last executing test programs: 3m20.46784968s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000001640)=""/102392, 0x18ff8) r3 = openat$zero(0xffffffffffffff9c, &(0x7f000001a640), 0x101802, 0x0) ioctl$FE_SET_VOLTAGE(r3, 0x6f43, &(0x7f000001a680)=0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f000001a6c0), 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f000001a700), 0xc2900, 0x0) ioprio_get$pid(0x1, r0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x201f00) 3m19.24377052s ago: executing program 4 (id=6): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="140100002d0001000000000000000000030100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94", @ANYRES32=0x0], 0x114}], 0x1}, 0x11) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40804) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c000000020603000000000000000000070000001c00078008000840000000e2050015000200000008001240000000040500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e657400"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010100000000000000000000000811000300686173683a6e65742c6e65740000000005000500004000000500010007000000"], 0x38}, 0x1, 0x0, 0x0, 0x4048090}, 0x8080) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xffffffffffffff90, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CADT_FLAGS={0x0, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x101002, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0xb96e0453b2f36300) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES16, @ANYBLOB="c258a9cfeae8b8dca4f51ece5ba102389844d3f4cf267379a6f007931a39db0fbf24747e36d88865a83ffcbe74217c28dd8c426248b37de75848f2f551141d4f61968d68de485a4a020e6431b8e6e57787775bfc84dc86c0edc5b0bc0a97e63b72a228f8a9d21a21e0f9f70ab78ee6cfbdeb8873db5aa48aabb522d5e818", @ANYBLOB="bba249dfe9e1fe4649087e887b0a44d5a5b3d51029", @ANYRESDEC], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x842) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(r3, &(0x7f0000000040)="800037bbfa9ba1ce", 0xe80b, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000240)='1\x00', 0x1) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x100000000000002a) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x8946, &(0x7f0000000100)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) write(r6, &(0x7f00000002c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./config\x00', &(0x7f0000000580)='ocfs2_dlmfs\x00', 0x410002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/my_zoned_dev\x00', 0x2, 0x110) 3m13.590896964s ago: executing program 4 (id=19): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000f30904150001da40df000905", @ANYRES16], 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x7, 0x6) 3m11.638078133s ago: executing program 32 (id=19): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000f30904150001da40df000905", @ANYRES16], 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x7, 0x6) 2m39.289407731s ago: executing program 5 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) r3 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r3, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000003c0)={{0x200002, 0x0, 0x4, 0xfffffffe, 'syz0\x00', 0xf5}, 0x4, 0x400, 0x1, 0x0, 0x0, 0x77c3, 'syz1\x00', 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x0, 0x0) prlimit64(r0, 0xb, &(0x7f0000000540)={0xffffffffffffffff, 0x3}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105511, &(0x7f0000000580)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x800000000, 0x100, 0x7ffc, 0xfffffffffffffffe, 0x9, 0x100000002, 0x0, 0x4, 0x0, 0x5, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5, 0x4, 0x4, 0x2, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x3, 0x804000, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb4e, 0x6, 0x2000000, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x8a95, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0xfffffffffffffff7, 0xfffffffe, 0x9, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x1, 0x1000000000000, 0x2, 0x8000000000000003, 0x20000000000f916, 0x8, 0x8, 0x8, 0x4, 0x0, 0x7, 0xb, 0x1, 0x7, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x7ff]}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000a80)={'vcan0\x00'}) r6 = io_uring_setup(0x1, &(0x7f0000000ac0)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r6, 0x20, &(0x7f0000000b40)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000bc0)={&(0x7f0000000c00), 0x1000}, &(0x7f0000000c40)={&(0x7f0000000c80), 0x1000, 0x1}}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r7 = getpgrp(0xffffffffffffffff) getpgrp(r7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5c8000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 2m37.488136841s ago: executing program 5 (id=85): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000540), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0) r4 = syz_open_dev$evdev(&(0x7f00000007c0), 0x2, 0x8000) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000800)={0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0xff) time(&(0x7f0000000840)) connect$inet6(r5, &(0x7f0000000880)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000000080)=[{&(0x7f0000000240)=""/156, 0x9c}], 0x1, &(0x7f0000000b40)=[{&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f0000000bc0)=""/250, 0xfa}, {&(0x7f0000000900)=""/247, 0xf7}, {&(0x7f0000000a00)=""/64, 0x40}, {&(0x7f0000000a40)=""/247, 0xf7}], 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') 2m33.66143877s ago: executing program 5 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) listns(&(0x7f0000000140)={0x20, 0x0, 0x3, 0x14020000, 0x0, 0x1}, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f000001a9c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000339c0)=0x7) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000033a00), 0xe00, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000033a40)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000033a80), 0x2800) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000033ac0)={0x3, 0x9dc5, 0x0, 0x0, 0xef7826c8d995ba17}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000033b40), 0x840, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000033b80), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x4c80, &(0x7f0000033bc0)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "2fc7eecad58f368bf3ba45a6f7874bf0f0a2e2d039d23b33645c7a714b200d1ec427e16f2d87c3a7f0a258b1856e10dbfadd1f9f5b294c68af413bb746e6b0803177028065618aa080c2ca8efe18fbb6c85459e9ff5c1aa9c17498a05220b09c2d859832bf5ae846009f6a415023b9a7110bda56f514841bf04e54bf592d28107037e86729ff5789dd40d9180160cf72a92609650dc97d806d75465c3cbabb3e8f59afcd807086dc9a87048f229a1c8b183c2077b18922f8dcade6cbf835b715887e9a20c69f14468fb321e017c8a2361f5300617d2ff15e5e2df6b8fa425461dc9c997020beed571b01b0ae899a7a21fe7f9dce8b2ff0374cde255fe2cd3444fa236242d0a976de3ceed2abb0bcb9e4580db4bf248fa20f27dc7c9a953b420f032e6fe0de2a657b7903f0a3d4d67908255b1ac3274313a683ad8a328816336d20dbfdc9f262073dade576891220dd05e0cb6e97bb433637adb6f42c3a040a0089d9a86b42dffeba614460c184bd405cf3749fad5a47609eeb5c48f0222ea459597a0fa855c9d6d789ed17235c6cbf62757d54c99a03b777b7af6058a33b32aa49973625747e0ff1d3c4898a1ea7e68807d9be2b9ca09de22790441964131b1e6dbf633f06c23ddb02736a741396cb1c3dbe49eabdad6f662ee642be86560e24bf2578bc93119d19b446587a8455b445e1cbcb86848331888a8a8adb0836628a73c9c41f8501ae67caa0165fca251674fcfd5f78415a4497519f0d4a79ba166a55721c4db05be7155ae7bca92f4fff5cdcf2d581d2da972ee240355984210e5927904ee74bd15da96d23e0b5bb07ce1adf2683032e8ae4dd9dd6f5bd841ef30ccdce954426f1cf29f2f35decb485f4faa36caae23e7d136317dbb6ace192dc0484d5e3cc341dee5041430dcd5f320a9f3679196bd2a2348619c4a55e090cecf0da78fdba2b25a3373a813d5e719ef2fbfea38035828e28d1666b64dbabce44140e9f0c7e8685e69d8192d1953c1dba2c2a471658538ade2e295732c4a23ca63b54252673ea15374da608ff431e56c9b74bc88b858511910a8ff6a294354093449e90994cf70a60cb108e19ad7625c27bc7934076a8a8fa8a14b06b0e94813a9ff3961e251856a0d34b728025121cf045be55d3997ca1ba4643509fb7eb84b1dbf97663f63fbf32b32f92eebff4ff420cd8c45fda163c09aa879283c282ef4bc93d416854ada56921cc6f82a67a3d024c1a828eb8d4c901f6066f8df327f694f828124d880da4f98c66087f8a825b9b01609f980a0f48c471fdcb7696e493a02a7b34420ccddae0e26b8f4db77ee712ccbc480fb8fe625d51ee2ead77637b9f7bd4a70fc21581498915c72ce999eb2a3888ad4c66c5e623d2f9c983f4c3e17714a63af06c222a62671b407a8f30619f1cb8a9efc177a18ceefc0760a27f5001124e81eeff04950364cf1881c03c1cc99b1e5dbc36ec94ed875c54a87dc19143303b2ad34738e683fdfe7e257fa5609e785e3c81dcd387bccfba8d31077b2140b06a361167ab1abb6e8c9b6e7b8918c992a7c4fce8797048bc3eba6ef7f65789b6d59ce4e4dcc5a3d44b9ef24de8996347c79cbaaaaef13dbac1dab9fb6090a757be36cf3e15bcde5bddc318bd42265371ebfe941f63a5d2dbcd9c6103ab91b5c292ae86e4dc6df13194dd81319db2ad7f51fe377196b2b87db9614cd1d572f3df9b518d36aacd8c4f454c1a61fd587642e87e8a4d4029e46064cc730e7b75efae0e6b798184b33765160696e327ce80ad8ec0a5c20e57b07b2cc19f849b1c527994b6631ae61bd9c6703966d141714bffb6cfb7708e2c6669cf33f42c8e8130d73a2bdb42bbd3316e1a2deae59b7bbe6e77518326d11714ac543143c8bc4c9cf39d84b06bf10ad463d7b9d14f5d44d98c78f5bc96793c254a652e300065a0e568234110f4f3d93b584b5767e41cb9d2514a16138d8dd650b885b6ac87ce233957dee5c1d2004fc5882d41ffcc1751d565ad92d04ce0cf0221ac7d7a0441f4024ce74ff4d3df9559026ebb5b5602ee9e8d87f1899d20e61879c417a00321e87ceac1b952e51700d384ed3b07c70fd8be0d61290b6100abc393bfd33f425892509e55350797f139b64b68e357f66a1776504ea67689ca482534308c9c7b76c7f9fbe1d1cc739dee391c0b7a781d6bade90ec2a46f617d436cc7f51eb1c94de092ccf1d7b57c31fc1c8e18b9bab9858792a129dfa62b379d22aec6129065a867bda550337e30edcfc0732a5b69559c8d45270d7df9d06b385c51a05e57280d66f5c02c7ca1f463e6ef6d1d2e3b04c6df77fd88e06197acf4d5287660e90d7b1d5d4b7410d44e36aa3652e86d9b97935fc19459bd1e7f155e497bee58013f9cbef97b669b3d8fbd77a286a50b86aa11e4376e44275297bcdcb252ad8ca4742a6cd66563c4ba6318b765899d853043877b6400d654ba955fa6376857b6307d443168211dde06a156d8908269ab033c9de9546b3cc41583e7cae7038720d909fed58b52f7bc7aba12b1be3a2e23474af919426326556cf37d584c4e905f8d84604fdb192f0993b213107fae21c323d69f3113d2f5d6371a49a40b98030868c824ff0916556044bc32ce80497c46c01e254e2accfd01aeabf18c545b907cd5fd0b00a82c42e644690ad1099dc3ec5e0df8c5d783ec93e6712857137eee4d06762fa12233d1ba4e7bc597d970a434ce615ffe432f6289bd297f7973f29e8460391c44cab29f2e21f639e7aea6c0c7e57a35585573b88ce6a2beed7807278b73a9eb21d82a477f7f9eef24c1cf0b7fddee8b3dfa633cb37c3f1ac53f34acd6dc0e29494d644f9bdce8d65e734fa52d1cdd0f147d48f02000b31fd0dcd2766cf8ea8b92bd340195c6833e4320eaf125ad61fa8772ac380f363fd2b3b5df23aa0e08034cfe5963fada592e851f5b274e6defae6cb1dbc5f29c52855352d8417262780ba7c8040cac21a0fda09a76af7a58b66f9a89d35f7a957548cf49f7117542a2f0f2c1c8bb371eba256aaac009798a97a27a62256fafad3988bb9b577eb00c06d28a91c85aa20f176e44e52b37a8068bfec1434c1277e68619e8459f83359976c81ca49462e1b9abf83fed9d4e08d9fdc6626bd73099ff8c2e95384e0517eff3e02a1882ef5a804989ad5a9536628f3989631f610ba9172c92c44c372ff48d590be9896e741001b3ea511727a1476d706debdea7216e1bf2461fda61a7bc6db99c098fe4e32eafbe2ac15782ddfd1609cec300015b542c835ff195cd779699d8ced1edd571f3734ef6373c526553ee9684674cd5ae1e8f390065ed761257cbb120168dcebacc94f22a15d6bc8444afff61601305c9212f086ae5a322968983568bfaed808fd935a8260709781a58bf3cbc3256e81d272a9c1271b93a1f97feebe77e94912e0361c149076abd1aa186ac38e65d879e92bc58bc7adde9339f712b8a07d798ad573318559a31c1e64354bfc5f3e9a195118cab384d9b7d192305e5fe6e8eaebd7403095e3833fb3a6425e7b8b7ae0515d5cba8a19c2b49e33cd9bedbac96f01c5a24ddc36b35f16cfd55ec584f18ecf7313a812d5d44b6ac02808ab4389e7ed6426454d9f4c69a288d36a211f27c4770cad16daba3c97e0d51a7012ba7ee4881daf21ca720c0a14d54852516c8342989ed328d13366be829416218e0d2cc9c708a06669873b4a7a32e35dbc59d5f7eeebb7fb3c307e84c287c2e3a921e94149a90a56e4c8bcf954844eb7edefea72690c518075cdce72c222961c388ba8cb9e2f881582131cce0898c86ad57795a5984ca55e6159bdfab2f7c1a925301eb6a33bf33baf957f18d648b55e0c613db371343cc7ce89f91423629e644b286bba4d8b4cbb116e30da5f7a4bba8606093fe5d6bad8bc5f98fb1ac476bf8724a8008a725ed3aed86c763f2eac7d77f1ef9a96702e13ec5080bb82606741e08fde37aceb1dd32c11afa92be85ff46ec2010ce17d5cf92e91243ccb1070000002a746ca1f1135b1b0638ffe19c8b31644a08f9f1990685e0f458f096daae910e9f36a83a8ba01dde2b5d0d3097b1cf03be7aee0a8c7c4c8672d45c6310e7d2e5558143ad9e79a9751b8ac54a3e86fdfd9320ef69c7130460e259462be21db94fcbd3181903130f3f982f4c8011bfe62bd5903ad8713281be0fa8de38553ea6c3e566152518bd80fbeb5863f0de7c7cf26606b48b63c89d9f9c798816e7e1e1dbb3946a1048ebf383f117ac9bf565a277086fd9cc0250dd22cf1d2c3cf58fa227f4f2c201be2df79230b6a95333f3a3ded0d11f9b647da9b4cb70fa02631552df57b7a6009b1b36d8f7c9f2fc7ac53912f29e79fdb57acecd431adf2dca1c0e7d31d7ff38ce7b3089416d9ab4f7474f1b68141228d4350ad7541676caf115e6c4eeecc706e0268c2eda740cce7a22e1090fb0216608a13c50316ee056414d0dfce99ab3f9c4619df20d7e0c254c3e9a9717f140b1a4ecdba1ca5ce3bb252083a69bb107338184f55d064c912745aa81588de2299fb9f77201c5ded7cbf572b64c0d6d300344226355d1a4cb8088e43780e01e190e9b877ba14431d115296e31c2cc0266c0df82da2530ac1e094cdfee42fcfdb8ee5d03c251d24d5b0fefafa7b9c2a2e73a814e768d57a5429372dce6266dc547a4c93a05dece1e7601a658d4855843db66ba8ecae9cd1703d66a3aff1be2be77c0ce96772d570c73f88d028eb8716dcb5e49792b39f1a5a4275a4f83d8ae2ea8883bbfaa42050392da86d7a4a22835553cd2fdcd0cca630ad003c4a15ae0b7a7cee875b5a08f0ef70d86187054260001c9698419bf1569b1802439cd3fe320d9272b853e7b34a322a5fbade5cd3ad0e1c4b07d111981494215d3b82c2fe8a7697052a3b7b1ef3fb22d5e33e57c8d422b5e3dc9cf1a5df5401559c56610f44a4e409b12aa82bf661c17a2bb76e469583531f782b55da4eabbb68cb39bf32844398fe0ffb79e4c95e3e3c3ed3e9ac304cf1980b7cde8fcf76966cca196748e4ad7a02debd6ccc4a3e9b8adaa7dc668a76cbd137b2e6fbc673900000100000000009bf5ed16d5f5818535802fa7627a7d352f4216ba3f84481394c0500b7aea67e838d5dd0422eeb940ad42546e1f3c2cd85c53abbaada51b5571323d7ea53d436c2d349befca87909c1dc2a23d2db53ecc272b80896b65fa0cad8854e6b36e052ecbe677024b9614a180fc54c20fac7ed4d16e7ba17a368f0a00a036d23ae4b19ad3d99642ff054850233b60e706a4f575e49234acc76211a5bace9b8417eb6d986dab4bc6b8b510ee0477f6b8738f00709b7f35aac1730017c0037e5c40404d145b527a29500fab1e3c00"}) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000034bc0)={0x3, 0x3, &(0x7f0000034c80)=ANY=[@ANYBLOB="18000002ae5e000000000000000000950000000000000000"], &(0x7f0000034cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) rseq(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000034d00)=ANY=[@ANYRES32=0x1, @ANYRES32=r6, @ANYBLOB='.'], 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2m32.945791728s ago: executing program 5 (id=93): socket$alg(0x26, 0x5, 0x0) close(0x3) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000008700010700000000000000000a0000000600010017000000bbb29da5626f77b380ecba4ff0ae79"], 0x1c}}, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000007c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000880)='\x00', 0x9801) move_mount(r3, &(0x7f00000008c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000940)='./file0/file0\x00', 0x0, 0x80000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000980)='\x00', 0x89901) mount_setattr(r4, &(0x7f00000009c0)='.\x00', 0x9000, &(0x7f0000000a00)={0x0, 0x0, 0x80000, {r4}}, 0x20) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0098ba7d82070071ec25f2f792f6b4ffff6304"}) syz_open_pts(r2, 0x80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) syz_open_dev$video4linux(&(0x7f0000000340), 0x7fff, 0x48b03) close_range(r0, 0xffffffffffffffff, 0x0) 2m28.496776505s ago: executing program 2 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) listns(&(0x7f0000000140)={0x20, 0x0, 0x3, 0x14020000, 0x0, 0x1}, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f000001a9c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000339c0)=0x7) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000033a00), 0xe00, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000033a40)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000033a80), 0x2800) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000033ac0)={0x3, 0x9dc5, 0x0, 0x0, 0xef7826c8d995ba17}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000033b40), 0x840, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000033b80), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x4c80, &(0x7f0000033bc0)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "2fc7eecad58f368bf3ba45a6f7874bf0f0a2e2d039d23b33645c7a714b200d1ec427e16f2d87c3a7f0a258b1856e10dbfadd1f9f5b294c68af413bb746e6b0803177028065618aa080c2ca8efe18fbb6c85459e9ff5c1aa9c17498a05220b09c2d859832bf5ae846009f6a415023b9a7110bda56f514841bf04e54bf592d28107037e86729ff5789dd40d9180160cf72a92609650dc97d806d75465c3cbabb3e8f59afcd807086dc9a87048f229a1c8b183c2077b18922f8dcade6cbf835b715887e9a20c69f14468fb321e017c8a2361f5300617d2ff15e5e2df6b8fa425461dc9c997020beed571b01b0ae899a7a21fe7f9dce8b2ff0374cde255fe2cd3444fa236242d0a976de3ceed2abb0bcb9e4580db4bf248fa20f27dc7c9a953b420f032e6fe0de2a657b7903f0a3d4d67908255b1ac3274313a683ad8a328816336d20dbfdc9f262073dade576891220dd05e0cb6e97bb433637adb6f42c3a040a0089d9a86b42dffeba614460c184bd405cf3749fad5a47609eeb5c48f0222ea459597a0fa855c9d6d789ed17235c6cbf62757d54c99a03b777b7af6058a33b32aa49973625747e0ff1d3c4898a1ea7e68807d9be2b9ca09de22790441964131b1e6dbf633f06c23ddb02736a741396cb1c3dbe49eabdad6f662ee642be86560e24bf2578bc93119d19b446587a8455b445e1cbcb86848331888a8a8adb0836628a73c9c41f8501ae67caa0165fca251674fcfd5f78415a4497519f0d4a79ba166a55721c4db05be7155ae7bca92f4fff5cdcf2d581d2da972ee240355984210e5927904ee74bd15da96d23e0b5bb07ce1adf2683032e8ae4dd9dd6f5bd841ef30ccdce954426f1cf29f2f35decb485f4faa36caae23e7d136317dbb6ace192dc0484d5e3cc341dee5041430dcd5f320a9f3679196bd2a2348619c4a55e090cecf0da78fdba2b25a3373a813d5e719ef2fbfea38035828e28d1666b64dbabce44140e9f0c7e8685e69d8192d1953c1dba2c2a471658538ade2e295732c4a23ca63b54252673ea15374da608ff431e56c9b74bc88b858511910a8ff6a294354093449e90994cf70a60cb108e19ad7625c27bc7934076a8a8fa8a14b06b0e94813a9ff3961e251856a0d34b728025121cf045be55d3997ca1ba4643509fb7eb84b1dbf97663f63fbf32b32f92eebff4ff420cd8c45fda163c09aa879283c282ef4bc93d416854ada56921cc6f82a67a3d024c1a828eb8d4c901f6066f8df327f694f828124d880da4f98c66087f8a825b9b01609f980a0f48c471fdcb7696e493a02a7b34420ccddae0e26b8f4db77ee712ccbc480fb8fe625d51ee2ead77637b9f7bd4a70fc21581498915c72ce999eb2a3888ad4c66c5e623d2f9c983f4c3e17714a63af06c222a62671b407a8f30619f1cb8a9efc177a18ceefc0760a27f5001124e81eeff04950364cf1881c03c1cc99b1e5dbc36ec94ed875c54a87dc19143303b2ad34738e683fdfe7e257fa5609e785e3c81dcd387bccfba8d31077b2140b06a361167ab1abb6e8c9b6e7b8918c992a7c4fce8797048bc3eba6ef7f65789b6d59ce4e4dcc5a3d44b9ef24de8996347c79cbaaaaef13dbac1dab9fb6090a757be36cf3e15bcde5bddc318bd42265371ebfe941f63a5d2dbcd9c6103ab91b5c292ae86e4dc6df13194dd81319db2ad7f51fe377196b2b87db9614cd1d572f3df9b518d36aacd8c4f454c1a61fd587642e87e8a4d4029e46064cc730e7b75efae0e6b798184b33765160696e327ce80ad8ec0a5c20e57b07b2cc19f849b1c527994b6631ae61bd9c6703966d141714bffb6cfb7708e2c6669cf33f42c8e8130d73a2bdb42bbd3316e1a2deae59b7bbe6e77518326d11714ac543143c8bc4c9cf39d84b06bf10ad463d7b9d14f5d44d98c78f5bc96793c254a652e300065a0e568234110f4f3d93b584b5767e41cb9d2514a16138d8dd650b885b6ac87ce233957dee5c1d2004fc5882d41ffcc1751d565ad92d04ce0cf0221ac7d7a0441f4024ce74ff4d3df9559026ebb5b5602ee9e8d87f1899d20e61879c417a00321e87ceac1b952e51700d384ed3b07c70fd8be0d61290b6100abc393bfd33f425892509e55350797f139b64b68e357f66a1776504ea67689ca482534308c9c7b76c7f9fbe1d1cc739dee391c0b7a781d6bade90ec2a46f617d436cc7f51eb1c94de092ccf1d7b57c31fc1c8e18b9bab9858792a129dfa62b379d22aec6129065a867bda550337e30edcfc0732a5b69559c8d45270d7df9d06b385c51a05e57280d66f5c02c7ca1f463e6ef6d1d2e3b04c6df77fd88e06197acf4d5287660e90d7b1d5d4b7410d44e36aa3652e86d9b97935fc19459bd1e7f155e497bee58013f9cbef97b669b3d8fbd77a286a50b86aa11e4376e44275297bcdcb252ad8ca4742a6cd66563c4ba6318b765899d853043877b6400d654ba955fa6376857b6307d443168211dde06a156d8908269ab033c9de9546b3cc41583e7cae7038720d909fed58b52f7bc7aba12b1be3a2e23474af919426326556cf37d584c4e905f8d84604fdb192f0993b213107fae21c323d69f3113d2f5d6371a49a40b98030868c824ff0916556044bc32ce80497c46c01e254e2accfd01aeabf18c545b907cd5fd0b00a82c42e644690ad1099dc3ec5e0df8c5d783ec93e6712857137eee4d06762fa12233d1ba4e7bc597d970a434ce615ffe432f6289bd297f7973f29e8460391c44cab29f2e21f639e7aea6c0c7e57a35585573b88ce6a2beed7807278b73a9eb21d82a477f7f9eef24c1cf0b7fddee8b3dfa633cb37c3f1ac53f34acd6dc0e29494d644f9bdce8d65e734fa52d1cdd0f147d48f02000b31fd0dcd2766cf8ea8b92bd340195c6833e4320eaf125ad61fa8772ac380f363fd2b3b5df23aa0e08034cfe5963fada592e851f5b274e6defae6cb1dbc5f29c52855352d8417262780ba7c8040cac21a0fda09a76af7a58b66f9a89d35f7a957548cf49f7117542a2f0f2c1c8bb371eba256aaac009798a97a27a62256fafad3988bb9b577eb00c06d28a91c85aa20f176e44e52b37a8068bfec1434c1277e68619e8459f83359976c81ca49462e1b9abf83fed9d4e08d9fdc6626bd73099ff8c2e95384e0517eff3e02a1882ef5a804989ad5a9536628f3989631f610ba9172c92c44c372ff48d590be9896e741001b3ea511727a1476d706debdea7216e1bf2461fda61a7bc6db99c098fe4e32eafbe2ac15782ddfd1609cec300015b542c835ff195cd779699d8ced1edd571f3734ef6373c526553ee9684674cd5ae1e8f390065ed761257cbb120168dcebacc94f22a15d6bc8444afff61601305c9212f086ae5a322968983568bfaed808fd935a8260709781a58bf3cbc3256e81d272a9c1271b93a1f97feebe77e94912e0361c149076abd1aa186ac38e65d879e92bc58bc7adde9339f712b8a07d798ad573318559a31c1e64354bfc5f3e9a195118cab384d9b7d192305e5fe6e8eaebd7403095e3833fb3a6425e7b8b7ae0515d5cba8a19c2b49e33cd9bedbac96f01c5a24ddc36b35f16cfd55ec584f18ecf7313a812d5d44b6ac02808ab4389e7ed6426454d9f4c69a288d36a211f27c4770cad16daba3c97e0d51a7012ba7ee4881daf21ca720c0a14d54852516c8342989ed328d13366be829416218e0d2cc9c708a06669873b4a7a32e35dbc59d5f7eeebb7fb3c307e84c287c2e3a921e94149a90a56e4c8bcf954844eb7edefea72690c518075cdce72c222961c388ba8cb9e2f881582131cce0898c86ad57795a5984ca55e6159bdfab2f7c1a925301eb6a33bf33baf957f18d648b55e0c613db371343cc7ce89f91423629e644b286bba4d8b4cbb116e30da5f7a4bba8606093fe5d6bad8bc5f98fb1ac476bf8724a8008a725ed3aed86c763f2eac7d77f1ef9a96702e13ec5080bb82606741e08fde37aceb1dd32c11afa92be85ff46ec2010ce17d5cf92e91243ccb1070000002a746ca1f1135b1b0638ffe19c8b31644a08f9f1990685e0f458f096daae910e9f36a83a8ba01dde2b5d0d3097b1cf03be7aee0a8c7c4c8672d45c6310e7d2e5558143ad9e79a9751b8ac54a3e86fdfd9320ef69c7130460e259462be21db94fcbd3181903130f3f982f4c8011bfe62bd5903ad8713281be0fa8de38553ea6c3e566152518bd80fbeb5863f0de7c7cf26606b48b63c89d9f9c798816e7e1e1dbb3946a1048ebf383f117ac9bf565a277086fd9cc0250dd22cf1d2c3cf58fa227f4f2c201be2df79230b6a95333f3a3ded0d11f9b647da9b4cb70fa02631552df57b7a6009b1b36d8f7c9f2fc7ac53912f29e79fdb57acecd431adf2dca1c0e7d31d7ff38ce7b3089416d9ab4f7474f1b68141228d4350ad7541676caf115e6c4eeecc706e0268c2eda740cce7a22e1090fb0216608a13c50316ee056414d0dfce99ab3f9c4619df20d7e0c254c3e9a9717f140b1a4ecdba1ca5ce3bb252083a69bb107338184f55d064c912745aa81588de2299fb9f77201c5ded7cbf572b64c0d6d300344226355d1a4cb8088e43780e01e190e9b877ba14431d115296e31c2cc0266c0df82da2530ac1e094cdfee42fcfdb8ee5d03c251d24d5b0fefafa7b9c2a2e73a814e768d57a5429372dce6266dc547a4c93a05dece1e7601a658d4855843db66ba8ecae9cd1703d66a3aff1be2be77c0ce96772d570c73f88d028eb8716dcb5e49792b39f1a5a4275a4f83d8ae2ea8883bbfaa42050392da86d7a4a22835553cd2fdcd0cca630ad003c4a15ae0b7a7cee875b5a08f0ef70d86187054260001c9698419bf1569b1802439cd3fe320d9272b853e7b34a322a5fbade5cd3ad0e1c4b07d111981494215d3b82c2fe8a7697052a3b7b1ef3fb22d5e33e57c8d422b5e3dc9cf1a5df5401559c56610f44a4e409b12aa82bf661c17a2bb76e469583531f782b55da4eabbb68cb39bf32844398fe0ffb79e4c95e3e3c3ed3e9ac304cf1980b7cde8fcf76966cca196748e4ad7a02debd6ccc4a3e9b8adaa7dc668a76cbd137b2e6fbc673900000100000000009bf5ed16d5f5818535802fa7627a7d352f4216ba3f84481394c0500b7aea67e838d5dd0422eeb940ad42546e1f3c2cd85c53abbaada51b5571323d7ea53d436c2d349befca87909c1dc2a23d2db53ecc272b80896b65fa0cad8854e6b36e052ecbe677024b9614a180fc54c20fac7ed4d16e7ba17a368f0a00a036d23ae4b19ad3d99642ff054850233b60e706a4f575e49234acc76211a5bace9b8417eb6d986dab4bc6b8b510ee0477f6b8738f00709b7f35aac1730017c0037e5c40404d145b527a29500fab1e3c00"}) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000034bc0)={0x3, 0x3, &(0x7f0000034c80)=ANY=[@ANYBLOB="18000002ae5e000000000000000000950000000000000000"], &(0x7f0000034cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) rseq(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000034d00)=ANY=[@ANYRES32=0x1, @ANYRES32=r6, @ANYBLOB='.'], 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2m27.67225119s ago: executing program 2 (id=104): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000540), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0) r4 = syz_open_dev$evdev(&(0x7f00000007c0), 0x2, 0x8000) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000800)={0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0xff) time(&(0x7f0000000840)) connect$inet6(r5, &(0x7f0000000880)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000000080)=[{&(0x7f0000000240)=""/156, 0x9c}], 0x1, &(0x7f0000000b40)=[{&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f0000000bc0)=""/250, 0xfa}, {&(0x7f0000000900)=""/247, 0xf7}, {&(0x7f0000000a00)=""/64, 0x40}, {&(0x7f0000000a40)=""/247, 0xf7}], 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') 2m27.415486712s ago: executing program 5 (id=105): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) connect$inet6(r2, &(0x7f0000000f80)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback, 0x0, 0x0, 0x2}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000013c0)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 2m26.895195089s ago: executing program 5 (id=107): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000001640)=""/102392, 0x18ff8) r3 = openat$zero(0xffffffffffffff9c, &(0x7f000001a640), 0x101802, 0x0) ioctl$FE_SET_VOLTAGE(r3, 0x6f43, &(0x7f000001a680)=0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f000001a6c0), 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f000001a700), 0xc2900, 0x0) ioprio_get$pid(0x1, r0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x201f00) 2m25.672605197s ago: executing program 33 (id=107): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000001640)=""/102392, 0x18ff8) r3 = openat$zero(0xffffffffffffff9c, &(0x7f000001a640), 0x101802, 0x0) ioctl$FE_SET_VOLTAGE(r3, 0x6f43, &(0x7f000001a680)=0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f000001a6c0), 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f000001a700), 0xc2900, 0x0) ioprio_get$pid(0x1, r0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x201f00) 2m24.17343073s ago: executing program 2 (id=111): syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000640)={0x74, 0x0, 0x368}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000006c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}}, 0x20008050) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./nfsd\x00', &(0x7f0000000440)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000080)='cgroup\x00', 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x700, 0x1, 0x7, 0x100, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x66, 0x0, 0x2, 0x29, 0x0, @empty, @empty}}}}) 2m20.421125371s ago: executing program 2 (id=116): socket$alg(0x26, 0x5, 0x0) close(0x3) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000008700010700000000000000000a0000000600010017000000bbb29da5626f77b380ecba4ff0ae79"], 0x1c}}, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000007c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000880)='\x00', 0x9801) move_mount(r3, &(0x7f00000008c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000940)='./file0/file0\x00', 0x0, 0x80000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000980)='\x00', 0x89901) mount_setattr(r4, &(0x7f00000009c0)='.\x00', 0x9000, &(0x7f0000000a00)={0x0, 0x0, 0x80000, {r4}}, 0x20) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0098ba7d82070071ec25f2f792f6b4ffff6304"}) syz_open_pts(r2, 0x80) syz_open_dev$video4linux(&(0x7f0000000340), 0x7fff, 0x48b03) close_range(r0, 0xffffffffffffffff, 0x0) 2m20.09762712s ago: executing program 2 (id=117): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) connect$inet6(r2, &(0x7f0000000f80)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback, 0x0, 0x0, 0x2}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000013c0)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 2m16.609030504s ago: executing program 2 (id=120): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x4, 0x0, 0x4, 0xfffffffc}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffff8, 0x5, 0xfffffffe, 0x1, 0x345}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x70}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000340)="b0", 0x82, 0x40811, &(0x7f0000000380)={0xa, 0x4e23, 0x1ff, @loopback, 0x2}, 0x1c) 2m15.964255315s ago: executing program 34 (id=120): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x4, 0x0, 0x4, 0xfffffffc}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffff8, 0x5, 0xfffffffe, 0x1, 0x345}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x70}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000340)="b0", 0x82, 0x40811, &(0x7f0000000380)={0xa, 0x4e23, 0x1ff, @loopback, 0x2}, 0x1c) 20.669467481s ago: executing program 3 (id=387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000008c0)=r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000005c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000640)="0503e5fdd1fd120000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000680)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 15.332443823s ago: executing program 3 (id=395): r0 = syz_open_dev$dri(&(0x7f00000007c0), 0x5, 0x52b200) r1 = syz_open_dev$dri(&(0x7f0000000800), 0x7f, 0x240200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000840)={0x0, 0x0, r1}) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="d800000019008111e0020f060d8107040a60000060020000000455a12a00090026000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) syz_io_uring_setup(0x7f03, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000600)=0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x34, 0x10, r6, 0x0, 0x0, 0x0, 0x2002, 0x0, {0x2}}) (async, rerun: 64) r7 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) r8 = accept$inet(r7, &(0x7f0000000740)={0x2, 0x0, @private}, &(0x7f0000000780)=0x10) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) (async, rerun: 32) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x2241, 0x0) (async, rerun: 32) r10 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r10, 0xc138fd09, &(0x7f00000008c0)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x80600, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '0\x00'}}, [@mirror={0x0, 0x400, 0x0, 0x80, 'mirror\x00', {'core 1 64', 0x20, 0x2, [{0x20, {@ram={'/dev/ram', 0x0}, 0x20, '4096'}}, {0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '4096'}}], ' 1 handle_errors'}}]}) (async) r11 = syz_open_dev$sg(&(0x7f0000000100), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000e, 0x11, r11, 0xdbeba000) (async) r12 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r12, 0x28, 0x2, &(0x7f0000000140)=0x33, 0x8) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x5005}) (async, rerun: 64) r13 = socket$inet(0x2, 0x2, 0x0) (rerun: 64) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', 0x1}) (async, rerun: 32) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000180)=@urb_type_interrupt={0x1, {0x9, 0x1}, 0x0, 0x20, &(0x7f0000000240)="df86a1db6938cb484c98c5564af6e5909d00b998fd6e7b0d0425f0", 0x1b, 0x58fc381d, 0x203, 0x0, 0x3302, 0x7, 0x0}) (rerun: 32) r14 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r14) (async, rerun: 64) r15 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) (rerun: 64) syz_usb_control_io(r15, 0x0, 0x0) (async) syz_usb_control_io$hid(r15, 0x0, 0x0) (async) syz_usb_control_io(r14, 0x0, 0x0) (async) syz_usb_ep_write(r15, 0x84, 0x43, &(0x7f00000006c0)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34cfa00000080977dae8d64a30e92cd51117c4a71e2655197c34fa3c9f527573f6500e804c00058e6c7d1eaff46e1") write$tun(r9, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x115) 14.04908703s ago: executing program 1 (id=400): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) r3 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r3, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000003c0)={{0x200002, 0x0, 0x4, 0xfffffffe, 'syz0\x00', 0xf5}, 0x4, 0x400, 0x1, 0x0, 0x0, 0x77c3, 'syz1\x00', 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x0, 0x0) prlimit64(r0, 0xb, &(0x7f0000000540)={0xffffffffffffffff, 0x3}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105511, &(0x7f0000000580)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x800000000, 0x100, 0x7ffc, 0xfffffffffffffffe, 0x9, 0x100000002, 0x0, 0x4, 0x0, 0x5, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5, 0x4, 0x4, 0x2, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x3, 0x804000, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb4e, 0x6, 0x2000000, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x8a95, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0xfffffffffffffff7, 0xfffffffe, 0x9, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x1, 0x1000000000000, 0x2, 0x8000000000000003, 0x20000000000f916, 0x8, 0x8, 0x8, 0x4, 0x0, 0x7, 0xb, 0x1, 0x7, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x7ff]}) socket$can_j1939(0x1d, 0x2, 0x7) r5 = io_uring_setup(0x1, &(0x7f0000000ac0)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r5, 0x20, &(0x7f0000000b40)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000bc0)={&(0x7f0000000c00), 0x1000}, &(0x7f0000000c40)={&(0x7f0000000c80), 0x1000, 0x1}}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r6 = getpgrp(0xffffffffffffffff) getpgrp(r6) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5c8000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 14.04476189s ago: executing program 7 (id=401): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="6401000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x8080) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="05000000050000"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="23000100000000001a00128008000100707070000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0005000000"], 0x40}}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f0000001180)={&(0x7f00000011c0)=""/57, 0x39}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r2}, 0xc) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='d\x00\x00', @ANYBLOB="080026bd7000fddbdf25070000000800040003000000080007000000000014000500ff01000000000000000000000000000108000400020000001400060000000000000000000000ffff0a010102080007000000000408000800ac1414aaac83fb216a8ceb264dcb35eb3d5202e824020dd019838d58799ea9b8f210222ab803781f0b07585dc1fd46994847ff624bdb116a719972dee0a24b36ab0a29a3d85232377e0df6c8bed0379c2f0d5c3accfd95490187dac697dcd8720d1ae802395225b4ee7e3e634fbc973c286ff3996fd04fa181964de7115927b9175533"], 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x8000880) mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000c80)='./proc\x00', &(0x7f0000000cc0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000d40)="522db49c", 0x4) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x883, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xd, 0x4}}, @TCA_U32_SEL={0x14, 0x5, {0xb, 0xc, 0x9, 0x7, 0x0, 0xefdf, 0x2, 0x84c}}]}}]}, 0x4c}}, 0x24040084) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r7, &(0x7f0000000040)='3', 0x4e) write$P9_RSYMLINK(r7, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x0, 0x4, 0x3}}, 0x14) 12.663183141s ago: executing program 1 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000002380)='./debug\x00', &(0x7f00000023c0)='debugfs\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fchdir(r1) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x80, 0x0) syz_usb_disconnect(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000002400)='./sys_sec\x00', 0x2, 0x0) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_VERSION(r2, 0xc0046209, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000280)="94", 0xf000}, {0x0}], 0x2) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f00000002c0)) r5 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f00000006c0)='espintcp', 0x8) mount(0x0, &(0x7f0000000740)='./sys_sec\x00', &(0x7f0000000780)='exofs\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000008c0)='./sys_sec/tomoyo/domain_policy\x00', 0x1, 0x0) read(r2, &(0x7f0000000800)=""/18, 0x12) syz_open_dev$midi(&(0x7f0000000840), 0x2, 0x40c01) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x60240) 12.205355562s ago: executing program 3 (id=404): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x61, 0x71, 0xb6, 0x10, 0x424, 0xcf30, 0x3527, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x8, 0x0, 0xf, "", [{{0x9, 0x4, 0xf6, 0xff, 0x0, 0x52, 0xe1, 0xef, 0xb}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) 12.200739323s ago: executing program 7 (id=405): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000019200)={0x5, 0xbf, 0x8001, 0x100, 0x49, 0x20, 0xa}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) r2 = getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = creat(&(0x7f0000019240)='./file0\x00', 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000019280)={0x100000, 0x70, 0x0, {r3}}, 0x20) sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r5, &(0x7f00000001c0)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f00000191c0)=0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000192c0)={0x0, 0x0, &(0x7f0000019300)={&(0x7f0000019340)=ANY=[@ANYBLOB="140000002d0013472d"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) timer_create(0x3, &(0x7f0000019380)={0x0, 0x21}, &(0x7f00000193c0)) timer_settime(0x0, 0x1, &(0x7f0000019400)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000019440)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r7 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000019480)={0x1, &(0x7f00000194c0)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) readv(0xffffffffffffffff, 0x0, 0x0) tkill(r7, 0x7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000019500)={0x1, &(0x7f0000019540)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) wait4(0x0, 0x0, 0x3, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) 11.176141273s ago: executing program 7 (id=408): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b00)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd3b, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0xf}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) shutdown(r1, 0x0) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000f00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0xfc, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a5dd1db1377823922dc9e262b8db839c0356891129f9ae4c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "215fcc18af59cdadc761339432e73804ada3872cb7f4c096"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b218e3832a11699533d95bb1ebc5f3d3d98c5e7b13526365"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x48, &(0x7f00000004c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}]}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000580)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000640)=0x84) dup(r0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000009c0)=""/47, &(0x7f0000000a00)=0x2f) 10.519432928s ago: executing program 1 (id=413): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002780)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x50) pipe2(0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x18140, 0x0) socket$inet6(0xa, 0x80003, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c2) mkdir(&(0x7f0000000400)='./file0\x00', 0x1f8) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@uid_eq}, {@appraise}, {@subj_role={'subj_role', 0x3d, 'lowerdir'}}, {@obj_role={'obj_role', 0x3d, '/dev/net/tun\x00'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@euid_lt}]}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi2\x00', 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000340)={'dvmrp0\x00', 0xe43986f95b0e4309}) ioctl$TUNGETSNDBUF(r5, 0x400454dc, &(0x7f00000003c0)) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x80) 9.716582779s ago: executing program 1 (id=414): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000500)=0xfffffff7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='./cgroup\x00') syz_usb_connect(0x2, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="120180004107f540f30c7593de1a000000010902240001000000000904000002bee4f9000905030000000000000905", @ANYRESDEC], 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x8800000) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setns(0xc9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="1420007e", @ANYRES16=0x0, @ANYBLOB="090329bd7000fbdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xff, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000040000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000002c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x4, 0x9, 0xfffffffffffffff7, 0x80000000, 0x100000001]}, &(0x7f0000000080)=0x78) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x200000b, 0x31, 0xffffffffffffffff, 0x2d23000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 9.5387666s ago: executing program 6 (id=415): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x6000, 0x0) open(&(0x7f0000000080)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000340)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000019340)) getpid() socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019400)={0x10, 0x4, &(0x7f00000194c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000000e000000"], &(0x7f0000019500)='GPL\x00', 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000019540)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000195c0)={@map=r5, r4, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000019600)={r5, &(0x7f0000019640), &(0x7f0000019680)=@tcp6=r3}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) 9.425575048s ago: executing program 7 (id=416): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000a40), 0x8) close_range(r0, r1, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20000000) socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socket$inet(0xa, 0x801, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 8.329632793s ago: executing program 6 (id=417): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900ff070000740000001400040073797a6b616c6c65723000000000000005005300de512aaa7efbce00000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/binder1\x00', 0x1807, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000a00)}) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) capset(&(0x7f0000000b00)={0x20080522}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="9feb01001800"/15], &(0x7f0000000c40)=""/226, 0x1b, 0xe2}, 0x28) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000d40), 0x9) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000d80), 0x82002, 0x0) write$dsp(r5, &(0x7f0000000dc0)='F', 0x1) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000e00)=0x10004) openat$cgroup_procs(r4, &(0x7f0000000e40)='cgroup.threads\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000ec0)='./mydev\x00', &(0x7f0000000f00)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./mydev/v4l-touch0\x00', 0x2, 0x0) preadv(r6, &(0x7f0000000f80)=[{&(0x7f0000000fc0)=""/166, 0x1f8}], 0x1, 0xfffffff7, 0xc84d) 8.298255477s ago: executing program 3 (id=418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000feffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffff7f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2b, 0x801, 0x0) bind$netlink(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000380)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40) (fail_nth: 2) 7.241163228s ago: executing program 3 (id=419): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x20000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) read$msr(r2, &(0x7f0000000680)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) semop(0x0, &(0x7f0000019680)=[{0x1, 0x8}, {0x0, 0xc, 0x1000}], 0x2) socket(0x1e, 0x1, 0x0) r3 = creat(&(0x7f00000196c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x16a) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/crypto/af_alg_restrict\x00', 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000)=0x4, 0x4) write(r5, &(0x7f00000002c0)='0\n\x00', 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000380)="000102030405060708090a0b0c0d0e0f", 0x10) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="0102030405060708090a0b0c0d0e0f101112131415", 0x15}], 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001701000003000000010b00000000000028000000000000000000000000000000001e0000000000000000"]}, 0x8000) read$alg(r7, &(0x7f00000004c0)=""/128, 0x80) 6.728123511s ago: executing program 0 (id=420): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x48001, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x80002000}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r1, 0x84, 0x81, &(0x7f00000003c0)={0x0, 0x1ff}, 0x8) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x8) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r5) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xf}, {0xffe0, 0xb}, {0xfff1, 0xffff}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./mnt\x00', 0x1ff) mount(&(0x7f0000000980)=@filename='ubi0_0\x00', &(0x7f00000009c0)='./mnt\x00', &(0x7f0000000a00)='ubifs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x542, 0x0) pwritev2(r7, &(0x7f0000000a80)=[{&(0x7f0000000ac0)=')', 0x1}], 0x1, 0x2, 0x0, 0xa1) ioctl$KVM_CAP_X86_GUEST_MODE(r7, 0x4068aea3, &(0x7f0000000b00)) sendmsg$nl_route_sched(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x20, {0x0, 0x0, 0x74, r6, {0x0, 0x3}, {0x4, 0xb}, {0x9, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x30000080) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000c40)={r8, r2, 0x2, 0x7c, &(0x7f0000000d00)="b775b5434e25982c793d33b023a8f9a4884f568f7ffe678b464aae307aab16194f44d1e2205868a6d0a0a1e959dc2a76778a8a36e2088ed398eb3395ee8feb1a5e109f17762b56545eee22de2f35a8297836e7065c4fab9dd5d7ecf129b3e1ec7f202850a322c0c621a6728ccb6ae811819b9e0fce3a935a6987cfc3", 0x1, 0x8, 0xd, 0x7, 0x1ff, 0x0, 0x1, 'syz1\x00'}) mount$9p_virtio(&(0x7f0000000d80), &(0x7f0000000dc0)='.\x00', &(0x7f0000000e00), 0x4, &(0x7f0000000e40)=ANY=[@ANYBLOB='trans=virtio,cache=0x00']) sendto$inet(r1, &(0x7f0000000480)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f00000004c0)={0x2, 0x4e22, @remote}, 0x10) socket(0x6, 0x803, 0x80000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1f9) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) 6.460701324s ago: executing program 6 (id=421): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x20001) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x10, 0x0) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f0000000240)=0xd0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x3, 0x2}) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f"], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x16c, &(0x7f00000002c0)=ANY=[]) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x80000) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x8000000) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.321805872s ago: executing program 7 (id=422): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/devices/netdevsim0/new_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='4', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000740), 0x400000000000041, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0xd1, 0xa0, 0x5e, 0x20, 0xccd, 0x102, 0x890e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x54, 0x40, 0x1, "", [{{0x9, 0x4, 0xbc, 0x80, 0x0, 0xc, 0xf1, 0xc7, 0x7f}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$kvm(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000002c0)={0xf0f017, 0x3}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) symlink(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)=""/83, 0x53) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000840)={0x0, 0x5, 0x30}, 0xc) 6.108401112s ago: executing program 0 (id=423): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x13ec, 0x6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x41, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="00a861000000ec91"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.25684609s ago: executing program 1 (id=424): syz_usb_connect$uac3(0x3, 0xb1, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000080c200b1040001f02030109029f0003010d5000080b0102012130010904000000f90030000a240c000000000040000d240706050a04000407000000132403020504020604810000007f008000ff0711240a05"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f00000003c0)=""/102392, 0x18ff8) r4 = syz_create_resource$futex(&(0x7f0000000100)=0x2) futex(r4, 0xb, 0x1, &(0x7f00000193c0), 0x0, 0x0) sched_setaffinity(r1, 0x9, &(0x7f0000000340)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xa, &(0x7f0000019500)=@framed={{0x18, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8, 0x0, 0x1}, @initr0, @exit]}, &(0x7f0000019580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000019440)={0x0, 0x0, &(0x7f0000019480)={&(0x7f00000194c0)=ANY=[@ANYBLOB="3000000041000f01fefeffff00000000017c0000040042801400018006000600800a000008000900", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_xfrm(r5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000000), 0x10) listen(r7, 0xfffffffe) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000380)={0x28, 0x0, 0x0, @local}, 0x10) writev(r8, &(0x7f0000019400)=[{&(0x7f00000195c0)="c2db", 0x2}], 0x1) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000019600)=ANY=[@ANYBLOB="120190cf00000010532b230040000102030109"], 0x0) 3.832373439s ago: executing program 0 (id=425): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) connect$inet6(r2, &(0x7f0000000f80)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=@newsa={0x110, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x110}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback, 0x0, 0x0, 0x2}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000013c0)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 3.829131606s ago: executing program 3 (id=426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001940)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000019c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6, 0x9}, {0x6, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6363, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0xffffffff, 0xfffffffc, 0x408, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x2000800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001b00)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b40), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001c40), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100010000000000000700008500000075000000850000007d0000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x11, '\x00', r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r11 = openat$dm_control(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$DM_DEV_CREATE(r11, 0xc138fd03, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r11, 0xc138fd09, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r12}, [@snapshot={0x0, 0x2018, 0x0, 0x80, 'snapshot\x00', {@ram={'/dev/ram', 0x1}, 0x20, @ram_num={'1:', 0x1}, 0x20, 'P', 0x20, '16', ' 2 discard_zeroes_cow discard_passdown_origin'}}]}) ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, &(0x7f00000005c0)) ioctl$DM_TABLE_LOAD(r11, 0xc138fd09, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0x10, 0x0, 0x0, @by_dev={r12}, [@writecache={0x0, 0x1000, 0x0, 0x60, 'writecache\x00', {0x73, 0x20, @ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, '4096', 0x20, '2 autocommit_time 100'}}]}) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000001c80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r14, {0x0, 0xd}, {0xffff, 0xb}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x88000}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001dc0)={'syzkaller0\x00'}) 3.76649604s ago: executing program 0 (id=427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000feffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffff7f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2b, 0x801, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x4c2) r2 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000040)={0x0, 0xa355, 0x10000, 0x2, 0x15a}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000240)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f00000003c0)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000680)={0x0, 0x1, 0x1f00, 0x1, 0x255, 0x0, r2}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x6, 0x15e, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000004, 0x142, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8256, 0x2, 0x3, 0x1e9}}], 0x1, &(0x7f0000000b00)={0x2e, 0x8, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r6, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000b80)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) bind$netlink(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000380)={0x1c, r11, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40) 3.473943806s ago: executing program 1 (id=428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100283d7000fddbdf250c00000020000580080001007564709300e2e1522d4a9306001400028008000500ff0f00"], 0x34}}, 0x24004084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x90) syz_create_resource$futex(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000001080)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) getrandom(&(0x7f000001a080)=""/298, 0xffffffea, 0x0) r5 = syz_create_resource$binfmt(&(0x7f000001a1c0)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) r7 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r8, 0xc00c620f, &(0x7f0000000240)={r7}) prlimit64(0x0, 0xd, &(0x7f0000000380)={0x5, 0x100088b}, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 3.054966007s ago: executing program 6 (id=429): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000005200070003000000000000000a"], 0x20}}, 0x0) 2.450226393s ago: executing program 7 (id=430): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f00000006c0)) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./proc\x00', 0x1d8) setuid(0xee01) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001014d9ec2cbd7000080003000100000008004a000100000008004b001300000008004c0001000000080001000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) close(r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, r6, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) listen(r7, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000680)=@nullb, 0xee01, &(0x7f0000000740)) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f00000004c0)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r7, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="ecaea0e2f3f54fa19c0d8e43f78a38f594796adf2377d06cca0df746ac2b2d1e90647e50060ae96f956bed08902aec75b469b7c3b66c413c2e1c5f470563c6db8a10d9fd44593ca8d32d8895f440e58b682104877c866f358f927f430b643461bd721d267ee414949cf41fd64a99f1bec522eeaa0b06633dc85acc65c261487d61f28dcf780cc882d17175e65da2dc134c300610c7958e7b90ee6d0d3173be7c82d1e0fddc64"], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40045) recvfrom(r8, &(0x7f00000000c0)=""/72, 0x48, 0x101, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000700)={0x0, 0x3}, 0x10, 0x0) memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) 2.373714687s ago: executing program 6 (id=431): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002780)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x50) pipe2(0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x18140, 0x0) socket$inet6(0xa, 0x80003, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c2) mkdir(&(0x7f0000000400)='./file0\x00', 0x1f8) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@uid_eq}, {@appraise}, {@subj_role={'subj_role', 0x3d, 'lowerdir'}}, {@obj_role={'obj_role', 0x3d, '/dev/net/tun\x00'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@euid_lt}]}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi2\x00', 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000340)={'dvmrp0\x00', 0xe43986f95b0e4309}) ioctl$TUNGETSNDBUF(r5, 0x400454dc, &(0x7f00000003c0)) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) 2.373381467s ago: executing program 0 (id=432): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x80000100008b}, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000540)={0x4, [[0x4, 0x9, 0x1, 0x553, 0xe, 0x7, 0x4, 0x9], [0xe, 0x5, 0x8, 0x24a, 0x101, 0x236, 0x3, 0x5], [0x401, 0x7fffffff, 0x3, 0x7, 0x6b37, 0x9, 0x5]], '\x00', [{0x3, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x196f4080, 0x9e06, 0x1}, {0x7, 0xfffffffd, 0x0, 0x1, 0x1}, {0x6, 0x4, 0x0, 0x0, 0x1}, {0xcee8, 0x12c4c555, 0x1, 0x1}, {0x3, 0x8, 0x0, 0x0, 0x1}, {0x6, 0x3d0, 0x1, 0x0, 0x1, 0x1}, {0x6, 0xeae, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x40, 0x1, 0x0, 0x0, 0x1}, {0x5, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x800, 0x0, 0x1}, {0x2, 0x3, 0x1, 0x1, 0x1, 0x1}], '\x00', 0x8}) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000840)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000880), 0x2, 0x4a102) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000900)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="100000000400000008000000020000"], 0x50) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000980)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f00000009c0), 0x400000000000ec0, 0x2, &(0x7f0000000a00)={0x77359400}) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000000a40)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20004008, &(0x7f0000000a80)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000ac0)=0x69ba, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r4) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x5e, 0x4, 0x5}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c00)) sendmmsg(r3, &(0x7f0000000c40), 0x0, 0x200088d1) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000c80)=0x5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newlink={0x24, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfd3fb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_IFALIASn={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x804) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.327871009s ago: executing program 6 (id=433): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000200), 0x12) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000300)=0x1f11, 0x12) 0s ago: executing program 0 (id=434): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xd) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000240), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000280)={&(0x7f00000002c0)=[{0x0, 0x811, 0x0, 0x0}], 0x1}) kernel console output (not intermixed with test programs): 489): avc: denied { write } for pid=6681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.680317][ T6702] rxe_eth0 speed is unknown, defaulting to 1000 [ 153.848199][ T5727] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 153.848352][ T5727] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 82 [ 153.878097][ T5727] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 153.878168][ T5727] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 153.878234][ T5727] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 153.908536][ T5727] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 153.914020][ T5727] usb 2-1: USB disconnect, device number 4 [ 153.945634][ T5727] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 153.961447][ T5727] keyspan 2-1:0.133: device disconnected [ 154.041602][ T30] audit: type=1400 audit(1792615336.049:490): avc: denied { write } for pid=6708 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.147592][ T5265] 8021q: adding VLAN 0 to HW filter on device eth12 [ 154.563758][ T6454] veth0_vlan: entered promiscuous mode [ 154.597286][ T6454] veth1_vlan: entered promiscuous mode [ 154.604272][ T30] audit: type=1400 audit(1792615336.609:491): avc: denied { create } for pid=6726 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 154.605004][ T6727] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 154.605016][ T6727] audit: out of memory in audit_log_start [ 154.715001][ T6454] veth0_macvtap: entered promiscuous mode [ 154.721708][ T6454] veth1_macvtap: entered promiscuous mode [ 154.753257][ T6731] netlink: 52 bytes leftover after parsing attributes in process `syz.1.157'. [ 154.860937][ T6454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.885006][ T6454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.999849][ T6736] kvm: user requested TSC rate below hardware speed [ 156.240414][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.240453][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.240473][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.240491][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.368042][ T323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.368064][ T323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.616937][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.616956][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.065761][ T30] audit: type=1400 audit(1792615340.069:492): avc: denied { write } for pid=6745 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.217043][ T30] audit: type=1400 audit(1792615340.219:493): avc: denied { write } for pid=6770 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.249529][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 158.409055][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 158.409642][ T10] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 158.410623][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 158.410638][ T10] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 158.410651][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 158.414904][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.414917][ T10] usb 7-1: Product: syz [ 158.414926][ T10] usb 7-1: Manufacturer: syz [ 158.414935][ T10] usb 7-1: SerialNumber: syz [ 158.418031][ T10] usb 7-1: config 0 descriptor?? [ 158.629113][ T10] gs_usb 7-1:0.0: Couldn't send data format (err=-71) [ 158.629150][ T10] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 158.658275][ T10] usb 7-1: USB disconnect, device number 2 [ 159.127583][ T6779] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 159.586482][ T5603] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 159.728576][ T30] audit: type=1400 audit(1792615341.719:494): avc: denied { setopt } for pid=6777 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.639722][ T5603] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 160.643922][ T5603] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 160.643946][ T5603] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.643964][ T5603] usb 2-1: config 0 has no interface number 0 [ 160.643993][ T5603] usb 2-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.659013][ T5603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.659033][ T5603] usb 2-1: Product: syz [ 160.659046][ T5603] usb 2-1: Manufacturer: syz [ 160.659059][ T5603] usb 2-1: SerialNumber: syz [ 160.694655][ T5603] usb 2-1: config 0 descriptor?? [ 160.875917][ T6798] FAULT_INJECTION: forcing a failure. [ 160.875917][ T6798] name failslab, interval 1, probability 0, space 0, times 0 [ 160.875954][ T6798] CPU: 0 UID: 0 PID: 6798 Comm: syz.0.168 Not tainted syzkaller #0 PREEMPT(full) [ 160.875974][ T6798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 160.875984][ T6798] Call Trace: [ 160.875991][ T6798] [ 160.875998][ T6798] dump_stack_lvl+0x100/0x190 [ 160.876031][ T6798] should_fail_ex.cold+0x5/0xa [ 160.876053][ T6798] ? __netlink_lookup+0x692/0x950 [ 160.876075][ T6798] should_failslab+0xc2/0x120 [ 160.876104][ T6798] kmem_cache_alloc_noprof+0x92/0x6a0 [ 160.876131][ T6798] ? skb_clone+0x190/0x400 [ 160.876156][ T6798] skb_clone+0x190/0x400 [ 160.876179][ T6798] netlink_deliver_tap+0xaed/0xcc0 [ 160.876205][ T6798] netlink_unicast+0x6ff/0x950 [ 160.876229][ T6798] ? __pfx_netlink_unicast+0x10/0x10 [ 160.876256][ T6798] netlink_sendmsg+0xa02/0x1020 [ 160.876281][ T6798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.876309][ T6798] ? selinux_socket_sendmsg+0x198/0x2f0 [ 160.876341][ T6798] ? ____sys_sendmsg+0xa4d/0xbe0 [ 160.876366][ T6798] ____sys_sendmsg+0xa4d/0xbe0 [ 160.876390][ T6798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.876411][ T6798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.876442][ T6798] ? lock_acquire+0x1d1/0x380 [ 160.876464][ T6798] ? get_pid_task+0x2a/0x250 [ 160.876492][ T6798] ___sys_sendmsg+0x190/0x1e0 [ 160.876521][ T6798] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.876548][ T6798] ? get_pid_task+0x106/0x250 [ 160.876584][ T6798] ? find_held_lock+0x2b/0x80 [ 160.876617][ T6798] __sys_sendmsg+0x160/0x210 [ 160.876639][ T6798] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.876676][ T6798] do_syscall_64+0x123/0x790 [ 160.876697][ T6798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.876717][ T6798] RIP: 0033:0x7f9f7b99f559 [ 160.876733][ T6798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.876750][ T6798] RSP: 002b:00007f9f79bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.876769][ T6798] RAX: ffffffffffffffda RBX: 00007f9f7bc25fa0 RCX: 00007f9f7b99f559 [ 160.876782][ T6798] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 160.876794][ T6798] RBP: 00007f9f79bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 160.876805][ T6798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.876815][ T6798] R13: 00007f9f7bc26038 R14: 00007f9f7bc25fa0 R15: 00007ffd658faad8 [ 160.876841][ T6798] [ 162.343711][ T5603] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 162.343868][ T5603] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 82 [ 162.348385][ T5603] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 162.349042][ T5603] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 162.349107][ T5603] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 162.351193][ T5603] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 162.356806][ T5603] usb 2-1: USB disconnect, device number 5 [ 162.370084][ T5603] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 162.370516][ T5603] keyspan 2-1:0.133: device disconnected [ 162.379557][ T6802] rxe_eth0 speed is unknown, defaulting to 1000 [ 162.504890][ T30] audit: type=1400 audit(1792615344.509:495): avc: denied { read write } for pid=6811 comm="syz.1.174" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 162.505137][ T30] audit: type=1400 audit(1792615344.509:496): avc: denied { open } for pid=6811 comm="syz.1.174" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 162.685071][ T30] audit: type=1400 audit(1792615344.689:497): avc: denied { write } for pid=6794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.808918][ T6819] trusted_key: encrypted_key: master key parameter '' is invalid [ 162.849744][ T30] audit: type=1400 audit(1792615344.859:498): avc: denied { relabelfrom } for pid=6817 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 162.851783][ T30] audit: type=1400 audit(1792615344.859:499): avc: denied { relabelto } for pid=6817 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 162.879845][ T30] audit: type=1400 audit(1792615344.879:500): avc: denied { write } for pid=6821 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.960209][ T6825] netlink: 52 bytes leftover after parsing attributes in process `syz.0.176'. [ 163.885013][ T6842] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 164.038660][ T6844] netlink: zone id is out of range [ 164.038670][ T6844] netlink: zone id is out of range [ 164.038674][ T6844] netlink: zone id is out of range [ 164.038678][ T6844] netlink: zone id is out of range [ 164.038682][ T6844] netlink: zone id is out of range [ 164.038686][ T6844] netlink: zone id is out of range [ 164.038808][ T6844] netlink: zone id is out of range [ 164.038813][ T6844] netlink: zone id is out of range [ 164.038818][ T6844] netlink: zone id is out of range [ 164.038822][ T6844] netlink: zone id is out of range [ 165.490701][ T30] audit: type=1400 audit(1792615347.499:501): avc: denied { read write } for pid=6857 comm="syz.1.183" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 165.490882][ T30] audit: type=1400 audit(1792615347.499:502): avc: denied { open } for pid=6857 comm="syz.1.183" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 166.238539][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 166.408977][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 166.409853][ T9] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 166.409877][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.409895][ T9] usb 1-1: config 0 has no interface number 0 [ 166.409927][ T9] usb 1-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.415938][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.415960][ T9] usb 1-1: Product: syz [ 166.415974][ T9] usb 1-1: Manufacturer: syz [ 166.415988][ T9] usb 1-1: SerialNumber: syz [ 166.496065][ T9] usb 1-1: config 0 descriptor?? [ 167.368487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 167.546783][ T6873] rxe_eth0 speed is unknown, defaulting to 1000 [ 167.774609][ T6882] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 168.294929][ T9] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 168.295085][ T9] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 82 [ 168.317853][ T9] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 168.317920][ T9] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 168.317981][ T9] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 168.343225][ T9] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 168.367224][ T9] usb 1-1: USB disconnect, device number 5 [ 168.398180][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 168.414389][ T9] keyspan 1-1:0.133: device disconnected [ 169.459696][ T30] audit: type=1400 audit(1792615351.459:503): avc: denied { write } for pid=6879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.740297][ T30] audit: type=1400 audit(1792615351.749:504): avc: denied { write } for pid=6907 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.780869][ T6934] FAULT_INJECTION: forcing a failure. [ 172.780869][ T6934] name failslab, interval 1, probability 0, space 0, times 0 [ 172.780898][ T6934] CPU: 1 UID: 0 PID: 6934 Comm: syz.6.197 Not tainted syzkaller #0 PREEMPT(full) [ 172.780918][ T6934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 172.780930][ T6934] Call Trace: [ 172.780937][ T6934] [ 172.780945][ T6934] dump_stack_lvl+0x100/0x190 [ 172.780975][ T6934] should_fail_ex.cold+0x5/0xa [ 172.781003][ T6934] should_failslab+0xc2/0x120 [ 172.781033][ T6934] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 172.781061][ T6934] ? __alloc_skb+0x140/0x710 [ 172.781087][ T6934] __alloc_skb+0x140/0x710 [ 172.781105][ T6934] ? __alloc_skb+0x5b7/0x710 [ 172.781124][ T6934] ? __pfx___alloc_skb+0x10/0x10 [ 172.781153][ T6934] hci_sock_sendmsg+0x1b27/0x26a0 [ 172.781185][ T6934] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 172.781212][ T6934] ? selinux_socket_sendmsg+0x198/0x2f0 [ 172.781245][ T6934] sock_write_iter+0x53a/0x5b0 [ 172.781271][ T6934] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 172.781297][ T6934] ? __pfx_sock_write_iter+0x10/0x10 [ 172.781330][ T6934] ? bpf_lsm_file_permission+0x9/0x10 [ 172.781358][ T6934] ? security_file_permission+0x76/0x210 [ 172.781378][ T6934] ? rw_verify_area+0xce/0x6d0 [ 172.781403][ T6934] vfs_write+0x6af/0x1050 [ 172.781428][ T6934] ? __pfx_sock_write_iter+0x10/0x10 [ 172.781459][ T6934] ? __pfx_vfs_write+0x10/0x10 [ 172.781485][ T6934] ? find_held_lock+0x2b/0x80 [ 172.781520][ T6934] ksys_write+0x1f8/0x250 [ 172.781544][ T6934] ? __pfx_ksys_write+0x10/0x10 [ 172.781576][ T6934] do_syscall_64+0x123/0x790 [ 172.781598][ T6934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.781617][ T6934] RIP: 0033:0x7ff3fc99f559 [ 172.781633][ T6934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.781650][ T6934] RSP: 002b:00007ff3fd7a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.781668][ T6934] RAX: ffffffffffffffda RBX: 00007ff3fcc25fa0 RCX: 00007ff3fc99f559 [ 172.781680][ T6934] RDX: 000000000000000e RSI: 0000200000000240 RDI: 0000000000000004 [ 172.781691][ T6934] RBP: 00007ff3fd7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 172.781701][ T6934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.781712][ T6934] R13: 00007ff3fcc26038 R14: 00007ff3fcc25fa0 R15: 00007ffcaef28e38 [ 172.781739][ T6934] [ 172.894707][ T6935] FAULT_INJECTION: forcing a failure. [ 172.894707][ T6935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.894732][ T6935] CPU: 0 UID: 0 PID: 6935 Comm: syz.3.198 Not tainted syzkaller #0 PREEMPT(full) [ 172.894750][ T6935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 172.894759][ T6935] Call Trace: [ 172.894765][ T6935] [ 172.894771][ T6935] dump_stack_lvl+0x100/0x190 [ 172.894799][ T6935] should_fail_ex.cold+0x5/0xa [ 172.894822][ T6935] _copy_from_iter+0x1f4/0x1690 [ 172.894841][ T6935] ? __asan_memset+0x23/0x50 [ 172.894862][ T6935] ? __pfx__copy_from_iter+0x10/0x10 [ 172.894877][ T6935] ? __pfx___alloc_skb+0x10/0x10 [ 172.894905][ T6935] netlink_sendmsg+0x94a/0x1020 [ 172.894927][ T6935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.894951][ T6935] ? selinux_socket_sendmsg+0x198/0x2f0 [ 172.894985][ T6935] ? ____sys_sendmsg+0xa4d/0xbe0 [ 172.895008][ T6935] ____sys_sendmsg+0xa4d/0xbe0 [ 172.895028][ T6935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.895048][ T6935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.895073][ T6935] ? _kstrtoull+0x144/0x200 [ 172.895092][ T6935] ? __pfx__kstrtoull+0x10/0x10 [ 172.895114][ T6935] ___sys_sendmsg+0x190/0x1e0 [ 172.895139][ T6935] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.895172][ T6935] ? __fget_files+0x34/0x3d0 [ 172.895203][ T6935] __sys_sendmmsg+0x20c/0x430 [ 172.895227][ T6935] ? __pfx___sys_sendmmsg+0x10/0x10 [ 172.895245][ T6935] ? ksys_write+0x190/0x250 [ 172.895282][ T6935] ? fput+0x7c/0x100 [ 172.895297][ T6935] ? ksys_write+0x1ac/0x250 [ 172.895317][ T6935] ? __pfx_ksys_write+0x10/0x10 [ 172.895341][ T6935] __x64_sys_sendmmsg+0x9c/0x100 [ 172.895359][ T6935] ? lockdep_hardirqs_on+0x7d/0x110 [ 172.895375][ T6935] do_syscall_64+0x123/0x790 [ 172.895394][ T6935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.895410][ T6935] RIP: 0033:0x7f86eeb9f559 [ 172.895424][ T6935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.895440][ T6935] RSP: 002b:00007f86efa37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 172.895456][ T6935] RAX: ffffffffffffffda RBX: 00007f86eee25fa0 RCX: 00007f86eeb9f559 [ 172.895467][ T6935] RDX: 040000000000009f RSI: 0000200000000640 RDI: 0000000000000005 [ 172.895477][ T6935] RBP: 00007f86efa37090 R08: 0000000000000000 R09: 0000000000000000 [ 172.895486][ T6935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.895496][ T6935] R13: 00007f86eee26038 R14: 00007f86eee25fa0 R15: 00007ffeffc1cd98 [ 172.895518][ T6935] [ 172.931071][ T6934] Bluetooth: MGMT ver 1.23 [ 174.394014][ T6949] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 174.453122][ T30] audit: type=1400 audit(1792615356.459:505): avc: denied { write } for pid=6913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.653249][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 175.680468][ T30] audit: type=1400 audit(1792615357.689:506): avc: denied { write } for pid=6953 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.831455][ T6961] netlink: 52 bytes leftover after parsing attributes in process `syz.7.194'. [ 177.580037][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'. [ 177.580059][ T6983] netlink: 2 bytes leftover after parsing attributes in process `syz.0.202'. [ 177.666307][ T30] audit: type=1400 audit(1792615359.669:507): avc: denied { write } for pid=6965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.713544][ T6983] FAULT_INJECTION: forcing a failure. [ 177.713544][ T6983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.713574][ T6983] CPU: 0 UID: 0 PID: 6983 Comm: syz.0.202 Not tainted syzkaller #0 PREEMPT(full) [ 177.713596][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 177.713608][ T6983] Call Trace: [ 177.713616][ T6983] [ 177.713623][ T6983] dump_stack_lvl+0x100/0x190 [ 177.713659][ T6983] should_fail_ex.cold+0x5/0xa [ 177.713688][ T6983] _copy_from_user+0x2e/0xd0 [ 177.713720][ T6983] kstrtouint_from_user+0xd6/0x1d0 [ 177.713743][ T6983] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 177.713775][ T6983] ? lock_acquire+0x1d1/0x380 [ 177.713806][ T6983] proc_fail_nth_write+0x83/0x220 [ 177.713827][ T6983] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 177.713855][ T6983] vfs_write+0x2aa/0x1050 [ 177.713882][ T6983] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 177.713908][ T6983] ? lock_acquire+0x1d1/0x380 [ 177.713931][ T6983] ? __fget_files+0x34/0x3d0 [ 177.713950][ T6983] ? __pfx_vfs_write+0x10/0x10 [ 177.713974][ T6983] ? find_held_lock+0x2b/0x80 [ 177.713991][ T6983] ? __fget_files+0x215/0x3d0 [ 177.714014][ T6983] ? __fget_files+0x21f/0x3d0 [ 177.714040][ T6983] ksys_write+0x12a/0x250 [ 177.714065][ T6983] ? __pfx_ksys_write+0x10/0x10 [ 177.714099][ T6983] do_syscall_64+0x123/0x790 [ 177.714121][ T6983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.714141][ T6983] RIP: 0033:0x7f9f7b99f559 [ 177.714159][ T6983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.714178][ T6983] RSP: 002b:00007f9f79bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.714198][ T6983] RAX: ffffffffffffffda RBX: 00007f9f7bc25fa0 RCX: 00007f9f7b99f559 [ 177.714213][ T6983] RDX: 0000000000000014 RSI: 0000200000000080 RDI: 000000000000000a [ 177.714225][ T6983] RBP: 00007f9f7ba36b20 R08: 0000000000000000 R09: 0000000000000000 [ 177.714237][ T6983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.714248][ T6983] R13: 00007f9f7bc26038 R14: 00007f9f7bc25fa0 R15: 00007ffd658faad8 [ 177.714277][ T6983] [ 178.487188][ T6992] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 179.114273][ T30] audit: type=1400 audit(1792615361.119:508): avc: denied { write } for pid=6998 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.274093][ T30] audit: type=1400 audit(1792615361.279:509): avc: denied { create } for pid=7005 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 179.306028][ T30] audit: type=1400 audit(1792615361.309:510): avc: denied { connect } for pid=7005 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 179.331369][ T30] audit: type=1400 audit(1792615361.339:511): avc: denied { name_bind } for pid=7005 comm="syz.0.211" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 179.344527][ T6999] rxe_eth0 speed is unknown, defaulting to 1000 [ 179.667522][ T30] audit: type=1400 audit(1792615361.669:512): avc: denied { write } for pid=7004 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.938404][ T30] audit: type=1400 audit(1792615361.939:513): avc: denied { write } for pid=7018 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.257712][ T30] audit: type=1400 audit(1792615363.259:514): avc: denied { create } for pid=7005 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 182.469922][ T7041] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 183.861888][ T30] audit: type=1400 audit(1792615365.869:515): avc: denied { write } for pid=7032 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.951937][ T7061] netlink: 'syz.1.214': attribute type 50 has an invalid length. [ 183.974199][ T30] audit: type=1400 audit(1792615365.979:516): avc: denied { ioctl } for pid=7062 comm="syz.7.220" path="socket:[15419]" dev="sockfs" ino=15419 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 184.027214][ T30] audit: type=1400 audit(1792615366.029:517): avc: denied { create } for pid=7056 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 185.291204][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.221'. [ 185.291225][ T7066] netlink: 2 bytes leftover after parsing attributes in process `syz.0.221'. [ 185.316233][ T7066] FAULT_INJECTION: forcing a failure. [ 185.316233][ T7066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.316260][ T7066] CPU: 0 UID: 0 PID: 7066 Comm: syz.0.221 Not tainted syzkaller #0 PREEMPT(full) [ 185.316278][ T7066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 185.316288][ T7066] Call Trace: [ 185.316294][ T7066] [ 185.316301][ T7066] dump_stack_lvl+0x100/0x190 [ 185.316329][ T7066] should_fail_ex.cold+0x5/0xa [ 185.316354][ T7066] _copy_from_user+0x2e/0xd0 [ 185.316381][ T7066] kstrtouint_from_user+0xd6/0x1d0 [ 185.316402][ T7066] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 185.316428][ T7066] ? lock_acquire+0x1d1/0x380 [ 185.316454][ T7066] proc_fail_nth_write+0x83/0x220 [ 185.316473][ T7066] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 185.316497][ T7066] vfs_write+0x2aa/0x1050 [ 185.316520][ T7066] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 185.316537][ T7066] ? lock_acquire+0x1d1/0x380 [ 185.316556][ T7066] ? __fget_files+0x34/0x3d0 [ 185.316571][ T7066] ? __pfx_vfs_write+0x10/0x10 [ 185.316591][ T7066] ? find_held_lock+0x2b/0x80 [ 185.316607][ T7066] ? __fget_files+0x215/0x3d0 [ 185.316627][ T7066] ? __fget_files+0x21f/0x3d0 [ 185.316649][ T7066] ksys_write+0x12a/0x250 [ 185.316670][ T7066] ? __pfx_ksys_write+0x10/0x10 [ 185.316698][ T7066] do_syscall_64+0x123/0x790 [ 185.316718][ T7066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.316736][ T7066] RIP: 0033:0x7f9f7b99f559 [ 185.316750][ T7066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.316767][ T7066] RSP: 002b:00007f9f79bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.316784][ T7066] RAX: ffffffffffffffda RBX: 00007f9f7bc25fa0 RCX: 00007f9f7b99f559 [ 185.316795][ T7066] RDX: 0000000000000014 RSI: 0000200000000080 RDI: 000000000000000a [ 185.316806][ T7066] RBP: 00007f9f7ba36b20 R08: 0000000000000000 R09: 0000000000000000 [ 185.316816][ T7066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.316826][ T7066] R13: 00007f9f7bc26038 R14: 00007f9f7bc25fa0 R15: 00007ffd658faad8 [ 185.316849][ T7066] [ 185.329931][ T30] audit: type=1400 audit(1792615367.329:518): avc: denied { write } for pid=7067 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.592280][ T13] IPVS: starting estimator thread 0... [ 185.624293][ T7073] FAULT_INJECTION: forcing a failure. [ 185.624293][ T7073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.624311][ T7073] CPU: 0 UID: 0 PID: 7073 Comm: syz.7.222 Not tainted syzkaller #0 PREEMPT(full) [ 185.624324][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 185.624331][ T7073] Call Trace: [ 185.624334][ T7073] [ 185.624338][ T7073] dump_stack_lvl+0x100/0x190 [ 185.624358][ T7073] should_fail_ex.cold+0x5/0xa [ 185.624375][ T7073] _copy_from_iter+0x1f4/0x1690 [ 185.624387][ T7073] ? __asan_memset+0x23/0x50 [ 185.624402][ T7073] ? __pfx__copy_from_iter+0x10/0x10 [ 185.624412][ T7073] ? __pfx___alloc_skb+0x10/0x10 [ 185.624430][ T7073] netlink_sendmsg+0x94a/0x1020 [ 185.624445][ T7073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.624460][ T7073] ? selinux_socket_sendmsg+0x198/0x2f0 [ 185.624479][ T7073] ? ____sys_sendmsg+0xa4d/0xbe0 [ 185.624494][ T7073] ____sys_sendmsg+0xa4d/0xbe0 [ 185.624509][ T7073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.624522][ T7073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.624540][ T7073] ? lock_acquire+0x1d1/0x380 [ 185.624554][ T7073] ? get_pid_task+0x2a/0x250 [ 185.624575][ T7073] ___sys_sendmsg+0x190/0x1e0 [ 185.624593][ T7073] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.624610][ T7073] ? get_pid_task+0x106/0x250 [ 185.624631][ T7073] ? find_held_lock+0x2b/0x80 [ 185.624649][ T7073] __sys_sendmsg+0x160/0x210 [ 185.624662][ T7073] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.624682][ T7073] do_syscall_64+0x123/0x790 [ 185.624695][ T7073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.624706][ T7073] RIP: 0033:0x7fb005f9f559 [ 185.624716][ T7073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.624726][ T7073] RSP: 002b:00007fb006e8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.624738][ T7073] RAX: ffffffffffffffda RBX: 00007fb006225fa0 RCX: 00007fb005f9f559 [ 185.624745][ T7073] RDX: 0000000022008870 RSI: 0000200000000140 RDI: 0000000000000003 [ 185.624752][ T7073] RBP: 00007fb006e8c090 R08: 0000000000000000 R09: 0000000000000000 [ 185.624758][ T7073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.624764][ T7073] R13: 00007fb006226038 R14: 00007fb006225fa0 R15: 00007ffcb1610928 [ 185.624778][ T7073] [ 185.721959][ T7072] IPVS: using max 47 ests per chain, 112800 per kthread [ 187.196030][ T7083] rxe_eth0 speed is unknown, defaulting to 1000 [ 188.230359][ T7098] kvm: user requested TSC rate below hardware speed [ 188.880910][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.880976][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.933779][ T7105] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 189.223797][ T30] audit: type=1400 audit(1792615371.219:519): avc: denied { write } for pid=7079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.552851][ T30] audit: type=1400 audit(1792615371.559:520): avc: denied { write } for pid=7109 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.734467][ T7130] bond0: no command found in slaves file - use +ifname or -ifname [ 196.122786][ T7146] FAULT_INJECTION: forcing a failure. [ 196.122786][ T7146] name failslab, interval 1, probability 0, space 0, times 0 [ 196.122830][ T7146] CPU: 1 UID: 0 PID: 7146 Comm: syz.3.235 Not tainted syzkaller #0 PREEMPT(full) [ 196.122851][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 196.122863][ T7146] Call Trace: [ 196.122870][ T7146] [ 196.122877][ T7146] dump_stack_lvl+0x100/0x190 [ 196.122909][ T7146] should_fail_ex.cold+0x5/0xa [ 196.122936][ T7146] should_failslab+0xc2/0x120 [ 196.122965][ T7146] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 196.122994][ T7146] ? bonding_sysfs_store_option+0x67/0x120 [ 196.123025][ T7146] ? __pfx_bonding_sysfs_store_option+0x10/0x10 [ 196.123050][ T7146] kstrndup+0x64/0x120 [ 196.123073][ T7146] bonding_sysfs_store_option+0x67/0x120 [ 196.123101][ T7146] dev_attr_store+0x58/0x80 [ 196.123123][ T7146] ? __pfx_dev_attr_store+0x10/0x10 [ 196.123145][ T7146] sysfs_kf_write+0xf2/0x150 [ 196.123167][ T7146] kernfs_fop_write_iter+0x3e0/0x5f0 [ 196.123192][ T7146] ? __pfx_sysfs_kf_write+0x10/0x10 [ 196.123215][ T7146] vfs_write+0x6af/0x1050 [ 196.123240][ T7146] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 196.123270][ T7146] ? __pfx_vfs_write+0x10/0x10 [ 196.123292][ T7146] ? find_held_lock+0x2b/0x80 [ 196.123329][ T7146] ksys_write+0x12a/0x250 [ 196.123353][ T7146] ? __pfx_ksys_write+0x10/0x10 [ 196.123377][ T7146] ? trace_hardirqs_off+0x70/0x170 [ 196.123417][ T7146] do_syscall_64+0x123/0x790 [ 196.123439][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.123459][ T7146] RIP: 0033:0x7f86eeb9f559 [ 196.123474][ T7146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.123492][ T7146] RSP: 002b:00007f86ef9f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 196.123511][ T7146] RAX: ffffffffffffffda RBX: 00007f86eee26180 RCX: 00007f86eeb9f559 [ 196.123523][ T7146] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000008 [ 196.123535][ T7146] RBP: 00007f86ef9f5090 R08: 0000000000000000 R09: 0000000000000000 [ 196.123545][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.123556][ T7146] R13: 00007f86eee26218 R14: 00007f86eee26180 R15: 00007ffeffc1cd98 [ 196.123584][ T7146] [ 198.572294][ T7151] block device autoloading is deprecated and will be removed. [ 198.642283][ T30] audit: type=1400 audit(1792615380.639:521): avc: denied { ioctl } for pid=7159 comm="syz.6.232" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 198.977722][ T7168] rxe_eth0 speed is unknown, defaulting to 1000 [ 199.300746][ T7171] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 199.365268][ T30] audit: type=1400 audit(1792615381.369:522): avc: denied { bind } for pid=7170 comm="syz.7.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 199.367504][ T30] audit: type=1400 audit(1792615381.369:523): avc: denied { accept } for pid=7170 comm="syz.7.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 199.373748][ T30] audit: type=1400 audit(1792615381.379:524): avc: denied { write } for pid=7170 comm="syz.7.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 199.949485][ T30] audit: type=1400 audit(1792615381.949:525): avc: denied { map } for pid=7170 comm="syz.7.236" path="socket:[16413]" dev="sockfs" ino=16413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 204.363734][ T30] audit: type=1400 audit(1792615386.369:526): avc: denied { connect } for pid=7197 comm="syz.6.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 205.997972][ T7212] process 'syz.1.253' launched './file2' with NULL argv: empty string added [ 206.020401][ T30] audit: type=1400 audit(1792615387.999:527): avc: denied { execute } for pid=7209 comm="syz.1.253" name="file2" dev="tmpfs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 206.020562][ T30] audit: type=1400 audit(1792615388.009:528): avc: denied { execute_no_trans } for pid=7209 comm="syz.1.253" path="/56/file2" dev="tmpfs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 206.528317][ T7215] FAULT_INJECTION: forcing a failure. [ 206.528317][ T7215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.528337][ T7215] CPU: 0 UID: 0 PID: 7215 Comm: syz.7.247 Not tainted syzkaller #0 PREEMPT(full) [ 206.528350][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 206.528357][ T7215] Call Trace: [ 206.528361][ T7215] [ 206.528365][ T7215] dump_stack_lvl+0x100/0x190 [ 206.528391][ T7215] should_fail_ex.cold+0x5/0xa [ 206.528408][ T7215] _copy_to_user+0x32/0xd0 [ 206.528428][ T7215] simple_read_from_buffer+0xcb/0x170 [ 206.528449][ T7215] proc_fail_nth_read+0x1af/0x230 [ 206.528479][ T7215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.528509][ T7215] ? rw_verify_area+0xce/0x6d0 [ 206.528531][ T7215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.528559][ T7215] vfs_read+0x1e4/0xb40 [ 206.528583][ T7215] ? lock_acquire+0x1d1/0x380 [ 206.528605][ T7215] ? __fget_files+0x34/0x3d0 [ 206.528621][ T7215] ? __pfx_vfs_read+0x10/0x10 [ 206.528643][ T7215] ? find_held_lock+0x2b/0x80 [ 206.528660][ T7215] ? __fget_files+0x215/0x3d0 [ 206.528682][ T7215] ? __fget_files+0x21f/0x3d0 [ 206.528700][ T7215] ksys_read+0x12a/0x250 [ 206.528714][ T7215] ? __pfx_ksys_read+0x10/0x10 [ 206.528732][ T7215] do_syscall_64+0x123/0x790 [ 206.528746][ T7215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.528757][ T7215] RIP: 0033:0x7fb005f5fd8e [ 206.528767][ T7215] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 206.528778][ T7215] RSP: 002b:00007fb006e8bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.528790][ T7215] RAX: ffffffffffffffda RBX: 00007fb006e8c6c0 RCX: 00007fb005f5fd8e [ 206.528797][ T7215] RDX: 000000000000000f RSI: 00007fb006e8c0a0 RDI: 0000000000000004 [ 206.528803][ T7215] RBP: 00007fb006e8c090 R08: 0000000000000000 R09: 0000000000000000 [ 206.528810][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.528816][ T7215] R13: 00007fb006226038 R14: 00007fb006225fa0 R15: 00007ffcb1610928 [ 206.528831][ T7215] [ 206.741056][ T7219] jffs2: notice: (7219) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 206.752076][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.256'. [ 206.757307][ T7217] FAULT_INJECTION: forcing a failure. [ 206.757307][ T7217] name (null), interval 1, probability 0, space 0, times 1 [ 206.757330][ T7217] CPU: 0 UID: 0 PID: 7217 Comm: syz.7.255 Not tainted syzkaller #0 PREEMPT(full) [ 206.757349][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 206.757358][ T7217] Call Trace: [ 206.757364][ T7217] [ 206.757370][ T7217] dump_stack_lvl+0x100/0x190 [ 206.757399][ T7217] should_fail_ex.cold+0x5/0xa [ 206.757423][ T7217] null_queue_rq+0x24d/0xfb0 [ 206.757449][ T7217] null_queue_rqs+0xe9/0x2f0 [ 206.757470][ T7217] ? __pfx_null_queue_rqs+0x10/0x10 [ 206.757488][ T7217] ? blk_mq_dispatch_queue_requests+0x148/0x7b0 [ 206.757508][ T7217] ? __pfx_autoremove_wake_function+0x10/0x10 [ 206.757531][ T7217] __blk_mq_flush_list+0x9a/0xc0 [ 206.757552][ T7217] blk_mq_dispatch_queue_requests+0x184/0x7b0 [ 206.757572][ T7217] blk_mq_flush_plug_list+0x1f2/0x600 [ 206.757588][ T7217] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 206.757615][ T7217] ? update_io_ticks+0x137/0x2a0 [ 206.757638][ T7217] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 206.757655][ T7217] ? __pfx_update_io_ticks+0x10/0x10 [ 206.757678][ T7217] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 206.757705][ T7217] blk_add_rq_to_plug+0x1ca/0x540 [ 206.757725][ T7217] blk_mq_submit_bio+0x1c98/0x2dd0 [ 206.757745][ T7217] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 206.757763][ T7217] ? lock_acquire+0x1d1/0x380 [ 206.757787][ T7217] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 206.757808][ T7217] __submit_bio+0x90/0x3d0 [ 206.757831][ T7217] submit_bio_noacct_nocheck+0x549/0xc00 [ 206.757859][ T7217] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 206.757890][ T7217] ? __pfx___might_resched+0x10/0x10 [ 206.757914][ T7217] submit_bio_noacct+0xc8e/0x2130 [ 206.757943][ T7217] blkdev_direct_IO+0x15d0/0x2070 [ 206.757978][ T7217] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 206.758006][ T7217] ? filemap_check_errors+0xa9/0x150 [ 206.758032][ T7217] blkdev_write_iter+0x703/0xd30 [ 206.758062][ T7217] vfs_write+0x6af/0x1050 [ 206.758084][ T7217] ? __pfx_blkdev_write_iter+0x10/0x10 [ 206.758115][ T7217] ? __pfx_vfs_write+0x10/0x10 [ 206.758134][ T7217] ? find_held_lock+0x2b/0x80 [ 206.758164][ T7217] ksys_write+0x12a/0x250 [ 206.758184][ T7217] ? __pfx_ksys_write+0x10/0x10 [ 206.758211][ T7217] do_syscall_64+0x123/0x790 [ 206.758230][ T7217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.758246][ T7217] RIP: 0033:0x7fb005f9f559 [ 206.758261][ T7217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.758277][ T7217] RSP: 002b:00007fb006e8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 206.758292][ T7217] RAX: ffffffffffffffda RBX: 00007fb006225fa0 RCX: 00007fb005f9f559 [ 206.758303][ T7217] RDX: 00000000fffffe38 RSI: 0000200000000700 RDI: 000000000000000a [ 206.758313][ T7217] RBP: 00007fb006036b20 R08: 0000000000000000 R09: 0000000000000000 [ 206.758323][ T7217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.758332][ T7217] R13: 00007fb006226038 R14: 00007fb006225fa0 R15: 00007ffcb1610928 [ 206.758356][ T7217] [ 207.680123][ T30] audit: type=1400 audit(1792615389.689:529): avc: denied { ioctl } for pid=7216 comm="syz.7.255" path="socket:[15981]" dev="sockfs" ino=15981 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.563053][ T7236] rxe_eth0 speed is unknown, defaulting to 1000 [ 209.222583][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.263'. [ 209.326997][ T7250] netlink: 52 bytes leftover after parsing attributes in process `syz.6.260'. [ 213.029019][ T7280] device-mapper: table: 248:1: snapshot-merge: Cannot get origin device (-ENOENT) [ 213.029036][ T7280] device-mapper: ioctl: error adding target to table [ 213.033513][ T30] audit: type=1400 audit(1792615395.039:530): avc: denied { getopt } for pid=7272 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 213.205954][ T6749] IPVS: starting estimator thread 0... [ 213.220007][ T7285] FAULT_INJECTION: forcing a failure. [ 213.220007][ T7285] name failslab, interval 1, probability 0, space 0, times 0 [ 213.220033][ T7285] CPU: 0 UID: 0 PID: 7285 Comm: syz.3.273 Not tainted syzkaller #0 PREEMPT(full) [ 213.220053][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 213.220064][ T7285] Call Trace: [ 213.220070][ T7285] [ 213.220077][ T7285] dump_stack_lvl+0x100/0x190 [ 213.220108][ T7285] should_fail_ex.cold+0x5/0xa [ 213.220136][ T7285] should_failslab+0xc2/0x120 [ 213.220171][ T7285] __kvmalloc_node_noprof+0x113/0x9b0 [ 213.220198][ T7285] ? lock_acquire+0x1d1/0x380 [ 213.220220][ T7285] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 213.220250][ T7285] __nf_hook_entries_try_shrink+0x164/0x400 [ 213.220277][ T7285] __nf_unregister_net_hook+0x1d2/0x6a0 [ 213.220302][ T7285] nf_unregister_net_hooks+0x11b/0x170 [ 213.220324][ T7285] ip_vs_unregister_hooks+0xd9/0x140 [ 213.220351][ T7285] ip_vs_unlink_service+0xe2f/0x13a0 [ 213.220387][ T7285] ip_vs_flush.isra.0+0x3bc/0x4d0 [ 213.220420][ T7285] do_ip_vs_set_ctl+0x9a9/0xc90 [ 213.220443][ T7285] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 213.220464][ T7285] ? rcu_is_watching+0x13/0xc0 [ 213.220498][ T7285] ? find_held_lock+0x2b/0x80 [ 213.220515][ T7285] ? nf_sockopt_find.isra.0+0x222/0x290 [ 213.220537][ T7285] ? nf_sockopt_find.isra.0+0x222/0x290 [ 213.220571][ T7285] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 213.220608][ T7285] ? nf_setsockopt+0x8d/0xf0 [ 213.220628][ T7285] nf_setsockopt+0x8d/0xf0 [ 213.220653][ T7285] ip_setsockopt+0xcb/0xf0 [ 213.220674][ T7285] sctp_setsockopt+0x161/0xb370 [ 213.220704][ T7285] ? __pfx_sctp_setsockopt+0x10/0x10 [ 213.220725][ T7285] ? __fget_files+0x215/0x3d0 [ 213.220745][ T7285] ? selinux_socket_setsockopt+0x6a/0x80 [ 213.220769][ T7285] ? sock_common_setsockopt+0x2e/0xf0 [ 213.220784][ T7285] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 213.220801][ T7285] do_sock_setsockopt+0xf3/0x1d0 [ 213.220818][ T7285] __sys_setsockopt+0x195/0x220 [ 213.220833][ T7285] __x64_sys_setsockopt+0xbd/0x160 [ 213.220845][ T7285] ? do_syscall_64+0xae/0x790 [ 213.220856][ T7285] ? lockdep_hardirqs_on+0x7d/0x110 [ 213.220866][ T7285] do_syscall_64+0x123/0x790 [ 213.220878][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.220890][ T7285] RIP: 0033:0x7f86eeb9f559 [ 213.220900][ T7285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.220911][ T7285] RSP: 002b:00007f86efa37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 213.220922][ T7285] RAX: ffffffffffffffda RBX: 00007f86eee25fa0 RCX: 00007f86eeb9f559 [ 213.220929][ T7285] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000007 [ 213.220936][ T7285] RBP: 00007f86efa37090 R08: 0000000000000000 R09: 0000000000000000 [ 213.220942][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.220948][ T7285] R13: 00007f86eee26038 R14: 00007f86eee25fa0 R15: 00007ffeffc1cd98 [ 213.220963][ T7285] [ 213.264183][ T6927] IPVS: starting estimator thread 0... [ 213.308399][ T7287] IPVS: using max 73 ests per chain, 175200 per kthread [ 213.348519][ T7289] IPVS: using max 44 ests per chain, 105600 per kthread [ 214.484949][ T11] null_blk: rq ffff888028eb8c00 timed out [ 214.485137][ T11] timeout error, dev nullb0, sector 1275 op 0x1:(WRITE) flags 0xc800 phys_seg 33 prio class 2 [ 214.950322][ T30] audit: type=1400 audit(1792615396.959:531): avc: denied { bind } for pid=7302 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 214.952338][ T30] audit: type=1400 audit(1792615396.959:532): avc: denied { map } for pid=7302 comm="syz.1.280" path="socket:[16096]" dev="sockfs" ino=16096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 214.954258][ T30] audit: type=1400 audit(1792615396.959:533): avc: denied { read write } for pid=7302 comm="syz.1.280" path="socket:[16096]" dev="sockfs" ino=16096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 215.038797][ T7305] netlink: 52 bytes leftover after parsing attributes in process `syz.7.281'. [ 215.147548][ T5727] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 215.349155][ T5727] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 215.349936][ T5727] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 215.349952][ T5727] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.349962][ T5727] usb 7-1: config 0 has no interface number 0 [ 215.349981][ T5727] usb 7-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.503577][ T5727] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.503602][ T5727] usb 7-1: Product: syz [ 215.503616][ T5727] usb 7-1: Manufacturer: syz [ 215.503629][ T5727] usb 7-1: SerialNumber: syz [ 215.523594][ T5727] usb 7-1: config 0 descriptor?? [ 215.767446][ T7314] FAULT_INJECTION: forcing a failure. [ 215.767446][ T7314] name failslab, interval 1, probability 0, space 0, times 0 [ 215.767475][ T7314] CPU: 1 UID: 0 PID: 7314 Comm: syz.7.284 Not tainted syzkaller #0 PREEMPT(full) [ 215.767495][ T7314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 215.767506][ T7314] Call Trace: [ 215.767513][ T7314] [ 215.767520][ T7314] dump_stack_lvl+0x100/0x190 [ 215.767551][ T7314] should_fail_ex.cold+0x5/0xa [ 215.767578][ T7314] should_failslab+0xc2/0x120 [ 215.767607][ T7314] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 215.767638][ T7314] ? __alloc_skb+0x5b7/0x710 [ 215.767658][ T7314] ? __alloc_skb+0x140/0x710 [ 215.767681][ T7314] __alloc_skb+0x140/0x710 [ 215.767699][ T7314] ? __alloc_skb+0x5b7/0x710 [ 215.767718][ T7314] ? __pfx___alloc_skb+0x10/0x10 [ 215.767741][ T7314] ? __lock_acquire+0x5c0/0x1f40 [ 215.767768][ T7314] alloc_skb_with_frags+0xdd/0x760 [ 215.767792][ T7314] ? __lock_acquire+0x5c0/0x1f40 [ 215.767818][ T7314] sock_alloc_send_pskb+0x89f/0xa40 [ 215.767841][ T7314] ? do_raw_spin_lock+0x128/0x260 [ 215.767870][ T7314] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 215.767890][ T7314] ? __lock_acquire+0x5c0/0x1f40 [ 215.767914][ T7314] ? __lock_acquire+0x5c0/0x1f40 [ 215.767941][ T7314] __ip_append_data+0x23a5/0x44d0 [ 215.767971][ T7314] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 215.767995][ T7314] ? find_held_lock+0x2b/0x80 [ 215.768020][ T7314] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 215.768051][ T7314] ? __pfx___ip_append_data+0x10/0x10 [ 215.768083][ T7314] ip_make_skb+0x28b/0x310 [ 215.768110][ T7314] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 215.768137][ T7314] ? __pfx_ip_make_skb+0x10/0x10 [ 215.768177][ T7314] ? udp_sendmsg+0x171c/0x2710 [ 215.768201][ T7314] udp_sendmsg+0x171c/0x2710 [ 215.768235][ T7314] ? __pfx_udp_sendmsg+0x10/0x10 [ 215.768260][ T7314] ? __lock_acquire+0x5c0/0x1f40 [ 215.768294][ T7314] ? release_sock+0x21/0x280 [ 215.768320][ T7314] ? inet_autobind+0x145/0x1a0 [ 215.768346][ T7314] ? find_held_lock+0x2b/0x80 [ 215.768369][ T7314] ? lockdep_hardirqs_on+0x7d/0x110 [ 215.768387][ T7314] ? inet_autobind+0x145/0x1a0 [ 215.768411][ T7314] ? __local_bh_enable_ip+0xa5/0x120 [ 215.768434][ T7314] ? inet_autobind+0x14a/0x1a0 [ 215.768458][ T7314] ? __pfx_udp_sendmsg+0x10/0x10 [ 215.768483][ T7314] inet_sendmsg+0x105/0x140 [ 215.768502][ T7314] __sys_sendto+0x453/0x4e0 [ 215.768520][ T7314] ? __pfx_inet_sendmsg+0x10/0x10 [ 215.768538][ T7314] ? __pfx___sys_sendto+0x10/0x10 [ 215.768564][ T7314] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 215.768593][ T7314] ? ksys_write+0x1ac/0x250 [ 215.768622][ T7314] ? __pfx_ksys_write+0x10/0x10 [ 215.768649][ T7314] __x64_sys_sendto+0xe0/0x1c0 [ 215.768668][ T7314] ? do_syscall_64+0xae/0x790 [ 215.768685][ T7314] ? lockdep_hardirqs_on+0x7d/0x110 [ 215.768702][ T7314] do_syscall_64+0x123/0x790 [ 215.768721][ T7314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.768741][ T7314] RIP: 0033:0x7fb005f9f559 [ 215.768757][ T7314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.768774][ T7314] RSP: 002b:00007fb006e8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 215.768794][ T7314] RAX: ffffffffffffffda RBX: 00007fb006225fa0 RCX: 00007fb005f9f559 [ 215.768806][ T7314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 215.768818][ T7314] RBP: 00007fb006e8c090 R08: 0000200000000900 R09: 0000000000000010 [ 215.768830][ T7314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.768841][ T7314] R13: 00007fb006226038 R14: 00007fb006225fa0 R15: 00007ffcb1610928 [ 215.768866][ T7314] [ 216.345379][ T7317] x_tables: duplicate underflow at hook 3 [ 216.346934][ T30] audit: type=1400 audit(1792615398.349:534): avc: denied { accept } for pid=7316 comm="syz.1.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 216.635401][ T30] audit: type=1400 audit(1792615398.629:535): avc: denied { watch watch_reads } for pid=7321 comm="syz.3.279" path="/64/file1" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 216.664910][ T7323] FAULT_INJECTION: forcing a failure. [ 216.664910][ T7323] name failslab, interval 1, probability 0, space 0, times 0 [ 216.664990][ T7323] CPU: 0 UID: 0 PID: 7323 Comm: syz.3.279 Not tainted syzkaller #0 PREEMPT(full) [ 216.665013][ T7323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 216.665025][ T7323] Call Trace: [ 216.665031][ T7323] [ 216.665039][ T7323] dump_stack_lvl+0x100/0x190 [ 216.665071][ T7323] should_fail_ex.cold+0x5/0xa [ 216.665100][ T7323] should_failslab+0xc2/0x120 [ 216.665135][ T7323] __kmalloc_cache_noprof+0x91/0x6d0 [ 216.665159][ T7323] ? ima_calc_file_hash_tfm+0x236/0x350 [ 216.665184][ T7323] ima_calc_file_hash_tfm+0x236/0x350 [ 216.665205][ T7323] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 216.665255][ T7323] ? shmem_huge_global_enabled.isra.0+0x6c/0x210 [ 216.665288][ T7323] ? ima_alloc_tfm+0x21a/0x2e0 [ 216.665305][ T7323] ? shmem_getattr+0x394/0x450 [ 216.665327][ T7323] ima_calc_file_hash+0x1e3/0x380 [ 216.665349][ T7323] ima_collect_measurement+0x94f/0xb30 [ 216.665376][ T7323] ? __pfx_ima_collect_measurement+0x10/0x10 [ 216.665397][ T7323] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 216.665447][ T7323] ? vfs_getxattr_alloc+0x1ba/0x350 [ 216.665467][ T7323] ? vfs_getxattr_alloc+0xec/0x350 [ 216.665492][ T7323] ? ima_get_hash_algo+0x241/0x400 [ 216.665518][ T7323] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 216.665551][ T7323] ? process_measurement+0xdfe/0x2350 [ 216.665579][ T7323] process_measurement+0xdfe/0x2350 [ 216.665617][ T7323] ? __pfx_process_measurement+0x10/0x10 [ 216.665648][ T7323] ? __pfx_avc_has_perm+0x10/0x10 [ 216.665673][ T7323] ? avc_has_perm_noaudit+0x56/0x470 [ 216.665697][ T7323] ? find_held_lock+0x2b/0x80 [ 216.665714][ T7323] ? avc_has_perm_noaudit+0x11e/0x470 [ 216.665760][ T7323] ? __file_map_prot_check+0x25e/0x860 [ 216.665789][ T7323] ima_file_mmap+0x1bb/0x1e0 [ 216.665819][ T7323] ? __pfx_ima_file_mmap+0x10/0x10 [ 216.665847][ T7323] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 216.665874][ T7323] ? rcu_is_watching+0x13/0xc0 [ 216.665905][ T7323] security_mmap_file+0x278/0x9b0 [ 216.665927][ T7323] vm_mmap_pgoff+0xec/0x470 [ 216.665954][ T7323] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 216.665981][ T7323] ? __rcu_read_unlock+0x27f/0x5a0 [ 216.666007][ T7323] ? __fget_files+0x21f/0x3d0 [ 216.666030][ T7323] ksys_mmap_pgoff+0x3cb/0x610 [ 216.666060][ T7323] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 216.666087][ T7323] ? xfd_validate_state+0x129/0x190 [ 216.666108][ T7323] ? exit_to_user_mode_loop+0x166/0x700 [ 216.666143][ T7323] __x64_sys_mmap+0x125/0x190 [ 216.666169][ T7323] do_syscall_64+0x123/0x790 [ 216.666192][ T7323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.666212][ T7323] RIP: 0033:0x7f86eeb9f559 [ 216.666228][ T7323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.666246][ T7323] RSP: 002b:00007f86efa16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 216.666264][ T7323] RAX: ffffffffffffffda RBX: 00007f86eee26090 RCX: 00007f86eeb9f559 [ 216.666276][ T7323] RDX: 000000000200000c RSI: 0000000000003000 RDI: 0000200000001000 [ 216.666288][ T7323] RBP: 00007f86efa16090 R08: 000000000000000a R09: 0000000000002000 [ 216.666300][ T7323] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 216.666311][ T7323] R13: 00007f86eee26128 R14: 00007f86eee26090 R15: 00007ffeffc1cd98 [ 216.666338][ T7323] [ 216.714773][ T30] audit: type=1800 audit(1792615398.689:536): pid=7323 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.279" name="file1" dev="tmpfs" ino=385 res=0 errno=0 [ 217.273523][ T5727] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 217.278385][ T5727] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 82 [ 217.397599][ T5727] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 217.397638][ T5727] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 217.397675][ T5727] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 217.432980][ T5727] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 217.457396][ T5727] usb 7-1: USB disconnect, device number 3 [ 217.480504][ T5727] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 217.484822][ T5727] keyspan 7-1:0.133: device disconnected [ 219.396957][ T30] audit: type=1400 audit(1792615401.399:537): avc: denied { create } for pid=7343 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 219.685645][ T30] audit: type=1400 audit(1792615401.689:538): avc: denied { append } for pid=7348 comm="syz.6.294" name="video8" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 219.847332][ T7351] net_ratelimit: 742 callbacks suppressed [ 219.847351][ T7351] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 220.005769][ T30] audit: type=1400 audit(1792615402.009:539): avc: denied { write } for pid=7350 comm="syz.7.295" name="usb_gadget" dev="configfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 220.012116][ T30] audit: type=1400 audit(1792615402.019:540): avc: denied { write } for pid=7350 comm="syz.7.295" name="core" dev="configfs" ino=3404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 220.861384][ T7375] FAULT_INJECTION: forcing a failure. [ 220.861384][ T7375] name failslab, interval 1, probability 0, space 0, times 0 [ 220.861455][ T7375] CPU: 0 UID: 0 PID: 7375 Comm: syz.0.299 Not tainted syzkaller #0 PREEMPT(full) [ 220.861476][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 220.861488][ T7375] Call Trace: [ 220.861494][ T7375] [ 220.861502][ T7375] dump_stack_lvl+0x100/0x190 [ 220.861534][ T7375] should_fail_ex.cold+0x5/0xa [ 220.861561][ T7375] should_failslab+0xc2/0x120 [ 220.861590][ T7375] __kvmalloc_node_noprof+0x113/0x9b0 [ 220.861616][ T7375] ? __might_fault+0xc5/0x140 [ 220.861638][ T7375] ? xt_alloc_table_info+0x44/0xa0 [ 220.861669][ T7375] xt_alloc_table_info+0x44/0xa0 [ 220.861694][ T7375] do_ip6t_set_ctl+0x611/0xd00 [ 220.861718][ T7375] ? nf_sockopt_find.isra.0+0x222/0x290 [ 220.861742][ T7375] ? nf_sockopt_find.isra.0+0x222/0x290 [ 220.861768][ T7375] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 220.861792][ T7375] ? __mutex_unlock_slowpath+0x35d/0x930 [ 220.861817][ T7375] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 220.861846][ T7375] ? nf_sockopt_find.isra.0+0x222/0x290 [ 220.861873][ T7375] nf_setsockopt+0x8d/0xf0 [ 220.861898][ T7375] ipv6_setsockopt+0x135/0x170 [ 220.861926][ T7375] rawv6_setsockopt+0xee/0x5a0 [ 220.861948][ T7375] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 220.861970][ T7375] ? sock_common_setsockopt+0x2e/0xf0 [ 220.861994][ T7375] ? do_sock_setsockopt+0xa8/0x1d0 [ 220.862020][ T7375] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 220.862052][ T7375] do_sock_setsockopt+0xf3/0x1d0 [ 220.862081][ T7375] __sys_setsockopt+0x195/0x220 [ 220.862107][ T7375] __x64_sys_setsockopt+0xbd/0x160 [ 220.862126][ T7375] ? do_syscall_64+0xae/0x790 [ 220.862144][ T7375] ? lockdep_hardirqs_on+0x7d/0x110 [ 220.862161][ T7375] do_syscall_64+0x123/0x790 [ 220.862182][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.862201][ T7375] RIP: 0033:0x7f9f7b99f559 [ 220.862217][ T7375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.862234][ T7375] RSP: 002b:00007f9f79bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 220.862253][ T7375] RAX: ffffffffffffffda RBX: 00007f9f7bc26090 RCX: 00007f9f7b99f559 [ 220.862265][ T7375] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 220.862276][ T7375] RBP: 00007f9f79bd5090 R08: 00000000000003d0 R09: 0000000000000000 [ 220.862287][ T7375] R10: 0000200000019600 R11: 0000000000000246 R12: 0000000000000001 [ 220.862298][ T7375] R13: 00007f9f7bc26128 R14: 00007f9f7bc26090 R15: 00007ffd658faad8 [ 220.862324][ T7375] [ 221.430137][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 221.608731][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 221.609417][ T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 221.618175][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.644413][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 221.644428][ T24] pvrusb2: ********** [ 221.644435][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 221.644446][ T24] pvrusb2: Important functionality might not be entirely working. [ 221.644454][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 221.644463][ T24] pvrusb2: ********** [ 221.836696][ T2341] pvrusb2: Invalid write control endpoint [ 221.993867][ T2341] pvrusb2: Invalid write control endpoint [ 221.993880][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 221.993888][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 221.999412][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 221.999423][ T2341] pvrusb2: Device being rendered inoperable [ 222.002084][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 222.002150][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 222.012699][ T2341] pvrusb2: Attached sub-driver cx25840 [ 222.012710][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 222.012724][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 222.064091][ T7368] pvrusb2: Attempted to execute control transfer when device not ok [ 222.068875][ T7368] xt_ecn: cannot match TCP bits for non-tcp packets [ 222.195526][ T30] audit: type=1400 audit(1792615660.202:541): avc: denied { connect } for pid=7366 comm="syz.6.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 222.252623][ T30] audit: type=1400 audit(1792615660.262:542): avc: denied { bind } for pid=7389 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 222.254335][ T30] audit: type=1400 audit(1792615660.262:543): avc: denied { setopt } for pid=7389 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 222.257020][ T7390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.291'. [ 222.428208][ T6927] Bluetooth: hci5: Frame reassembly failed (-84) [ 223.794925][ T1200] usb 7-1: USB disconnect, device number 4 [ 223.911385][ T7398] binder: 7397:7398 ioctl c0306201 200000000480 returned -22 [ 223.915797][ T30] audit: type=1400 audit(1792615661.922:544): avc: denied { map } for pid=7397 comm="syz.6.308" path="/dev/sg0" dev="devtmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 223.916219][ T30] audit: type=1400 audit(1792615661.922:545): avc: denied { execute } for pid=7397 comm="syz.6.308" path="/dev/sg0" dev="devtmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 224.115545][ T7402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.310'. [ 224.212014][ T30] audit: type=1804 audit(1792615662.222:546): pid=7405 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.309" name="/newroot/35/cgroup.controllers" dev="tmpfs" ino=215 res=1 errno=0 [ 224.451431][ T5602] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 226.606792][ T7425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.638496][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 226.638512][ T30] audit: type=1400 audit(1792615664.642:548): avc: denied { ioctl } for pid=7423 comm="syz.7.314" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 227.421548][ T7441] mmap: syz.1.321 (7441): VmData 37593088 exceed data ulimit 12. Update limits or use boot option ignore_rlimit_data. [ 227.442448][ T30] audit: type=1326 audit(1792615665.432:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.321" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6c79f559 code=0x7fc00000 [ 228.565608][ T7449] netlink: 52 bytes leftover after parsing attributes in process `syz.1.323'. [ 228.843227][ T7455] ip_tables: iptables: counters copy to user failed while replacing table [ 229.267549][ T30] audit: type=1400 audit(1792615667.272:550): avc: denied { unlink } for pid=7458 comm="syz.6.327" name="#1" dev="tmpfs" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 229.344379][ T7459] overlayfs: failed to get inode (-116) [ 229.352809][ T7459] overlayfs: failed to get inode (-116) [ 229.361509][ T1121] IPVS: starting estimator thread 0... [ 229.366559][ T7459] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 229.366617][ C0] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 229.528565][ T7466] IPVS: using max 40 ests per chain, 96000 per kthread [ 229.610828][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.329'. [ 229.982631][ T30] audit: type=1400 audit(1792615667.902:551): avc: denied { write } for pid=7470 comm="syz.6.329" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 230.413174][ T30] audit: type=1400 audit(1792615668.422:552): avc: denied { mount } for pid=7474 comm="syz.0.330" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 230.509908][ T30] audit: type=1400 audit(1792615668.522:553): avc: denied { search } for pid=7474 comm="syz.0.330" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 230.510038][ T30] audit: type=1400 audit(1792615668.522:554): avc: denied { read } for pid=7474 comm="syz.0.330" name="trace_pipe" dev="tracefs" ino=3863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 230.510213][ T30] audit: type=1400 audit(1792615668.522:555): avc: denied { open } for pid=7474 comm="syz.0.330" path="/64/mnt/trace_pipe" dev="tracefs" ino=3863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 230.540171][ T30] audit: type=1400 audit(1792615668.532:556): avc: denied { mount } for pid=7474 comm="syz.0.330" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 230.706125][ T30] audit: type=1400 audit(1792615668.712:557): avc: denied { mounton } for pid=7474 comm="syz.0.330" path="/64/mnt/trace_pipe" dev="tracefs" ino=3863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 230.845262][ T7476] kAFS: unable to lookup cell 'syz1' [ 231.960138][ T30] audit: type=1400 audit(1792615669.972:558): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 232.011977][ T30] audit: type=1400 audit(1792615670.022:559): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 232.203259][ T7492] FAULT_INJECTION: forcing a failure. [ 232.203259][ T7492] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 232.203306][ T7492] CPU: 0 UID: 0 PID: 7492 Comm: syz.3.324 Not tainted syzkaller #0 PREEMPT(full) [ 232.203329][ T7492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 232.203340][ T7492] Call Trace: [ 232.203346][ T7492] [ 232.203353][ T7492] dump_stack_lvl+0x100/0x190 [ 232.203383][ T7492] should_fail_ex.cold+0x5/0xa [ 232.203406][ T7492] ? prepare_alloc_pages+0x16d/0x5b0 [ 232.203437][ T7492] should_fail_alloc_page+0xeb/0x140 [ 232.203466][ T7492] prepare_alloc_pages+0x1f0/0x5b0 [ 232.203498][ T7492] __alloc_frozen_pages_noprof+0x1e8/0x32e0 [ 232.203527][ T7492] ? lock_acquire+0x1d1/0x380 [ 232.203549][ T7492] ? is_bpf_text_address+0x25/0x1a0 [ 232.203579][ T7492] ? find_held_lock+0x2b/0x80 [ 232.203596][ T7492] ? is_bpf_text_address+0x8a/0x1a0 [ 232.203623][ T7492] ? is_bpf_text_address+0x8a/0x1a0 [ 232.203651][ T7492] ? bpf_ksym_find+0x128/0x1c0 [ 232.203671][ T7492] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 232.203697][ T7492] ? __lock_acquire+0x5c0/0x1f40 [ 232.203720][ T7492] ? __css_rstat_updated+0x1ce/0x590 [ 232.203748][ T7492] ? __pfx___css_rstat_updated+0x10/0x10 [ 232.203782][ T7492] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 232.203806][ T7492] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 232.203830][ T7492] ? rcu_is_watching+0x13/0xc0 [ 232.203857][ T7492] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 232.203887][ T7492] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 232.203914][ T7492] ? policy_nodemask+0xed/0x4f0 [ 232.203934][ T7492] alloc_pages_mpol+0x201/0x550 [ 232.203954][ T7492] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 232.203980][ T7492] alloc_pages_noprof+0x1a/0x160 [ 232.204001][ T7492] get_free_pages_noprof+0x10/0xb0 [ 232.204026][ T7492] __kasan_populate_vmalloc+0xa0/0x210 [ 232.204057][ T7492] alloc_vmap_area+0x963/0x2bc0 [ 232.204094][ T7492] ? __pfx_alloc_vmap_area+0x10/0x10 [ 232.204123][ T7492] ? __get_vm_area_node+0x14a/0x350 [ 232.204153][ T7492] __get_vm_area_node+0x1ed/0x350 [ 232.204185][ T7492] __vmalloc_node_range_noprof+0x268/0x1420 [ 232.204203][ T7492] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 232.204239][ T7492] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 232.204265][ T7492] ? lock_acquire+0x1d1/0x380 [ 232.204288][ T7492] ? find_held_lock+0x2b/0x80 [ 232.204305][ T7492] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 232.204323][ T7492] ? avc_has_perm_noaudit+0x11e/0x470 [ 232.204352][ T7492] ? avc_has_perm_noaudit+0x145/0x470 [ 232.204375][ T7492] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 232.204401][ T7492] __vmalloc_node_noprof+0xad/0xf0 [ 232.204419][ T7492] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 232.204448][ T7492] __vmalloc_noprof+0xa3/0x120 [ 232.204466][ T7492] ? __pfx___vmalloc_noprof+0x10/0x10 [ 232.204485][ T7492] ? rcu_is_watching+0x13/0xc0 [ 232.204512][ T7492] ? cap_capable+0x107/0x430 [ 232.204539][ T7492] bpf_prog_alloc_no_stats+0x59/0x690 [ 232.204564][ T7492] ? security_capable+0x80/0x260 [ 232.204590][ T7492] bpf_prog_alloc+0x3b/0x200 [ 232.204614][ T7492] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 232.204640][ T7492] bpf_prog_load+0x49e/0x2ab0 [ 232.204673][ T7492] ? __pfx_bpf_prog_load+0x10/0x10 [ 232.204701][ T7492] ? irqentry_exit+0x202/0xab0 [ 232.204740][ T7492] __sys_bpf+0x1f46/0x4a30 [ 232.204769][ T7492] ? __pfx___sys_bpf+0x10/0x10 [ 232.204790][ T7492] ? irqentry_exit+0x202/0xab0 [ 232.204807][ T7492] ? lockdep_hardirqs_on+0x7d/0x110 [ 232.204825][ T7492] ? irqentry_exit+0x202/0xab0 [ 232.204850][ T7492] ? find_held_lock+0x2b/0x80 [ 232.204877][ T7492] ? rcu_read_lock_any_held+0x6a/0x90 [ 232.204895][ T7492] ? find_held_lock+0x2b/0x80 [ 232.204911][ T7492] ? ksys_write+0x190/0x250 [ 232.204935][ T7492] ? ksys_write+0x190/0x250 [ 232.204958][ T7492] ? lock_acquire+0x1d1/0x380 [ 232.204997][ T7492] ? fput+0x7c/0x100 [ 232.205015][ T7492] ? ksys_write+0x1ac/0x250 [ 232.205041][ T7492] ? __x64_sys_bpf+0xce/0x140 [ 232.205063][ T7492] __x64_sys_bpf+0xce/0x140 [ 232.205085][ T7492] ? do_syscall_64+0xae/0x790 [ 232.205104][ T7492] do_syscall_64+0x123/0x790 [ 232.205124][ T7492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.205144][ T7492] RIP: 0033:0x7f86eeb9f559 [ 232.205160][ T7492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.205178][ T7492] RSP: 002b:00007f86ef9f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 232.205197][ T7492] RAX: ffffffffffffffda RBX: 00007f86eee26180 RCX: 00007f86eeb9f559 [ 232.205210][ T7492] RDX: 0000000000000094 RSI: 0000200000004300 RDI: 0000000000000005 [ 232.205222][ T7492] RBP: 00007f86ef9f5090 R08: 0000000000000000 R09: 0000000000000000 [ 232.205233][ T7492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.205244][ T7492] R13: 00007f86eee26218 R14: 00007f86eee26180 R15: 00007ffeffc1cd98 [ 232.205270][ T7492] [ 232.205507][ T7492] syz.3.324: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 232.205697][ T7492] CPU: 0 UID: 0 PID: 7492 Comm: syz.3.324 Not tainted syzkaller #0 PREEMPT(full) [ 232.205718][ T7492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 232.205729][ T7492] Call Trace: [ 232.205735][ T7492] [ 232.205742][ T7492] dump_stack_lvl+0x100/0x190 [ 232.205771][ T7492] warn_alloc.cold+0x9e/0xb2 [ 232.205792][ T7492] ? __pfx_warn_alloc+0x10/0x10 [ 232.205814][ T7492] ? lockdep_hardirqs_on+0x7d/0x110 [ 232.205835][ T7492] ? __get_vm_area_node+0x2f0/0x350 [ 232.205874][ T7492] ? __get_vm_area_node+0x22b/0x350 [ 232.205907][ T7492] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 232.205936][ T7492] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 232.205962][ T7492] ? lock_acquire+0x1d1/0x380 [ 232.205986][ T7492] ? find_held_lock+0x2b/0x80 [ 232.206004][ T7492] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 232.206022][ T7492] ? avc_has_perm_noaudit+0x11e/0x470 [ 232.206050][ T7492] ? avc_has_perm_noaudit+0x145/0x470 [ 232.206074][ T7492] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 232.206100][ T7492] __vmalloc_node_noprof+0xad/0xf0 [ 232.206118][ T7492] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 232.206147][ T7492] __vmalloc_noprof+0xa3/0x120 [ 232.206165][ T7492] ? __pfx___vmalloc_noprof+0x10/0x10 [ 232.206185][ T7492] ? rcu_is_watching+0x13/0xc0 [ 232.206212][ T7492] ? cap_capable+0x107/0x430 [ 232.206240][ T7492] bpf_prog_alloc_no_stats+0x59/0x690 [ 232.206265][ T7492] ? security_capable+0x80/0x260 [ 232.206292][ T7492] bpf_prog_alloc+0x3b/0x200 [ 232.206316][ T7492] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 232.206341][ T7492] bpf_prog_load+0x49e/0x2ab0 [ 232.206374][ T7492] ? __pfx_bpf_prog_load+0x10/0x10 [ 232.206401][ T7492] ? irqentry_exit+0x202/0xab0 [ 232.206439][ T7492] __sys_bpf+0x1f46/0x4a30 [ 232.206467][ T7492] ? __pfx___sys_bpf+0x10/0x10 [ 232.206489][ T7492] ? irqentry_exit+0x202/0xab0 [ 232.206506][ T7492] ? lockdep_hardirqs_on+0x7d/0x110 [ 232.206524][ T7492] ? irqentry_exit+0x202/0xab0 [ 232.206549][ T7492] ? find_held_lock+0x2b/0x80 [ 232.206572][ T7492] ? rcu_read_lock_any_held+0x6a/0x90 [ 232.206590][ T7492] ? find_held_lock+0x2b/0x80 [ 232.206606][ T7492] ? ksys_write+0x190/0x250 [ 232.206629][ T7492] ? ksys_write+0x190/0x250 [ 232.206652][ T7492] ? lock_acquire+0x1d1/0x380 [ 232.206691][ T7492] ? fput+0x7c/0x100 [ 232.206708][ T7492] ? ksys_write+0x1ac/0x250 [ 232.206735][ T7492] ? __x64_sys_bpf+0xce/0x140 [ 232.206756][ T7492] __x64_sys_bpf+0xce/0x140 [ 232.206778][ T7492] ? do_syscall_64+0xae/0x790 [ 232.206797][ T7492] do_syscall_64+0x123/0x790 [ 232.206818][ T7492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.206836][ T7492] RIP: 0033:0x7f86eeb9f559 [ 232.206851][ T7492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.206873][ T7492] RSP: 002b:00007f86ef9f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 232.206890][ T7492] RAX: ffffffffffffffda RBX: 00007f86eee26180 RCX: 00007f86eeb9f559 [ 232.206902][ T7492] RDX: 0000000000000094 RSI: 0000200000004300 RDI: 0000000000000005 [ 232.206913][ T7492] RBP: 00007f86ef9f5090 R08: 0000000000000000 R09: 0000000000000000 [ 232.206924][ T7492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.206935][ T7492] R13: 00007f86eee26218 R14: 00007f86eee26180 R15: 00007ffeffc1cd98 [ 232.206960][ T7492] [ 232.206981][ T7492] Mem-Info: [ 232.207001][ T7492] active_anon:51588 inactive_anon:0 isolated_anon:0 [ 232.207001][ T7492] active_file:0 inactive_file:65923 isolated_file:0 [ 232.207001][ T7492] unevictable:0 dirty:242 writeback:0 [ 232.207001][ T7492] slab_reclaimable:13226 slab_unreclaimable:101697 [ 232.207001][ T7492] mapped:44219 shmem:44637 pagetables:1659 [ 232.207001][ T7492] sec_pagetables:0 bounce:0 [ 232.207001][ T7492] kernel_misc_reclaimable:0 [ 232.207001][ T7492] free:1233652 free_pcp:19702 free_cma:0 [ 232.207062][ T7492] Node 0 active_anon:206352kB inactive_anon:0kB active_file:0kB inactive_file:263500kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176876kB dirty:968kB writeback:0kB shmem:178548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13372kB pagetables:6524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 232.207120][ T7492] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 232.207177][ T7492] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 232.207251][ T7492] lowmem_reserve[]: 0 2452 2452 2452 2452 [ 232.207375][ T7492] Node 0 DMA32 free:988280kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:206352kB inactive_anon:0kB active_file:0kB inactive_file:263500kB unevictable:0kB writepending:968kB zspages:0kB present:3129332kB managed:2510880kB mlocked:0kB bounce:0kB free_pcp:78808kB local_pcp:46636kB free_cma:0kB [ 232.207453][ T7492] lowmem_reserve[]: 0 0 0 0 0 [ 232.207572][ T7492] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:52kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 232.207650][ T7492] lowmem_reserve[]: 0 0 0 0 0 [ 232.207774][ T7492] Node 1 Normal free:3930968kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 232.207849][ T7492] lowmem_reserve[]: 0 0 0 0 0 [ 232.207990][ T7492] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 232.208333][ T7492] Node 0 DMA32: 2446*4kB (UME) 1420*8kB (UM) 998*16kB (UM) 251*32kB (UME) 618*64kB (UME) 539*128kB (UME) 110*256kB (UME) 45*512kB (UM) 25*1024kB (UME) 12*2048kB (M) 179*4096kB (UM) = 988248kB [ 232.208896][ T7492] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 232.209168][ T7492] Node 1 Normal: 4*4kB (UM) 5*8kB (UM) 14*16kB (UM) 6*32kB (UM) 4*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3930968kB [ 232.209661][ T7492] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 232.209689][ T7492] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 232.209716][ T7492] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 232.209744][ T7492] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 232.209770][ T7492] 110556 total pagecache pages [ 232.209790][ T7492] 0 pages in swap cache [ 232.209809][ T7492] Free swap = 124996kB [ 232.209829][ T7492] Total swap = 124996kB [ 232.209849][ T7492] 2097051 pages RAM [ 232.209873][ T7492] 0 pages HighMem/MovableOnly [ 232.209892][ T7492] 437702 pages reserved [ 232.209911][ T7492] 0 pages cma reserved [ 232.678499][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 232.720993][ T30] audit: type=1400 audit(1792615670.732:560): avc: denied { read write } for pid=7493 comm="syz.0.333" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 232.721034][ T30] audit: type=1400 audit(1792615670.732:561): avc: denied { open } for pid=7493 comm="syz.0.333" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 232.792174][ T7497] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 232.792190][ T7497] audit: out of memory in audit_log_start [ 232.832351][ T24] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 232.836478][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.836499][ T24] usb 7-1: Product: syz [ 232.836511][ T24] usb 7-1: Manufacturer: syz [ 232.836524][ T24] usb 7-1: SerialNumber: syz [ 232.842311][ T24] usb 7-1: config 0 descriptor?? [ 233.079239][ T30] audit: type=1400 audit(1792615671.072:562): avc: denied { read } for pid=7498 comm="syz.3.335" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 233.079286][ T30] audit: type=1400 audit(1792615671.072:563): avc: denied { open } for pid=7498 comm="syz.3.335" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 233.333186][ T7501] netlink: 52 bytes leftover after parsing attributes in process `syz.7.336'. [ 233.493796][ T24] usb 7-1: Firmware: major: 0, minor: 65, hardware type: ATUSB (0) [ 233.771059][ T24] usb 7-1: Firmware: build >$Tm[Yy [ 234.032237][ T24] usb 7-1: failed to fetch extended address, random address set [ 234.138543][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 234.333100][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 234.336340][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 234.340754][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 234.340779][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 234.340798][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.352735][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.352756][ T10] usb 4-1: Product: syz [ 234.352768][ T10] usb 4-1: Manufacturer: syz [ 234.352781][ T10] usb 4-1: SerialNumber: syz [ 234.392393][ T7506] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 234.412743][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 234.454687][ T10] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 234.454741][ T10] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 234.459057][ T30] audit: type=1400 audit(1792615672.462:564): avc: denied { create } for pid=7493 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 234.493596][ T30] audit: type=1400 audit(1792615672.502:565): avc: denied { setopt } for pid=7493 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 234.551711][ T24] usb 7-1: USB disconnect, device number 5 [ 234.766790][ T7524] mmap: syz.7.339 (7524) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 234.902233][ T7503] ublk0: read batch cmd buffer failed [ 234.902285][ T7503] ublk0: read batch cmd buffer failed [ 234.941993][ T7503] ublk0: read batch cmd buffer failed [ 234.942043][ T7503] ublk0: read batch cmd buffer failed [ 235.016091][ T7529] netlink: 3604 bytes leftover after parsing attributes in process `syz.1.338'. [ 235.579262][ T10] usb 4-1: USB disconnect, device number 5 [ 235.611201][ T7535] netlink: 'syz.0.343': attribute type 1 has an invalid length. [ 235.794291][ T7535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.134984][ T7543] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 236.581522][ T7547] netlink: 52 bytes leftover after parsing attributes in process `syz.3.345'. [ 236.932429][ T7551] batman_adv: batadv0: Adding interface: syzkaller0 [ 236.932444][ T7551] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.971305][ T7551] batman_adv: batadv0: Interface activated: syzkaller0 [ 237.414976][ T7550] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 237.582872][ T7550] batman_adv: batadv0: Removing interface: syzkaller0 [ 237.973266][ T7554] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 238.023225][ T7560] netlink: 52 bytes leftover after parsing attributes in process `syz.6.349'. [ 238.551474][ T7564] audit_log_lost: 4 callbacks suppressed [ 238.551487][ T7564] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 238.551495][ T7564] audit: out of memory in audit_log_start [ 238.551712][ T7564] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 238.551837][ T7564] SELinux: failed to load policy [ 238.769727][ T7568] netlink: 'syz.1.352': attribute type 1 has an invalid length. [ 238.820539][ T30] audit: type=1400 audit(1792615676.832:570): avc: denied { mounton } for pid=7566 comm="syz.3.351" path="/proc/256/task" dev="proc" ino=17562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 238.985757][ T7568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.098507][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 239.249177][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 239.249677][ T9] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 239.250518][ T9] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 239.252103][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.252118][ T9] usb 4-1: Product: syz [ 239.252127][ T9] usb 4-1: Manufacturer: syz [ 239.252135][ T9] usb 4-1: SerialNumber: syz [ 239.253373][ T9] usb 4-1: config 0 descriptor?? [ 239.266211][ T9] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 239.266242][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 239.277560][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 239.278710][ T10] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 239.295393][ T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 239.295432][ T9] usb 4-1: media controller created [ 239.397363][ T52] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 239.415084][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 239.429708][ T10] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 239.458780][ T30] audit: type=1400 audit(1792615677.472:571): avc: denied { connect } for pid=7566 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 239.460615][ T7571] dvb-usb: bulk message failed: -22 (3/0) [ 239.468611][ T10] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 239.468635][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.468651][ T10] usb 7-1: config 0 has no interface number 0 [ 239.468680][ T10] usb 7-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.535730][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.535746][ T10] usb 7-1: Product: syz [ 239.535759][ T10] usb 7-1: Manufacturer: syz [ 239.535767][ T10] usb 7-1: SerialNumber: syz [ 239.547514][ T10] usb 7-1: config 0 descriptor?? [ 239.597936][ T9] usb 4-1: selecting invalid altsetting 7 [ 239.597956][ T9] cxusb: set interface failed [ 239.597966][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 239.729041][ T30] audit: type=1400 audit(1792615677.742:572): avc: denied { write } for pid=7583 comm="syz.0.357" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 239.788948][ T30] audit: type=1400 audit(1792615677.792:573): avc: denied { write } for pid=7583 comm="syz.0.357" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 239.873147][ T9] DVB: Unable to find symbol lgdt330x_attach() [ 239.873160][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 239.893649][ T7584] loop7: detected capacity change from 0 to 7 [ 240.021664][ T7584] Dev loop7: unable to read RDB block 7 [ 240.021700][ T7584] loop7: unable to read partition table [ 240.021902][ T7584] loop7: partition table beyond EOD, truncated [ 240.021933][ T7584] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 240.135507][ T7495] Buffer I/O error on dev loop7, logical block 0, async page read [ 240.136017][ T7495] Buffer I/O error on dev loop7, logical block 0, async page read [ 240.136440][ T7495] Buffer I/O error on dev loop7, logical block 0, async page read [ 240.171068][ T7495] Buffer I/O error on dev loop7, logical block 0, async page read [ 240.171548][ T7495] Buffer I/O error on dev loop7, logical block 0, async page read [ 240.238912][ T9] rc_core: IR keymap rc-dvico-portable not found [ 240.238926][ T9] Registered IR keymap rc-empty [ 240.245834][ T9] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 240.293533][ T9] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input8 [ 240.340533][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 240.356072][ T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 240.403168][ T30] audit: type=1400 audit(1792615678.412:574): avc: denied { unmount } for pid=6454 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 240.466085][ T5738] dvb-usb: bulk message failed: -22 (1/0) [ 240.569383][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 240.680673][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 240.788570][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 240.898740][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 241.008546][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 241.139484][ T5738] dvb-usb: bulk message failed: -22 (1/0) [ 241.150125][ T10] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 241.150257][ T10] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 82 [ 241.182436][ T10] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 241.182474][ T10] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 241.182504][ T10] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 241.188375][ T10] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 241.214637][ T10] usb 7-1: USB disconnect, device number 6 [ 241.243856][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 241.244278][ T10] keyspan 7-1:0.133: device disconnected [ 241.269012][ T5738] dvb-usb: bulk message failed: -22 (1/0) [ 241.379967][ T5738] dvb-usb: bulk message failed: -22 (1/0) [ 241.437447][ T7605] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 241.452233][ T30] audit: type=1400 audit(1792615679.462:575): avc: denied { write } for pid=7604 comm="syz.0.362" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 241.488794][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 241.554888][ T10] kernel read not supported for file /syz0/syz0 (pid: 10 comm: kworker/0:1) [ 241.598910][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 241.708513][ T5738] dvb-usb: bulk message failed: -22 (1/0) [ 241.760408][ T1200] usb 4-1: USB disconnect, device number 6 [ 241.865862][ T1200] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 241.953463][ T7610] FAULT_INJECTION: forcing a failure. [ 241.953463][ T7610] name failslab, interval 1, probability 0, space 0, times 0 [ 241.953496][ T7610] CPU: 1 UID: 0 PID: 7610 Comm: syz.3.365 Not tainted syzkaller #0 PREEMPT(full) [ 241.953520][ T7610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 241.953533][ T7610] Call Trace: [ 241.953540][ T7610] [ 241.953549][ T7610] dump_stack_lvl+0x100/0x190 [ 241.953585][ T7610] should_fail_ex.cold+0x5/0xa [ 241.953618][ T7610] should_failslab+0xc2/0x120 [ 241.953648][ T7610] kmem_cache_alloc_noprof+0x92/0x6a0 [ 241.953675][ T7610] ? __proc_create+0xc1/0x8f0 [ 241.953699][ T7610] ? __proc_create+0x247/0x8f0 [ 241.953727][ T7610] __proc_create+0x247/0x8f0 [ 241.953752][ T7610] ? __pfx___proc_create+0x10/0x10 [ 241.953780][ T7610] ? _raw_write_unlock+0x28/0x50 [ 241.953810][ T7610] ? proc_register+0x56d/0x910 [ 241.953838][ T7610] proc_create_reg+0x75/0x170 [ 241.953867][ T7610] proc_create_data+0x86/0x110 [ 241.953892][ T7610] ? __pfx_proc_create_data+0x10/0x10 [ 241.953920][ T7610] ? cache_register_net+0x137/0x5e0 [ 241.953944][ T7610] ? cache_register_net+0x137/0x5e0 [ 241.953973][ T7610] cache_register_net+0x2d6/0x5e0 [ 241.953999][ T7610] nfsd_export_init+0x16e/0x250 [ 241.954023][ T7610] ? __pfx_nfsd_net_init+0x10/0x10 [ 241.954041][ T7610] nfsd_net_init+0x69/0x480 [ 241.954061][ T7610] ? __pfx_nfsd_net_init+0x10/0x10 [ 241.954079][ T7610] ops_init+0x1e2/0x5f0 [ 241.954107][ T7610] setup_net+0x118/0x3a0 [ 241.954133][ T7610] ? __pfx_setup_net+0x10/0x10 [ 241.954167][ T7610] copy_net_ns+0x345/0x7a0 [ 241.954197][ T7610] create_new_namespaces+0x3ea/0xac0 [ 241.954238][ T7610] unshare_nsproxy_namespaces+0xf2/0x220 [ 241.954268][ T7610] ksys_unshare+0x44f/0x980 [ 241.954295][ T7610] ? __pfx_ksys_unshare+0x10/0x10 [ 241.954335][ T7610] __x64_sys_unshare+0x31/0x40 [ 241.954361][ T7610] do_syscall_64+0x123/0x790 [ 241.954384][ T7610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.954404][ T7610] RIP: 0033:0x7f86eeb9f559 [ 241.954422][ T7610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.954441][ T7610] RSP: 002b:00007f86efa37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 241.954462][ T7610] RAX: ffffffffffffffda RBX: 00007f86eee25fa0 RCX: 00007f86eeb9f559 [ 241.954475][ T7610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 241.954487][ T7610] RBP: 00007f86eec36b20 R08: 0000000000000000 R09: 0000000000000000 [ 241.954499][ T7610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.954510][ T7610] R13: 00007f86eee26038 R14: 00007f86eee25fa0 R15: 00007ffeffc1cd98 [ 241.954537][ T7610] [ 242.169985][ T7612] netlink: 52 bytes leftover after parsing attributes in process `syz.0.364'. [ 242.501010][ T30] audit: type=1400 audit(1792615680.512:576): avc: denied { firmware_load } for pid=7615 comm="syz.1.367" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 242.844899][ T7618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.248652][ T7617] syz.1.367 (7617) used greatest stack depth: 19832 bytes left [ 243.374908][ T7630] trusted_key: encrypted_key: insufficient parameters specified [ 243.460103][ T30] audit: type=1400 audit(1792615681.472:577): avc: denied { append } for pid=7628 comm="syz.0.370" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 243.642869][ T7630] input: syz0 as /devices/virtual/input/input9 [ 243.765632][ T7625] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 244.269586][ T5603] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 244.420864][ T5603] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 244.425322][ T5603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.448681][ T5603] usb 1-1: config 0 descriptor?? [ 244.458213][ T5603] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 245.208644][ T5738] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 245.373717][ T5738] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 245.398041][ T5738] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 245.398064][ T5738] usb 4-1: Product: syz [ 245.398085][ T5738] usb 4-1: SerialNumber: syz [ 245.435809][ T5738] usb 4-1: config 0 descriptor?? [ 245.450224][ T5603] gspca_stv06xx: I2C: Read error writing address: -71 [ 245.461625][ T7664] netlink: 'syz.7.378': attribute type 1 has an invalid length. [ 245.461640][ T7664] netlink: 'syz.7.378': attribute type 3 has an invalid length. [ 245.461650][ T7664] netlink: 224 bytes leftover after parsing attributes in process `syz.7.378'. [ 245.461772][ T5603] usb 1-1: USB disconnect, device number 6 [ 245.598561][ T6429] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 245.752895][ T6429] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 245.757485][ T6429] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 245.757508][ T6429] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.757525][ T6429] usb 7-1: config 0 has no interface number 0 [ 245.757557][ T6429] usb 7-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.757611][ T5738] hso 4-1:0.0: Failed to find BULK eps [ 245.788927][ T6429] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.788941][ T6429] usb 7-1: Product: syz [ 245.788949][ T6429] usb 7-1: Manufacturer: syz [ 245.788957][ T6429] usb 7-1: SerialNumber: syz [ 245.793672][ T6429] usb 7-1: config 0 descriptor?? [ 245.812757][ T7670] netlink: 52 bytes leftover after parsing attributes in process `syz.7.380'. [ 246.120212][ T5603] usb 4-1: USB disconnect, device number 7 [ 248.203376][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 248.203503][ T30] audit: type=1400 audit(1792615685.772:579): avc: denied { getopt } for pid=7675 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 248.668517][ T30] audit: type=1400 audit(1792615686.672:580): avc: denied { create } for pid=7683 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 248.714231][ T30] audit: type=1400 audit(1792615686.722:581): avc: denied { setopt } for pid=7683 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 248.892300][ T7686] kvm: user requested TSC rate below hardware speed [ 248.929859][ T6429] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 248.929941][ T6429] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 82 [ 248.956961][ T6429] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 248.956997][ T6429] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 248.957028][ T6429] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 248.967196][ T6429] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 249.004567][ T6429] usb 7-1: USB disconnect, device number 7 [ 249.022531][ T6429] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 249.022940][ T6429] keyspan 7-1:0.133: device disconnected [ 249.253106][ T30] audit: type=1400 audit(1792615687.262:582): avc: denied { bind } for pid=7690 comm="syz.6.386" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 249.253137][ T30] audit: type=1400 audit(1792615687.262:583): avc: denied { name_bind } for pid=7690 comm="syz.6.386" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 249.253157][ T30] audit: type=1400 audit(1792615687.262:584): avc: denied { node_bind } for pid=7690 comm="syz.6.386" saddr=fe80::aa src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 249.338400][ T7691] FAULT_INJECTION: forcing a failure. [ 249.338400][ T7691] name failslab, interval 1, probability 0, space 0, times 0 [ 249.338421][ T7691] CPU: 0 UID: 0 PID: 7691 Comm: syz.6.386 Not tainted syzkaller #0 PREEMPT(full) [ 249.338441][ T7691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 249.338452][ T7691] Call Trace: [ 249.338459][ T7691] [ 249.338466][ T7691] dump_stack_lvl+0x100/0x190 [ 249.338499][ T7691] should_fail_ex.cold+0x5/0xa [ 249.338527][ T7691] should_failslab+0xc2/0x120 [ 249.338556][ T7691] __kmalloc_cache_noprof+0x91/0x6d0 [ 249.338575][ T7691] ? __kasan_kmalloc+0xaa/0xb0 [ 249.338601][ T7691] ? affs_init_fs_context+0x49/0x450 [ 249.338632][ T7691] affs_init_fs_context+0x49/0x450 [ 249.338653][ T7691] alloc_fs_context+0x60c/0xf40 [ 249.338683][ T7691] __x64_sys_fsopen+0xed/0x220 [ 249.338711][ T7691] do_syscall_64+0x123/0x790 [ 249.338734][ T7691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.338755][ T7691] RIP: 0033:0x7ff3fc99f559 [ 249.338771][ T7691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.338790][ T7691] RSP: 002b:00007ff3fd7a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 249.338811][ T7691] RAX: ffffffffffffffda RBX: 00007ff3fcc25fa0 RCX: 00007ff3fc99f559 [ 249.338826][ T7691] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000640 [ 249.338838][ T7691] RBP: 00007ff3fca36b20 R08: 0000000000000000 R09: 0000000000000000 [ 249.338850][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.338861][ T7691] R13: 00007ff3fcc26038 R14: 00007ff3fcc25fa0 R15: 00007ffcaef28e38 [ 249.338888][ T7691] [ 249.975785][ T30] audit: type=1400 audit(1792615687.982:585): avc: denied { write } for pid=7694 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 250.209058][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.209135][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.701623][ T7695] syzkaller0: entered promiscuous mode [ 250.701639][ T7695] syzkaller0: entered allmulticast mode [ 250.727225][ T7699] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 251.075382][ T30] audit: type=1400 audit(1792615689.082:586): avc: denied { ioctl } for pid=7702 comm="syz.7.389" path="socket:[18459]" dev="sockfs" ino=18459 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 251.124878][ T7707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7707 comm=syz.6.390 [ 251.451425][ T30] audit: type=1400 audit(1792615689.462:587): avc: denied { write } for pid=7704 comm="syz.6.390" lport=39726 faddr=::ffff:100.1.1.3 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 251.740261][ T30] audit: type=1400 audit(1792615689.752:588): avc: denied { watch watch_reads } for pid=7684 comm="syz.0.383" path="/75" dev="tmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 252.210707][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 253.349987][ T7730] netlink: 32 bytes leftover after parsing attributes in process `syz.1.394'. [ 253.371602][ T7730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=7730 comm=syz.1.394 [ 254.914151][ T7730] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 255.052680][ T7736] netlink: 144 bytes leftover after parsing attributes in process `syz.3.395'. [ 255.075011][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 255.075033][ T30] audit: type=1400 audit(1792615693.082:590): avc: denied { mounton } for pid=7744 comm="syz.1.399" path="/101/file0" dev="tmpfs" ino=582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 255.075146][ T7745] fuse: Bad value for 'fd' [ 255.753206][ T7748] Bluetooth: MGMT ver 1.23 [ 255.928894][ T6429] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 256.270746][ T30] audit: type=1400 audit(1792615694.282:591): avc: denied { append } for pid=7735 comm="syz.3.395" name="sg0" dev="devtmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 256.275407][ T30] audit: type=1400 audit(1792615694.282:592): avc: denied { setopt } for pid=7735 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 256.341217][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.7.401'. [ 256.341236][ T7752] netlink: 2 bytes leftover after parsing attributes in process `syz.7.401'. [ 256.362891][ T6429] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 256.366860][ T6429] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 256.366879][ T6429] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.366895][ T6429] usb 1-1: config 0 has no interface number 0 [ 256.366922][ T6429] usb 1-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.368827][ T6429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.368846][ T6429] usb 1-1: Product: syz [ 256.368858][ T6429] usb 1-1: Manufacturer: syz [ 256.368869][ T6429] usb 1-1: SerialNumber: syz [ 256.375544][ T6429] usb 1-1: config 0 descriptor?? [ 256.522376][ T7752] FAULT_INJECTION: forcing a failure. [ 256.522376][ T7752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.522405][ T7752] CPU: 1 UID: 0 PID: 7752 Comm: syz.7.401 Not tainted syzkaller #0 PREEMPT(full) [ 256.522425][ T7752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 256.522438][ T7752] Call Trace: [ 256.522444][ T7752] [ 256.522451][ T7752] dump_stack_lvl+0x100/0x190 [ 256.522484][ T7752] should_fail_ex.cold+0x5/0xa [ 256.522511][ T7752] _copy_from_user+0x2e/0xd0 [ 256.522541][ T7752] kstrtouint_from_user+0xd6/0x1d0 [ 256.522563][ T7752] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 256.522591][ T7752] ? lock_acquire+0x1d1/0x380 [ 256.522619][ T7752] proc_fail_nth_write+0x83/0x220 [ 256.522647][ T7752] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 256.522674][ T7752] vfs_write+0x2aa/0x1050 [ 256.522699][ T7752] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 256.522717][ T7752] ? lock_acquire+0x1d1/0x380 [ 256.522738][ T7752] ? __fget_files+0x34/0x3d0 [ 256.522754][ T7752] ? __pfx_vfs_write+0x10/0x10 [ 256.522775][ T7752] ? find_held_lock+0x2b/0x80 [ 256.522792][ T7752] ? __fget_files+0x215/0x3d0 [ 256.522812][ T7752] ? __fget_files+0x21f/0x3d0 [ 256.522835][ T7752] ksys_write+0x12a/0x250 [ 256.522858][ T7752] ? __pfx_ksys_write+0x10/0x10 [ 256.522889][ T7752] do_syscall_64+0x123/0x790 [ 256.522909][ T7752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.522928][ T7752] RIP: 0033:0x7fb005f9f559 [ 256.522944][ T7752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.522962][ T7752] RSP: 002b:00007fb006e8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 256.522980][ T7752] RAX: ffffffffffffffda RBX: 00007fb006225fa0 RCX: 00007fb005f9f559 [ 256.522992][ T7752] RDX: 0000000000000014 RSI: 0000200000000080 RDI: 000000000000000a [ 256.523004][ T7752] RBP: 00007fb006036b20 R08: 0000000000000000 R09: 0000000000000000 [ 256.523015][ T7752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.523025][ T7752] R13: 00007fb006226038 R14: 00007fb006225fa0 R15: 00007ffcb1610928 [ 256.523051][ T7752] [ 257.979987][ T30] audit: type=1400 audit(1792615695.992:593): avc: denied { mounton } for pid=7758 comm="syz.6.402" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 258.494336][ T7773] FAT-fs (nbd7): unable to read boot sector [ 258.495994][ T30] audit: type=1326 audit(1792615696.502:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.7.405" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb005f9f559 code=0x7fc00000 [ 258.993585][ T5738] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 259.097009][ T30] audit: type=1326 audit(1792615697.042:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.7.405" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb005f9f559 code=0x7fc00000 [ 259.194795][ T7776] bond0: (slave bond_slave_0): Releasing backup interface [ 259.218052][ T7776] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.218616][ T7776] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.237410][ T30] audit: type=1400 audit(1792615697.242:596): avc: denied { create } for pid=7775 comm="syz.6.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 259.260429][ T30] audit: type=1400 audit(1792615697.252:597): avc: denied { ioctl } for pid=7775 comm="syz.6.407" path="socket:[18602]" dev="sockfs" ino=18602 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 259.298511][ T5738] usb 4-1: Using ep0 maxpacket: 16 [ 259.300017][ T5738] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 259.301039][ T5738] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 259.301060][ T5738] usb 4-1: config 0 has no interface number 0 [ 259.301084][ T5738] usb 4-1: config 0 interface 246 has no altsetting 0 [ 259.306024][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.306047][ T5738] usb 4-1: Product: syz [ 259.306060][ T5738] usb 4-1: Manufacturer: syz [ 259.306075][ T5738] usb 4-1: SerialNumber: syz [ 259.371340][ T5738] usb 4-1: config 0 descriptor?? [ 259.408723][ T6429] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 259.408867][ T6429] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 82 [ 259.413178][ T6429] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 259.413245][ T6429] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 259.413305][ T6429] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 259.420692][ T6429] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 259.425463][ T6429] usb 1-1: USB disconnect, device number 7 [ 259.436846][ T6429] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 259.437267][ T6429] keyspan 1-1:0.133: device disconnected [ 259.609246][ T5738] usb 4-1: USB disconnect, device number 8 [ 259.653275][ T7785] FAULT_INJECTION: forcing a failure. [ 259.653275][ T7785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.653303][ T7785] CPU: 1 UID: 0 PID: 7785 Comm: syz.6.411 Not tainted syzkaller #0 PREEMPT(full) [ 259.653324][ T7785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 259.653334][ T7785] Call Trace: [ 259.653340][ T7785] [ 259.653348][ T7785] dump_stack_lvl+0x100/0x190 [ 259.653379][ T7785] should_fail_ex.cold+0x5/0xa [ 259.653406][ T7785] _copy_from_iter+0x1f4/0x1690 [ 259.653427][ T7785] ? __asan_memset+0x23/0x50 [ 259.653450][ T7785] ? __pfx__copy_from_iter+0x10/0x10 [ 259.653467][ T7785] ? __pfx___alloc_skb+0x10/0x10 [ 259.653485][ T7785] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 259.653513][ T7785] ? kernel_text_address+0x8d/0x100 [ 259.653539][ T7785] netlink_sendmsg+0x94a/0x1020 [ 259.653564][ T7785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.653591][ T7785] ? selinux_socket_sendmsg+0x198/0x2f0 [ 259.653620][ T7785] ? ____sys_sendmsg+0xa4d/0xbe0 [ 259.653645][ T7785] ____sys_sendmsg+0xa4d/0xbe0 [ 259.653668][ T7785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.653690][ T7785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.653721][ T7785] ? lock_acquire+0x1d1/0x380 [ 259.653742][ T7785] ? get_pid_task+0x2a/0x250 [ 259.653770][ T7785] ___sys_sendmsg+0x190/0x1e0 [ 259.653798][ T7785] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.653825][ T7785] ? get_pid_task+0x106/0x250 [ 259.653860][ T7785] ? find_held_lock+0x2b/0x80 [ 259.653893][ T7785] __sys_sendmsg+0x160/0x210 [ 259.653915][ T7785] ? __pfx___sys_sendmsg+0x10/0x10 [ 259.653950][ T7785] do_syscall_64+0x123/0x790 [ 259.653971][ T7785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.653990][ T7785] RIP: 0033:0x7ff3fc99f559 [ 259.654006][ T7785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.654023][ T7785] RSP: 002b:00007ff3fd7a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.654041][ T7785] RAX: ffffffffffffffda RBX: 00007ff3fcc25fa0 RCX: 00007ff3fc99f559 [ 259.654053][ T7785] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 259.654064][ T7785] RBP: 00007ff3fd7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 259.654076][ T7785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.654086][ T7785] R13: 00007ff3fcc26038 R14: 00007ff3fcc25fa0 R15: 00007ffcaef28e38 [ 259.654117][ T7785] [ 259.858655][ T6429] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 260.532535][ T7790] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 260.658966][ T6429] usb 1-1: Using ep0 maxpacket: 16 [ 260.660378][ T6429] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 260.661193][ T6429] usb 1-1: config 127 has an invalid interface number: 124 but max is 0 [ 260.661215][ T6429] usb 1-1: config 127 has no interface number 0 [ 260.661240][ T6429] usb 1-1: config 127 interface 124 has no altsetting 0 [ 260.662788][ T6429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.662800][ T6429] usb 1-1: Product: syz [ 260.662809][ T6429] usb 1-1: Manufacturer: syz [ 260.662817][ T6429] usb 1-1: SerialNumber: syz [ 260.799701][ T7794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7794 comm=syz.7.408 [ 262.161235][ T7804] FAULT_INJECTION: forcing a failure. [ 262.161235][ T7804] name failslab, interval 1, probability 0, space 0, times 0 [ 262.161271][ T7804] CPU: 0 UID: 0 PID: 7804 Comm: syz.3.418 Not tainted syzkaller #0 PREEMPT(full) [ 262.161292][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 262.161304][ T7804] Call Trace: [ 262.161311][ T7804] [ 262.161320][ T7804] dump_stack_lvl+0x100/0x190 [ 262.161352][ T7804] should_fail_ex.cold+0x5/0xa [ 262.161378][ T7804] should_failslab+0xc2/0x120 [ 262.161407][ T7804] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 262.161434][ T7804] ? __alloc_skb+0x5b7/0x710 [ 262.161455][ T7804] ? __alloc_skb+0x140/0x710 [ 262.161480][ T7804] __alloc_skb+0x140/0x710 [ 262.161499][ T7804] ? __alloc_skb+0x5b7/0x710 [ 262.161518][ T7804] ? __pfx___alloc_skb+0x10/0x10 [ 262.161550][ T7804] netlink_alloc_large_skb+0x69/0x150 [ 262.161574][ T7804] netlink_sendmsg+0x7a2/0x1020 [ 262.161600][ T7804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.161628][ T7804] ? selinux_socket_sendmsg+0x198/0x2f0 [ 262.161658][ T7804] ? ____sys_sendmsg+0xa4d/0xbe0 [ 262.161685][ T7804] ____sys_sendmsg+0xa4d/0xbe0 [ 262.161710][ T7804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.161732][ T7804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.161765][ T7804] ? preempt_schedule_irq+0x79/0x90 [ 262.161798][ T7804] ___sys_sendmsg+0x190/0x1e0 [ 262.161828][ T7804] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.161867][ T7804] ? __rcu_read_unlock+0x26a/0x5a0 [ 262.161909][ T7804] __sys_sendmsg+0x160/0x210 [ 262.161931][ T7804] ? __pfx___sys_sendmsg+0x10/0x10 [ 262.161967][ T7804] do_syscall_64+0x123/0x790 [ 262.161989][ T7804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.162009][ T7804] RIP: 0033:0x7f86eeb9f559 [ 262.162026][ T7804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.162045][ T7804] RSP: 002b:00007f86efa16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.162064][ T7804] RAX: ffffffffffffffda RBX: 00007f86eee26090 RCX: 00007f86eeb9f559 [ 262.162076][ T7804] RDX: 0000000000000040 RSI: 0000200000000440 RDI: 000000000000000c [ 262.162087][ T7804] RBP: 00007f86efa16090 R08: 0000000000000000 R09: 0000000000000000 [ 262.162098][ T7804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.162109][ T7804] R13: 00007f86eee26128 R14: 00007f86eee26090 R15: 00007ffeffc1cd98 [ 262.162134][ T7804] [ 263.339808][ T6429] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 263.550410][ T6429] usb 1-1: failed to restore interface 124 altsetting 11 (error=-71) [ 263.562256][ T6429] usb 1-1: USB disconnect, device number 8 [ 263.667611][ T30] audit: type=1400 audit(1792615701.672:599): avc: denied { listen } for pid=7811 comm="syz.0.420" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 263.668334][ T30] audit: type=1400 audit(1792615701.672:598): avc: denied { watch } for pid=7805 comm="syz.3.419" path="/84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 263.708152][ T7812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.420'. [ 263.737436][ T30] audit: type=1400 audit(1792615701.742:600): avc: denied { watch_sb } for pid=7805 comm="syz.3.419" path="/84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 263.762514][ T7812] UBIFS error (pid: 7812): cannot open "ubi0_0", error -19 [ 263.804671][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 263.937523][ T7817] 9pnet_virtio: no channels available for device syz [ 264.055485][ T30] audit: type=1400 audit(1792615702.062:601): avc: denied { create } for pid=7811 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 264.288563][ T24] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 264.439202][ T24] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 264.440022][ T24] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 264.440038][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.440049][ T24] usb 7-1: config 0 has no interface number 0 [ 264.440066][ T24] usb 7-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 264.441685][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.441706][ T24] usb 7-1: Product: syz [ 264.441715][ T24] usb 7-1: Manufacturer: syz [ 264.441723][ T24] usb 7-1: SerialNumber: syz [ 264.443078][ T24] usb 7-1: config 0 descriptor?? [ 264.508493][ T5603] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 264.659129][ T5603] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 264.659973][ T5603] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.660011][ T5603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.661353][ T5603] usb 1-1: config 0 descriptor?? [ 264.669431][ T5603] pwc: Askey VC010 type 2 USB webcam detected. [ 264.869643][ T5603] pwc: recv_control_msg error -32 req 02 val 2b00 [ 264.871930][ T5603] pwc: recv_control_msg error -32 req 02 val 2700 [ 264.874128][ T5603] pwc: recv_control_msg error -32 req 02 val 2c00 [ 264.874625][ T5603] pwc: recv_control_msg error -32 req 04 val 1000 [ 264.875076][ T5603] pwc: recv_control_msg error -32 req 04 val 1300 [ 264.884459][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.884810][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.925809][ T5603] pwc: recv_control_msg error -32 req 04 val 1400 [ 264.926336][ T5603] pwc: recv_control_msg error -32 req 02 val 2000 [ 264.927788][ T5603] pwc: recv_control_msg error -32 req 02 val 2100 [ 264.928396][ T5603] pwc: recv_control_msg error -32 req 04 val 1500 [ 264.930497][ T5603] pwc: recv_control_msg error -32 req 02 val 2500 [ 264.932644][ T5603] pwc: recv_control_msg error -32 req 02 val 2400 [ 264.936894][ T5603] pwc: recv_control_msg error -32 req 02 val 2600 [ 264.943825][ T5603] pwc: recv_control_msg error -32 req 02 val 2900 [ 264.944399][ T5603] pwc: recv_control_msg error -32 req 02 val 2800 [ 264.945241][ T5603] pwc: recv_control_msg error -32 req 04 val 1100 [ 265.023322][ T5603] pwc: Registered as video103. [ 265.054416][ T5603] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 265.159397][ T5603] usb 1-1: USB disconnect, device number 9 [ 266.068981][ T7835] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 266.071705][ T30] audit: type=1400 audit(1792615704.082:602): avc: denied { bind } for pid=7834 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 266.122866][ T30] audit: type=1400 audit(1792615704.132:603): avc: denied { write } for pid=7834 comm="syz.1.424" path="socket:[18740]" dev="sockfs" ino=18740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 266.157017][ T24] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 266.157115][ T24] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 82 [ 266.162974][ T24] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 266.163032][ T24] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 266.163084][ T24] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 266.186831][ T24] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 266.206484][ T24] usb 7-1: USB disconnect, device number 8 [ 266.227579][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 266.239404][ T24] keyspan 7-1:0.133: device disconnected [ 266.708910][ T30] audit: type=1400 audit(1792615704.692:604): avc: denied { append } for pid=7841 comm="syz.0.427" name="event2" dev="devtmpfs" ino=972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 266.880408][ T30] audit: type=1400 audit(1792615704.852:605): avc: denied { cmd } for pid=7841 comm="iou-wrk-7843" path="socket:[18076]" dev="sockfs" ino=18076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 267.830028][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.6.429'. [ 268.471090][ T7854] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 269.146947][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'. [ 269.844484][ T7865] syzkaller0: entered promiscuous mode [ 269.844513][ T7865] syzkaller0: entered allmulticast mode [ 270.034208][ T7865] tipc: Started in network mode [ 270.034355][ T7865] tipc: Node identity 6e1cf4139395, cluster identity 4711 [ 270.103433][ T7865] tipc: Enabled bearer , priority 0 [ 270.443578][ T7865] ================================================================== [ 270.443592][ T7865] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x1c20/0x1fd0 [ 270.443625][ T7865] Read of size 8 at addr ffff888045042f98 by task syz.3.426/7865 [ 270.443640][ T7865] [ 270.443650][ T7865] CPU: 0 UID: 0 PID: 7865 Comm: syz.3.426 Not tainted syzkaller #0 PREEMPT(full) [ 270.443671][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 270.443683][ T7865] Call Trace: [ 270.443690][ T7865] [ 270.443697][ T7865] dump_stack_lvl+0x100/0x190 [ 270.443728][ T7865] print_report+0x13d/0x4b0 [ 270.443756][ T7865] ? __virt_addr_valid+0x239/0x430 [ 270.443778][ T7865] ? snapshot_ctr+0x1c20/0x1fd0 [ 270.443804][ T7865] kasan_report+0xdf/0x1c0 [ 270.443821][ T7865] ? snapshot_ctr+0x1c20/0x1fd0 [ 270.443851][ T7865] snapshot_ctr+0x1c20/0x1fd0 [ 270.443881][ T7865] ? kasan_save_track+0x14/0x30 [ 270.443909][ T7865] ? __pfx_snapshot_ctr+0x10/0x10 [ 270.443936][ T7865] ? dm_split_args+0xc1/0x570 [ 270.443955][ T7865] ? rcu_is_watching+0x13/0xc0 [ 270.443984][ T7865] ? dm_split_args+0xc1/0x570 [ 270.444002][ T7865] ? kfree+0x1e5/0x6d0 [ 270.444023][ T7865] ? skip_spaces+0xee/0x130 [ 270.444045][ T7865] dm_table_add_target+0x58b/0xee0 [ 270.444071][ T7865] ? __pfx_dm_table_add_target+0x10/0x10 [ 270.444094][ T7865] ? dm_table_create+0x2d3/0x3d0 [ 270.444115][ T7865] table_load+0x3b9/0x7b0 [ 270.444146][ T7865] ? __pfx_table_load+0x10/0x10 [ 270.444174][ T7865] ? __might_fault+0xc5/0x140 ** replaying previous printk message ** [ 270.444174][ T7865] ? __might_fault+0xc5/0x140 [ 270.444194][ T7865] ? __might_fault+0xc5/0x140 [ 270.444219][ T7865] ctl_ioctl+0x4d2/0xcc0 [ 270.444245][ T7865] ? __pfx_table_load+0x10/0x10 [ 270.444274][ T7865] ? __pfx_ctl_ioctl+0x10/0x10 [ 270.444319][ T7865] ? selinux_file_ioctl+0x13b/0x290 [ 270.444338][ T7865] ? selinux_file_ioctl+0xb6/0x290 [ 270.444357][ T7865] dm_ctl_ioctl+0x22/0x30 [ 270.444384][ T7865] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 270.444411][ T7865] __x64_sys_ioctl+0x18e/0x210 [ 270.444443][ T7865] do_syscall_64+0x123/0x790 [ 270.444464][ T7865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.444485][ T7865] RIP: 0033:0x7f86eeb9f559 [ 270.444502][ T7865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.444521][ T7865] RSP: 002b:00007f86efa37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.444542][ T7865] RAX: ffffffffffffffda RBX: 00007f86eee25fa0 RCX: 00007f86eeb9f559 [ 270.444555][ T7865] RDX: 0000200000000400 RSI: 00000000c138fd09 RDI: 000000000000000a [ 270.444568][ T7865] RBP: 00007f86eec36b20 R08: 0000000000000000 R09: 0000000000000000 [ 270.444580][ T7865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.444591][ T7865] R13: 00007f86eee26038 R14: 00007f86eee25fa0 R15: 00007ffeffc1cd98 [ 270.444610][ T7865] [ 270.444623][ T7865] [ 270.444627][ T7865] Allocated by task 7865: [ 270.444636][ T7865] kasan_save_stack+0x30/0x50 [ 270.444661][ T7865] kasan_save_track+0x14/0x30 [ 270.444686][ T7865] __kasan_kmalloc+0xaa/0xb0 [ 270.444710][ T7865] __kmalloc_cache_node_noprof+0x30c/0x710 [ 270.444736][ T7865] dm_get_table_device+0x2f8/0x830 [ 270.444759][ T7865] dm_get_device+0x525/0x7e0 [ 270.444775][ T7865] snapshot_ctr+0x201/0x1fd0 [ 270.444799][ T7865] dm_table_add_target+0x58b/0xee0 [ 270.444815][ T7865] table_load+0x3b9/0x7b0 [ 270.444841][ T7865] ctl_ioctl+0x4d2/0xcc0 [ 270.444865][ T7865] dm_ctl_ioctl+0x22/0x30 [ 270.444889][ T7865] __x64_sys_ioctl+0x18e/0x210 [ 270.444911][ T7865] do_syscall_64+0x123/0x790 [ 270.444927][ T7865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.444945][ T7865] [ 270.444949][ T7865] Freed by task 7865: [ 270.444957][ T7865] kasan_save_stack+0x30/0x50 [ 270.444982][ T7865] kasan_save_track+0x14/0x30 [ 270.445006][ T7865] kasan_save_free_info+0x3b/0x70 [ 270.445026][ T7865] __kasan_slab_free+0x5f/0x80 [ 270.445051][ T7865] kfree+0x22b/0x6d0 [ 270.445069][ T7865] dm_put_table_device+0x2bf/0x380 [ 270.445091][ T7865] dm_get_device+0x3f1/0x7e0 [ 270.445108][ T7865] snapshot_ctr+0x326/0x1fd0 [ 270.445132][ T7865] dm_table_add_target+0x58b/0xee0 [ 270.445155][ T7865] table_load+0x3b9/0x7b0 [ 270.445180][ T7865] ctl_ioctl+0x4d2/0xcc0 [ 270.445204][ T7865] dm_ctl_ioctl+0x22/0x30 [ 270.445228][ T7865] __x64_sys_ioctl+0x18e/0x210 [ 270.445251][ T7865] do_syscall_64+0x123/0x790 [ 270.445267][ T7865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.445284][ T7865] [ 270.445289][ T7865] The buggy address belongs to the object at ffff888045042f80 [ 270.445289][ T7865] which belongs to the cache kmalloc-96 of size 96 [ 270.445304][ T7865] The buggy address is located 24 bytes inside of [ 270.445304][ T7865] freed 96-byte region [ffff888045042f80, ffff888045042fe0) [ 270.445326][ T7865] [ 270.445331][ T7865] The buggy address belongs to the physical page: [ 270.445338][ T7865] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x45042 [ 270.445354][ T7865] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 270.445369][ T7865] page_type: f5(slab) [ 270.445385][ T7865] raw: 00fff00000000000 ffff88801d038280 dead000000000100 dead000000000122 [ 270.445402][ T7865] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 270.445415][ T7865] page dumped because: kasan: bad access detected [ 270.445423][ T7865] page_owner tracks the page as allocated [ 270.445429][ T7865] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:0), ts 82369323207 [ 270.445461][ T7865] post_alloc_hook+0xfd/0x120 [ 270.445480][ T7865] get_page_from_freelist+0x110d/0x35d0 [ 270.445502][ T7865] __alloc_frozen_pages_noprof+0x2e9/0x32e0 [ 270.445526][ T7865] new_slab+0xa9/0x6e0 [ 270.445544][ T7865] refill_objects+0xe3/0x410 [ 270.445564][ T7865] __pcs_replace_empty_main+0x35e/0x650 [ 270.445585][ T7865] __kmalloc_noprof+0x677/0x840 [ 270.445607][ T7865] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 270.445627][ T7865] cfg80211_inform_bss_data+0x230/0x3c20 [ 270.445645][ T7865] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 270.445663][ T7865] ieee80211_bss_info_update+0x310/0xab0 [ 270.445684][ T7865] ieee80211_ibss_rx_queued_mgmt+0xdff/0x1c70 [ 270.445706][ T7865] ieee80211_iface_work+0xa9a/0x1070 [ 270.445727][ T7865] cfg80211_wiphy_work+0x2b7/0x550 [ 270.445745][ T7865] process_one_work+0xac7/0x1b10 [ 270.445762][ T7865] worker_thread+0x5ef/0xe50 [ 270.445778][ T7865] page last free pid 5918 tgid 5915 ts 82363683869 stack trace: [ 270.445790][ T7865] __free_frozen_pages+0x79f/0x10f0 [ 270.445807][ T7865] tlb_finish_mmu+0x27d/0x810 [ 270.445822][ T7865] exit_mmap+0x454/0xa00 [ 270.445847][ T7865] __mmput+0x12a/0x410 [ 270.445865][ T7865] mmput+0x62/0x70 [ 270.445883][ T7865] do_exit+0x83b/0x2a40 [ 270.445906][ T7865] do_group_exit+0xd5/0x2a0 [ 270.445929][ T7865] get_signal+0x1ec2/0x21d0 [ 270.445949][ T7865] arch_do_signal_or_restart+0x91/0x7e0 [ 270.445977][ T7865] exit_to_user_mode_loop+0x139/0x700 [ 270.446002][ T7865] do_syscall_64+0x661/0x790 [ 270.446019][ T7865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.446038][ T7865] [ 270.446042][ T7865] Memory state around the buggy address: [ 270.446051][ T7865] ffff888045042e80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 270.446063][ T7865] ffff888045042f00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 270.446076][ T7865] >ffff888045042f80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 270.446085][ T7865] ^ [ 270.446095][ T7865] ffff888045043000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 270.446107][ T7865] ffff888045043080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 270.446116][ T7865] ================================================================== [ 270.542320][ T30] audit: type=1400 audit(1792615708.542:606): avc: denied { read } for pid=4952 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 270.542365][ T30] audit: type=1400 audit(1792615708.542:607): avc: denied { search } for pid=4952 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.542420][ T30] audit: type=1400 audit(1792615708.542:608): avc: denied { write search } for pid=4952 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.542455][ T30] audit: type=1400 audit(1792615708.542:609): avc: denied { add_name } for pid=4952 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.542489][ T30] audit: type=1400 audit(1792615708.542:610): avc: denied { create } for pid=4952 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 270.542522][ T30] audit: type=1400 audit(1792615708.542:611): avc: denied { append open } for pid=4952 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 270.542557][ T30] audit: type=1400 audit(1792615708.542:612): avc: denied { getattr } for pid=4952 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 270.603992][ T7865] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 271.364294][ T7865] CPU: 1 UID: 0 PID: 7865 Comm: syz.3.426 Not tainted syzkaller #0 PREEMPT(full) [ 271.373474][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 271.383504][ T7865] Call Trace: [ 271.386758][ T7865] [ 271.389664][ T7865] dump_stack_lvl+0x100/0x190 [ 271.394320][ T7865] vpanic+0x553/0x970 [ 271.398279][ T7865] ? __pfx_vpanic+0x10/0x10 [ 271.402761][ T7865] ? snapshot_ctr+0x1c20/0x1fd0 [ 271.407590][ T7865] panic+0xd1/0xe0 [ 271.411296][ T7865] ? __pfx_panic+0x10/0x10 [ 271.415683][ T7865] ? snapshot_ctr+0x1c20/0x1fd0 [ 271.420511][ T7865] ? preempt_schedule+0x57/0xd0 [ 271.425341][ T7865] check_panic_on_warn.cold+0x19/0x34 [ 271.430683][ T7865] end_report.part.0+0x3a/0x90 [ 271.435423][ T7865] kasan_report.cold+0xe/0x18 [ 271.440086][ T7865] ? snapshot_ctr+0x1c20/0x1fd0 [ 271.444915][ T7865] snapshot_ctr+0x1c20/0x1fd0 [ 271.449831][ T7865] ? kasan_save_track+0x14/0x30 [ 271.454658][ T7865] ? __pfx_snapshot_ctr+0x10/0x10 [ 271.459665][ T7865] ? dm_split_args+0xc1/0x570 [ 271.464342][ T7865] ? rcu_is_watching+0x13/0xc0 [ 271.469108][ T7865] ? dm_split_args+0xc1/0x570 [ 271.473774][ T7865] ? kfree+0x1e5/0x6d0 [ 271.477822][ T7865] ? skip_spaces+0xee/0x130 [ 271.482297][ T7865] dm_table_add_target+0x58b/0xee0 [ 271.487380][ T7865] ? __pfx_dm_table_add_target+0x10/0x10 [ 271.492984][ T7865] ? dm_table_create+0x2d3/0x3d0 [ 271.497894][ T7865] table_load+0x3b9/0x7b0 [ 271.502212][ T7865] ? __pfx_table_load+0x10/0x10 [ 271.507038][ T7865] ? __might_fault+0xc5/0x140 [ 271.511692][ T7865] ? __might_fault+0xc5/0x140 [ 271.516369][ T7865] ctl_ioctl+0x4d2/0xcc0 [ 271.520591][ T7865] ? __pfx_table_load+0x10/0x10 [ 271.525418][ T7865] ? __pfx_ctl_ioctl+0x10/0x10 [ 271.530163][ T7865] ? selinux_file_ioctl+0x13b/0x290 [ 271.535338][ T7865] ? selinux_file_ioctl+0xb6/0x290 [ 271.540419][ T7865] dm_ctl_ioctl+0x22/0x30 [ 271.544722][ T7865] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 271.549720][ T7865] __x64_sys_ioctl+0x18e/0x210 [ 271.554459][ T7865] do_syscall_64+0x123/0x790 [ 271.559019][ T7865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.564890][ T7865] RIP: 0033:0x7f86eeb9f559 [ 271.569293][ T7865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.588879][ T7865] RSP: 002b:00007f86efa37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.597261][ T7865] RAX: ffffffffffffffda RBX: 00007f86eee25fa0 RCX: 00007f86eeb9f559 [ 271.605205][ T7865] RDX: 0000200000000400 RSI: 00000000c138fd09 RDI: 000000000000000a [ 271.613147][ T7865] RBP: 00007f86eec36b20 R08: 0000000000000000 R09: 0000000000000000 [ 271.621090][ T7865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.629033][ T7865] R13: 00007f86eee26038 R14: 00007f86eee25fa0 R15: 00007ffeffc1cd98 [ 271.636978][ T7865] [ 271.640174][ T7865] Kernel Offset: disabled [ 271.644471][ T7865] Rebooting in 86400 seconds..