last executing test programs: 4m45.251324732s ago: executing program 32 (id=978): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mknodat$loop(0xffffffffffffffff, 0x0, 0x800, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xeb3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x100}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x100040d3}, 0x22000010) 4m40.023514232s ago: executing program 33 (id=993): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m31.861717323s ago: executing program 34 (id=1013): r0 = epoll_create(0x4) r1 = socket(0x1d, 0x2, 0x6) setsockopt$inet_int(r1, 0x6a, 0x16, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x5, 0x6, 0x4c, 0x39cc191a, 0x5f, 0x9, 0x5, 0x80, 0xffffff01, 0x6, 0x7, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x23f, 0x3, 0xe, 0x0, 0x71, 0x1, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x4, 0x7, 0x6, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x85, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbd, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x5, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x3, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x10002, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc844) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e085cca6a169fd5801b79b5e5dd5ca55277a42df43f04fb6a3bcc1a6632b89f49f93df860cfc"], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = inotify_init() inotify_add_watch(r5, 0x0, 0x850003d1) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) socket$nl_route(0x10, 0x3, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000680)=""/240) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf0, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xa9, 0xa8, @random="1ef81f319b99aa25e9c1623b13bbf0c074629b69a48d234da9787a8eb62526db05c8bd013aa0a4e7fc09b59e2e4e6659ab50b8f7e59325671702d234355a021b93f5b1e88fbd731a0ce1e7694f84ace73a209c27884b92a4ff9d90d0a8ebb3423575c744faa9b0efb937e2e3ebced86d9e86f27780648830868701efa1a5bd0b3aa41b0f1274f0df588ee7e9a9131ad9bb316f9aec9e1303a520f02878ed9d916fb47c7a62"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24000081}, 0x4004044) 4m25.427781629s ago: executing program 35 (id=1024): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000005c0)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff40012218000905810308000015b409050203"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600"}) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 3m37.769701686s ago: executing program 36 (id=1095): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) pipe(&(0x7f0000000340)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0xe1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec00000000000014f512800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a", 0x1b}], 0x2}], 0x1, 0x40800) syz_clone(0x2200011, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) writev(r10, &(0x7f0000000340)=[{&(0x7f00000001c0)='#', 0x1}, {&(0x7f00000000c0)="659fcb93f755c4f98d42a02f", 0xc}], 0x2) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) close(0x3) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES32=r9, @ANYRES64=0x0, @ANYRESHEX=r5, @ANYRES32=r6, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000003fae8a9ad451a727"], 0x48}}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc408, 0x103) 2m56.543110105s ago: executing program 37 (id=1225): syz_open_dev$vim2m(0x0, 0x7, 0x2) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40902, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x9, 0x0, 0x0, "810002ee0900598c44ff00be875f3c00"}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_pts(r1, 0x141601) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x5, 0xff7f, 0x1, 0x9, 0x5, "995e825fc02930cf"}) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) (fail_nth: 4) 2m56.512124981s ago: executing program 8 (id=1227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)={0x34, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 2m56.260489011s ago: executing program 8 (id=1229): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000200)={0x4, 0x1200, 0xa, 0x0, 0x5, 0x0, [{0x7, 0x8001, 0x1000, '\x00', 0x1000}, {0x2, 0x518, 0x6}, {0x6, 0x101, 0x2520, '\x00', 0x200}, {0x1, 0x2, 0x7, '\x00', 0x3000}, {0x9, 0x101, 0x4, '\x00', 0x8}]}) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') fchdir(r2) readlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000002140)=""/143, 0x8f) 2m55.982613565s ago: executing program 8 (id=1230): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x9b00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 2m55.567516998s ago: executing program 8 (id=1231): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989846, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x1, r2}, 0xa0) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000240)=[0xee01, 0xee00, 0xee01, 0x0, 0xee01]) fchown(r1, r3, r4) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040f20c5062000001020301090212a0204291b2101fa2086d2ea5a1020001010080fa090400"], 0x0) 2m51.948970442s ago: executing program 8 (id=1242): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="000000000180ff0000000000004e7050ad000000", @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000004000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000200000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) ioctl(r2, 0x3b8f, &(0x7f00000000c0)='(') read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010029bd"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {}, 0x0, 0x0, 0x80}) 2m51.947415726s ago: executing program 5 (id=1243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x800) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r3 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x4000000) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff1, 0xc}, {0x5, 0xc}, {0x18, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x20040000) keyctl$read(0xb, r3, &(0x7f00000004c0)=""/208, 0xd0) 2m51.032323412s ago: executing program 8 (id=1244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x800) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r3 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x4000000) keyctl$read(0xb, r3, &(0x7f00000004c0)=""/208, 0xd0) 2m50.412971573s ago: executing program 38 (id=1244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x800) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r3 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x4000000) keyctl$read(0xb, r3, &(0x7f00000004c0)=""/208, 0xd0) 2m50.404609534s ago: executing program 5 (id=1246): lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone3(&(0x7f00000005c0)={0x4101200, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000300)=0x0, {0x2a}, &(0x7f0000000440)=""/13, 0xd, &(0x7f0000000500)=""/77, &(0x7f0000000580)=[0x0, 0x0], 0x2}, 0x58) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0xa, 0x1, 0x0) r2 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r7, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26}) creat(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x10) 2m47.746602565s ago: executing program 5 (id=1250): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r2 = openat(r1, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) fcntl$getownex(r1, 0x10, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r2, &(0x7f0000000d00)='nf ::7.0.0.1 2\\000000\\0 l\\calhost\n', 0x24) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0xba98575a95aeb70d) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000080)={'pim6reg0\x00', @random="eb8b2eb022f4"}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f00008df000/0x3000)=nil, 0x3000, 0x13) r7 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='8\x00', 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001a00ffffffff"], 0x3c}, 0x1, 0xba01}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000000000001bfe8000000000000000000000000000aa000300004e220000000000003b000000", @ANYRESDEC=r6, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000003c000000fc0000000000000000000000000000005a0000000000000000b400000000000002e9ffffffffffff000000007fffc9471e968e555dfffe00000000000000000000060000000000000000000000000000000000000000000000000000200000000000070000001000008ffdffffffffffffff00000400000000000800000000000000000000000a00020270000000000000480014000e00fe8000"/190], 0x104}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2m46.215861476s ago: executing program 5 (id=1252): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989846, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x1, r2}, 0xa0) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000240)=[0xee01, 0xee00, 0xee01, 0x0, 0xee01]) fchown(r1, r3, r4) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040f20c5062000001020301090212a0204291b2101fa2086d2ea5a1020001010080fa090400"], 0x0) 2m44.488593064s ago: executing program 5 (id=1257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socket$packet(0x11, 0x2, 0x300) socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) r4 = socket(0x2d, 0x2, 0x0) bind(r4, &(0x7f0000000500)=@generic={0x2d, "00000100000008010800"}, 0x80) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@pppoe={0x18, 0x0, {0x3, @remote, 'macvlan1\x00'}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2m43.592757818s ago: executing program 5 (id=1259): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) fcntl$addseals(r2, 0x409, 0x8e3652a1e0b94d91) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000500)={0xc3, "88787a6f7dec02b87903d2a2988f949ebc212d5bafb5af0113128be4015e0d17c741f966947a6ffafa70d358a5a277a8eb580f9f028246a75d63d688c2546c6f9b16d7c33f345a1eb1e568f41b963e306ce73f69f943a984bca734cfcdc5520062c598f8cf78a135fbed4b4dcf3ccfdeff59ab787094005214b7bc79b05b005813cd75596597748f1d64e79dac315dd6f19fe3442a6ffe92b1265c51cbdc0dfefd6a7f8c25799e97b8e9007bac8c6b213230964b29dd2d60c5b1dcb55bd57c56002d90"}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) add_key(&(0x7f0000000240)='syzkaller\x00', 0x0, &(0x7f00000003c0)="009b018801000000ce006edb06000300861f44b64050700f6d9c8d50383fd7327d04f187ce590fb02ce68a28c38b223f944cba47efce08f76996f05869e65e84a2dda02577c4216703f8b576ac4548babd112a66302f506a788595d31ff4f996f212377940804955909a437be864fee941151f5ef7d38221a6834b9947389550db614fc653115cda1e15ed", 0x8b, 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001080900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000001000"], 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) write(r3, &(0x7f0000000900)="5b026c7c84c906313302b74cffc27a06877c09dc61343ab65276f8fec7d70d600a4e16599c827105ac95a27e5d69965d6efcf10b548be2c2652136869bf33ebba0c83ceb383ae23d8de5c6a723a02371626ed111780e5753699f245bdaf68f90deb799a63358aaf3477cbdc040bbc446c98091e1672b61f8e2abfd421fb9eb1b5457e2baa3488e18a3e2dad9d4fa0ee235aa506f3bd63c0d7e04cc", 0x9b) socket$inet_smc(0x2b, 0x1, 0x0) 2m42.995797473s ago: executing program 39 (id=1259): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) fcntl$addseals(r2, 0x409, 0x8e3652a1e0b94d91) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000500)={0xc3, "88787a6f7dec02b87903d2a2988f949ebc212d5bafb5af0113128be4015e0d17c741f966947a6ffafa70d358a5a277a8eb580f9f028246a75d63d688c2546c6f9b16d7c33f345a1eb1e568f41b963e306ce73f69f943a984bca734cfcdc5520062c598f8cf78a135fbed4b4dcf3ccfdeff59ab787094005214b7bc79b05b005813cd75596597748f1d64e79dac315dd6f19fe3442a6ffe92b1265c51cbdc0dfefd6a7f8c25799e97b8e9007bac8c6b213230964b29dd2d60c5b1dcb55bd57c56002d90"}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) add_key(&(0x7f0000000240)='syzkaller\x00', 0x0, &(0x7f00000003c0)="009b018801000000ce006edb06000300861f44b64050700f6d9c8d50383fd7327d04f187ce590fb02ce68a28c38b223f944cba47efce08f76996f05869e65e84a2dda02577c4216703f8b576ac4548babd112a66302f506a788595d31ff4f996f212377940804955909a437be864fee941151f5ef7d38221a6834b9947389550db614fc653115cda1e15ed", 0x8b, 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001080900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000001000"], 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) write(r3, &(0x7f0000000900)="5b026c7c84c906313302b74cffc27a06877c09dc61343ab65276f8fec7d70d600a4e16599c827105ac95a27e5d69965d6efcf10b548be2c2652136869bf33ebba0c83ceb383ae23d8de5c6a723a02371626ed111780e5753699f245bdaf68f90deb799a63358aaf3477cbdc040bbc446c98091e1672b61f8e2abfd421fb9eb1b5457e2baa3488e18a3e2dad9d4fa0ee235aa506f3bd63c0d7e04cc", 0x9b) socket$inet_smc(0x2b, 0x1, 0x0) 2m13.496303961s ago: executing program 6 (id=1323): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) madvise(&(0x7f0000306000/0x3000)=nil, 0x3000, 0x12) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) pipe(0x0) mount(0x0, 0x0, &(0x7f0000000280)='configfs\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) ioctl$UBLK_U_CMD_ADD_DEV(0xffffffffffffffff, 0xc0207504, &(0x7f0000000640)={0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@any_dev={0x4, 0x155, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x0, 0x183}}) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone(0xbb3a2000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m11.72419694s ago: executing program 6 (id=1327): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x1, 0x1, 0x6}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x44845) close_range(r0, r0, 0x0) 2m5.046590291s ago: executing program 6 (id=1337): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) madvise(&(0x7f0000306000/0x3000)=nil, 0x3000, 0x12) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) pipe(0x0) mount(0x0, 0x0, &(0x7f0000000280)='configfs\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) ioctl$UBLK_U_CMD_ADD_DEV(0xffffffffffffffff, 0xc0207504, &(0x7f0000000640)={0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@any_dev={0x4, 0x155, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x0, 0x183}}) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone(0xbb3a2000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m4.878497924s ago: executing program 1 (id=1338): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r1, 0x1) flock(r0, 0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x4400) 2m3.454887285s ago: executing program 1 (id=1341): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x5, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x8, @empty, @loopback, 0x0, 0x20, 0x15, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) r2 = semget$private(0x0, 0x4000000009, 0x0) semop(r2, &(0x7f0000000240)=[{0x2, 0x8000, 0x1000}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001840), 0x3b, 0x0) semop(r2, &(0x7f0000000140)=[{0x0, 0xfffb}], 0x1) semop(r2, &(0x7f00000000c0)=[{0x0, 0xf, 0x1000}], 0x1) 2m3.384180428s ago: executing program 6 (id=1342): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x3) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x289, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000000)=0xffff0000, 0x4) 2m2.113784004s ago: executing program 1 (id=1346): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000027c0)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {0x0}, {&(0x7f0000000a40)=""/4107, 0x100b}, {&(0x7f0000000280)=""/65, 0x41}], 0x6}, 0xd}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x40, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f03", 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000006c0)={0x24, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0, 0x0}, 0x0) 1m56.748769478s ago: executing program 6 (id=1356): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_regs={0x7, 0x0, 0x8, "a8702cce82258cf1"}}) write$selinux_load(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e131d"], 0x16) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x2, 0xffff}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8805}, 0x10) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) (fail_nth: 2) 1m56.440828932s ago: executing program 1 (id=1358): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffe1, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x14) 1m55.687705189s ago: executing program 1 (id=1359): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_regs={0x7, 0x0, 0x8, "a8702cce82258cf1"}}) write$selinux_load(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e131d"], 0x16) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') open(&(0x7f00000002c0)='.\x00', 0x101801, 0x12c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xa002803f}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 1m54.915166338s ago: executing program 6 (id=1362): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7b, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYRES32=r0], 0x24}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x9, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000200)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0xc, 0xb}, 0x1}, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x6, 0xd, 0x4, 0x12a3, 0x6, 0xffffffff, 0x2, 0x6, 0x7, 0x81, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x14, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff3f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x2, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x50) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m53.179846091s ago: executing program 1 (id=1365): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xc18]}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x21, 0x803, 0x9) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c040000007f470000000000000100677470000c0002800800010029a012d25940fc8980f4f701f6308c13de03fbd8af07300f82afd3491ac8bf166e7803e7de38396eac70fbd0eb5a0180723c14f21aa95397621ddcce18640973a2fd76cd29c26b7a62999b0b34b8d6f509e4f005c5", @ANYRES32=r0, @ANYBLOB], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$kcm(0x10, 0x0, 0x0) r1 = request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', 0xfffffffffffffff9) keyctl$set_timeout(0xf, r1, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r2) r3 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x12, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score\x00') preadv(r4, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) 1m47.49063293s ago: executing program 4 (id=1370): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) ioctl$TCFLSH(r1, 0x40087101, 0x110c230000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x408083, 0x0) 1m46.784160759s ago: executing program 4 (id=1373): setns(0xc9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210827bd7000ffdbdf257600000008000300", @ANYBLOB='\f\x00X\x00T\x00\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x804) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f0000000340)=0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x5, 0xfffa}, 0xd, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x0, 0xfffffffd, 0x8, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0x2, 0x1dd2, 0x6, 0x7, 0x69a4, 0x80000001, 0x4, 0x5, 0x100000, 0x3c5b, 0x3, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x407, 0x7, 0x10103, 0x0, 0x5, 0x3c, 0x91, 0x2, 0xfffffffd, 0x3, 0x5, 0x0, 0x8, 0x4, 0x80, 0x0, 0x5, 0x2, 0x8, 0x4, 0xfffffffd, 0x514], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x4, 0x129432e2, 0xcb, 0xf9, 0xd, 0xffff, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x10007, 0x5, 0x2f, 0xb99, 0x312, 0x78, 0xea4, 0xa, 0x6, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xff7ffffd, 0x8, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x4ecf, 0x7f, 0x9, 0x5, 0xd, 0x80004, 0x1, 0x7, 0x9, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x800004, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x4, 0x5, 0xcf, 0x1ef, 0x5, 0x8, 0x85, 0x6, 0x10000009, 0x3e3, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x3, 0x7, 0x7c, 0xffffffff, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x101, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x120000, 0x3, 0x6, 0x9, 0x4], [0x9, 0xbb30, 0x3, 0x8, 0x5, 0x938, 0x8b, 0x6, 0x0, 0x5, 0xce7, 0x1fe, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8, 0x60a7, 0x4, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x3, 0x100c8, 0x3, 0x2, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x493, 0x1, 0x10003, 0x5, 0x8, 0x2b91, 0xa1f, 0x108, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x100005, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) read$ublk_bdev(r5, 0x0, 0x0) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) wait4(r4, &(0x7f00000003c0), 0x8, &(0x7f0000000400)) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES16=r2, @ANYBLOB="000129bd7000fbdbdf252c0000001b009900080000008f000000"], 0x20}, 0x1, 0x0, 0x0, 0x100080d1}, 0x81) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) syz_io_uring_setup(0x6124, &(0x7f0000000200)={0x0, 0x3e40, 0xa0881, 0x1, 0x24c}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r8 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r8, 0x1000006) fcntl$addseals(r8, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r8, 0x0, 0x0, 0x1000000}) syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') 1m43.189034126s ago: executing program 4 (id=1380): unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x733a02, 0x16c) getdents64(r3, &(0x7f0000000280)=""/59, 0x3b) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f00000002c0)={0x4, &(0x7f00000000c0)=[{0x38, '\x00', @st={0x4, [{0x1, @svalue=0x3}, {0x3}, {0x0, @uvalue=0x1}, {0x0, @uvalue=0xa182}]}, 0x3}, {0x12, '\x00', @st={0x4, [{0x1, @svalue=0x4}, {0x1, @svalue=0x400}, {0x3, @uvalue=0x40000}, {0x1, @uvalue=0x41}]}, 0xfff}, {0x39, '\x00', @buffer={"cd5a585529647c60c5ccc64aca130e0f968982e34913b76bd9482a68561e7b05", 0x20}, 0x5}, {0x46, '\x00', @data=0x2, 0x45}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001600d16f000000000000df251c7c00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4048015}, 0x10) syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB], 0x18}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 1m42.028238462s ago: executing program 4 (id=1382): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989846, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x1, r2}, 0xa0) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000240)=[0xee01, 0xee00, 0xee01, 0x0, 0xee01]) fchown(r1, r3, r4) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040f20c5062000001020301090212a0204291b2101fa2086d2ea5a1020001010080fa090400"], 0x0) 1m39.749743675s ago: executing program 40 (id=1362): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7b, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYRES32=r0], 0x24}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x9, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000200)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0xc, 0xb}, 0x1}, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x6, 0xd, 0x4, 0x12a3, 0x6, 0xffffffff, 0x2, 0x6, 0x7, 0x81, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x14, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff3f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x2, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x50) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m37.668997628s ago: executing program 41 (id=1365): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xc18]}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x21, 0x803, 0x9) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c040000007f470000000000000100677470000c0002800800010029a012d25940fc8980f4f701f6308c13de03fbd8af07300f82afd3491ac8bf166e7803e7de38396eac70fbd0eb5a0180723c14f21aa95397621ddcce18640973a2fd76cd29c26b7a62999b0b34b8d6f509e4f005c5", @ANYRES32=r0, @ANYBLOB], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$kcm(0x10, 0x0, 0x0) r1 = request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', 0xfffffffffffffff9) keyctl$set_timeout(0xf, r1, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r2) r3 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x12, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score\x00') preadv(r4, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) 1m36.206664735s ago: executing program 4 (id=1391): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r1 = openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) fcntl$getownex(r0, 0x10, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r1, &(0x7f0000000d00)='nf ::7.0.0.1 2\\000000\\0 l\\calhost\n', 0x24) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000080)={'pim6reg0\x00', @random="eb8b2eb022f4"}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f00008df000/0x3000)=nil, 0x3000, 0x13) r6 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='8\x00', 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="c744240077dd0000c74424027fbe0000c7442406000000000f011c2466460f3881460a0f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ba4100ed40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5f}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000000000001bfe8000000000000000000000000000aa000300004e220000000000003b000000", @ANYRESDEC=r5, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000003c000000fc0000000000000000000000000000005a0000000000000000b400000000000002e9ffffffffffff000000007fffc9471e968e555dfffe00000000000000000000060000000000000000000000000000000000000000000000000000200000000000070000001000008ffdffffffffffffff00000400000000000800000000000000000000000a00020270000000000000480014000e00fe8000"/190], 0x104}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1m34.743709106s ago: executing program 4 (id=1394): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1m33.234771394s ago: executing program 42 (id=1394): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 53.008714457s ago: executing program 2 (id=1443): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r2, 0x0, 0x0, 0x4000, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r3 = getpgrp(0x0) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x47, &(0x7f0000000200)=0x7) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) sendmsg$nl_xfrm(r1, 0x0, 0x400c8c0) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) 51.343113575s ago: executing program 2 (id=1446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="000000000180ff0000000000004e7050ad000000", @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000004000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000200000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) ioctl(r2, 0x3b8f, &(0x7f00000000c0)='(') read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010029bd"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {}, 0x0, 0x0, 0x80}) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000a00)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x20004004) munlockall() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 45.622362008s ago: executing program 0 (id=1455): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r2, 0x0, 0x0, 0x4000, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r3 = getpgrp(0x0) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x47, &(0x7f0000000200)=0x7) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) sendmsg$nl_xfrm(r1, 0x0, 0x400c8c0) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) 44.607592167s ago: executing program 0 (id=1457): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r2, 0x0, 0x0, 0x4000, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r3 = getpgrp(0x0) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) sendmsg$nl_xfrm(r1, 0x0, 0x400c8c0) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) 44.291964161s ago: executing program 2 (id=1458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="000000000180ff0000000000004e7050ad000000", @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000004000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000200000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) ioctl(r2, 0x3b8f, &(0x7f00000000c0)='(') read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010029bd"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {}, 0x0, 0x0, 0x80}) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000a00)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x20004004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 42.636360009s ago: executing program 2 (id=1461): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989846, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x1, r2}, 0xa0) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000240)=[0xee01, 0xee00, 0xee01, 0x0, 0xee01]) fchown(r1, r3, r4) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040f20c5062000001020301090212a0204291b2101fa2086d2ea5a1020001010080fa090400"], 0x0) 39.823042511s ago: executing program 0 (id=1464): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r2 = openat(r1, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) fcntl$getownex(r1, 0x10, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r2, &(0x7f0000000d00)='nf ::7.0.0.1 2\\000000\\0 l\\calhost\n', 0x24) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0xba98575a95aeb70d) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f00008df000/0x3000)=nil, 0x3000, 0x13) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='8\x00', 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001a00ffffffff"], 0x3c}, 0x1, 0xba01}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="c744240077dd0000c74424027fbe0000c7442406000000000f011c2466460f3881460a0f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ba4100ed40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5f}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000000000001bfe8000000000000000000000000000aa000300004e220000000000003b000000", @ANYRESDEC=r6, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000003c000000fc0000000000000000000000000000005a0000000000000000b400000000000002e9ffffffffffff000000007fffc9471e968e555dfffe00000000000000000000060000000000000000000000000000000000000000000000000000200000000000070000001000008ffdffffffffffffff00000400000000000800000000000000000000000a00020270000000000000480014000e00fe8000"/190], 0x104}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 39.537477294s ago: executing program 2 (id=1466): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xc18]}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000}) r0 = socket(0x21, 0x803, 0x9) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c040000007f470000000000000100677470000c0002800800010029a012d25940fc8980f4f701f6308c13de03fbd8af07300f82afd3491ac8bf166e7803e7de38396eac70fbd0eb5a0180723c14f21aa95397621ddcce18640973a2fd76cd29c26b7a62999b0b34b8d6f509e4f005c5", @ANYRES32=r0, @ANYBLOB], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$kcm(0x10, 0x0, 0x0) r1 = request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', 0xfffffffffffffff9) keyctl$set_timeout(0xf, r1, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r2) r3 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x12, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score\x00') preadv(r4, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) 38.558648117s ago: executing program 2 (id=1469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="000000000180ff0000000000004e7050ad000000", @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000004000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000200000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) ioctl(r2, 0x3b8f, &(0x7f00000000c0)='(') read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010029bd"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {}, 0x0, 0x0, 0x80}) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000a00)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x20004004) munlockall() r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 37.325842663s ago: executing program 43 (id=1469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="000000000180ff0000000000004e7050ad000000", @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000004000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000200000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) ioctl(r2, 0x3b8f, &(0x7f00000000c0)='(') read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010029bd"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {}, 0x0, 0x0, 0x80}) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000a00)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x20004004) munlockall() r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 34.546502556s ago: executing program 0 (id=1476): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989846, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x1, r1}, 0x94) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000240)=[0xee01, 0xee00, 0xee01, 0x0, 0xee01]) fchown(r0, r2, r3) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040f20c5062000001020301090212a0204291b2101fa2086d2ea5a1020001010080fa090400"], 0x0) 32.952292932s ago: executing program 0 (id=1478): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000063e000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0x3b, 0xfffffffa, 0xfffffe3f, 0xfffffff7, 0x0, "5b980f8b00000000000000b70000000200", 0x388, 0x1005}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000a40)) read$FUSE(r3, &(0x7f0000000e40)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29.299492498s ago: executing program 0 (id=1485): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r2 = openat(r1, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) fcntl$getownex(r1, 0x10, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r2, &(0x7f0000000d00)='nf ::7.0.0.1 2\\000000\\0 l\\calhost\n', 0x24) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0xba98575a95aeb70d) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f00008df000/0x3000)=nil, 0x3000, 0x13) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='8\x00', 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001a00ffffffff"], 0x3c}, 0x1, 0xba01}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="c744240077dd0000c74424027fbe0000c7442406000000000f011c2466460f3881460a0f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ba4100ed40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5f}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000000000001bfe8000000000000000000000000000aa000300004e220000000000003b000000", @ANYRESDEC=r6, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000003c000000fc0000000000000000000000000000005a0000000000000000b400000000000002e9ffffffffffff000000007fffc9471e968e555dfffe00000000000000000000060000000000000000000000000000000000000000000000000000200000000000070000001000008ffdffffffffffffff00000400000000000800000000000000000000000a00020270000000000000480014000e00fe8000"/190], 0x104}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 28.583871268s ago: executing program 44 (id=1485): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r2 = openat(r1, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) fcntl$getownex(r1, 0x10, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r2, &(0x7f0000000d00)='nf ::7.0.0.1 2\\000000\\0 l\\calhost\n', 0x24) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0xba98575a95aeb70d) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f00008df000/0x3000)=nil, 0x3000, 0x13) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='8\x00', 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001a00ffffffff"], 0x3c}, 0x1, 0xba01}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="c744240077dd0000c74424027fbe0000c7442406000000000f011c2466460f3881460a0f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ba4100ed40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5f}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000000000001bfe8000000000000000000000000000aa000300004e220000000000003b000000", @ANYRESDEC=r6, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000003c000000fc0000000000000000000000000000005a0000000000000000b400000000000002e9ffffffffffff000000007fffc9471e968e555dfffe00000000000000000000060000000000000000000000000000000000000000000000000000200000000000070000001000008ffdffffffffffffff00000400000000000800000000000000000000000a00020270000000000000480014000e00fe8000"/190], 0x104}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 7.478784082s ago: executing program 7 (id=1517): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r1, 0x1) flock(r0, 0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x4400) 6.884621269s ago: executing program 7 (id=1518): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000040)) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000027c0)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {0x0}, {&(0x7f0000000a40)=""/4107, 0x100b}, {&(0x7f0000000280)=""/65, 0x41}], 0x6}, 0xd}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x40, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f03", 0x8) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000006c0)={0x24, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0, 0x0}, 0x0) 4.855168557s ago: executing program 9 (id=1521): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="000000000180ff0000000000004e7050ad000000", @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000004000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000200000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) ioctl(r2, 0x3b8f, &(0x7f00000000c0)='(') read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010029bd"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {}, 0x0, 0x0, 0x80}) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000a00)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x20004004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 4.454798129s ago: executing program 3 (id=1522): socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 4.452793895s ago: executing program 7 (id=1523): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e6064, &(0x7f0000000340)={[{}]}) (fail_nth: 4) 4.073970543s ago: executing program 7 (id=1524): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private0}}, &(0x7f0000000480)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {r2, r4}}, './file0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x94) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) r8 = socket$can_raw(0x1d, 0x3, 0x1) syz_ublk_add_dev(r6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x2e, 0x6, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0xe65, 0x0, 0x0, 0x1000, 0x0, r5, 0x0, 0x1a}}}, &(0x7f0000000940)) ioctl$UBLK_U_CMD_STOP_DEV(r6, 0xc0207507, &(0x7f0000000980)={0x0}) ioctl$UBLK_U_CMD_START_DEV(r9, 0xc0207506, &(0x7f0000000a00)={r10, 0xffff, 0x0, 0x0, r5}) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x7, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000a80)=ANY=[@ANYBLOB="180afedea60000", @ANYRES32=r6, @ANYBLOB="00000000f7f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018180000", @ANYRES32=r0, @ANYBLOB="00000000000000000f940d0080000000"], &(0x7f0000000240)='syzkaller\x00', 0xffff, 0xd2, &(0x7f0000000600)=""/210, 0x41100, 0x1e, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000700)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x7, 0x1, 0x7}, 0x10, 0x1b13b, r6, 0x9, &(0x7f0000000780)=[r6, 0xffffffffffffffff, r6, r6, r6, r6, r6, r6], &(0x7f00000007c0)=[{0x0, 0x2, 0x4, 0x6}, {0x5, 0x2, 0x8, 0x8}, {0x3, 0x2, 0xe, 0xb}, {0x0, 0x1, 0xa, 0x7}, {0x2, 0x1, 0xe, 0x6}, {0x1, 0x3, 0x6, 0x1}, {0x3, 0x5, 0x6, 0x5}, {0x1, 0x5, 0x2, 0x5}, {0x4, 0x2, 0x8, 0x5}], 0x10, 0xc2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f4bdf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4.070243241s ago: executing program 9 (id=1525): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x10001, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f9e8a4a7", @ANYRES16=r5, @ANYBLOB="050000000000000000000101000054000180060001000a000000060002001100000014000300fe8000000000000000000000000000aa060004001f90000007000600727200000c000700000000000000000008000800000000000800090080000000"], 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000440)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r5, @ANYBLOB="050000000000000000000501000030000180060001000a000000060002001100000014000300fe8000000000000000000000000000aa060004001f9000004800028014000100fe8000000000000000000000000000aa060002001f900000080003000300004e4c0008000400010000000800050000000000080006000000000006000b000a000000"], 0x8c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4c, 0x0, &(0x7f0000000240)="b461802305624431e59805a90000d8edd2fa6614c70000d7dfe680150cc0ce00000000000200b639cd62fe54d814b4aca338a586f78d65685e67c5f630e3b6af6029c1d8c5ced79a79524219", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f00000001c0)=[{0x3ff, 0x40, 0x13, 0xfffffe00}]}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) 3.796303212s ago: executing program 3 (id=1526): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000, '\x00', r2, 0x0}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) 3.081191121s ago: executing program 9 (id=1527): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r1, 0x1) flock(r0, 0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x4400) 2.638443795s ago: executing program 9 (id=1528): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd00000000109021200010000000009"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1}}]}}]}}, 0x0) 2.340740213s ago: executing program 3 (id=1529): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0a0000000101f1bf090000ff", @ANYRES32, @ANYBLOB="0513000000000000000000000000000000000000e3b293787e36738a611ee603a3d6267d0f1f2d9759eccda2f6fa6dd2b3617c6349ab2db98e2ddaaae1c4f84666ce8680899ba312b9e3f219928c7985051811634f2213f240a79b2c5d0b", @ANYRES8=0x0, @ANYRES32, @ANYBLOB="0000678f0000000000000000000000000000000000000000b9cb91c44836383f92d500000000e78591ed175a808d335bf68ea686f0ff0e036e07822cc3eeebb70efce1fa84fa45c0284c65513378"], 0x50) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x10001, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f9e8a4a7", @ANYRES16=r5, @ANYBLOB="050000000000000000000101000054000180060001000a000000060002001100000014000300fe8000000000000000000000000000aa060004001f90000007000600727200000c000700000000000000000008000800000000000800090080000000"], 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000440)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r5, @ANYBLOB="050000000000000000000501000030000180060001000a000000060002001100000014000300fe8000000000000000000000000000aa060004001f9000004800028014000100fe8000000000000000000000000000aa060002001f900000080003000300004e4c0008000400010000000800050000000000080006000000000006000b000a000000"], 0x8c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4c, 0x0, &(0x7f0000000240)="b461802305624431e59805a90000d8edd2fa6614c70000d7dfe680150cc0ce00000000000200b639cd62fe54d814b4aca338a586f78d65685e67c5f630e3b6af6029c1d8c5ced79a79524219", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f00000001c0)=[{0x3ff, 0x40, 0x13, 0xfffffe00}]}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) 1.464896978s ago: executing program 7 (id=1530): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_WRITE_FIXED={0x5, 0x10, 0x4007, @fd_index=0x1, 0x2, 0xfffffffffffffffd, 0x0, 0x8, 0x1, {0x1, 0x0, 0x0, '\x00', 0x0}}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) write$FUSE_INIT(r4, &(0x7f00000000c0)={0x50, 0x0, r6, {0x7, 0x2d, 0x4, 0x40, 0x8, 0x7, 0x0, 0x6, 0x0, 0x0, 0x8, 0x6}}, 0x50) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)=""/152, 0x98}], 0x2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 1.354443588s ago: executing program 3 (id=1531): r0 = syz_open_dev$media(&(0x7f00000000c0), 0xa, 0x200) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000600)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)) 1.1723705s ago: executing program 7 (id=1532): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x1c8) read$FUSE(r0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x30, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x80000000, 0x0, 0x0, 0x100, 0x21, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f0000000000)={0x1000, 0x3}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x11, r7, 0x5993000) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a82018344"], 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) write$binfmt_format(r8, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f00008cd000/0x3000)=nil, 0x3000, 0x100000a, 0x12, r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r8, &(0x7f0000000300)="ca0e808bb35b", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000000), 0x0, 0x1}}, 0x40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 1.073920091s ago: executing program 3 (id=1533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x800) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r2 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x4000000) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff1, 0xc}, {0x5, 0xc}, {0x18, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x20040000) keyctl$read(0xb, r2, &(0x7f00000004c0)=""/208, 0xd0) 952.231912ms ago: executing program 9 (id=1534): socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 528.89705ms ago: executing program 9 (id=1535): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/file0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x48084}, 0x8010) syz_open_dev$ptys(0xc, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x8, &(0x7f0000003540)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x14}, 0xfffffe04) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[], 0x20) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) r4 = open(&(0x7f0000000300)='./sys\x00', 0x400, 0x244) r5 = syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0xa1) write$cgroup_int(r6, &(0x7f0000000040)=0x4000921, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x9362, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_clone(0x18000040, &(0x7f0000000440)="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", 0x1000, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)="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") mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000000)='3', 0x4e) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010102}, 0x10) 0s ago: executing program 3 (id=1536): lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone3(&(0x7f00000005c0)={0x4101200, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000300)=0x0, {0x2a}, &(0x7f0000000440)=""/13, 0xd, &(0x7f0000000500)=""/77, &(0x7f0000000580)=[0x0, 0x0], 0x2}, 0x58) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0xa, 0x1, 0x0) r2 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r7, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26}) creat(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x10) kernel console output (not intermixed with test programs): new high-speed USB device number 47 using dummy_hcd [ 596.283644][ T5698] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 596.302663][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.344091][ T10] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 596.378127][ T5698] usb 5-1: config 0 descriptor?? [ 596.474367][ T31] audit: type=1400 audit(1790003097.065:988): avc: denied { write } for pid=11386 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.525098][ T10] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 596.528279][ T10] usb 3-1: config 0 has no interfaces? [ 596.549452][ T10] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 596.549476][ T10] usb 3-1: Product: syz [ 596.549490][ T10] usb 3-1: Manufacturer: syz [ 596.549505][ T10] usb 3-1: SerialNumber: syz [ 596.553156][ T10] usb 3-1: config 0 descriptor?? [ 596.639717][ T5698] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0e [ 596.639743][ T5698] hackrf 5-1:0.0: Could not detect board [ 596.639783][ T5698] hackrf 5-1:0.0: probe with driver hackrf failed with error -71 [ 596.669380][ T5698] usb 5-1: USB disconnect, device number 47 [ 596.817977][ T31] audit: type=1400 audit(1790003097.465:989): avc: denied { write } for pid=11423 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.983233][ T5267] 8021q: adding VLAN 0 to HW filter on device eth21 [ 598.137692][ T5794] usb 3-1: USB disconnect, device number 52 [ 599.611117][ T31] audit: type=1400 audit(1790003100.255:990): avc: denied { write } for pid=11431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 600.316036][T11466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 601.288846][ T31] audit: type=1400 audit(1790003101.936:991): avc: denied { write } for pid=11469 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.374126][T11165] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 602.148310][T11485] program syz.4.1343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 602.372920][T11165] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 602.408809][T11165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 602.408842][T11165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.408878][T11165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.411267][T11165] usb 2-1: config 0 descriptor?? [ 603.621557][ T31] audit: type=1400 audit(1790003103.726:992): avc: denied { mount } for pid=11486 comm="syz.2.1350" name="/" dev="ramfs" ino=38203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 603.656270][ T31] audit: type=1400 audit(1790003104.306:993): avc: denied { connect } for pid=11489 comm="syz.3.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 603.657183][ T31] audit: type=1400 audit(1790003104.306:994): avc: denied { setopt } for pid=11489 comm="syz.3.1351" laddr=172.20.20.10 lport=4529 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 603.660625][ T31] audit: type=1400 audit(1790003104.306:995): avc: denied { read } for pid=11489 comm="syz.3.1351" laddr=172.20.20.10 lport=4529 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 603.703338][ T31] audit: type=1400 audit(1790003104.346:996): avc: denied { ioctl } for pid=11489 comm="syz.3.1351" path="socket:[38204]" dev="sockfs" ino=38204 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 604.794782][T11165] usbhid 2-1:0.0: can't add hid device: -71 [ 604.794876][T11165] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 604.811529][T11165] usb 2-1: USB disconnect, device number 56 [ 605.316731][ T52] Bluetooth: hci1: Unable to find connection for big 0x00 [ 605.365645][ T31] audit: type=1400 audit(1790003106.016:997): avc: denied { mount } for pid=11513 comm="syz.6.1356" name="/" dev="autofs" ino=36718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 605.943319][ T31] audit: type=1400 audit(1790003106.586:998): avc: denied { mounton } for pid=11513 comm="syz.6.1356" path="/69/file1/debug" dev="autofs" ino=36730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 605.982088][T11515] FAULT_INJECTION: forcing a failure. [ 605.982088][T11515] name failslab, interval 1, probability 0, space 0, times 0 [ 605.982120][T11515] CPU: 1 UID: 0 PID: 11515 Comm: syz.6.1356 Not tainted syzkaller #0 PREEMPT(full) [ 605.982144][T11515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 605.982156][T11515] Call Trace: [ 605.982163][T11515] [ 605.982172][T11515] dump_stack_lvl+0x100/0x190 [ 605.982206][T11515] should_fail_ex.cold+0x5/0xa [ 605.982235][T11515] should_failslab+0xc2/0x120 [ 605.982261][T11515] __kmalloc_noprof+0xfc/0x840 [ 605.982283][T11515] ? rcu_is_watching+0x13/0xc0 [ 605.982309][T11515] ? tomoyo_encode2+0xfb/0x3c0 [ 605.982340][T11515] tomoyo_encode2+0xfb/0x3c0 [ 605.982369][T11515] tomoyo_encode+0x29/0x50 [ 605.982392][T11515] tomoyo_realpath_from_path+0x18c/0x690 [ 605.982424][T11515] tomoyo_path_number_perm+0x23c/0x580 [ 605.982445][T11515] ? tomoyo_path_number_perm+0x22e/0x580 [ 605.982468][T11515] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 605.982501][T11515] ? __lock_acquire+0x5c0/0x1f40 [ 605.982543][T11515] ? __fget_files+0x34/0x3d0 [ 605.982568][T11515] ? find_held_lock+0x2b/0x80 [ 605.982596][T11515] ? hook_file_ioctl_common+0x140/0x440 [ 605.982629][T11515] ? __fget_files+0x21f/0x3d0 [ 605.982658][T11515] security_file_ioctl+0xd3/0x230 [ 605.982683][T11515] __x64_sys_ioctl+0xb7/0x210 [ 605.982707][T11515] do_syscall_64+0x123/0x790 [ 605.982740][T11515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.982761][T11515] RIP: 0033:0x7f600f19e159 [ 605.982778][T11515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.982797][T11515] RSP: 002b:00007f600ffe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.982817][T11515] RAX: ffffffffffffffda RBX: 00007f600f425fa0 RCX: 00007f600f19e159 [ 605.982831][T11515] RDX: 0000000000000000 RSI: 0000000040049366 RDI: 0000000000000005 [ 605.982843][T11515] RBP: 00007f600ffe1090 R08: 0000000000000000 R09: 0000000000000000 [ 605.982855][T11515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.982867][T11515] R13: 00007f600f426038 R14: 00007f600f425fa0 R15: 00007ffc8a1a75d8 [ 605.982896][T11515] [ 605.982913][T11515] ERROR: Out of memory at tomoyo_realpath_from_path. [ 605.986011][ T31] audit: type=1400 audit(1790003106.646:999): avc: denied { write } for pid=11487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.370113][ T31] audit: type=1400 audit(1790003107.016:1000): avc: denied { write } for pid=11530 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.643494][ T5698] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 606.683430][ T31] audit: type=1326 audit(1790003107.336:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11537 comm="syz.4.1361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0eb9e159 code=0x7ffc0000 [ 606.683692][ T31] audit: type=1326 audit(1790003107.336:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11537 comm="syz.4.1361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0eb9e159 code=0x7ffc0000 [ 606.771801][ T31] audit: type=1326 audit(1790003107.416:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11537 comm="syz.4.1361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f2a0eb9e159 code=0x7ffc0000 [ 606.771861][ T31] audit: type=1326 audit(1790003107.416:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11537 comm="syz.4.1361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0eb9e159 code=0x7ffc0000 [ 606.772076][ T31] audit: type=1326 audit(1790003107.416:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11537 comm="syz.4.1361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0eb9e159 code=0x7ffc0000 [ 606.778829][ T31] audit: type=1326 audit(1790003107.426:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11537 comm="syz.4.1361" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2a0eb9e159 code=0x7ffc0000 [ 606.834260][ T5698] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 606.835460][ T5698] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 606.835490][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 606.835517][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 606.901813][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.901841][ T5698] usb 2-1: Product: syz [ 606.901856][ T5698] usb 2-1: Manufacturer: syz [ 606.901872][ T5698] usb 2-1: SerialNumber: syz [ 606.964358][ T5698] usb 2-1: config 0 descriptor?? [ 606.965813][T11529] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 607.131572][ T5698] rc_core: IR keymap rc-streamzap not found [ 607.131593][ T5698] Registered IR keymap rc-empty [ 607.434293][ T5698] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 607.442755][ T5698] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input32 [ 607.620799][ T52] Bluetooth: hci5: Unable to find connection for big 0x00 [ 607.972026][ T3209] usb 2-1: USB disconnect, device number 57 [ 609.420133][ T5267] 8021q: adding VLAN 0 to HW filter on device eth23 [ 609.445145][T11569] program syz.2.1364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 609.566964][T11571] FAULT_INJECTION: forcing a failure. [ 609.566964][T11571] name failslab, interval 1, probability 0, space 0, times 0 [ 609.566997][T11571] CPU: 1 UID: 0 PID: 11571 Comm: syz.4.1366 Not tainted syzkaller #0 PREEMPT(full) [ 609.567024][T11571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 609.567038][T11571] Call Trace: [ 609.567047][T11571] [ 609.567057][T11571] dump_stack_lvl+0x100/0x190 [ 609.567096][T11571] should_fail_ex.cold+0x5/0xa [ 609.567127][T11571] should_failslab+0xc2/0x120 [ 609.567155][T11571] __kmalloc_cache_noprof+0x91/0x6d0 [ 609.567189][T11571] ? kobject_uevent_env+0x263/0x18b0 [ 609.567221][T11571] kobject_uevent_env+0x263/0x18b0 [ 609.567253][T11571] ? rcu_is_watching+0x13/0xc0 [ 609.567285][T11571] gadget_bind_driver+0x773/0xbf0 [ 609.567314][T11571] ? urbs_show+0x391/0x440 [ 609.567345][T11571] ? __pfx_gadget_bind_driver+0x10/0x10 [ 609.567380][T11571] really_probe+0x241/0xa60 [ 609.567414][T11571] __driver_probe_device+0x210/0x460 [ 609.567439][T11571] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 609.567474][T11571] driver_probe_device+0x4a/0x140 [ 609.567500][T11571] __driver_attach+0x21f/0x5b0 [ 609.567527][T11571] ? __pfx___driver_attach+0x10/0x10 [ 609.567552][T11571] bus_for_each_dev+0x13e/0x1d0 [ 609.567573][T11571] ? __pfx_bus_for_each_dev+0x10/0x10 [ 609.567593][T11571] ? bus_add_driver+0x2b5/0x5b0 [ 609.567623][T11571] bus_add_driver+0x305/0x5b0 [ 609.567649][T11571] driver_register+0x1e2/0x360 [ 609.567676][T11571] ? rcu_is_watching+0x13/0xc0 [ 609.567706][T11571] usb_gadget_register_driver_owner+0x132/0x210 [ 609.567733][T11571] raw_ioctl+0x1a85/0x2b80 [ 609.567763][T11571] ? __pfx_raw_ioctl+0x10/0x10 [ 609.567784][T11571] ? selinux_file_ioctl+0x13b/0x290 [ 609.567809][T11571] ? selinux_file_ioctl+0xb6/0x290 [ 609.567837][T11571] ? __pfx_raw_ioctl+0x10/0x10 [ 609.567861][T11571] __x64_sys_ioctl+0x18e/0x210 [ 609.567886][T11571] do_syscall_64+0x123/0x790 [ 609.567919][T11571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.567941][T11571] RIP: 0033:0x7f2a0eb9ddeb [ 609.567962][T11571] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 609.567983][T11571] RSP: 002b:00007f2a0f9f5f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.568005][T11571] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f2a0eb9ddeb [ 609.568019][T11571] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 609.568033][T11571] RBP: 00007f2a0f9f6fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 609.568048][T11571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.568061][T11571] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 609.568089][T11571] [ 610.003332][T11046] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 610.155606][T11046] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 610.157740][T11046] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 610.157766][T11046] usb 5-1: config 1 has no interface number 0 [ 610.159750][T11046] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.159777][T11046] usb 5-1: Product: syz [ 610.159792][T11046] usb 5-1: Manufacturer: syz [ 610.159808][T11046] usb 5-1: SerialNumber: syz [ 610.737072][T11046] usb 5-1: cannot find UAC_HEADER [ 612.959800][T11046] snd-usb-audio 5-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 612.984510][T11046] usb 5-1: USB disconnect, device number 48 [ 613.040855][ T6490] udevd[6490]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 613.274700][ T31] kauditd_printk_skb: 146 callbacks suppressed [ 613.274719][ T31] audit: type=1400 audit(1790003113.926:1153): avc: denied { write } for pid=11573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 614.804813][ T31] audit: type=1400 audit(1790003115.456:1154): avc: denied { write } for pid=11594 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.804927][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1373'. [ 616.792959][ T4174] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 616.888571][ T31] audit: type=1400 audit(1790003117.536:1155): avc: denied { write } for pid=11600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 616.963480][ T4174] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 616.964702][ T4174] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 616.964729][ T4174] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 616.964749][ T4174] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 616.964789][ T4174] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 616.964815][ T4174] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 616.966658][ T4174] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 616.966683][ T4174] usb 5-1: Product: syz [ 616.966699][ T4174] usb 5-1: Manufacturer: syz [ 617.056430][ T4174] cdc_wdm 5-1:1.0: skipping garbage [ 617.056452][ T4174] cdc_wdm 5-1:1.0: skipping garbage [ 617.079726][ T4174] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 617.079749][ T4174] cdc_wdm 5-1:1.0: Unknown control protocol [ 617.102999][ T5794] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 617.254211][ T31] audit: type=1400 audit(1790003117.906:1156): avc: denied { write } for pid=11626 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.303425][ T5794] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 617.304502][ T5794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.306884][ T5794] usb 3-1: config 0 descriptor?? [ 617.308178][ T31] audit: type=1400 audit(1790003117.956:1157): avc: denied { read write } for pid=11608 comm="syz.4.1373" name="cdc-wdm0" dev="devtmpfs" ino=3645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 617.308231][ T31] audit: type=1400 audit(1790003117.956:1158): avc: denied { open } for pid=11608 comm="syz.4.1373" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 617.518463][ T5794] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0e [ 617.518486][ T5794] hackrf 3-1:0.0: Could not detect board [ 617.518515][ T5794] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 617.520511][ T5794] usb 3-1: USB disconnect, device number 53 [ 617.743951][ T4174] usb 5-1: USB disconnect, device number 49 [ 619.871489][ T31] audit: type=1400 audit(1790003120.517:1159): avc: denied { write } for pid=11632 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.268484][ T31] audit: type=1400 audit(1790003120.917:1160): avc: denied { write } for pid=11659 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.421293][ T4174] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 621.256746][ T4174] usb 3-1: unable to get BOS descriptor or descriptor too short [ 621.256794][ T4174] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 621.258019][ T4174] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 621.260065][ T4174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.260089][ T4174] usb 3-1: Product: syz [ 621.260104][ T4174] usb 3-1: Manufacturer: syz [ 621.260119][ T4174] usb 3-1: SerialNumber: syz [ 621.608907][ T4174] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 621.857133][ T4174] usb 3-1: USB disconnect, device number 54 [ 622.207491][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 623.027378][ T31] audit: type=1400 audit(1790003123.677:1161): avc: denied { write } for pid=11670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.191309][ T5608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 623.210447][ T5608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 623.231946][ T5608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 623.242119][ T5608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 623.249555][ T5608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 623.265659][ T31] audit: type=1400 audit(1790003123.917:1162): avc: denied { read } for pid=11689 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 623.265708][ T31] audit: type=1400 audit(1790003123.917:1163): avc: denied { open } for pid=11689 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 623.322401][ T4174] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 623.447235][ T31] audit: type=1400 audit(1790003124.097:1164): avc: denied { write } for pid=11692 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.518348][ T4174] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 623.523154][ T4174] usb 5-1: config index 0 descriptor too short (expected 40978, got 18) [ 623.524195][ T4174] usb 5-1: config 66 has an invalid descriptor of length 31, skipping remainder of the config [ 623.524893][ T4174] usb 5-1: config 66 has 0 interfaces, different from the descriptor's value: 32 [ 623.533525][ T4174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.533553][ T4174] usb 5-1: Product: syz [ 623.533569][ T4174] usb 5-1: Manufacturer: syz [ 623.533585][ T4174] usb 5-1: SerialNumber: syz [ 623.825646][ T4174] usb 5-1: USB disconnect, device number 50 [ 624.047552][T11702] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1389'. [ 624.146222][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.204984][ T31] audit: type=1400 audit(1790003124.857:1165): avc: denied { audit_write } for pid=11697 comm="syz.2.1389" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 624.305425][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'. [ 625.360966][ T31] audit: type=1400 audit(1790003125.177:1166): avc: denied { ioctl } for pid=11708 comm="syz.3.1386" path="socket:[38335]" dev="sockfs" ino=38335 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 625.423011][ T52] Bluetooth: hci6: command tx timeout [ 625.868533][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 625.877467][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 625.883517][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 625.899999][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 625.953997][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 626.231230][ T31] audit: type=1400 audit(1790003126.877:1167): avc: denied { write } for pid=11695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.407172][ T9158] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.561319][ T31] audit: type=1400 audit(1790003127.207:1168): avc: denied { write } for pid=11728 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.324116][ T9158] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.502441][ T5608] Bluetooth: hci6: command tx timeout [ 628.066497][ T5608] Bluetooth: hci1: command tx timeout [ 628.485369][ T9158] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.504237][ T31] audit: type=1400 audit(1790003129.157:1169): avc: denied { write } for pid=11730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.542606][T11750] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 628.904778][ T31] audit: type=1400 audit(1790003129.557:1170): avc: denied { write } for pid=11762 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.986393][ T52] Bluetooth: hci6: command tx timeout [ 630.142005][ T5608] Bluetooth: hci1: command tx timeout [ 630.153187][ T9158] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.256994][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 630.273879][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 630.282319][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 630.298650][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 630.299125][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 631.763715][ T9158] bridge_slave_1: left allmulticast mode [ 631.763742][ T9158] bridge_slave_1: left promiscuous mode [ 631.765075][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.776871][ T9158] bridge_slave_0: left allmulticast mode [ 631.776895][ T9158] bridge_slave_0: left promiscuous mode [ 631.777073][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.780426][ T31] audit: type=1400 audit(1790003132.427:1171): avc: denied { write } for pid=11784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 632.002240][ T31] audit: type=1400 audit(1790003132.657:1172): avc: denied { write } for pid=11811 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 632.062377][ T5608] Bluetooth: hci6: command tx timeout [ 632.223215][ T5608] Bluetooth: hci1: command tx timeout [ 632.384705][ T5608] Bluetooth: hci3: command tx timeout [ 632.696097][ T9158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.757583][ T9158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.761628][ T9158] bond0 (unregistering): Released all slaves [ 632.933338][ T31] audit: type=1400 audit(1790003133.577:1173): avc: denied { write } for pid=11813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.066480][ T9158] : left promiscuous mode [ 633.185533][ T31] audit: type=1400 audit(1790003133.837:1174): avc: denied { write } for pid=11827 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.400017][T11689] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.401339][T11689] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.440295][T11689] bridge_slave_0: entered allmulticast mode [ 633.469693][T11689] bridge_slave_0: entered promiscuous mode [ 633.570832][T11689] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.570924][T11689] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.571057][T11689] bridge_slave_1: entered allmulticast mode [ 633.596574][T11689] bridge_slave_1: entered promiscuous mode [ 633.761245][T11689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.857401][T11689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.914473][ T52] Bluetooth: hci1: command tx timeout [ 634.914499][ T52] Bluetooth: hci3: command tx timeout [ 635.332947][ T31] audit: type=1400 audit(1790003135.987:1175): avc: denied { write } for pid=11831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.411537][T11689] team0: Port device team_slave_0 added [ 635.420320][T11689] team0: Port device team_slave_1 added [ 635.598548][ T31] audit: type=1400 audit(1790003136.247:1176): avc: denied { write } for pid=11852 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.809070][T11850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 636.082320][T11689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.082337][T11689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.082360][T11689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.368776][T11689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.368788][T11689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.368803][T11689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.458745][ T9158] hsr_slave_0: left promiscuous mode [ 636.470241][ T9158] hsr_slave_1: left promiscuous mode [ 636.470950][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.470964][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.497096][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.497119][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.561424][ T9158] veth1_macvtap: left promiscuous mode [ 636.561453][ T9158] veth0_macvtap: left promiscuous mode [ 636.561505][ T9158] veth1_vlan: left promiscuous mode [ 636.578414][ T9158] veth0_vlan: left promiscuous mode [ 637.799447][ T5608] Bluetooth: hci3: command tx timeout [ 638.424064][ T9158] team0 (unregistering): Port device team_slave_1 removed [ 638.447770][ T9158] team0 (unregistering): Port device team_slave_0 removed [ 639.075458][T11719] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.075555][T11719] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.075685][T11719] bridge_slave_0: entered allmulticast mode [ 639.078814][T11719] bridge_slave_0: entered promiscuous mode [ 639.286576][T11689] hsr_slave_0: entered promiscuous mode [ 639.290903][T11689] hsr_slave_1: entered promiscuous mode [ 639.292932][T11689] debugfs: 'hsr0' already exists in 'hsr' [ 639.292952][T11689] Cannot create hsr debugfs directory [ 639.364728][T11719] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.364810][T11719] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.364928][T11719] bridge_slave_1: entered allmulticast mode [ 639.366338][T11719] bridge_slave_1: entered promiscuous mode [ 639.582901][T11719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.246648][ T5608] Bluetooth: hci3: command tx timeout [ 640.352328][T11719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.821963][ T4174] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 640.884711][T11719] team0: Port device team_slave_0 added [ 640.895288][T11719] team0: Port device team_slave_1 added [ 640.973388][ T4174] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 640.975969][ T4174] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 640.976015][ T4174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 640.976046][ T4174] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 640.976085][ T4174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.978749][ T4174] usb 3-1: config 0 descriptor?? [ 640.979428][T11891] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 641.143111][ T31] audit: type=1400 audit(1790003141.798:1177): avc: denied { write } for pid=11874 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.316205][T11719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.316219][T11719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.316233][T11719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.325220][T11719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.325235][T11719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.325259][T11719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.465288][ T31] audit: type=1400 audit(1790003142.118:1178): avc: denied { write } for pid=11899 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.522711][ T4174] usbhid 3-1:0.0: can't add hid device: -71 [ 641.522818][ T4174] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 641.546971][ T4174] usb 3-1: USB disconnect, device number 55 [ 641.812360][ T9158] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.085155][ T31] audit: type=1400 audit(1790003142.738:1179): avc: denied { write } for pid=11902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.198092][ T31] audit: type=1400 audit(1790003142.848:1180): avc: denied { write } for pid=11916 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.444284][ T31] audit: type=1400 audit(1790003143.098:1181): avc: denied { bind } for pid=11921 comm="syz.3.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 642.445360][T11924] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 642.498005][ T9158] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.746134][T11719] hsr_slave_0: entered promiscuous mode [ 642.749917][T11719] hsr_slave_1: entered promiscuous mode [ 642.752865][T11719] debugfs: 'hsr0' already exists in 'hsr' [ 642.752886][T11719] Cannot create hsr debugfs directory [ 642.789281][T11777] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.789371][T11777] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.789487][T11777] bridge_slave_0: entered allmulticast mode [ 642.796376][T11777] bridge_slave_0: entered promiscuous mode [ 642.801392][ T4174] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 642.880536][ T31] audit: type=1400 audit(1790003143.528:1182): avc: denied { write } for pid=11918 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.991803][ T4174] usb 3-1: Using ep0 maxpacket: 16 [ 642.992766][ T4174] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 642.997060][ T4174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.997086][ T4174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.997100][ T4174] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 642.997124][ T4174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.998702][ T4174] usb 3-1: config 0 descriptor?? [ 643.094136][ T9158] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.143227][T11777] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.143294][T11777] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.143387][T11777] bridge_slave_1: entered allmulticast mode [ 643.144346][T11777] bridge_slave_1: entered promiscuous mode [ 643.165741][ T31] audit: type=1400 audit(1790003143.818:1183): avc: denied { write } for pid=11933 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.537349][ T4174] hid_parser_main: 5 callbacks suppressed [ 643.537374][ T4174] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 643.537403][ T4174] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 643.537427][ T4174] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 643.537448][ T4174] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 643.537470][ T4174] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 643.537493][ T4174] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 643.537516][ T4174] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 643.537536][ T4174] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 643.537558][ T4174] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 643.537579][ T4174] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 643.623729][ T4174] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0022/input/input33 [ 643.722582][ T4174] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 644.099887][ T3209] usb 3-1: USB disconnect, device number 56 [ 644.346270][ T9158] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.453369][T11949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=11949 comm=syz.3.1414 [ 644.545357][T11777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.591054][T11777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.779116][ T31] audit: type=1400 audit(1790003145.418:1184): avc: denied { write } for pid=11946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.921296][ T31] audit: type=1400 audit(1790003145.568:1185): avc: denied { write } for pid=11959 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.054866][T11777] team0: Port device team_slave_0 added [ 645.079874][T11777] team0: Port device team_slave_1 added [ 645.309872][ T31] audit: type=1400 audit(1790003145.958:1186): avc: denied { write } for pid=11962 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.397747][T11975] program syz.2.1415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 645.798369][T11777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.798386][T11777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.798403][T11777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.801544][T11777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.801559][T11777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.801581][T11777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.536483][T11777] hsr_slave_0: entered promiscuous mode [ 647.537481][T11777] hsr_slave_1: entered promiscuous mode [ 647.569333][T11777] debugfs: 'hsr0' already exists in 'hsr' [ 647.569356][T11777] Cannot create hsr debugfs directory [ 647.913021][T11719] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.937078][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 647.937094][ T31] audit: type=1400 audit(1790003148.588:1188): avc: denied { write } for pid=11985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.326447][ T31] audit: type=1400 audit(1790003148.978:1189): avc: denied { write } for pid=11999 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.464991][ T9158] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.557508][T11719] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.691098][ T9158] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.834456][T11719] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.006998][ T9158] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.165489][ T31] audit: type=1400 audit(1790003149.818:1190): avc: denied { write } for pid=12001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 649.204237][T11719] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.308292][ T31] audit: type=1400 audit(1790003149.958:1191): avc: denied { write } for pid=12016 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 649.347042][ T9158] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.952812][T12017] FAULT_INJECTION: forcing a failure. [ 649.952812][T12017] name failslab, interval 1, probability 0, space 0, times 0 [ 649.952849][T12017] CPU: 0 UID: 0 PID: 12017 Comm: syz.2.1418 Not tainted syzkaller #0 PREEMPT(full) [ 649.952881][T12017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 649.952899][T12017] Call Trace: [ 649.952909][T12017] [ 649.952919][T12017] dump_stack_lvl+0x100/0x190 [ 649.952969][T12017] should_fail_ex.cold+0x5/0xa [ 649.953009][T12017] should_failslab+0xc2/0x120 [ 649.953048][T12017] __kvmalloc_node_noprof+0x113/0x9b0 [ 649.953085][T12017] ? __do_sys_setgroups+0x126/0x4f0 [ 649.953138][T12017] __do_sys_setgroups+0x126/0x4f0 [ 649.953188][T12017] do_syscall_64+0x123/0x790 [ 649.953235][T12017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.953259][T12017] RIP: 0033:0x7f9bb0f9e159 [ 649.953279][T12017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.953299][T12017] RSP: 002b:00007f9bb1d91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 649.953313][T12017] RAX: ffffffffffffffda RBX: 00007f9bb1226090 RCX: 00007f9bb0f9e159 [ 649.953321][T12017] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 649.953329][T12017] RBP: 00007f9bb103506b R08: 0000000000000000 R09: 0000000000000000 [ 649.953337][T12017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.953345][T12017] R13: 00007f9bb1226128 R14: 00007f9bb1226090 R15: 00007ffe7a199d88 [ 649.953361][T12017] [ 650.307280][T11689] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 650.345709][T11689] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 650.346615][T11689] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 650.373446][T11689] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 650.401242][ T9158] bridge_slave_1: left allmulticast mode [ 650.401271][ T9158] bridge_slave_1: left promiscuous mode [ 650.401398][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.438956][ T9158] bridge_slave_0: left allmulticast mode [ 650.438975][ T9158] bridge_slave_0: left promiscuous mode [ 650.439099][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.533687][ T9158] bridge_slave_1: left allmulticast mode [ 650.533716][ T9158] bridge_slave_1: left promiscuous mode [ 650.533895][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.580359][ T9158] bridge_slave_0: left allmulticast mode [ 650.580384][ T9158] bridge_slave_0: left promiscuous mode [ 650.580560][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.114632][ T9158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.181252][ T9158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.188421][ T9158] bond0 (unregistering): Released all slaves [ 652.541588][ T9158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.552157][ T9158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.572215][ T9158] bond0 (unregistering): Released all slaves [ 652.608736][T11689] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 652.640348][T11689] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 652.657156][T11689] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 652.687235][T11689] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 655.456136][T11689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.688311][T11689] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.895335][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.895433][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.912527][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.912617][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.032728][T12055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 656.386785][ T9158] hsr_slave_0: left promiscuous mode [ 656.387513][ T9158] hsr_slave_1: left promiscuous mode [ 656.388236][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.388255][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.388744][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.388760][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.436550][ T9158] hsr_slave_0: left promiscuous mode [ 656.436860][ T9158] hsr_slave_1: left promiscuous mode [ 656.437241][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.437253][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.437785][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.437796][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.495891][ T9158] veth1_macvtap: left promiscuous mode [ 656.495934][ T9158] veth0_macvtap: left promiscuous mode [ 656.495987][ T9158] veth1_vlan: left promiscuous mode [ 656.496022][ T9158] veth0_vlan: left promiscuous mode [ 656.527959][ T9158] veth1_macvtap: left promiscuous mode [ 656.527984][ T9158] veth0_macvtap: left promiscuous mode [ 656.528040][ T9158] veth1_vlan: left promiscuous mode [ 656.528076][ T9158] veth0_vlan: left promiscuous mode [ 656.570529][T11046] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 656.700597][T11046] usb 3-1: device descriptor read/64, error -71 [ 656.950536][T11046] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 657.080473][T11046] usb 3-1: device descriptor read/64, error -71 [ 657.189631][ T9158] team0 (unregistering): Port device team_slave_1 removed [ 657.197991][T11046] usb usb3-port1: attempt power cycle [ 657.216960][ T9158] team0 (unregistering): Port device team_slave_0 removed [ 657.542106][T11046] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 657.569148][T11046] usb 3-1: device descriptor read/8, error -71 [ 657.800428][T11046] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 657.821741][T11046] usb 3-1: device descriptor read/8, error -71 [ 657.827216][ T9158] team0 (unregistering): Port device team_slave_1 removed [ 657.862655][ T9158] team0 (unregistering): Port device team_slave_0 removed [ 657.931292][T11046] usb usb3-port1: unable to enumerate USB device [ 658.625443][T11719] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 658.669317][T11719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 658.674449][T11719] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 658.691428][T11719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 658.695992][T11719] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 658.709448][T11719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 658.716244][T11719] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 658.796839][T11719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 659.257528][ T31] audit: type=1400 audit(1790003159.909:1192): avc: denied { write } for pid=12069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.082329][ T10] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 660.082864][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 660.230922][ T10] usb 3-1: device descriptor read/64, error -32 [ 660.343547][T11719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.491218][ T10] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 660.677108][ T10] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 660.686184][ T10] usb 3-1: config 0 has no interfaces? [ 660.716478][ T10] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 660.716512][ T10] usb 3-1: Product: syz [ 660.716538][ T10] usb 3-1: Manufacturer: syz [ 660.716688][ T10] usb 3-1: SerialNumber: syz [ 660.777875][ T10] usb 3-1: config 0 descriptor?? [ 660.840561][T11719] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.891522][T11777] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 660.997366][ T31] audit: type=1400 audit(1790003161.649:1193): avc: denied { write } for pid=12097 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 661.272623][T11777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 661.286298][T11777] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 661.415883][T11777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 661.489964][T11777] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 661.763836][T11777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 661.863554][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.863655][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.907564][T11777] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 661.928770][T11777] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 661.936654][T11689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.978866][ T9152] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.978963][ T9152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.008159][ T5698] usb 3-1: USB disconnect, device number 62 [ 662.359324][T11689] veth0_vlan: entered promiscuous mode [ 662.407374][ T31] audit: type=1400 audit(1790003163.059:1194): avc: denied { write } for pid=12101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.431580][T11689] veth1_vlan: entered promiscuous mode [ 662.541549][ T31] audit: type=1400 audit(1790003163.199:1195): avc: denied { write } for pid=12118 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.717889][T11777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.725472][T11689] veth0_macvtap: entered promiscuous mode [ 662.750358][T11689] veth1_macvtap: entered promiscuous mode [ 662.829646][T11777] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.860617][T11689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.867165][ T9152] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.867223][ T9152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.915806][T11689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.934299][ T9152] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.934357][ T9152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.991034][ T9158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.991253][ T9158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.991276][ T9158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.991296][ T9158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.877046][ T31] audit: type=1400 audit(1790003164.529:1196): avc: denied { write } for pid=12121 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.979414][T12140] bond2 (unregistering): Released all slaves [ 664.085875][ T9162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.085896][ T9162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.303396][ T9151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.303419][ T9151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.340995][ T31] audit: type=1400 audit(1790003164.999:1197): avc: denied { write } for pid=12149 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.881572][ T5726] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 665.046842][ T5726] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 665.057870][ T5726] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 665.057894][ T5726] usb 3-1: config 1 has no interface number 0 [ 665.073614][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.073640][ T5726] usb 3-1: Product: syz [ 665.073654][ T5726] usb 3-1: Manufacturer: syz [ 665.073669][ T5726] usb 3-1: SerialNumber: syz [ 665.097575][ T5726] usb 3-1: cannot find UAC_HEADER [ 665.356518][ T5726] snd-usb-audio 3-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 665.367228][ T5726] usb 3-1: USB disconnect, device number 63 [ 665.416114][T11719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.458324][T12042] udevd[12042]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.821709][T11777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.485161][ T31] audit: type=1400 audit(1790003167.139:1198): avc: denied { write } for pid=12163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 666.706695][T11719] veth0_vlan: entered promiscuous mode [ 666.746262][T11719] veth1_vlan: entered promiscuous mode [ 666.797430][T11719] veth0_macvtap: entered promiscuous mode [ 666.809553][T11719] veth1_macvtap: entered promiscuous mode [ 666.870436][T11719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.906355][T11719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.994016][ T31] audit: type=1400 audit(1790003167.649:1199): avc: denied { write } for pid=12205 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 667.003465][ T9156] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.003506][ T9156] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.003538][ T9156] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.003569][ T9156] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.169931][T11047] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 667.299500][T11777] veth0_vlan: entered promiscuous mode [ 667.330557][T11047] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 667.331691][T11047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 667.331724][T11047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.331757][T11047] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.339550][T11047] usb 3-1: config 0 descriptor?? [ 667.415430][T11777] veth1_vlan: entered promiscuous mode [ 667.449523][ T9156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.449544][ T9156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.624435][T11777] veth0_macvtap: entered promiscuous mode [ 667.624915][ T1267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.624932][ T1267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.642562][T11777] veth1_macvtap: entered promiscuous mode [ 667.709116][T11777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.743528][T11777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.763953][T11047] usbhid 3-1:0.0: can't add hid device: -71 [ 667.764054][T11047] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 667.784032][T11047] usb 3-1: USB disconnect, device number 64 [ 667.790997][ T1267] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.791041][ T1267] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.791072][ T1267] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.791103][ T1267] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.533172][T12220] syzkaller1: tun_chr_ioctl cmd 35108 [ 668.581415][T12221] bond1 (unregistering): Released all slaves [ 668.874560][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1390'. [ 669.074492][ T9158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.074513][ T9158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.472136][ T9150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.472156][ T9150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.484411][ T31] audit: type=1400 audit(1790003170.139:1200): avc: denied { write } for pid=12210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 670.064678][T11047] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 670.401804][T11047] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 670.402742][T11047] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 670.402767][T11047] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 670.402786][T11047] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 670.402826][T11047] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 670.402851][T11047] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 670.404276][T11047] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 670.404300][T11047] usb 8-1: Product: syz [ 670.404315][T11047] usb 8-1: Manufacturer: syz [ 670.508008][T11047] cdc_wdm 8-1:1.0: skipping garbage [ 670.508029][T11047] cdc_wdm 8-1:1.0: skipping garbage [ 670.520618][T11047] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 670.520632][T11047] cdc_wdm 8-1:1.0: Unknown control protocol [ 670.609320][ T31] audit: type=1400 audit(1790003171.259:1201): avc: denied { write } for pid=12248 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 670.899740][T11047] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 670.957223][ T5705] usb 8-1: USB disconnect, device number 3 [ 671.061852][T11047] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 671.062941][T11047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 671.062971][T11047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.063003][T11047] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.068955][T11047] usb 1-1: config 0 descriptor?? [ 671.488080][T12260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 672.022171][T11047] usb 1-1: string descriptor 0 read error: -71 [ 672.086846][T11047] uclogic 0003:256C:006D.0023: failed retrieving string descriptor #200: -71 [ 672.086920][T11047] uclogic 0003:256C:006D.0023: failed retrieving pen parameters: -71 [ 672.086940][T11047] uclogic 0003:256C:006D.0023: failed probing pen v2 parameters: -71 [ 672.086992][T11047] uclogic 0003:256C:006D.0023: failed probing parameters: -71 [ 672.087090][T11047] uclogic 0003:256C:006D.0023: probe with driver uclogic failed with error -71 [ 672.881057][T11047] usb 1-1: USB disconnect, device number 55 [ 674.063092][T12279] syzkaller1: tun_chr_ioctl cmd 35108 [ 675.496065][ T5719] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 675.527898][T12279] bond1 (unregistering): Released all slaves [ 675.547550][T12284] syzkaller1: tun_chr_ioctl cmd 35108 [ 675.680191][ T5719] usb 10-1: Using ep0 maxpacket: 16 [ 675.681306][ T5719] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 675.682233][ T5719] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.682262][ T5719] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 675.682283][ T5719] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 675.682305][ T5719] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 675.683254][ T5719] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 675.683277][ T5719] usb 10-1: SerialNumber: syz [ 675.701338][T12277] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 675.701453][T12277] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 675.704202][ T5719] hub 10-1:1.0: bad descriptor, ignoring hub [ 675.704224][ T5719] hub 10-1:1.0: probe with driver hub failed with error -5 [ 675.719910][T12285] bond1 (unregistering): Released all slaves [ 675.858982][ T31] audit: type=1400 audit(1790003176.510:1202): avc: denied { write } for pid=12256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 676.327298][T12277] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 676.327400][T12277] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 677.356770][ T31] audit: type=1400 audit(1790003178.010:1203): avc: denied { write } for pid=12298 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 677.497687][ T5719] cdc_ether 10-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.9-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 677.579310][ T9343] Bluetooth: hci0: command 0x0406 tx timeout [ 678.230572][T12314] syzkaller1: tun_chr_ioctl cmd 35108 [ 678.264336][T12315] bond1 (unregistering): Released all slaves [ 678.401803][ T5719] usb 10-1: USB disconnect, device number 3 [ 678.440241][ T5719] cdc_ether 10-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.9-1, CDC Ethernet Device [ 679.223215][T12330] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1460'. [ 679.589325][ T5705] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 679.664975][ T31] audit: type=1400 audit(1790003180.320:1204): avc: denied { write } for pid=12311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 679.767799][ T5705] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 679.786883][ T5705] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 679.786920][ T5705] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 679.786940][ T5705] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 679.786979][ T5705] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 679.787006][ T5705] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 679.846695][ T5705] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 679.846721][ T5705] usb 10-1: Product: syz [ 679.846734][ T5705] usb 10-1: Manufacturer: syz [ 679.891971][ T5705] cdc_wdm 10-1:1.0: skipping garbage [ 679.891986][ T5705] cdc_wdm 10-1:1.0: skipping garbage [ 679.920054][ T5705] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 679.920078][ T5705] cdc_wdm 10-1:1.0: Unknown control protocol [ 679.934360][ T5794] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 679.974015][ T31] audit: type=1400 audit(1790003180.630:1205): avc: denied { write } for pid=12347 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.117246][T12350] FAULT_INJECTION: forcing a failure. [ 680.117246][T12350] name failslab, interval 1, probability 0, space 0, times 0 [ 680.117279][T12350] CPU: 0 UID: 0 PID: 12350 Comm: syz.7.1462 Not tainted syzkaller #0 PREEMPT(full) [ 680.117302][T12350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 680.117314][T12350] Call Trace: [ 680.117322][T12350] [ 680.117331][T12350] dump_stack_lvl+0x100/0x190 [ 680.117367][T12350] should_fail_ex.cold+0x5/0xa [ 680.117396][T12350] should_failslab+0xc2/0x120 [ 680.117423][T12350] __kmalloc_noprof+0xfc/0x840 [ 680.117443][T12350] ? rcu_is_watching+0x13/0xc0 [ 680.117471][T12350] ? tomoyo_realpath_from_path+0xb6/0x690 [ 680.117503][T12350] tomoyo_realpath_from_path+0xb6/0x690 [ 680.117534][T12350] tomoyo_path_number_perm+0x23c/0x580 [ 680.117556][T12350] ? tomoyo_path_number_perm+0x22e/0x580 [ 680.117582][T12350] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 680.117605][T12350] ? __pfx_futex_wait+0x10/0x10 [ 680.117630][T12350] ? __lock_acquire+0x5c0/0x1f40 [ 680.117666][T12350] ? __fget_files+0x34/0x3d0 [ 680.117692][T12350] ? find_held_lock+0x2b/0x80 [ 680.117719][T12350] ? hook_file_ioctl_common+0x140/0x440 [ 680.117754][T12350] ? __fget_files+0x21f/0x3d0 [ 680.117784][T12350] security_file_ioctl+0xd3/0x230 [ 680.117809][T12350] __x64_sys_ioctl+0xb7/0x210 [ 680.117834][T12350] do_syscall_64+0x123/0x790 [ 680.117876][T12350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.117899][T12350] RIP: 0033:0x7f731b79e159 [ 680.117919][T12350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.117938][T12350] RSP: 002b:00007f731c596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 680.117957][T12350] RAX: ffffffffffffffda RBX: 00007f731ba25fa0 RCX: 00007f731b79e159 [ 680.117976][T12350] RDX: 0000000000000000 RSI: 00000000c0189376 RDI: 0000000000000005 [ 680.117989][T12350] RBP: 00007f731b83506b R08: 0000000000000000 R09: 0000000000000000 [ 680.118001][T12350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.118014][T12350] R13: 00007f731ba26038 R14: 00007f731ba25fa0 R15: 00007ffcf46eba48 [ 680.118045][T12350] [ 680.118054][T12350] ERROR: Out of memory at tomoyo_realpath_from_path. [ 680.154772][ T5794] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 680.178701][ T5794] usb 3-1: config index 0 descriptor too short (expected 40978, got 18) [ 680.178750][ T5794] usb 3-1: config 66 has an invalid descriptor of length 31, skipping remainder of the config [ 680.178769][ T5794] usb 3-1: config 66 has 0 interfaces, different from the descriptor's value: 32 [ 680.183097][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.183122][ T5794] usb 3-1: Product: syz [ 680.183137][ T5794] usb 3-1: Manufacturer: syz [ 680.183153][ T5794] usb 3-1: SerialNumber: syz [ 680.502289][ T5794] usb 3-1: USB disconnect, device number 65 [ 680.671433][ T5705] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 682.041599][ T5705] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 682.049825][ T5705] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 682.049850][ T5705] usb 8-1: config 1 has no interface number 0 [ 682.155523][ T5705] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.155555][ T5705] usb 8-1: Product: syz [ 682.155573][ T5705] usb 8-1: Manufacturer: syz [ 682.155590][ T5705] usb 8-1: SerialNumber: syz [ 682.225060][ T5705] usb 8-1: cannot find UAC_HEADER [ 682.353992][ T5705] snd-usb-audio 8-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 682.437043][ T5705] usb 8-1: USB disconnect, device number 4 [ 682.495436][T12042] udevd[12042]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 682.635801][ T5719] usb 10-1: USB disconnect, device number 4 [ 683.190321][ T31] audit: type=1400 audit(1790003183.850:1206): avc: denied { write } for pid=12351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.424918][ T31] audit: type=1400 audit(1790003184.080:1207): avc: denied { ioctl } for pid=12364 comm="syz.3.1465" path="socket:[42318]" dev="sockfs" ino=42318 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 683.787459][ T31] audit: type=1400 audit(1790003184.440:1208): avc: denied { write } for pid=12381 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.444586][ T9158] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.978325][T12395] FAULT_INJECTION: forcing a failure. [ 684.978325][T12395] name failslab, interval 1, probability 0, space 0, times 0 [ 684.978348][T12395] CPU: 0 UID: 0 PID: 12395 Comm: syz.9.1471 Not tainted syzkaller #0 PREEMPT(full) [ 684.978363][T12395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 684.978370][T12395] Call Trace: [ 684.978374][T12395] [ 684.978379][T12395] dump_stack_lvl+0x100/0x190 [ 684.978401][T12395] should_fail_ex.cold+0x5/0xa [ 684.978418][T12395] should_failslab+0xc2/0x120 [ 684.978434][T12395] __kvmalloc_node_noprof+0x113/0x9b0 [ 684.978449][T12395] ? __do_sys_setgroups+0x126/0x4f0 [ 684.978470][T12395] __do_sys_setgroups+0x126/0x4f0 [ 684.978490][T12395] do_syscall_64+0x123/0x790 [ 684.978509][T12395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.978521][T12395] RIP: 0033:0x7f2040d9e159 [ 684.978532][T12395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.978543][T12395] RSP: 002b:00007f2041bdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 684.978555][T12395] RAX: ffffffffffffffda RBX: 00007f2041025fa0 RCX: 00007f2040d9e159 [ 684.978572][T12395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 684.978578][T12395] RBP: 00007f2040e3506b R08: 0000000000000000 R09: 0000000000000000 [ 684.978585][T12395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.978592][T12395] R13: 00007f2041026038 R14: 00007f2041025fa0 R15: 00007ffdcf4877e8 [ 684.978608][T12395] [ 685.555679][T12397] FAULT_INJECTION: forcing a failure. [ 685.555679][T12397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.555708][T12397] CPU: 1 UID: 0 PID: 12397 Comm: syz.7.1472 Not tainted syzkaller #0 PREEMPT(full) [ 685.555731][T12397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 685.555743][T12397] Call Trace: [ 685.555749][T12397] [ 685.555757][T12397] dump_stack_lvl+0x100/0x190 [ 685.555789][T12397] should_fail_ex.cold+0x5/0xa [ 685.555817][T12397] _copy_from_iter+0x1f4/0x1690 [ 685.555842][T12397] ? __asan_memset+0x23/0x50 [ 685.555863][T12397] ? __pfx__copy_from_iter+0x10/0x10 [ 685.555885][T12397] ? __pfx___alloc_skb+0x10/0x10 [ 685.555921][T12397] netlink_sendmsg+0x808/0xda0 [ 685.555947][T12397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.555973][T12397] ? selinux_socket_sendmsg+0x198/0x2f0 [ 685.556006][T12397] ____sys_sendmsg+0xa4d/0xbe0 [ 685.556033][T12397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.556057][T12397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 685.556092][T12397] ? lock_acquire+0x1d1/0x380 [ 685.556112][T12397] ? get_pid_task+0x2a/0x250 [ 685.556140][T12397] ___sys_sendmsg+0x190/0x1e0 [ 685.556161][T12397] ? __pfx____sys_sendmsg+0x10/0x10 [ 685.556180][T12397] ? get_pid_task+0x106/0x250 [ 685.556216][T12397] ? find_held_lock+0x2b/0x80 [ 685.556259][T12397] __sys_sendmsg+0x160/0x210 [ 685.556284][T12397] ? __pfx___sys_sendmsg+0x10/0x10 [ 685.556323][T12397] do_syscall_64+0x123/0x790 [ 685.556353][T12397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.556373][T12397] RIP: 0033:0x7f731b79e159 [ 685.556389][T12397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.556407][T12397] RSP: 002b:00007f731c596028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.556426][T12397] RAX: ffffffffffffffda RBX: 00007f731ba25fa0 RCX: 00007f731b79e159 [ 685.556439][T12397] RDX: 00000000000400c4 RSI: 0000200000000980 RDI: 0000000000000004 [ 685.556452][T12397] RBP: 00007f731c596090 R08: 0000000000000000 R09: 0000000000000000 [ 685.556464][T12397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.556475][T12397] R13: 00007f731ba26038 R14: 00007f731ba25fa0 R15: 00007ffcf46eba48 [ 685.556503][T12397] [ 685.591220][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.733640][ T9158] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.158688][ T31] audit: type=1400 audit(1790003186.810:1209): avc: denied { write } for pid=12383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.278838][ T5719] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 686.374890][ T9343] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 686.385910][ T9343] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 686.393339][ T9343] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 686.446536][ T5719] usb 8-1: Using ep0 maxpacket: 16 [ 686.447871][ T9343] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 686.448372][ T9343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 686.987642][ T5719] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 687.004561][ T9158] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.023146][ T5719] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.023183][ T5719] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.023207][ T5719] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 687.023245][ T5719] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.124040][ T5719] usb 8-1: config 0 descriptor?? [ 687.222829][ T31] audit: type=1400 audit(1790003187.880:1210): avc: denied { write } for pid=12417 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.335325][T12415] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 687.703588][ T9158] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.909327][ T5338] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 688.040303][ T5719] usbhid 8-1:0.0: can't add hid device: -71 [ 688.040397][ T5719] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 688.060133][ T5719] usb 8-1: USB disconnect, device number 5 [ 688.079198][ T5338] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 688.083534][ T5338] usb 1-1: config index 0 descriptor too short (expected 40978, got 18) [ 688.083561][ T5338] usb 1-1: config 66 has an invalid descriptor of length 31, skipping remainder of the config [ 688.083580][ T5338] usb 1-1: config 66 has 0 interfaces, different from the descriptor's value: 32 [ 688.133338][ T5338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.133365][ T5338] usb 1-1: Product: syz [ 688.133380][ T5338] usb 1-1: Manufacturer: syz [ 688.133395][ T5338] usb 1-1: SerialNumber: syz [ 688.410723][ T5338] usb 1-1: USB disconnect, device number 56 [ 688.878360][ T31] audit: type=1400 audit(1790003189.530:1211): avc: denied { write } for pid=12431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.000839][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1477'. [ 689.018700][ T5608] Bluetooth: hci0: command tx timeout [ 689.045736][ T9158] bridge_slave_1: left allmulticast mode [ 689.045761][ T9158] bridge_slave_1: left promiscuous mode [ 689.045964][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.083989][ T9158] bridge_slave_0: left allmulticast mode [ 689.084014][ T9158] bridge_slave_0: left promiscuous mode [ 689.084204][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.084372][T12449] FAULT_INJECTION: forcing a failure. [ 689.084372][T12449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.084398][T12449] CPU: 1 UID: 0 PID: 12449 Comm: syz.9.1473 Not tainted syzkaller #0 PREEMPT(full) [ 689.084421][T12449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 689.084433][T12449] Call Trace: [ 689.084440][T12449] [ 689.084448][T12449] dump_stack_lvl+0x100/0x190 [ 689.084480][T12449] should_fail_ex.cold+0x5/0xa [ 689.084507][T12449] _copy_from_iter+0x1f4/0x1690 [ 689.084533][T12449] ? __asan_memset+0x23/0x50 [ 689.084554][T12449] ? __pfx__copy_from_iter+0x10/0x10 [ 689.084576][T12449] ? __pfx___alloc_skb+0x10/0x10 [ 689.084610][T12449] netlink_sendmsg+0x808/0xda0 [ 689.084637][T12449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.084660][T12449] ? selinux_socket_sendmsg+0x198/0x2f0 [ 689.084684][T12449] ____sys_sendmsg+0xa4d/0xbe0 [ 689.084710][T12449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.084733][T12449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 689.084765][T12449] ? lock_acquire+0x1d1/0x380 [ 689.084786][T12449] ? get_pid_task+0x2a/0x250 [ 689.084814][T12449] ___sys_sendmsg+0x190/0x1e0 [ 689.084836][T12449] ? __pfx____sys_sendmsg+0x10/0x10 [ 689.084854][T12449] ? get_pid_task+0x106/0x250 [ 689.084886][T12449] ? find_held_lock+0x2b/0x80 [ 689.084935][T12449] __sys_sendmsg+0x160/0x210 [ 689.084959][T12449] ? __pfx___sys_sendmsg+0x10/0x10 [ 689.085005][T12449] do_syscall_64+0x123/0x790 [ 689.085038][T12449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.085061][T12449] RIP: 0033:0x7f2040d9e159 [ 689.085079][T12449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.085099][T12449] RSP: 002b:00007f2041bdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 689.085120][T12449] RAX: ffffffffffffffda RBX: 00007f2041025fa0 RCX: 00007f2040d9e159 [ 689.085135][T12449] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 689.085148][T12449] RBP: 00007f2041bdd090 R08: 0000000000000000 R09: 0000000000000000 [ 689.085162][T12449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.085174][T12449] R13: 00007f2041026038 R14: 00007f2041025fa0 R15: 00007ffdcf4877e8 [ 689.085205][T12449] [ 689.471436][ T31] audit: type=1400 audit(1790003190.130:1212): avc: denied { write } for pid=12450 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.098670][ T5608] Bluetooth: hci0: command tx timeout [ 692.205106][ T9158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.227303][ T9158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.231483][ T9158] bond0 (unregistering): Released all slaves [ 692.513705][ T31] audit: type=1400 audit(1790003193.161:1213): avc: denied { write } for pid=12453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.636904][T12480] ip_tables: iptables: counters copy to user failed while replacing table [ 692.727204][T12470] syzkaller1: entered promiscuous mode [ 692.727226][T12470] syzkaller1: entered allmulticast mode [ 692.776603][ T31] audit: type=1400 audit(1790003193.431:1214): avc: denied { write } for pid=12481 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.178480][ T5608] Bluetooth: hci0: command tx timeout [ 693.709077][ T9158] hsr_slave_0: left promiscuous mode [ 693.752681][ T9158] hsr_slave_1: left promiscuous mode [ 693.753492][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.753512][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.790562][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.790585][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.830681][ T9343] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 693.854070][ T9343] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 693.875366][ T9343] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 693.890790][ T9158] veth1_macvtap: left promiscuous mode [ 693.890815][ T9158] veth0_macvtap: left promiscuous mode [ 693.890868][ T9158] veth1_vlan: left promiscuous mode [ 693.890906][ T9158] veth0_vlan: left promiscuous mode [ 693.894549][ T9343] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 693.897436][ T9343] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 693.952569][ T31] audit: type=1400 audit(1790003194.601:1215): avc: denied { write } for pid=12483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.080157][ T31] audit: type=1400 audit(1790003194.731:1216): avc: denied { write } for pid=12506 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.258353][ T5608] Bluetooth: hci0: command tx timeout [ 696.014333][ T5608] Bluetooth: hci5: command tx timeout [ 696.792142][ T9158] team0 (unregistering): Port device team_slave_1 removed [ 696.853974][ T9158] team0 (unregistering): Port device team_slave_0 removed [ 698.058322][ T5608] Bluetooth: hci5: command tx timeout [ 698.445306][ T31] audit: type=1400 audit(1790003199.101:1217): avc: denied { write } for pid=12530 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.699498][T12563] No source specified [ 699.721119][ T31] audit: type=1400 audit(1790003200.331:1218): avc: denied { write } for pid=12554 comm="syz.7.1491" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 699.721807][ T31] audit: type=1400 audit(1790003200.331:1219): avc: denied { ioctl } for pid=12554 comm="syz.7.1491" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 699.793536][T12563] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input34 [ 700.599631][ T5608] Bluetooth: hci5: command tx timeout [ 701.376793][ T31] audit: type=1400 audit(1790003200.701:1220): avc: denied { write } for pid=12562 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.762236][ T9152] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.844146][T12409] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.844228][T12409] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.844371][T12409] bridge_slave_0: entered allmulticast mode [ 701.845908][T12409] bridge_slave_0: entered promiscuous mode [ 701.885571][T12409] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.885654][T12409] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.885766][T12409] bridge_slave_1: entered allmulticast mode [ 701.894803][T12409] bridge_slave_1: entered promiscuous mode [ 702.230740][T12409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.435677][T12409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.618273][ T9343] Bluetooth: hci5: command tx timeout [ 702.619873][ T5726] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 702.654921][ T9152] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.685093][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1493'. [ 702.723125][ T31] audit: type=1400 audit(1790003203.381:1221): avc: denied { write } for pid=12572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.756489][T12409] team0: Port device team_slave_0 added [ 702.773733][T12409] team0: Port device team_slave_1 added [ 702.786942][ T5726] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 702.797181][ T5726] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 702.797225][ T5726] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.797264][ T5726] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.811917][ T5726] usb 8-1: config 0 descriptor?? [ 703.000909][ T9152] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.043361][T12409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.043374][T12409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.043388][T12409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.061476][T12409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.061493][T12409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.061515][T12409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.079333][ T31] audit: type=1400 audit(1790003203.711:1222): avc: denied { write } for pid=12596 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.342718][ T5726] usbhid 8-1:0.0: can't add hid device: -71 [ 703.342808][ T5726] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 703.368665][ T5726] usb 8-1: USB disconnect, device number 6 [ 703.409952][ T9152] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.565451][T12409] hsr_slave_0: entered promiscuous mode [ 703.575940][T12409] hsr_slave_1: entered promiscuous mode [ 703.615848][ T31] audit: type=1400 audit(1790003204.271:1223): avc: denied { write } for pid=12599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.713912][ T31] audit: type=1400 audit(1790003204.371:1224): avc: denied { write } for pid=12617 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.755150][T12499] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.756729][T12499] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.756814][T12499] bridge_slave_0: entered allmulticast mode [ 703.779169][T12499] bridge_slave_0: entered promiscuous mode [ 703.816073][T12499] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.816170][T12499] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.816315][T12499] bridge_slave_1: entered allmulticast mode [ 703.826884][T12499] bridge_slave_1: entered promiscuous mode [ 704.068082][T12499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.173910][T12499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.237863][T12627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 705.403252][ T31] audit: type=1400 audit(1790003206.061:1225): avc: denied { write } for pid=12628 comm="syz.9.1495" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 705.408952][T12629] CacheFiles: Empty tag specified [ 705.525171][T12499] team0: Port device team_slave_0 added [ 705.529740][ T31] audit: type=1400 audit(1790003206.191:1226): avc: denied { read } for pid=12632 comm="syz.3.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 705.535289][T12499] team0: Port device team_slave_1 added [ 705.943564][T12644] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1495'. [ 706.245256][T12641] tipc: Started in network mode [ 706.245470][T12641] tipc: Node identity 9e024c2ceb57, cluster identity 4711 [ 706.246949][T12641] tipc: Enabled bearer , priority 0 [ 706.437203][T12640] syzkaller0: entered promiscuous mode [ 706.437229][T12640] syzkaller0: entered allmulticast mode [ 706.863740][ T9152] bridge_slave_1: left allmulticast mode [ 706.863771][ T9152] bridge_slave_1: left promiscuous mode [ 706.863990][ T9152] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.891625][ T9152] bridge_slave_0: left allmulticast mode [ 706.891652][ T9152] bridge_slave_0: left promiscuous mode [ 706.891867][ T9152] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.132168][ T31] audit: type=1400 audit(1790003207.791:1227): avc: denied { write } for pid=12652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.317691][ T31] audit: type=1400 audit(1790003207.981:1228): avc: denied { write } for pid=12663 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.538590][ T9152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.540988][ T9152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.542414][ T9152] bond0 (unregistering): Released all slaves [ 707.586712][T12499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.586730][T12499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.586755][T12499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.640075][T12630] tipc: Resetting bearer [ 707.835597][T12630] tipc: Disabling bearer [ 708.097417][T12672] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 708.097442][T12672] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 708.117705][ T31] audit: type=1400 audit(1790003208.771:1229): avc: denied { firmware_load } for pid=12671 comm="syz.3.1504" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 708.121025][T12672] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 708.216312][ T5719] tipc: Node number set to 1968524332 [ 708.221754][T12499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.221769][T12499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.221799][T12499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.607599][ T5705] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 708.690191][ T31] audit: type=1400 audit(1790003209.352:1230): avc: denied { unmount } for pid=11777 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 708.741337][ T9152] hsr_slave_0: left promiscuous mode [ 708.741975][ T9152] hsr_slave_1: left promiscuous mode [ 708.742673][ T9152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.742691][ T9152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.746239][ T9152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.746258][ T9152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.757633][ T5705] usb 8-1: Using ep0 maxpacket: 16 [ 708.758407][ T5705] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 708.759514][ T5705] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.759544][ T5705] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.759567][ T5705] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 708.759606][ T5705] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.794086][ T5705] usb 8-1: config 0 descriptor?? [ 708.800044][ T9152] veth1_macvtap: left promiscuous mode [ 708.800097][ T9152] veth0_macvtap: left promiscuous mode [ 708.800182][ T9152] veth1_vlan: left promiscuous mode [ 708.800238][ T9152] veth0_vlan: left promiscuous mode [ 709.527687][ T5726] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 709.562066][ T5705] hid_parser_main: 5 callbacks suppressed [ 709.562082][ T5705] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 709.562098][ T5705] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 709.562114][ T5705] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 709.562129][ T5705] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 709.562144][ T5705] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 709.562159][ T5705] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 709.562174][ T5705] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 709.562189][ T5705] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 709.562204][ T5705] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 709.562219][ T5705] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 709.613044][ T5705] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0024/input/input35 [ 709.651344][ T31] audit: type=1400 audit(1790003210.312:1231): avc: denied { write } for pid=12675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 709.671785][ T5705] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 709.709784][ T5726] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 709.729318][ T5726] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 709.729351][ T5726] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.729386][ T5726] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.790188][ T5726] usb 10-1: config 0 descriptor?? [ 710.002998][ T5705] usb 8-1: USB disconnect, device number 7 [ 710.043899][ T31] audit: type=1400 audit(1790003210.702:1232): avc: denied { write } for pid=12691 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.095574][T12690] fido_id[12690]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 710.552942][ T9152] team0 (unregistering): Port device team_slave_1 removed [ 710.579748][ T9152] team0 (unregistering): Port device team_slave_0 removed [ 710.968921][T12699] overlayfs: failed lookup in lower (newroot/18, name='file2', err=-40): overlapping layers [ 711.032096][T12499] hsr_slave_0: entered promiscuous mode [ 711.037642][T12499] hsr_slave_1: entered promiscuous mode [ 711.038236][T12499] debugfs: 'hsr0' already exists in 'hsr' [ 711.038254][T12499] Cannot create hsr debugfs directory [ 711.184383][ T5726] usbhid 10-1:0.0: can't add hid device: -71 [ 711.184441][ T5726] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 711.199163][ T5726] usb 10-1: USB disconnect, device number 5 [ 712.118870][ T31] audit: type=1400 audit(1790003212.782:1233): avc: denied { write } for pid=12701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.346869][T12725] FAULT_INJECTION: forcing a failure. [ 712.346869][T12725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.346901][T12725] CPU: 1 UID: 0 PID: 12725 Comm: syz.9.1511 Not tainted syzkaller #0 PREEMPT(full) [ 712.346924][T12725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 712.346936][T12725] Call Trace: [ 712.346943][T12725] [ 712.346951][T12725] dump_stack_lvl+0x100/0x190 [ 712.346984][T12725] should_fail_ex.cold+0x5/0xa [ 712.347013][T12725] _copy_from_iter+0x1f4/0x1690 [ 712.347039][T12725] ? __asan_memset+0x23/0x50 [ 712.347061][T12725] ? __pfx__copy_from_iter+0x10/0x10 [ 712.347083][T12725] ? __pfx___alloc_skb+0x10/0x10 [ 712.347119][T12725] netlink_sendmsg+0x808/0xda0 [ 712.347147][T12725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 712.347172][T12725] ? selinux_socket_sendmsg+0x198/0x2f0 [ 712.347199][T12725] ____sys_sendmsg+0xa4d/0xbe0 [ 712.347226][T12725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 712.347253][T12725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 712.347285][T12725] ? lock_acquire+0x1d1/0x380 [ 712.347304][T12725] ? get_pid_task+0x2a/0x250 [ 712.347330][T12725] ___sys_sendmsg+0x190/0x1e0 [ 712.347349][T12725] ? __pfx____sys_sendmsg+0x10/0x10 [ 712.347369][T12725] ? get_pid_task+0x106/0x250 [ 712.347405][T12725] ? find_held_lock+0x2b/0x80 [ 712.347450][T12725] __sys_sendmsg+0x160/0x210 [ 712.347475][T12725] ? __pfx___sys_sendmsg+0x10/0x10 [ 712.347516][T12725] do_syscall_64+0x123/0x790 [ 712.347547][T12725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.347567][T12725] RIP: 0033:0x7f2040d9e159 [ 712.347585][T12725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.347603][T12725] RSP: 002b:00007f2041bdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 712.347623][T12725] RAX: ffffffffffffffda RBX: 00007f2041025fa0 RCX: 00007f2040d9e159 [ 712.347643][T12725] RDX: 0000000000040054 RSI: 0000200000000540 RDI: 0000000000000003 [ 712.347655][T12725] RBP: 00007f2041bdd090 R08: 0000000000000000 R09: 0000000000000000 [ 712.347667][T12725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.347678][T12725] R13: 00007f2041026038 R14: 00007f2041025fa0 R15: 00007ffdcf4877e8 [ 712.347707][T12725] [ 712.640018][ T31] audit: type=1400 audit(1790003213.302:1234): avc: denied { write } for pid=12726 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.836413][ T9152] bridge_slave_1: left allmulticast mode [ 712.836439][ T9152] bridge_slave_1: left promiscuous mode [ 712.836634][ T9152] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.909608][ T9152] bridge_slave_0: left allmulticast mode [ 712.909635][ T9152] bridge_slave_0: left promiscuous mode [ 712.909834][ T9152] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.952987][ T31] audit: type=1400 audit(1790003213.612:1235): avc: denied { write } for pid=12727 comm="syz.9.1513" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 713.015274][ T31] audit: type=1400 audit(1790003213.672:1236): avc: denied { setattr } for pid=12727 comm="syz.9.1513" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 714.164812][ T9152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.186981][ T9152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.212585][ T9152] bond0 (unregistering): Released all slaves [ 714.563631][ T31] audit: type=1400 audit(1790003215.222:1237): avc: denied { write } for pid=12738 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.955732][T12409] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 715.036387][T12409] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 715.044667][ T31] audit: type=1400 audit(1790003215.702:1238): avc: denied { write } for pid=12765 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.067417][ T5794] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 715.218345][ T5794] usb 10-1: Using ep0 maxpacket: 16 [ 715.222972][ T5794] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 715.225458][ T5794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.225478][ T5794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.225491][ T5794] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 715.225515][ T5794] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.239248][T12409] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 715.267393][ T5794] usb 10-1: config 0 descriptor?? [ 715.267962][T12409] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 715.268474][T12409] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 715.414529][T12409] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 715.437771][T12409] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 715.762724][T12409] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 715.987517][ T5719] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 716.112511][ T31] audit: type=1400 audit(1790003216.772:1239): avc: denied { write } for pid=12767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 716.152193][ T5719] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 716.158577][ T5719] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 716.158609][ T5719] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.158649][ T5719] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.212789][ T5794] usbhid 10-1:0.0: can't add hid device: -71 [ 716.212885][ T5794] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 716.214199][ T5719] usb 8-1: config 0 descriptor?? [ 716.246854][ T5794] usb 10-1: USB disconnect, device number 6 [ 716.443671][ T31] audit: type=1400 audit(1790003217.102:1240): avc: denied { write } for pid=12791 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 716.672990][ C0] raw-gadget.1 gadget.7: ignoring, device is not running [ 716.687230][ T5719] usbhid 8-1:0.0: can't add hid device: -71 [ 716.687344][ T5719] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 716.720900][ T5719] usb 8-1: USB disconnect, device number 8 [ 717.679696][T12809] FAULT_INJECTION: forcing a failure. [ 717.679696][T12809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.679731][T12809] CPU: 0 UID: 0 PID: 12809 Comm: syz.7.1523 Not tainted syzkaller #0 PREEMPT(full) [ 717.679756][T12809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 717.679769][T12809] Call Trace: [ 717.679777][T12809] [ 717.679786][T12809] dump_stack_lvl+0x100/0x190 [ 717.679825][T12809] should_fail_ex.cold+0x5/0xa [ 717.679855][T12809] strncpy_from_user+0x3b/0x2d0 [ 717.679886][T12809] do_getname+0x78/0x390 [ 717.679920][T12809] user_path_at+0x26/0x60 [ 717.679946][T12809] __x64_sys_mount+0x1fb/0x310 [ 717.679978][T12809] ? __pfx___x64_sys_mount+0x10/0x10 [ 717.680018][T12809] do_syscall_64+0x123/0x790 [ 717.680052][T12809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.680074][T12809] RIP: 0033:0x7f731b79e159 [ 717.680093][T12809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.680119][T12809] RSP: 002b:00007f731c596028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 717.680140][T12809] RAX: ffffffffffffffda RBX: 00007f731ba25fa0 RCX: 00007f731b79e159 [ 717.680155][T12809] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 717.680169][T12809] RBP: 00007f731c596090 R08: 0000200000000340 R09: 0000000000000000 [ 717.680182][T12809] R10: 00000000001e6064 R11: 0000000000000246 R12: 0000000000000001 [ 717.680195][T12809] R13: 00007f731ba26038 R14: 00007f731ba25fa0 R15: 00007ffcf46eba48 [ 717.680226][T12809] [ 717.842699][T12810] ip_tables: iptables: counters copy to user failed while replacing table [ 717.928889][T12409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.058322][T12409] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.101811][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.101892][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.118146][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.118237][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.193916][T12815] program syz.9.1525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 718.661921][ T31] audit: type=1400 audit(1790003219.322:1241): avc: denied { read } for pid=12816 comm="syz.7.1524" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 718.661963][ T31] audit: type=1400 audit(1790003219.322:1242): avc: denied { open } for pid=12816 comm="syz.7.1524" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 718.719125][ T31] audit: type=1400 audit(1790003219.382:1243): avc: denied { ioctl } for pid=12816 comm="syz.7.1524" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 718.723759][ T9152] hsr_slave_0: left promiscuous mode [ 718.758210][ T9152] hsr_slave_1: left promiscuous mode [ 718.758968][ T9152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.758985][ T9152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.764473][ T9152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.764491][ T9152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.867919][ T9152] veth1_macvtap: left promiscuous mode [ 718.867958][ T9152] veth0_macvtap: left promiscuous mode [ 718.868046][ T9152] veth1_vlan: left promiscuous mode [ 718.868105][ T9152] veth0_vlan: left promiscuous mode [ 719.605117][ T9152] team0 (unregistering): Port device team_slave_1 removed [ 719.632295][ T9152] team0 (unregistering): Port device team_slave_0 removed [ 719.657261][ T5338] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 719.823244][ T5338] usb 10-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 719.824234][ T5338] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 719.824277][ T5338] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.889933][ T5338] usb 10-1: config 0 descriptor?? [ 720.177095][T12829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.182232][T12829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.374980][ T5338] usb 10-1: USB disconnect, device number 7 [ 721.200625][T12847] FAULT_INJECTION: forcing a failure. [ 721.200625][T12847] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 721.200666][T12847] CPU: 0 UID: 0 PID: 12847 Comm: syz.9.1534 Not tainted syzkaller #0 PREEMPT(full) [ 721.200695][T12847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 721.200712][T12847] Call Trace: [ 721.200720][T12847] [ 721.200730][T12847] dump_stack_lvl+0x100/0x190 [ 721.200772][T12847] should_fail_ex.cold+0x5/0xa [ 721.200802][T12847] ? prepare_alloc_pages+0x16d/0x5b0 [ 721.200846][T12847] should_fail_alloc_page+0xeb/0x140 [ 721.200880][T12847] prepare_alloc_pages+0x1f0/0x5b0 [ 721.200917][T12847] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 721.200944][T12847] ? __pfx_get_page_from_freelist+0x10/0x10 [ 721.200970][T12847] ? prepare_alloc_pages+0x1f0/0x5b0 [ 721.201003][T12847] ? rcu_is_watching+0x13/0xc0 [ 721.201033][T12847] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 721.201061][T12847] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 721.201092][T12847] ? alloc_vmap_area+0x20fb/0x2bb0 [ 721.201117][T12847] ? stack_trace_save+0x8e/0xc0 [ 721.201140][T12847] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 721.201172][T12847] ? kasan_save_stack+0x3f/0x50 [ 721.201197][T12847] ? kasan_save_stack+0x30/0x50 [ 721.201221][T12847] ? kasan_save_track+0x14/0x30 [ 721.201245][T12847] ? kasan_save_free_info+0x3b/0x70 [ 721.201276][T12847] ? __kasan_slab_free+0x5f/0x80 [ 721.201301][T12847] ? kmem_cache_free+0x127/0x6c0 [ 721.201332][T12847] ? alloc_vmap_area+0x20fb/0x2bb0 [ 721.201359][T12847] ? __get_vm_area_node+0x1ed/0x350 [ 721.201385][T12847] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 721.201414][T12847] ? __vmalloc_node_noprof+0xad/0xf0 [ 721.201442][T12847] ? xt_counters_alloc+0x4c/0x70 [ 721.201470][T12847] ? __do_replace+0x97/0x980 [ 721.201502][T12847] ? do_ipt_set_ctl+0xa53/0xcf0 [ 721.201521][T12847] ? nf_setsockopt+0x8d/0xf0 [ 721.201550][T12847] ? ip_setsockopt+0xcb/0xf0 [ 721.201578][T12847] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 721.201609][T12847] ? policy_nodemask+0xed/0x4f0 [ 721.201643][T12847] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 721.201688][T12847] __kasan_populate_vmalloc+0xf0/0x210 [ 721.201721][T12847] alloc_vmap_area+0x95d/0x2bb0 [ 721.201760][T12847] ? __pfx_alloc_vmap_area+0x10/0x10 [ 721.201788][T12847] ? __get_vm_area_node+0x124/0x350 [ 721.201819][T12847] __get_vm_area_node+0x1ed/0x350 [ 721.201860][T12847] __vmalloc_node_range_noprof+0x268/0x1420 [ 721.201891][T12847] ? xt_counters_alloc+0x4c/0x70 [ 721.201923][T12847] ? find_check_entry.isra.0+0x51c/0x990 [ 721.201967][T12847] ? xt_counters_alloc+0x4c/0x70 [ 721.202004][T12847] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 721.202045][T12847] ? xt_counters_alloc+0x4c/0x70 [ 721.202073][T12847] __vmalloc_node_noprof+0xad/0xf0 [ 721.202103][T12847] ? xt_counters_alloc+0x4c/0x70 [ 721.202134][T12847] xt_counters_alloc+0x4c/0x70 [ 721.202163][T12847] __do_replace+0x97/0x980 [ 721.202203][T12847] ? __pfx___do_replace+0x10/0x10 [ 721.202244][T12847] do_ipt_set_ctl+0xa53/0xcf0 [ 721.202265][T12847] ? nf_sockopt_find.isra.0+0x222/0x290 [ 721.202294][T12847] ? nf_sockopt_find.isra.0+0x222/0x290 [ 721.202327][T12847] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 721.202348][T12847] ? __mutex_unlock_slowpath+0x35d/0x930 [ 721.202382][T12847] ? sockopt_release_sock+0x5c/0x70 [ 721.202414][T12847] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 721.202460][T12847] ? nf_sockopt_find.isra.0+0x222/0x290 [ 721.202493][T12847] nf_setsockopt+0x8d/0xf0 [ 721.202526][T12847] ip_setsockopt+0xcb/0xf0 [ 721.202551][T12847] tcp_setsockopt+0xa7/0x100 [ 721.202577][T12847] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 721.202612][T12847] do_sock_setsockopt+0xf3/0x1d0 [ 721.202647][T12847] __sys_setsockopt+0x195/0x220 [ 721.202681][T12847] __x64_sys_setsockopt+0xbd/0x160 [ 721.202707][T12847] ? do_syscall_64+0xae/0x790 [ 721.202738][T12847] ? lockdep_hardirqs_on+0x7d/0x110 [ 721.202769][T12847] do_syscall_64+0x123/0x790 [ 721.202804][T12847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.202828][T12847] RIP: 0033:0x7f2040d9e159 [ 721.202855][T12847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.202876][T12847] RSP: 002b:00007f2041bdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 721.202899][T12847] RAX: ffffffffffffffda RBX: 00007f2041025fa0 RCX: 00007f2040d9e159 [ 721.202915][T12847] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 721.202930][T12847] RBP: 00007f2040e3506b R08: 00000000000003f0 R09: 0000000000000000 [ 721.202945][T12847] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 721.202961][T12847] R13: 00007f2041026038 R14: 00007f2041025fa0 R15: 00007ffdcf4877e8 [ 721.202994][T12847] [ 721.215744][T12847] syz.9.1534: vmalloc error: size 96, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 721.215814][T12847] CPU: 0 UID: 0 PID: 12847 Comm: syz.9.1534 Not tainted syzkaller #0 PREEMPT(full) [ 721.215849][T12847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 721.215862][T12847] Call Trace: [ 721.215870][T12847] [ 721.215878][T12847] dump_stack_lvl+0x100/0x190 [ 721.215916][T12847] warn_alloc.cold+0x9e/0xb2 [ 721.215941][T12847] ? __pfx_warn_alloc+0x10/0x10 [ 721.215961][T12847] ? lockdep_hardirqs_on+0x7d/0x110 [ 721.215995][T12847] ? __get_vm_area_node+0x2f0/0x350 [ 721.216028][T12847] ? __get_vm_area_node+0x22b/0x350 [ 721.216059][T12847] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 721.216089][T12847] ? find_check_entry.isra.0+0x51c/0x990 [ 721.216126][T12847] ? xt_counters_alloc+0x4c/0x70 [ 721.216158][T12847] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 721.216195][T12847] ? xt_counters_alloc+0x4c/0x70 [ 721.216220][T12847] __vmalloc_node_noprof+0xad/0xf0 [ 721.216246][T12847] ? xt_counters_alloc+0x4c/0x70 [ 721.216275][T12847] xt_counters_alloc+0x4c/0x70 [ 721.216301][T12847] __do_replace+0x97/0x980 [ 721.216336][T12847] ? __pfx___do_replace+0x10/0x10 [ 721.216373][T12847] do_ipt_set_ctl+0xa53/0xcf0 [ 721.216392][T12847] ? nf_sockopt_find.isra.0+0x222/0x290 [ 721.216419][T12847] ? nf_sockopt_find.isra.0+0x222/0x290 [ 721.216449][T12847] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 721.216468][T12847] ? __mutex_unlock_slowpath+0x35d/0x930 [ 721.216499][T12847] ? sockopt_release_sock+0x5c/0x70 [ 721.216527][T12847] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 721.216568][T12847] ? nf_sockopt_find.isra.0+0x222/0x290 [ 721.216598][T12847] nf_setsockopt+0x8d/0xf0 [ 721.216627][T12847] ip_setsockopt+0xcb/0xf0 [ 721.216649][T12847] tcp_setsockopt+0xa7/0x100 [ 721.216672][T12847] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 721.216704][T12847] do_sock_setsockopt+0xf3/0x1d0 [ 721.216735][T12847] __sys_setsockopt+0x195/0x220 [ 721.216768][T12847] __x64_sys_setsockopt+0xbd/0x160 [ 721.216791][T12847] ? do_syscall_64+0xae/0x790 [ 721.216819][T12847] ? lockdep_hardirqs_on+0x7d/0x110 [ 721.216865][T12847] do_syscall_64+0x123/0x790 [ 721.216903][T12847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.216925][T12847] RIP: 0033:0x7f2040d9e159 [ 721.216944][T12847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.216963][T12847] RSP: 002b:00007f2041bdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 721.216982][T12847] RAX: ffffffffffffffda RBX: 00007f2041025fa0 RCX: 00007f2040d9e159 [ 721.216997][T12847] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 721.217011][T12847] RBP: 00007f2040e3506b R08: 00000000000003f0 R09: 0000000000000000 [ 721.217025][T12847] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 721.217038][T12847] R13: 00007f2041026038 R14: 00007f2041025fa0 R15: 00007ffdcf4877e8 [ 721.217067][T12847] [ 721.217910][T12847] Mem-Info: [ 721.217922][T12847] active_anon:23947 inactive_anon:5988 isolated_anon:0 [ 721.217922][T12847] active_file:2458 inactive_file:61201 isolated_file:0 [ 721.217922][T12847] unevictable:0 dirty:364 writeback:0 [ 721.217922][T12847] slab_reclaimable:13254 slab_unreclaimable:103795 [ 721.217922][T12847] mapped:39598 shmem:21690 pagetables:1395 [ 721.217922][T12847] sec_pagetables:0 bounce:0 [ 721.217922][T12847] kernel_misc_reclaimable:0 [ 721.217922][T12847] free:1248167 free_pcp:13076 free_cma:0 [ 721.217977][T12847] Node 0 active_anon:95788kB inactive_anon:23952kB active_file:9832kB inactive_file:244596kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158392kB dirty:1456kB writeback:0kB shmem:86760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12956kB pagetables:5436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 721.218035][T12847] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 721.218085][T12847] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 721.218140][T12847] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 721.218173][T12847] Node 0 DMA32 free:1032356kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:95788kB inactive_anon:23952kB active_file:9832kB inactive_file:244596kB unevictable:0kB writepending:1456kB zspages:2980kB present:3129332kB managed:2530484kB mlocked:0kB bounce:0kB free_pcp:52304kB local_pcp:27852kB free_cma:0kB [ 721.218231][T12847] lowmem_reserve[]: 0 0 0 0 0 [ 721.218263][T12847] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:68kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 721.218316][T12847] lowmem_reserve[]: 0 0 0 0 0 [ 721.218344][T12847] Node 1 Normal free:3944952kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 721.218399][T12847] lowmem_reserve[]: 0 0 0 0 0 [ 721.218431][T12847] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 721.218541][T12847] Node 0 DMA32: 3720*4kB (UME) 1604*8kB (UME) 1703*16kB (UME) 2173*32kB (UME) 1115*64kB (UM) 531*128kB (UME) 138*256kB (UME) 80*512kB (UME) 24*1024kB (UME) 14*2048kB (UME) 156*4096kB (UM) = 1032336kB [ 721.218695][T12847] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 721.218810][T12847] Node 1 Normal: 2*4kB (M) 6*8kB (UM) 8*16kB (UM) 6*32kB (UM) 4*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3944952kB [ 721.218976][T12847] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 721.218993][T12847] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 721.219008][T12847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 721.219023][T12847] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 721.219037][T12847] 85339 total pagecache pages [ 721.219045][T12847] 1 pages in swap cache [ 721.219052][T12847] Free swap = 78828kB [ 721.219059][T12847] Total swap = 124996kB [ 721.219066][T12847] 2097051 pages RAM [ 721.219073][T12847] 0 pages HighMem/MovableOnly [ 721.219080][T12847] 432797 pages reserved [ 721.219086][T12847] 0 pages cma reserved [ 721.288616][T12499] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 721.304952][T12499] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 721.305712][T12499] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 721.329154][ T4174] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 721.331741][T12499] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 721.386440][T12499] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 721.486879][ T4174] usb 8-1: Using ep0 maxpacket: 16 [ 721.487659][ T4174] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 721.488652][ T4174] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.488685][ T4174] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.488708][ T4174] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 721.488745][ T4174] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.748907][ T4174] usb 8-1: config 0 descriptor?? [ 721.772694][T12499] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 721.822643][T12499] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 721.983352][T12499] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 722.471012][ T4174] hid_parser_main: 5 callbacks suppressed [ 722.471034][ T4174] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 722.471062][ T4174] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 722.486497][ T4174] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 722.486528][ T4174] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 722.486563][ T4174] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 722.486588][ T4174] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 722.486613][ T4174] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 722.486638][ T4174] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 722.486663][ T4174] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 722.486745][ T4174] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 722.613223][ T4174] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0025/input/input36 [ 722.691262][ T4174] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 722.793410][T12862] [ 722.795767][T12862] ====================================================== [ 722.802776][T12862] WARNING: possible circular locking dependency detected [ 722.809769][T12862] syzkaller #0 Not tainted [ 722.814157][T12862] ------------------------------------------------------ [ 722.821146][T12862] syz.9.1535/12862 is trying to acquire lock: [ 722.827187][T12862] ffff888058d63138 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4f8/0xd90 [ 722.836907][T12862] [ 722.836907][T12862] but task is already holding lock: [ 722.844243][T12862] ffff888079687880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 722.853529][T12862] [ 722.853529][T12862] which lock already depends on the new lock. [ 722.853529][T12862] [ 722.863923][T12862] [ 722.863923][T12862] the existing dependency chain (in reverse order) is: [ 722.872924][T12862] [ 722.872924][T12862] -> #3 (&of->mutex){+.+.}-{4:4}: [ 722.880133][T12862] lock_acquire+0x1d1/0x380 [ 722.885152][T12862] __mutex_lock+0x1a4/0x1bd0 [ 722.890265][T12862] kernfs_seq_start+0x4f/0x2a0 [ 722.895553][T12862] seq_read_iter+0x2c1/0x1270 [ 722.900755][T12862] kernfs_fop_read_iter+0x46c/0x610 [ 722.906472][T12862] copy_splice_read+0x4ba/0xbb0 [ 722.911836][T12862] do_splice_read+0x285/0x370 [ 722.917028][T12862] splice_direct_to_actor+0x2a1/0xa30 [ 722.922912][T12862] do_splice_direct+0x174/0x240 [ 722.928276][T12862] do_sendfile+0xadc/0xe20 [ 722.933199][T12862] __x64_sys_sendfile64+0x1d8/0x220 [ 722.938911][T12862] do_syscall_64+0x123/0x790 [ 722.944018][T12862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.950417][T12862] [ 722.950417][T12862] -> #2 (&p->lock){+.+.}-{4:4}: [ 722.957445][T12862] lock_acquire+0x1d1/0x380 [ 722.962471][T12862] __mutex_lock+0x1a4/0x1bd0 [ 722.967576][T12862] seq_read_iter+0xe1/0x1270 [ 722.972674][T12862] proc_reg_read_iter+0x220/0x310 [ 722.978213][T12862] copy_splice_read+0x4ba/0xbb0 [ 722.983579][T12862] do_splice_read+0x285/0x370 [ 722.988766][T12862] splice_file_to_pipe+0x82/0x120 [ 722.994302][T12862] do_sendfile+0x366/0xe20 [ 722.999224][T12862] __x64_sys_sendfile64+0x1d8/0x220 [ 723.004932][T12862] do_syscall_64+0x123/0x790 [ 723.010034][T12862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.016435][T12862] [ 723.016435][T12862] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 723.023800][T12862] lock_acquire+0x1d1/0x380 [ 723.028809][T12862] __mutex_lock+0x1a4/0x1bd0 [ 723.033913][T12862] anon_pipe_prefill_and_lock+0x3fb/0x580 [ 723.040141][T12862] anon_pipe_write+0x164/0x1b50 [ 723.045500][T12862] __kernel_write_iter+0x6bb/0x930 [ 723.051121][T12862] __kernel_write+0xf6/0x140 [ 723.056228][T12862] autofs_notify_daemon+0x50d/0xd90 [ 723.061943][T12862] autofs_wait+0x10fd/0x1b50 [ 723.067053][T12862] autofs_mount_wait+0x132/0x3b0 [ 723.072505][T12862] autofs_d_automount+0x490/0x950 [ 723.078044][T12862] __traverse_mounts+0x1b9/0x8a0 [ 723.083497][T12862] step_into_slowpath+0xb7e/0xf90 [ 723.089027][T12862] path_openat+0xfab/0x2440 [ 723.094038][T12862] do_file_open+0x20e/0x430 [ 723.099049][T12862] do_sys_openat2+0x10f/0x1e0 [ 723.104242][T12862] __x64_sys_openat+0x12d/0x210 [ 723.109602][T12862] do_syscall_64+0x123/0x790 [ 723.114714][T12862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.121128][T12862] [ 723.121128][T12862] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 723.128858][T12862] check_prev_add+0xeb/0xe60 [ 723.133963][T12862] __lock_acquire+0x1528/0x1f40 [ 723.139322][T12862] lock_acquire+0x1d1/0x380 [ 723.144335][T12862] __mutex_lock+0x1a4/0x1bd0 [ 723.149439][T12862] autofs_notify_daemon+0x4f8/0xd90 [ 723.155152][T12862] autofs_wait+0x10fd/0x1b50 [ 723.160253][T12862] autofs_mount_wait+0x132/0x3b0 [ 723.165704][T12862] autofs_d_automount+0x490/0x950 [ 723.171242][T12862] __traverse_mounts+0x1b9/0x8a0 [ 723.176693][T12862] step_into_slowpath+0xb7e/0xf90 [ 723.182230][T12862] path_lookupat+0x58b/0xc40 [ 723.187324][T12862] filename_lookup+0x202/0x590 [ 723.192599][T12862] kern_path+0x37/0x50 [ 723.197182][T12862] lookup_bdev+0xd8/0x2a0 [ 723.202031][T12862] resume_store+0x1d6/0x460 [ 723.207061][T12862] kobj_attr_store+0x58/0x80 [ 723.212174][T12862] sysfs_kf_write+0xf2/0x150 [ 723.217294][T12862] kernfs_fop_write_iter+0x3e0/0x5f0 [ 723.223100][T12862] vfs_write+0x6af/0x1050 [ 723.227952][T12862] ksys_write+0x12a/0x250 [ 723.232795][T12862] do_syscall_64+0x123/0x790 [ 723.237903][T12862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.244304][T12862] [ 723.244304][T12862] other info that might help us debug this: [ 723.244304][T12862] [ 723.254519][T12862] Chain exists of: [ 723.254519][T12862] &sbi->pipe_mutex --> &p->lock --> &of->mutex [ 723.254519][T12862] [ 723.266587][T12862] Possible unsafe locking scenario: [ 723.266587][T12862] [ 723.274120][T12862] CPU0 CPU1 [ 723.279483][T12862] ---- ---- [ 723.284851][T12862] lock(&of->mutex); [ 723.288822][T12862] lock(&p->lock); [ 723.295141][T12862] lock(&of->mutex); [ 723.301638][T12862] lock(&sbi->pipe_mutex); [ 723.306146][T12862] [ 723.306146][T12862] *** DEADLOCK *** [ 723.306146][T12862] [ 723.314272][T12862] locks held by syz.9.1535/12862: 4, last CPU#1: [ 723.320586][T12862] #0: ffff88807dfb0ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 723.329642][T12862] #1: ffff88803839e460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 723.338603][T12862] #2: ffff888079687880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 723.348347][T12862] #3: ffff8880206ef5a8 (kn->active#68){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 723.358345][T12862] [ 723.358345][T12862] stack backtrace: [ 723.364218][T12862] CPU: 1 UID: 0 PID: 12862 Comm: syz.9.1535 Not tainted syzkaller #0 PREEMPT(full) [ 723.373573][T12862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 723.383614][T12862] Call Trace: [ 723.386875][T12862] [ 723.389789][T12862] dump_stack_lvl+0x100/0x190 [ 723.394464][T12862] print_circular_bug.cold+0x178/0x1be [ 723.399915][T12862] check_noncircular+0x146/0x160 [ 723.404842][T12862] check_prev_add+0xeb/0xe60 [ 723.409418][T12862] __lock_acquire+0x1528/0x1f40 [ 723.414260][T12862] lock_acquire+0x1d1/0x380 [ 723.418746][T12862] ? autofs_notify_daemon+0x4f8/0xd90 [ 723.424111][T12862] ? __pfx___might_resched+0x10/0x10 [ 723.429381][T12862] __mutex_lock+0x1a4/0x1bd0 [ 723.433967][T12862] ? autofs_notify_daemon+0x4f8/0xd90 [ 723.439329][T12862] ? autofs_notify_daemon+0x4f8/0xd90 [ 723.444694][T12862] ? find_held_lock+0x2b/0x80 [ 723.449361][T12862] ? autofs_notify_daemon+0x4a0/0xd90 [ 723.454725][T12862] ? autofs_notify_daemon+0x4a0/0xd90 [ 723.460090][T12862] ? __pfx___mutex_lock+0x10/0x10 [ 723.465109][T12862] ? __mutex_unlock_slowpath+0x35d/0x930 [ 723.470740][T12862] ? from_kgid_munged+0xab/0x130 [ 723.475670][T12862] ? __pfx_from_kgid_munged+0x10/0x10 [ 723.481031][T12862] ? path_lookupat+0x58b/0xc40 [ 723.485782][T12862] ? autofs_notify_daemon+0x4f8/0xd90 [ 723.491147][T12862] autofs_notify_daemon+0x4f8/0xd90 [ 723.496338][T12862] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 723.502061][T12862] ? lockdep_init_map_type+0x5c/0x250 [ 723.507428][T12862] ? lockdep_init_map_type+0x5c/0x250 [ 723.512790][T12862] autofs_wait+0x10fd/0x1b50 [ 723.517373][T12862] ? __pfx_autofs_wait+0x10/0x10 [ 723.522305][T12862] ? __pfx___schedule+0x10/0x10 [ 723.527149][T12862] ? path_has_submounts+0xcf/0x120 [ 723.532248][T12862] ? preempt_schedule_thunk+0x16/0x40 [ 723.537608][T12862] ? preempt_schedule_common+0x3c/0xb0 [ 723.543066][T12862] autofs_mount_wait+0x132/0x3b0 [ 723.548002][T12862] autofs_d_automount+0x490/0x950 [ 723.553020][T12862] __traverse_mounts+0x1b9/0x8a0 [ 723.557953][T12862] step_into_slowpath+0xb7e/0xf90 [ 723.562967][T12862] ? rcu_is_watching+0x13/0xc0 [ 723.567722][T12862] ? __pfx_step_into_slowpath+0x10/0x10 [ 723.573255][T12862] ? lookup_slow+0x5b/0x70 [ 723.577665][T12862] ? lookup_slow+0x5b/0x70 [ 723.582076][T12862] path_lookupat+0x58b/0xc40 [ 723.586659][T12862] filename_lookup+0x202/0x590 [ 723.591415][T12862] ? __pfx_filename_lookup+0x10/0x10 [ 723.596694][T12862] ? do_getname_kernel+0x5d/0x250 [ 723.601710][T12862] ? __asan_memcpy+0x3c/0x60 [ 723.606289][T12862] kern_path+0x37/0x50 [ 723.610343][T12862] lookup_bdev+0xd8/0x2a0 [ 723.614658][T12862] ? __pfx_lookup_bdev+0x10/0x10 [ 723.619579][T12862] ? __asan_memcpy+0x3c/0x60 [ 723.624156][T12862] resume_store+0x1d6/0x460 [ 723.628654][T12862] ? __pfx_resume_store+0x10/0x10 [ 723.633668][T12862] ? lock_acquire+0x1d1/0x380 [ 723.638331][T12862] ? sysfs_file_kobj+0x21/0x290 [ 723.643168][T12862] ? find_held_lock+0x2b/0x80 [ 723.647835][T12862] ? sysfs_file_kobj+0xe4/0x290 [ 723.652674][T12862] ? sysfs_file_kobj+0xe4/0x290 [ 723.657512][T12862] ? __pfx_resume_store+0x10/0x10 [ 723.662529][T12862] kobj_attr_store+0x58/0x80 [ 723.667105][T12862] ? __pfx_kobj_attr_store+0x10/0x10 [ 723.672375][T12862] sysfs_kf_write+0xf2/0x150 [ 723.676958][T12862] kernfs_fop_write_iter+0x3e0/0x5f0 [ 723.682229][T12862] ? __pfx_sysfs_kf_write+0x10/0x10 [ 723.687421][T12862] vfs_write+0x6af/0x1050 [ 723.691736][T12862] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 723.697531][T12862] ? __pfx_vfs_write+0x10/0x10 [ 723.702279][T12862] ? find_held_lock+0x2b/0x80 [ 723.706954][T12862] ksys_write+0x12a/0x250 [ 723.711272][T12862] ? __pfx_ksys_write+0x10/0x10 [ 723.716116][T12862] do_syscall_64+0x123/0x790 [ 723.720702][T12862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.726580][T12862] RIP: 0033:0x7f2040d9e159 [ 723.730980][T12862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.750574][T12862] RSP: 002b:00007f2041bdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 723.758972][T12862] RAX: ffffffffffffffda RBX: 00007f2041025fa0 RCX: 00007f2040d9e159 [ 723.766929][T12862] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000009 [ 723.774885][T12862] RBP: 00007f2040e3506b R08: 0000000000000000 R09: 0000000000000000 [ 723.782843][T12862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.790800][T12862] R13: 00007f2041026038 R14: 00007f2041025fa0 R15: 00007ffdcf4877e8 [ 723.798771][T12862] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 723.817950][T12499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.857417][T12499] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.865154][ T3919] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.865218][ T3919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.869678][ T3919] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.869739][ T3919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.936670][ T4174] usb 8-1: reset high-speed USB device number 9 using dummy_hcd [ 724.245655][T12862] PM: Image not found (code -6) [ 724.580370][ T31] audit: type=1400 audit(1790003225.242:1244): avc: denied { write } for pid=12876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.774368][ T31] audit: type=1400 audit(1790003225.432:1245): avc: denied { write } for pid=12889 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.895563][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 725.027945][ T5338] usb 8-1: USB disconnect, device number 9 [ 725.135793][ T31] audit: type=1400 audit(1790003225.792:1246): avc: denied { write } for pid=12892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.217857][ T31] audit: type=1400 audit(1790003225.872:1247): avc: denied { write } for pid=12903 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.281959][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2 [ 725.379880][ T9158] bridge_slave_1: left allmulticast mode [ 725.379903][ T9158] bridge_slave_1: left promiscuous mode [ 725.380026][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.381239][ T9158] bridge_slave_0: left allmulticast mode [ 725.381258][ T9158] bridge_slave_0: left promiscuous mode [ 725.381366][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.474702][ T9158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.494169][ T9158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.494950][ T9158] bond0 (unregistering): Released all slaves [ 725.541520][ T31] audit: type=1400 audit(1790003226.202:1248): avc: denied { write } for pid=12906 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.622093][ T31] audit: type=1400 audit(1790003226.282:1249): avc: denied { write } for pid=12917 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.623484][ T9158] hsr_slave_0: left promiscuous mode [ 725.624080][ T9158] hsr_slave_1: left promiscuous mode [ 725.624473][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.626205][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.767063][ T9158] team0 (unregistering): Port device team_slave_1 removed [ 725.771937][ T9158] team0 (unregistering): Port device team_slave_0 removed [ 725.836072][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3 [ 726.075401][ T31] audit: type=1400 audit(1790003226.733:1250): avc: denied { write } for pid=12919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.144726][ T31] audit: type=1400 audit(1790003226.803:1251): avc: denied { write } for pid=12930 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.404717][ T31] audit: type=1400 audit(1790003227.063:1252): avc: denied { write } for pid=12932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.470595][ T31] audit: type=1400 audit(1790003227.133:1253): avc: denied { write } for pid=12943 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.576318][ T9158] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.595808][ T9158] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.654056][ T9158] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.719655][ T9158] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.935100][ T5267] 8021q: adding VLAN 0 to HW filter on device eth7 [ 727.165815][ T9158] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.216270][ T9158] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.258161][ T9158] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.284775][ T9158] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.297859][ T5267] 8021q: adding VLAN 0 to HW filter on device eth8 [ 727.424467][ T9158] bridge_slave_1: left allmulticast mode [ 727.424492][ T9158] bridge_slave_1: left promiscuous mode [ 727.424638][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.439558][ T9158] bridge_slave_0: left allmulticast mode [ 727.439580][ T9158] bridge_slave_0: left promiscuous mode [ 727.439701][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.465256][ T9158] bridge_slave_1: left allmulticast mode [ 727.465281][ T9158] bridge_slave_1: left promiscuous mode [ 727.465419][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.468127][ T9158] bridge_slave_0: left allmulticast mode [ 727.468146][ T9158] bridge_slave_0: left promiscuous mode [ 727.468245][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.496060][ T9158] bridge_slave_1: left allmulticast mode [ 727.496081][ T9158] bridge_slave_1: left promiscuous mode [ 727.496206][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.510498][ T9158] bridge_slave_0: left allmulticast mode [ 727.510520][ T9158] bridge_slave_0: left promiscuous mode [ 727.510663][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.540895][ T9158] bridge_slave_1: left allmulticast mode [ 727.540917][ T9158] bridge_slave_1: left promiscuous mode [ 727.541044][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.542357][ T9158] bridge_slave_0: left allmulticast mode [ 727.542377][ T9158] bridge_slave_0: left promiscuous mode [ 727.542476][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.760375][ T9158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.777290][ T9158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.779312][ T9158] bond0 (unregistering): Released all slaves [ 727.840871][ T9158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.843872][ T9158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.846354][ T9158] bond0 (unregistering): Released all slaves [ 728.071837][ T9158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.073410][ T9158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.075415][ T9158] bond0 (unregistering): Released all slaves [ 728.100032][ T9158] bond1 (unregistering): Released all slaves [ 728.205814][ T9158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.226938][ T9158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.228580][ T9158] bond0 (unregistering): Released all slaves [ 728.323482][ T9158] tipc: Left network mode [ 728.325135][ T9158] tipc: Disabling bearer [ 728.325202][ T9158] tipc: Left network mode [ 729.002122][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5 [ 729.200587][ T9158] hsr_slave_0: left promiscuous mode [ 729.202451][ T9158] hsr_slave_1: left promiscuous mode [ 729.202900][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.203231][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.224144][ T9158] hsr_slave_0: left promiscuous mode [ 729.231320][ T9158] hsr_slave_1: left promiscuous mode [ 729.231746][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.231761][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.239652][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.239668][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.271039][ T9158] hsr_slave_0: left promiscuous mode [ 729.276367][ T9158] hsr_slave_1: left promiscuous mode [ 729.276867][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.277225][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.281226][ T9158] hsr_slave_0: left promiscuous mode [ 729.281594][ T9158] hsr_slave_1: left promiscuous mode [ 729.282045][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.282061][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.283982][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.283998][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.300043][ T9158] veth1_macvtap: left promiscuous mode [ 729.300069][ T9158] veth0_macvtap: left promiscuous mode [ 729.300133][ T9158] veth1_vlan: left promiscuous mode [ 729.300173][ T9158] veth0_vlan: left promiscuous mode [ 729.324772][ T9158] veth1_macvtap: left promiscuous mode [ 729.324799][ T9158] veth0_macvtap: left promiscuous mode [ 729.324852][ T9158] veth1_vlan: left promiscuous mode [ 729.324902][ T9158] veth0_vlan: left promiscuous mode [ 729.644907][ T9158] team0 (unregistering): Port device team_slave_1 removed [ 729.665331][ T9158] team0 (unregistering): Port device team_slave_0 removed [ 729.790165][ T9158] team0 (unregistering): Port device team_slave_1 removed [ 729.794574][ T9158] team0 (unregistering): Port device team_slave_0 removed [ 729.981321][ T9158] team0 (unregistering): Port device team_slave_1 removed [ 729.985758][ T9158] team0 (unregistering): Port device team_slave_0 removed [ 730.196268][ T9158] team0 (unregistering): Port device team_slave_1 removed [ 730.200599][ T9158] team0 (unregistering): Port device team_slave_0 removed [ 730.273360][ T5267] 8021q: adding VLAN 0 to HW filter on device eth6 [ 730.482213][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 730.482232][ T31] audit: type=1400 audit(1790003231.143:1268): avc: denied { write } for pid=13049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.564678][ T31] audit: type=1400 audit(1790003231.223:1269): avc: denied { write } for pid=13060 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.997718][ T31] audit: type=1400 audit(1790003231.663:1270): avc: denied { write } for pid=13063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.076848][ T31] audit: type=1400 audit(1790003231.743:1271): avc: denied { write } for pid=13074 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.138429][ T9158] IPVS: stop unused estimator thread 0... [ 731.189112][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 731.498300][ T31] audit: type=1400 audit(1790003232.163:1272): avc: denied { write } for pid=13077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.573109][ T31] audit: type=1400 audit(1790003232.233:1273): avc: denied { write } for pid=13088 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.618263][ T5267] 8021q: adding VLAN 0 to HW filter on device eth11 [ 731.831022][ T31] audit: type=1400 audit(1790003232.493:1274): avc: denied { write } for pid=13091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.884153][ T31] audit: type=1400 audit(1790003232.543:1275): avc: denied { write } for pid=13102 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.925080][ T5267] 8021q: adding VLAN 0 to HW filter on device eth10 [ 732.158140][ T31] audit: type=1400 audit(1790003232.823:1276): avc: denied { write } for pid=13106 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.211969][ T31] audit: type=1400 audit(1790003232.873:1277): avc: denied { write } for pid=13117 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.256374][ T5267] 8021q: adding VLAN 0 to HW filter on device eth12 [ 732.601491][ T5267] 8021q: adding VLAN 0 to HW filter on device eth24