="syz.2.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 342.138159][ T9589] ip6tnl1: entered promiscuous mode [ 342.215770][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.233255][ T31] INFO: task syz.0.403:7442 blocked for more than 143 seconds. [ 342.240847][ T31] Not tainted syzkaller #0 [ 342.245772][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 342.298509][ T5822] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 342.309698][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 342.309731][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 342.309743][ T5822] Workqueue: hci2 hci_rx_work [ 342.309775][ T5822] Call Trace: [ 342.309781][ T5822] [ 342.309788][ T5822] dump_stack_lvl+0x16c/0x1f0 [ 342.309819][ T5822] sysfs_warn_dup+0x7f/0xa0 [ 342.309845][ T5822] sysfs_create_dir_ns+0x24b/0x2b0 [ 342.309870][ T5822] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 342.309892][ T5822] ? find_held_lock+0x2b/0x80 [ 342.309920][ T5822] ? do_raw_spin_unlock+0x172/0x230 [ 342.309942][ T5822] kobject_add_internal+0x2c4/0x9b0 [ 342.309964][ T5822] kobject_add+0x16e/0x240 [ 342.309982][ T5822] ? __pfx_kobject_add+0x10/0x10 [ 342.310002][ T5822] ? do_raw_spin_unlock+0x172/0x230 [ 342.310023][ T5822] ? kobject_put+0xab/0x5a0 [ 342.310053][ T5822] device_add+0x288/0x1aa0 [ 342.310076][ T5822] ? __pfx_dev_set_name+0x10/0x10 [ 342.310102][ T5822] ? __pfx_device_add+0x10/0x10 [ 342.310124][ T5822] ? mgmt_send_event_skb+0x2fb/0x460 [ 342.310158][ T5822] hci_conn_add_sysfs+0x17e/0x230 [ 342.310187][ T5822] le_conn_complete_evt+0x1260/0x2150 [ 342.310218][ T5822] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 342.310239][ T5822] ? hci_event_packet+0x459/0x11c0 [ 342.310269][ T5822] hci_le_conn_complete_evt+0x23c/0x370 [ 342.310299][ T5822] hci_le_meta_evt+0x357/0x5e0 [ 342.310324][ T5822] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 342.310350][ T5822] hci_event_packet+0x685/0x11c0 [ 342.310375][ T5822] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 342.310405][ T5822] ? __pfx_hci_event_packet+0x10/0x10 [ 342.310433][ T5822] ? kcov_remote_start+0x3c9/0x6d0 [ 342.310456][ T5822] ? lockdep_hardirqs_on+0x7c/0x110 [ 342.310488][ T5822] hci_rx_work+0x2c5/0x16b0 [ 342.310516][ T5822] ? rcu_is_watching+0x12/0xc0 [ 342.310544][ T5822] process_one_work+0x9cf/0x1b70 [ 342.310574][ T5822] ? __pfx_process_one_work+0x10/0x10 [ 342.310601][ T5822] ? assign_work+0x1a0/0x250 [ 342.310620][ T5822] worker_thread+0x6c8/0xf10 [ 342.310651][ T5822] ? __pfx_worker_thread+0x10/0x10 [ 342.310669][ T5822] kthread+0x3c5/0x780 [ 342.310686][ T5822] ? __pfx_kthread+0x10/0x10 [ 342.310704][ T5822] ? rcu_is_watching+0x12/0xc0 [ 342.310733][ T5822] ? __pfx_kthread+0x10/0x10 [ 342.310749][ T5822] ret_from_fork+0x675/0x7d0 [ 342.310763][ T5822] ? __pfx_kthread+0x10/0x10 [ 342.310777][ T5822] ret_from_fork_asm+0x1a/0x30 [ 342.310814][ T5822] [ 342.546047][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.554122][ T5822] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 342.568153][ T5822] Bluetooth: hci2: failed to register connection device [ 342.702265][ T31] task:syz.0.403 state:D stack:27272 pid:7442 tgid:7434 ppid:5824 task_flags:0x400140 flags:0x00080002 [ 343.202524][ T31] Call Trace: [ 343.205839][ T31] [ 343.208770][ T31] __schedule+0x1190/0x5de0 [ 343.236651][ T31] ? check_path.constprop.0+0x24/0x50 [ 343.265653][ T31] ? __pfx___schedule+0x10/0x10 [ 343.285995][ T31] ? find_held_lock+0x2b/0x80 [ 343.300133][ T31] ? schedule+0x2d7/0x3a0 [ 343.304488][ T31] ? bdev_open+0xa2/0xe40 [ 343.308825][ T31] schedule+0xe7/0x3a0 [ 343.319834][ T31] schedule_preempt_disabled+0x13/0x30 [ 343.325488][ T31] __mutex_lock+0x818/0x1060 [ 343.330269][ T31] ? bdev_open+0xa2/0xe40 [ 343.335998][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 343.341057][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 343.346693][ T31] ? bdev_open+0xa2/0xe40 [ 343.354150][ T31] bdev_open+0xa2/0xe40 [ 343.358294][ T31] ? iput+0x35/0x40 [ 343.362440][ T31] bdev_file_open_by_dev+0x182/0x210 [ 343.367804][ T31] setup_bdev_super+0x39b/0x730 [ 343.373683][ T31] get_tree_bdev_flags+0x363/0x620 [ 343.378841][ T31] ? __pfx_hpfs_fill_super+0x10/0x10 [ 343.384176][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 343.389834][ T31] ? bpf_lsm_capable+0x9/0x10 [ 343.394642][ T31] ? security_capable+0x7e/0x260 [ 343.399635][ T31] vfs_get_tree+0x8e/0x340 [ 343.404123][ T31] path_mount+0x7b9/0x23a0 [ 343.408579][ T31] ? __pfx_path_mount+0x10/0x10 [ 343.413490][ T31] ? putname+0x154/0x1a0 [ 343.418373][ T31] ? putname+0x154/0x1a0 [ 343.422825][ T31] ? putname+0x154/0x1a0 [ 343.427082][ T31] ? __x64_sys_mount+0x293/0x310 [ 343.432300][ T31] __x64_sys_mount+0x293/0x310 [ 343.437136][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 343.442485][ T31] do_syscall_64+0xcd/0xfa0 [ 343.447009][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.453007][ T31] RIP: 0033:0x7fbdc838efc9 [ 343.457411][ T31] RSP: 002b:00007fbdc65f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 343.465861][ T31] RAX: ffffffffffffffda RBX: 00007fbdc85e6090 RCX: 00007fbdc838efc9 [ 343.473875][ T31] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 00002000000000c0 [ 343.481959][ T31] RBP: 00007fbdc8411f91 R08: 0000000000000000 R09: 0000000000000000 [ 343.489921][ T31] R10: 0000000000004080 R11: 0000000000000246 R12: 0000000000000000 [ 343.500851][ T31] R13: 00007fbdc85e6128 R14: 00007fbdc85e6090 R15: 00007fff310268f8 [ 343.508849][ T31] [ 343.512715][ T31] [ 343.512715][ T31] Showing all locks held in the system: [ 343.520784][ T31] 2 locks held by ksoftirqd/1/23: [ 343.525811][ T31] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 343.536030][ T31] #1: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 343.545961][ T31] 1 lock held by khungtaskd/31: [ 343.551049][ T31] #0: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 343.561012][ T31] 2 locks held by getty/5571: [ 343.565674][ T31] #0: ffff88814cd4a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 343.575470][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 343.585584][ T31] 1 lock held by udevd/5827: [ 343.590207][ T31] #0: ffff888026203358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 343.599536][ T31] 2 locks held by syz.0.403/7442: [ 343.605929][ T31] #0: ffff88802a79a0e0 (&type->s_umount_key#83/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60 [ 343.616132][ T31] #1: ffff888026203358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 343.625459][ T31] [ 343.627774][ T31] ============================================= [ 343.627774][ T31] [ 343.636204][ T31] NMI backtrace for cpu 0 [ 343.636216][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 343.636235][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 343.636245][ T31] Call Trace: [ 343.636251][ T31] [ 343.636256][ T31] dump_stack_lvl+0x116/0x1f0 [ 343.636282][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 343.636300][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 343.636324][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 343.636343][ T31] watchdog+0xf3f/0x1170 [ 343.636367][ T31] ? rcu_is_watching+0x12/0xc0 [ 343.636387][ T31] ? __pfx_watchdog+0x10/0x10 [ 343.636403][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 343.636427][ T31] ? __kthread_parkme+0x19e/0x250 [ 343.636451][ T31] ? __pfx_watchdog+0x10/0x10 [ 343.636468][ T31] kthread+0x3c5/0x780 [ 343.636485][ T31] ? __pfx_kthread+0x10/0x10 [ 343.636501][ T31] ? rcu_is_watching+0x12/0xc0 [ 343.636521][ T31] ? __pfx_kthread+0x10/0x10 [ 343.636537][ T31] ret_from_fork+0x675/0x7d0 [ 343.636550][ T31] ? __pfx_kthread+0x10/0x10 [ 343.636563][ T31] ret_from_fork_asm+0x1a/0x30 [ 343.636593][ T31] [ 343.636598][ T31] Sending NMI from CPU 0 to CPUs 1: [ 343.756708][ C1] NMI backtrace for cpu 1 [ 343.756721][ C1] CPU: 1 UID: 0 PID: 5799 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 343.756738][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 343.756746][ C1] RIP: 0010:lock_acquire+0x134/0x350 [ 343.756763][ C1] Code: 65 8b 05 47 d5 08 12 85 c0 0f 85 a2 00 00 00 65 48 8b 05 87 93 08 12 8b 90 2c 0b 00 00 85 d2 0f 85 8c 00 00 00 9c 8f 04 24 fa <48> c7 c7 30 a9 b1 8d e8 a0 9e c7 09 45 89 e0 89 e9 44 89 ea 65 ff [ 343.756776][ C1] RSP: 0018:ffffc90003e3fd10 EFLAGS: 00000046 [ 343.756787][ C1] RAX: ffff888034a74900 RBX: ffff888068cc57e0 RCX: 0000000000000001 [ 343.756797][ C1] RDX: 0000000000000000 RSI: ffffffff8208f183 RDI: ffffed100d198afc [ 343.756805][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 343.756813][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 343.756821][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.756828][ C1] FS: 00005555750e9500(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 343.756843][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.756852][ C1] CR2: 00007f975bbb3ad8 CR3: 000000002d448000 CR4: 00000000003526f0 [ 343.756860][ C1] DR0: 00000000000000f9 DR1: 0000000000000b7f DR2: 000000000000000d [ 343.756868][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 343.756877][ C1] Call Trace: [ 343.756881][ C1] [ 343.756887][ C1] ? __pfx___might_resched+0x10/0x10 [ 343.756906][ C1] ? __might_fault+0xe3/0x190 [ 343.756926][ C1] __might_fault+0x113/0x190 [ 343.756944][ C1] ? __might_fault+0xe3/0x190 [ 343.756962][ C1] _copy_from_user+0x29/0xd0 [ 343.756980][ C1] get_timespec64+0x8b/0x240 [ 343.756999][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 343.757017][ C1] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 343.757039][ C1] __x64_sys_clock_nanosleep+0x1ce/0x4a0 [ 343.757057][ C1] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 343.757078][ C1] do_syscall_64+0xcd/0xfa0 [ 343.757099][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.757114][ C1] RIP: 0033:0x7fb76c1c1843 [ 343.757124][ C1] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 6d 1f 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 343.757136][ C1] RSP: 002b:00007ffddcfee4f8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 343.757148][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb76c1c1843 [ 343.757156][ C1] RDX: 00007ffddcfee510 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.757164][ C1] RBP: 0000000000000000 R08: 000000000001005c R09: 00007fb76cfcf000 [ 343.757172][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffddcfee960 [ 343.757181][ C1] R13: 0000000000000004 R14: 00007ffddcfee54c R15: 00007ffddcfee5e0 [ 343.757195][ C1] [ 346.342161][ T5186] udevd[5186]: worker [5827] /devices/virtual/block/nbd0 timeout; kill it [ 346.351589][ T5186] udevd[5186]: seq 11518 '/devices/virtual/block/nbd0' killed [ 348.710169][ T5816] Bluetooth: hci2: command 0x0406 tx timeout