last executing test programs: 6m53.986371269s ago: executing program 1 (id=32): mkdir(&(0x7f00000000c0)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f00000001c0)='fusectl\x00', 0x2809096, 0x0) mkdir(&(0x7f0000000080)='./my_configfs/target/usb_gadget\x00', 0xb3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x60, 0x0) open$dir(&(0x7f0000000040)='./my_configfs/target/usb_gadget\x00', 0x0, 0x80) rmdir(&(0x7f0000000180)='./my_configfs/target/usb_gadget\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) get_mempolicy(0x0, &(0x7f0000000240), 0x1, &(0x7f0000001000/0x4000)=nil, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000280)={{0x0, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x0, 0x5, 0x75}, {@broadcast, 0x4e24, 0x4, 0x5, 0x1c, 0x5}}, 0x44) lseek(r2, 0x800, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r4, &(0x7f0000000880)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x1f, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabc4a0000000800450000240000000203119078000000000000004e200010907822030001800000000000008ec830f1407df889dd75443e3cfbbeb2ec9513eb4826187809021e7caeb40df352bea61bf93afc68d4c84b8259d12ba14019cce81e6e3d5eacf948f9666495ea8cec2554798172a65cf5cb3ef29e53eddddf7f"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$alg(r2, &(0x7f0000000440)=""/254, 0xfe) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="41000200010006", 0x7) 6m53.632846394s ago: executing program 1 (id=34): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) (async) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000100)={0x7, 0x9, 0x200, 0x400100, 0x14, "3eccd8000000000000000010000000230100"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) (async) r2 = openat(0xffffffffffffff9c, 0x0, 0x101, 0x0) writev(r2, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x4000000000009) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) (async) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, 0x0) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}}) ioctl$TCSETS2(r7, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8004, 0x7, "202b9809007d0000cd681ec267a000", 0x6, 0xd}) (async) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f00000002c0)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x31) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x10, 0x14, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20016}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010003904000000000002020000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) 6m50.17928852s ago: executing program 1 (id=43): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000040)="660f38804f1b65f30f595d5d6df20f1bd00f0119360f00d566b9800000c00f326635000400000f30660f3881a100000f01cf0f94b5472f", 0x37}], 0x1, 0x40, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000380)={0x0, 0x4316, 0x2, 0x1, 0xa00}) bind$inet6(r6, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r7 = socket(0xa, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, 0x0, 0x30) creat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r8, &(0x7f0000000180)='1', 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) r10 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_FILES(r10, 0x25, &(0x7f0000000000)=[r10], 0x1) write(r9, &(0x7f0000000240)='6', 0x1) 6m49.761897931s ago: executing program 1 (id=47): shmctl$IPC_SET(0x0, 0x1, 0x0) (async) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x42300, 0x0) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 64) r1 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) setsockopt$inet_int(r1, 0x0, 0x19, 0x0, 0x0) (async) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000040)={0x4, 0x6, 0x20}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peeksig(0x4209, r6, &(0x7f0000000000)={0xfffffffffffffffe, 0x1, 0x1}, &(0x7f0000000040)=[{}]) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) (async) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f00000002c0), 0x2, 0x2) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r6], 0x50}}, 0x24000000) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0) (async, rerun: 64) set_mempolicy(0x2, &(0x7f0000000000)=0x7, 0x4) (rerun: 64) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000200000040030431c60005000002010902120000010080320904"], 0x0) 6m45.120583549s ago: executing program 1 (id=57): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000040)="660f38804f1b65f30f595d5d6df20f1bd00f0119360f00d566b9800000c00f326635000400000f30660f3881a100000f01cf0f94b5472f", 0x37}], 0x1, 0x40, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000380)={0x0, 0x4316, 0x2, 0x1, 0xa00}) bind$inet6(r6, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r7 = socket(0xa, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, 0x0, 0x30) creat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r8, &(0x7f0000000180)='1', 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) r10 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_FILES(r10, 0x25, &(0x7f0000000000)=[r10], 0x1) write(r9, &(0x7f0000000240)='6', 0x1) 6m44.479135113s ago: executing program 1 (id=60): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@migrate={0x138, 0x21, 0x1, 0xa00, 0x0, {{@in, @in6=@rand_addr=' \x01\x00'}}, [@migrate={0xe8, 0x11, [{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty}, {@in=@empty, @in=@private, @in6=@remote, @in6=@mcast2}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2}]}]}, 0x138}}, 0x0) 6m43.804795897s ago: executing program 32 (id=60): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@migrate={0x138, 0x21, 0x1, 0xa00, 0x0, {{@in, @in6=@rand_addr=' \x01\x00'}}, [@migrate={0xe8, 0x11, [{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty}, {@in=@empty, @in=@private, @in6=@remote, @in6=@mcast2}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2}]}]}, 0x138}}, 0x0) 5m23.639229624s ago: executing program 4 (id=190): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r2 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5786dd6c370c8900082b0000000000000000000023000000000000fe8000000000000000000000000000aaff"], 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x2}]}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYRES8=r2, @ANYRES8=r0, @ANYRES32=0x0, @ANYRES8=0x0], 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000180)={0xa, 0xac10, 0x5, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_GS(0x1e, r3, &(0x7f0000000240), 0x1004) r4 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e21, @local}]}, &(0x7f0000000400)=0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 5m22.669118221s ago: executing program 4 (id=191): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x5, 0x7, 0xffffffffffffc474, 0x8000000000000001, 0x5, 0x0, 0xfffffff8, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)) fallocate(0xffffffffffffffff, 0x0, 0x37e9, 0x2f92) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 5m21.922525826s ago: executing program 4 (id=192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) fsmount(0xffffffffffffffff, 0x0, 0xe2) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x134}, 0x1, 0x0, 0x0, 0x4090}, 0x4004) shmget(0x2, 0x1000, 0x7800010c, &(0x7f0000ffd000/0x1000)=nil) r4 = io_uring_setup(0x102a6a, &(0x7f00000002c0)={0x0, 0xd610, 0x8000, 0x1, 0xd3}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x3, {0x11, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0xf602, 0x6, 0xfffffff3, 0x0, 0x0, 0x6000, '\x00', 0xfffffffffffffffe, 0xfffffffffffffffe, 0x200, 0x0, {}, {0x5, 0x402}, {0xfffffffffffffffb, 0x4}, {0x5}, 0x60, 0x0, 0x7fff}}}}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0], 0x239) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@private=0xa010100, @multicast2, 0x1, "822fae6e6f6a5c07871a935c160087ab7d7cb2cd309844201641ee569e68692c", 0x3ff, 0x5, 0x8, 0x3}, 0x3c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x14) 5m13.270921872s ago: executing program 4 (id=208): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = getpgrp(0x0) setsockopt$inet_mreq(r1, 0x0, 0x20, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000340)={0x3, @sdr={0x32314752, 0x2000}}) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)=0x0) ptrace$setsig(0x4203, r4, 0x3fe, &(0x7f00000001c0)={0x2d, 0xffff, 0xa336}) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x73, 0x0) 5m8.903306609s ago: executing program 4 (id=216): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x2, &(0x7f0000000000)=0x80000000000003) tkill(r1, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/44, 0x2c}, {&(0x7f0000000200)=""/152, 0x98}], 0x2}}], 0x48, 0x4000000}, 0x0) 5m6.064471121s ago: executing program 4 (id=222): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000240), 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x8e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x7, 0x29f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0xbc7bd27e37419d57, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640), 0x4) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000010008000100000000200000000000000000000000000000000c4000053be0000"], 0x0, 0x2a, 0x0, 0x1}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x73e9, 0x1c410, 0x4, 0x19c}) syz_ublk_setup_io_uring(0x7663, &(0x7f0000000100)={0x0, 0xa63f, 0x200, 0x2, 0x206, 0x0, r5}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r4, r4}, 0xc) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0xffffffff80000000, 0x0, 0x0) 5m5.224434815s ago: executing program 33 (id=222): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000240), 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x8e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x7, 0x29f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0xbc7bd27e37419d57, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640), 0x4) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000010008000100000000200000000000000000000000000000000c4000053be0000"], 0x0, 0x2a, 0x0, 0x1}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x73e9, 0x1c410, 0x4, 0x19c}) syz_ublk_setup_io_uring(0x7663, &(0x7f0000000100)={0x0, 0xa63f, 0x200, 0x2, 0x206, 0x0, r5}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r4, r4}, 0xc) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0xffffffff80000000, 0x0, 0x0) 3m37.679270851s ago: executing program 3 (id=397): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$NL80211_CMD_GET_MPATH(r1, 0x0, 0x40000) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f0000000200)="e662a86f2fbb2cfe49b31e1ac5908e8daec16c72e41092820e607304a6e18911819c572dc486ad121f666b", 0x2b}], 0x2}, 0x40080) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000280)=[{0x30, 0x9, 0xfd, 0x5ae9}, {0x6, 0x40, 0x82, 0x1ffe}]}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3e}, 0x1c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, &(0x7f0000000100)}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) close_range(r8, 0xffffffffffffffff, 0x0) 3m36.371381715s ago: executing program 3 (id=399): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYBLOB="0300000009"]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000040)="660f38804f1b65f30f595d5d6df20f1bd00f0119360f00d566b9800000c00f326635000400000f30660f3881a100000f01cf0f94b5472f", 0x37}], 0x1, 0x40, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000380)={0x0, 0x4316, 0x2, 0x1, 0xa00}) bind$inet6(r6, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r7 = socket(0xa, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, 0x0, 0x30) creat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r8, &(0x7f0000000180)='1', 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) r10 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_FILES(r10, 0x25, &(0x7f0000000000)=[r10], 0x1) write(r9, &(0x7f0000000240)='6', 0x1) 3m35.112338592s ago: executing program 3 (id=402): mount(0x0, 0x0, &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = getpid() landlock_restrict_self(0xffffffffffffffff, 0x3b17fb5a9d59ed92) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) socket(0x2, 0x400000000002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='m', 0x1) 3m29.478735853s ago: executing program 3 (id=410): poll(0x0, 0x0, 0xc91e0f9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') creat(&(0x7f0000000080)='./file0\x00', 0x6a) (async) creat(&(0x7f0000000080)='./file0\x00', 0x6a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e0001"], 0x84}, 0x1, 0x0, 0x0, 0x2000c851}, 0x50) sendmsg$NFT_BATCH(r0, 0x0, 0x4000040) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000) 3m22.076516519s ago: executing program 3 (id=420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, 0x0, 0x0}, 0x94) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000080)={0x37, &(0x7f00000000c0)}) r2 = fsopen(&(0x7f0000000000)='logfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) unshare(0x8040480) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000000c0), 0x259, 0x0) fchdir(r3) unlinkat(r3, &(0x7f00000000c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000040), 0xc, &(0x7f00000013c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800034000000001080002", @ANYBLOB="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", @ANYRES16=r0, @ANYRES64=r0], 0xdc}}, 0x440c1) fstat(r3, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="466772aad204338e6363", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r7, &(0x7f00000017c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x130, 0x0, 0x3, {0x1, 0x0, 0x0, '\x00', {0x1, 0x0, 0xae1, 0x10, r8, r9, 0xc000, '\x00', 0xfffffffffffff000, 0xbffe, 0x1, 0xfffffffffffffff7, {0x4, 0x3}, {0x1001, 0xc}, {0x1ffffff, 0x20000d}, {0x1000000000, 0xa00}, 0x2, 0x574, 0x9db, 0xbb4}}}}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001440)={0x95f, 0x2, {}, {0xee00}, 0x8126, 0x8}) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000001480)=0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x100000, &(0x7f0000001540)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r6, @ANYBLOB=',uid=', @ANYRESHEX=r8, @ANYBLOB=',uid=', @ANYRESHEX=r10, @ANYBLOB=',smackfsfloor=logfs\x00,euid<', @ANYRESDEC=r11, @ANYBLOB="2c006da29ded"]) 3m18.476284807s ago: executing program 3 (id=427): socket$inet6(0xa, 0x1, 0x8010000000000084) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ba3000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000a18000/0x2000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, 0x0, 0x0) getsockname$packet(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000340), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}, @exit], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x80) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="000089142460", @ANYRES64=r4], 0xb2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r6 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r6, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 3m17.741562617s ago: executing program 34 (id=427): socket$inet6(0xa, 0x1, 0x8010000000000084) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ba3000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000a18000/0x2000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, 0x0, 0x0) getsockname$packet(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000340), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}, @exit], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x80) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="000089142460", @ANYRES64=r4], 0xb2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r6 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r6, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 21.153869641s ago: executing program 7 (id=724): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r0, &(0x7f0000000100)=""/134, 0x86) getdents(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x8000000005f, 0x3}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048810) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x2edb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) 18.118314893s ago: executing program 0 (id=729): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="0203f602310000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c000001fc05000500000000000a00000000000000fc0100000000000000000000000000010700000000000000210008000008"], 0x188}, 0x1, 0x7}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r5, 0x0, r6, 0x0, 0x7ffff000, 0x3) socket(0x2, 0x80805, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x80) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 16.475777993s ago: executing program 0 (id=732): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 14.320460677s ago: executing program 7 (id=737): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r4, 0x0, r5, 0x0, 0x7ffff000, 0x3) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000200)='a', 0x1}], 0x1}], 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x4c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x80) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 12.498209161s ago: executing program 7 (id=740): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r0, &(0x7f0000000100)=""/134, 0x86) getdents(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x8000000005f, 0x3}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048810) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x2edb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) 12.271606215s ago: executing program 0 (id=741): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,,ass=root,vers=2.1,nodfs\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="00000080fe534d424000010000000000000001000100"/33, 0x21, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000078fe534d4240000100160000c00100010001000000000000000100000000000000000000000000000001000000000000000000000000000000000000000000000009000000480030004e544c4d53535000020000000000000000000000000208", 0x63, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file1'}, 0xb) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@local, @loopback, 0x0}, &(0x7f00000000c0)=0xc) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0xfccd, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfbfffffe, 0xb5d, 0x7d, 0x20000006, 0xfffff800, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x8, 0x0, 0x3, 0x400, 0x0, 0x1, 0x40, 0x1, 0x24, 0xd, 0x4, 0x0, 0x3, 0xe665, 0x204, 0xe18, 0x0, 0x8, 0x4c74, 0x80000000, 0x7fc, 0x400003, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x9, 0x84, 0x7, 0x3ff, 0x8, 0x0, 0x7, 0xa, 0x8, 0x4, 0x8, 0xfffffffc], [0xc0, 0x9, 0x8000012f, 0x8004, 0x5, 0x8, 0x129432e7, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x7, 0xfffffffc, 0x6, 0x2, 0x1, 0x2, 0x2f, 0x1782000, 0x313, 0x4, 0xea4, 0x5fa, 0x4, 0x7, 0x8, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e0, 0x2, 0x4, 0xf, 0x4, 0x9, 0x8, 0x9, 0x2, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x1, 0x4, 0x10009, 0x3, 0x9, 0x2, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x7e, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31e, 0x5, 0x6, 0x7fff, 0x9, 0x10001, 0x400000b, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x1000, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000a7, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x4, 0x5, 0x1, 0x10, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x800006, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x37f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x150, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c7, 0x1, 0x8ae2, 0xec5, 0x3, 0x8d, 0x100, 0xfc, 0x40000046, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x1, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0xe, 0x6c1b, 0xfffffffc, 0xb, 0x5, 0xb1b, 0x6, 0x200, 0x80000001, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000440)={{r3}, "24ff07f1f0824d5008fa2e9d5ee309fe7c3def0f0303abf85e87dd16861ce17ec842ac75ddfd55d125b49acefee3c2e9d5a5a442864febb520fb85d5ff2122789c9452690cf5e4a02fda8c17c82d3b6c7f15c0ac653cdc51b01fc00976a8f9c8136f0629f20597bdff0c0e44b639e1b74817dea5ca8ac7356cd58ec06c0d8f9bac2b538cf54e2fd8396e28afc0c98b8d257f70b7c430f78ff15b7d49644cfc970d1a27114ff21f3d95f53617b190ab8051847d070531061d639283def587569d5d5f6a80830d129600dd6a763a8f0dabade29a015c69acb5611db492ba77aae28391a5ab6368a459c36cb5f22823c5c186dcf02828accce662fca87e22a103d88cf0fbe20c449eb3c54b60fdda5035297476616be786e444924c70358a98341c4c9a8e40c376943f9385091bd3f22818e2e8bcf85a3c8f9c86044766b4a92aa4361e56601e92fb538a9b22f3a6e621ffcbd49b7f9b166157b9dc6331b0038c4eaa1bfc559e79806c6c1249eb6202e85eb5e7411d4ee57edd9fdb0cb6ad5a75d89472608dc1aae3f6d953f5f5f16de2f97a31b4ab03c41bd15700376e40084807efb658b01c30df45f0171613e81557aa489b14cc14f281958be8fa1115adc8dcec25267dda4d57100398eb338f0c33099857f1559efc977433401c62226b0c7ffa203e65ee277f346ecaf127525e07d8fa87e8b4a7383b0af3c91b710d7f498379da806c0a6687caf308ab8438dc0b803f4ad07dd05ccdab05fa9986ceb03f2921aa8310001ab6b0df5833bf187881c2f7f7214d8578bd3d730fbbcb8fa80512c202986f191b6c84fa2ff125af8ec073ec1b6e8172925626f34b1d61d98a0146ffd2c58c01e8666a51e879c214b901098c992b00584972dff44928cf074381b1a1625c1e1aa3b7a39139aa0a9a70434b7e38b4e7ddad6003f25f29f41614e57f8ecc9bc1a0e8644bace317ff9b7c74c81daf63bdecf9818f64b1208cbbe1dd6b194fc407d2acaf80a2992cb14af76510f4cacaf108a183c4e6915858411fa8df34ebe4e6a3cdd4d0e35cefdc2baef832fe6ad70295e6b77190eb1455734ef615f3219938a7c775d1ff2ae0cd02b9009b08f7e2869d1184ea5d76e7a10c8e7969dfa9ca538be2f3ce886f70d316db5cec0bbcace079accf17ce94ebee37c35b05539da285b52ad181aa2802e4ee546a8ceeb22ac01be502cf81a3ad13c6b2674c63e8fe7bc511451c725448f8b10eb376bc603ead13e52df9b6c11d035a49d64ea41ad9ee76ed890564fd65fcc22f5c639a5e5ab75ba9403da8d9a05fb4c4147a69d598d279d800eb9e1552d0da3714b053294c37d8023f1e270f14c80328ca1fe31a0401376d65eea1ad9c828ea44093525a6c12ed50894e5cae4fd90cc0cff98354588b9bec975c18db874ac524192211e997e7aabf9f2cd11aca2fe474b6e8e9571bf433752ba789a6fefc6bcbf83eb007eeae2a285d01b9fa3cf67aca95ecc02e75bcd3f522878248aa77ad3f9811c0d0ff694f2257270ea4d2933f235a560d4a219a07f9e13de2bfbb3d4d3e9c568c3c524abdf134c54bc59a0f6338d8e4666f1f3527a3b0f5d82d27e6f0d233a7963366ced793bd4b160cdb16a8f138d5213f703ec7c9960d52ea81357cdc0bcd45c5675e67342afc1420c9f4a5c7421f6533ce74d3c82e3a6c99fe4fed74380195d8560b64d0fff436bc762b5adc7d138319b64d203f6c9106a1d12981053256b90f1a5d4ba94c5937ca7da4c60f55e1f6af7987b6a4f31b8807b8e94a500b4e32373c3538fcef8abb42cf9d5faba3a7efacab38d00f0b4b0fe91a66ac593cd4974c1407edb5059058a932b9de4936118e740fc05ad9a9ff9be6ab86eddfdb8ab68b207e5e57b90819dba1eb96551fccfda4b7a33624f33a83fe80fd42385559c0e44db781be6b7129f6152f8c43538f772674f91133c334f02c939cc863d3e0dc49f5bc46ab8d0d6cbfce3475693c13516187f1b0ca6245ba87e0f1f205de4491cd20eaea96e065a13ed8b8f8d8e15f6be84a1d8938b5d5251704b8480f5430d290f3e959d697afdd1aadc50255c09be993531c1daaec72487fb4283a0e523a74c2c6c9324d39235223a52c725753d67192fe904ad4afb1579cc63fd32373f0405167d431f6e29cf428666cae5eca7524cb09b50e39e78e9f0e12aad5735cf7d13be3843a102d325b24b11d8e767820ee9c4e4c7552a3a73df52cc15d1edc896cfb86fc11e32706aeeabfb747bdd95edf0f17bb6af5b3d2e3a0266610af7830b6948c6263d650c5554d2e6571f9203fb0dcd8802cad66f41728f381fa8582049765d49f226e357c2e2c220d665e4f940f5105c9b26833105616377c730d7bfce450cad61408f170ea8c1a1f144d5ceb8eb26827e3cbd4c3245c7b25f7952e6e9bbd32080ebdfd009bbf2767f020f3bba0f1c51b8d09cc70dd05019d9836fc57ce4f622aafdaf5027f23955d1973e47379e4008e92c95a8b0dd45922087d25999cd9f165c575d1c4d121906b071542d8230ec53b9d60304f35f37853e1e6605f4d7ad66e860e2d1d4a153a6d865387df10878904c3a6a134d42c4d3322c1cd312f09f999f6c2acda71bb99f3d1b3ffd339e5823ca005ffaf0d67d40a07530b0b961b454fb859806f14b33e8611b45768dd61cc5d716e215fae6fb3dabfaecdb78cc5e4c536313ebf9d4ae1d1ca31961078a6262e79cc6ed062dab30fec41e8061f2fcf63206b714decf702ced293da78a19bf401fb0742746f6a8a5d586aa61dcfdc6aeae64f3dfeba3a8b08684b24a69410b7433cd1f2ed2c2e5bf0cbc400d00495ae0cc71b173830ab397607d4494db9564112f5111fb08a5f158862f8b7754099cfeb24732efcc9e58c52faeadd9181e7f67a9d7a4bf7dbd6d9d97b5b46146817f81e1134100e69e3b97ba8a2824af3a097f4197281759cfe3e747bd88dfba1d650bc52fcc9f3577959c08b76973ec42e9a446da573047738fa6d1644a44024a0b9b43383a1f3d873d48369d1c830d6a0d154899fe71f7d265e13f96dab28a4c1e6076d9fa17c84608d425038cebc54da115918d9d87cb4ca0c3fefa7bb030bffa23812a1d21cba2291faccc5a0c71636eb3959d43d55ee135d137e4ac3900d2efd57d74bcc98c19dd0fc5678a956f9a85d96974d435426adbb868dea4fbb0b68b0d9b2714e20194f3bc24e1a5810210a5f6074fb2b6e4e6727ad8483d12d9e832c551ae6820a3da57e29d5bee34628a9c1b3b7f9365358450a83e72858784eb3ef05389b7be6b6023dcafa6f17e7052e328528dda5ed146a8151b1a5fa519955cb47ce0f750099325b58e75f4c06dfa265e285ad88d6c7b19b613eb10f3318b6935fba3f69452508a30282581dc74eeadc561463d2d7e751c7b56ac93115abad0e5763b6bd3235b794e467804cbbaf2dc5a9ae0ed375a9d293af031e6afdc54d73071cc5b44a374ebdddf3ef7af4e88e3c433d1151e0848f2d994dd8d136e25b86a393d94452082d996fc7d5b3a1f2da8b6fc5f9ab7b0775778faa2330351bdd6e93c8d50ce19e087f85b823fbc762329629a52141b1facd5e28043721773ff16e7fcce64918665135f9415efb72c89285275c5d5bf174c802d6937bdbb3229293a802f4f7f08ee44d73ce0bceec8906f72bd72a88a81512f2088efa3f1c7cb33afaa04015d5984de18826fbf2b3a7db68c059eec0ff5faebbbe509fd58da0af8d8a56b4a951bc5403954b1b42901a0e3131da0536441bffe11f5ec96d86df4609ed8b24723cbaa1cc7057ec1325b642a128c9e42c5a30732c0fbdf47bee92ffe917a678022bee02921f259a5d2f2c5f92e1ad8fc92c8231bbd322982f9f94a2436fc6de0529545813966b1509a7d6b3af0f437bf9c279674193dc72fd5862d8e1f80f66752fdc95b7c8c778df84102d36876da151c1abaa476e2d732707c7056aa9ca783efcd48cc72beea4fe37ae2a2bc7540a3b372cc464b44405ee09a1c6e95c7329f51d8e45c4584f3dd2d45b80292af545481e9e496bda5e1ec7da5539e0aa9d264ba2f850d44123e70b6126dc14aff5ccaf643cc0fb650bf7289037d33083a7dbf8fda4ded8907c33e5fe36626245838c070297c7d8ebbea49491440a146acc55ebec4759c9db8e75b072b412cc32cb311186a73bf27e15513ead7b82896f383ee5c58d8ccc146f0afb5b91f7e26fc42e4fcadc8a64d0d035cd75e5bfbe4c2016d5ef3426333e2c405f7e8971f957d399b5ec7b1c0d7d5f9d2bb454e50a13c500ad2e790d4ba813292ead8528829007e2db1f017044bae63276a5d28435524c21eb890f68883b5ea7680f950448a7ba1b59c28b01261504bfdae19234cebea1985c4465c5332b89f8a6e1e32c35af551ea5fd9206d46f7c8073edb1ca13f2000226e7261dcf24fe59e62a0dec6386cbded746705679d878445f4a52945ce0953ee515b672b93cc3076af122bcfb8de103cd6dc6a7b56c0c58e60791c90a64397b7d95e7e43aa7f68d911d973c36eb9455fe01ff3a6258d6ce912d26ef0c6d72e106aad488c419790704e588e342e25ef83e4574484a1cb345979c0a1e8138236d800b1fe020afeb12c5e88417f19852575bf1ee1645920899c63fc5925e857c46d5708d488c646a73c3e2f6f60ed4f7f25bdea2a61d099c8f18c0ad6f3f28080a0eca21948f6a544361a2046565e2e2164e6ebaca3cabd38e47fdb2d9730f86bf45ad1a9e98922b0e67b1954243113a9a5ad5aba658109e875008bac5254416cb4e819249ce9ce85c05841be851819352c3d2926e8cfd972560ad2f78952efe0adaacd23782687d777c0d757e5cb0ead07611d91a26fe41b2110bb70c196fb6d6205cb28a0004aade2d4287bbf400aa82991bdf52be99c5be68e65777e6d311e0f8f651d37b8640e22fb80a3a9e02392246436ad0edd010a2983cb9b967eabe57f6e3234dd9c7509943cdfe6d6405c52b7017d2f7cbde5480a40af29881beee3d43a34ab8f2d407b90c7b5192c429b68ecc7cab80c6a2b6a8203e6480664613ddb7e86b6ebb8c1397eba9b88fdf045757d4eb5486645f9f22b94762c3b186f9b8068294ee0869eb330dd06eab3147a83cacc1c9271cf82f57c2bc969f550912e7c8d4e2f74f6c39cc35d6313c552d27f2eb50f1d703b5cf5f01d708503b9ea37fdbd23a1aa9eaa4ff35f6b178204f4a58cc66aef94d872758580e41433dfd494714dcd60d46b0f6e894f438edbc6f8d5bd4b36287fa7c851dccdf0c9badf402d06abf38af76bdf2abe976d2bafdb2b1e926684dcbacf4cb9f2c814c661b33411e37fcb5240cb1d87b93bbf8b54648ed8bc4bc8ad8b9e62036a0d59609d19e8042c057fc0d9ec26ce59d3b4628841614ed3f43ddac11c9a299e6336a5eff370abc39a104709940aabb8da922a763c43f51222c31b68a6fd2ab34f6c83ac80272d863f3cb74365072650b3d5e535c03dd55a9f599da801003b172d263cc30ad8d7dac3909568c866bf239b9b2a4744dfb6dc66b7bff00ebfb518de24670655d3736bc0de4804258f83001063c6d321eb5f1ee969c77c57d79ecfce7cf2587a60f9005e605468b79958f09ed5185557798a31dc0832f1de53846f14eb95e32d23adbdd67fc3024e2d98aa1e7c75e1c4147c5a2fc2dc4ac0ee2535918ee67e9fcbc8c95f8a0d033296b47ada2ffa9170604b8301117dc224e64e9874bc71124fd1f0ee777478add63c44d7928908a097c201a5da0a9bba66381d5cbf5b32cfc96f60ce490"}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) r8 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r8, 0x0, &(0x7f00000003c0)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@new_dev={0x3, 0x32c, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x191}}}, &(0x7f0000000200)=0x0) syz_ublk_setup_queues(r7, r9, &(0x7f0000000040)={0x0, 0x74d9, 0x0, 0x0, 0x131}, 0x0, 0x4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'gretap0\x00', r5, 0x40, 0x20, 0xc1a, 0x7, {{0x14, 0x4, 0x3, 0x6, 0x50, 0x64, 0x0, 0x81, 0x29, 0x0, @broadcast, @local, {[@cipso={0x86, 0x10, 0x3, [{0x7, 0xa, "e13edbfe0ca6aedb"}]}, @timestamp_prespec={0x44, 0x2c, 0x93, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f1a54c8}, {@remote, 0x8000}, {@rand_addr=0x64010101}, {@broadcast, 0x1000}, {@multicast2, 0x2}]}]}}}}}) 11.484498198s ago: executing program 5 (id=744): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4040000) 11.415305026s ago: executing program 6 (id=745): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xfb8, 0x200, 0xfffffffe, 0x1e8}, &(0x7f0000000000)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, 0x0, r8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14}]}}]}, 0x44}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r6}, './dev\x00'}) 11.343744285s ago: executing program 5 (id=746): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=ANY=[], 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="2e1221b23bb601c405b0df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a1fff1b82a17af17ba45b0243c394d69f9c86ed016474227f98c02c1ce987995d77a16a35b7fc283c3304ace3ed816b18b1f59536434be0577968e526da309da2a7599a2ccc69cfcc079998537bf2481742c404e7a8f2b2d45e61f57bb77ed8836967281287458a4bed178be22cd949634924bc76a7eb61c282182c6cd473247793fde41ece3fcc05c587821012e98ff1b0c1a14b65bb7cb699003a3368fde19a274456d99d47de8230f3697a85aa8", 0x2a}, {&(0x7f0000000400)="8bcceb216f624c06f5ff8408750900000000", 0x12}, {&(0x7f00000003c0)="88a889ae113ec9", 0x6}], 0x3) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x100}, 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000001180)='maps\x00') ioctl$KDSKBLED(r7, 0xc0686611, 0x20000081) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f00000000c0)={0x3, 0x1, 0x2, 0x13, 0x4}) 11.232705011s ago: executing program 0 (id=747): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="0203f602310000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c000001fc05000500000000000a00000000000000fc0100000000000000000000000000010700000000000000210008000008"], 0x188}, 0x1, 0x7}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r5, 0x0, r6, 0x0, 0x7ffff000, 0x3) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000200)='a', 0x1}], 0x1}], 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x80) 9.801232113s ago: executing program 0 (id=748): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="0203f602310000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c000001fc05000500000000000a00000000000000fc0100000000000000000000000000010700000000000000210008000008"], 0x188}, 0x1, 0x7}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r5, 0x0, r6, 0x0, 0x7ffff000, 0x3) socket(0x2, 0x80805, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x4c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x80) 9.189740842s ago: executing program 6 (id=750): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x89, 0x2, 0xfd, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x93}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 9.187479514s ago: executing program 5 (id=751): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 9.137301369s ago: executing program 5 (id=752): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) write(r1, &(0x7f0000000140)='n', 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffd, 0x0, 0x4, 0x0, @empty, @private}}}}) write(r0, &(0x7f0000000080)='4', 0x1) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080)=@int=0xfffffff5, 0x4) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021540000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000002800038024000080080003400000000298000b80140001800a00010071756f746100000004000280140000001000070000000000000000000084000a"], 0xd8}}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000005, 0x30, r6, 0xf8efe000) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0xa0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) 8.355607894s ago: executing program 2 (id=753): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0300000009"]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000040)="660f38804f1b65f30f595d5d6df20f1bd00f0119360f00d566b9800000c00f326635000400000f30660f3881a100000f01cf0f94b5472f", 0x37}], 0x1, 0x40, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000380)={0x0, 0x4316, 0x2, 0x1, 0xa00}) bind$inet6(r6, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r7 = socket(0xa, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, 0x0, 0x30) creat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r8, &(0x7f0000000180)='1', 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) r10 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_FILES(r10, 0x25, &(0x7f0000000000)=[r10], 0x1) write(r9, &(0x7f0000000240)='6', 0x1) 8.19902032s ago: executing program 6 (id=754): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="0203f602310000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c000001fc05000500000000000a00000000000000fc0100000000000000000000000000010700000000000000210008000008"], 0x188}, 0x1, 0x7}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r5, 0x0, r6, 0x0, 0x7ffff000, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x4c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x80) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 7.103636801s ago: executing program 6 (id=755): r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-+x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=n', 0x7d) 7.096841908s ago: executing program 7 (id=756): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4040000) 7.045816251s ago: executing program 5 (id=757): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="0203f602310000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c000001fc05000500000000000a00000000000000fc0100000000000000000000000000010700000000000000210008000008"], 0x188}, 0x1, 0x7}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r5, 0x0, r6, 0x0, 0x7ffff000, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x4c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x80) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 6.837666702s ago: executing program 2 (id=758): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x8864, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, 0x0, &(0x7f0000000040)='%ps \x00'}, 0x20) write(r1, &(0x7f0000000280)="7c94af", 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='127.0.0.1', 0x9) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') 6.783822544s ago: executing program 7 (id=759): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000440)={0x3, r2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0xfdfffffffffffffd, 0x440) writev(r5, &(0x7f0000000840)=[{0x0}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/xfrm_stat\x00') bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r7, &(0x7f0000007fc0), 0x0, 0x0) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000080)={0x0, @empty, @dev={0xac, 0x14, 0x14, 0x37}}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 3.03205589s ago: executing program 0 (id=760): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)="fd", 0x1, 0x100040b0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) io_setup(0x239f, &(0x7f0000000380)=0x0) r2 = eventfd2(0x0, 0x800) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r2, 0x0, 0x300, 0x800002, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r2, &(0x7f0000000080)="e2", 0x36, 0x5, 0x0, 0x1, r2}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000000)='7', 0x1) timer_create(0x5, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x4800) recvmsg(r0, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x10103) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 3.030750314s ago: executing program 5 (id=761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000080)=@add_del={0x2, 0x0}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) 3.028922551s ago: executing program 2 (id=762): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 2.92020461s ago: executing program 7 (id=763): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x4b63, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x121}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x50}}, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002240)={0x30, r5, 0x1, 0x8072bd27, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000855}, 0x1000) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000480)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), r3, 0x10000}}, 0x18) r7 = syz_open_dev$vcsu(&(0x7f0000000140), 0xffffffffe0119edd, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@type_tag={0xc, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x2e, 0x61, 0x0, 0x61, 0x61]}}, &(0x7f0000000100)=""/50, 0x2b, 0x32, 0x1, 0x9, 0x10000, @value=r7}, 0x28) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0585605, &(0x7f0000000240)={0x1, 0x0, {0x7, 0x2, 0x300d, 0x5, 0x4, 0x2, 0x0, 0x7}}) r8 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff0007058102000200070502020002"], 0x0) r9 = syz_io_uring_setup(0x432b, &(0x7f0000000180)={0x0, 0x776c, 0x110ca, 0x6, 0x215}, &(0x7f0000000200), &(0x7f0000000400), &(0x7f0000000000)) r10 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000140)={0x80000008}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getrlimit(0xa, &(0x7f0000000400)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r9, 0xc, 0x0, 0x0) syz_usb_ep_read(r8, 0x2, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r8, 0x81, 0x0, 0x0) syz_usb_ep_read(r8, 0x2, 0x0, 0x0) syz_usb_ep_write(r8, 0x81, 0x47, &(0x7f0000000040)="830d0003000000000000000054e81338cfca7c112bcb088b0b69b533ebc5369fa3c4b485cadbe644b2e1fbd8c2a212675c04000879bf64976dae91fcea1e3d11fbd9657f605014") 2.912427379s ago: executing program 6 (id=764): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) 2.88367736s ago: executing program 2 (id=765): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002780)={0x8, {"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", 0x1000}}, 0x1006) getrlimit(0xc, &(0x7f0000000340)) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x401, 0x9, 0xa, 0xf, 0x5, 0x0}) ptrace$peeksig(0x4209, r1, &(0x7f0000000180)={0xffffffffffff249f}, &(0x7f0000000880)) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r1, &(0x7f0000000040), 0x5005) mount(0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x200, 0x0, &(0x7f00000000c0)=0x3) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20081, 0x0) r5 = socket(0x10, 0x803, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x3, 0xfb, 0x4, 0x3cda, 0x4, 0x285e}) prctl$PR_CAPBSET_DROP(0x18, 0x23) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040054) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000003c0)=0x800) accept4(r2, 0x0, 0x0, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000280)={'dvmrp1\x00'}) 2.124211978s ago: executing program 6 (id=766): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r0, &(0x7f0000000100)=""/134, 0x86) getdents(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x8000000005f, 0x3}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048810) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x2edb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) 516.460536ms ago: executing program 2 (id=767): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) write(r1, &(0x7f0000000140)='n', 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffd, 0x0, 0x4, 0x0, @empty, @private}}}}) write(r0, &(0x7f0000000080)='4', 0x1) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080)=@int=0xfffffff5, 0x4) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021540000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000002800038024000080080003400000000298000b80140001800a00010071756f746100000004000280140000001000070000000000000000000084000a"], 0xd8}}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000005, 0x30, r6, 0xf8efe000) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0xa0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) 0s ago: executing program 2 (id=768): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0300000009"]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000040)="660f38804f1b65f30f595d5d6df20f1bd00f0119360f00d566b9800000c00f326635000400000f30660f3881a100000f01cf0f94b5472f", 0x37}], 0x1, 0x40, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000380)={0x0, 0x4316, 0x2, 0x1, 0xa00}) bind$inet6(r6, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r7 = socket(0xa, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, 0x0, 0x30) creat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r8, &(0x7f0000000180)='1', 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) r10 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_FILES(r10, 0x25, &(0x7f0000000000)=[r10], 0x1) write(r9, &(0x7f0000000240)='6', 0x1) kernel console output (not intermixed with test programs): ticast mode [ 204.311175][ T6901] bridge_slave_0: entered promiscuous mode [ 204.328749][ T6901] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.329537][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.329662][ T6901] bridge_slave_1: entered allmulticast mode [ 204.343158][ T6901] bridge_slave_1: entered promiscuous mode [ 204.371170][ T5788] usb 3-1: Using ep0 maxpacket: 8 [ 204.376559][ T5788] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 204.386517][ T5788] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.386556][ T5788] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 204.386612][ T5788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.436804][ T5788] hub 3-1:1.0: bad descriptor, ignoring hub [ 204.443290][ T5788] hub 3-1:1.0: probe with driver hub failed with error -5 [ 204.452547][ T5788] cdc_wdm 3-1:1.0: skipping garbage [ 204.458759][ T5788] cdc_wdm 3-1:1.0: skipping garbage [ 204.464801][ T5788] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 204.506953][ T6901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.621603][ T6901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.591965][ T6901] team0: Port device team_slave_0 added [ 205.618142][ T6901] team0: Port device team_slave_1 added [ 205.711629][ T5705] usb 3-1: USB disconnect, device number 5 [ 205.848270][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.848301][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.848599][ T6901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.859230][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.859242][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.859265][ T6901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.172727][ T7092] input: syz1 as /devices/virtual/input/input22 [ 206.656141][ T31] audit: type=1400 audit(1788825939.599:434): avc: denied { write } for pid=7061 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.784975][ T7094] jffs2: notice: (7094) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 206.853252][ T6901] hsr_slave_0: entered promiscuous mode [ 206.854063][ T6901] hsr_slave_1: entered promiscuous mode [ 206.854589][ T6901] debugfs: 'hsr0' already exists in 'hsr' [ 206.854606][ T6901] Cannot create hsr debugfs directory [ 206.926401][ T31] audit: type=1400 audit(1788825939.869:435): avc: denied { setopt } for pid=7081 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 208.075102][ T31] audit: type=1400 audit(1788825941.009:436): avc: denied { write } for pid=7100 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.342834][ T5267] 8021q: adding VLAN 0 to HW filter on device eth7 [ 208.474208][ T5705] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 208.638794][ T5705] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 208.655477][ T5705] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.655514][ T5705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.685387][ T5705] usb 6-1: config 0 descriptor?? [ 208.707524][ T5705] pwc: Askey VC010 type 2 USB webcam detected. [ 209.121038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 210.163335][ T31] audit: type=1400 audit(1788825943.109:437): avc: denied { mount } for pid=7109 comm="syz.5.257" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 211.440271][ T31] audit: type=1400 audit(1788825944.379:438): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 211.536883][ T6901] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 211.576572][ T6901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.588978][ T6901] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 211.609644][ T6901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.623689][ T6901] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 211.657858][ T31] audit: type=1400 audit(1788825944.599:439): avc: denied { unmount } for pid=6039 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 211.679492][ T5705] pwc: send_video_command error -71 [ 211.685212][ T5705] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 211.685511][ T5705] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 211.697713][ T6901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.698379][ T6901] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 211.723542][ T5705] usb 6-1: USB disconnect, device number 5 [ 211.751282][ T6901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.794678][ T7147] netlink: 'syz.0.263': attribute type 4 has an invalid length. [ 212.111778][ T7162] input: syz1 as /devices/virtual/input/input23 [ 212.654074][ T6901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.677770][ T31] audit: type=1400 audit(1788825945.619:440): avc: denied { write } for pid=7126 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.764567][ T6901] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.844028][ T1485] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.844151][ T1485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.883082][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.883186][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.950130][ T31] audit: type=1400 audit(1788825945.889:441): avc: denied { write } for pid=7170 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.960326][ T7169] netlink: 36 bytes leftover after parsing attributes in process `syz.3.266'. [ 213.175160][ T5267] 8021q: adding VLAN 0 to HW filter on device eth8 [ 216.364816][ T7219] netlink: 'syz.5.274': attribute type 4 has an invalid length. [ 216.667243][ T7228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.835684][ T7235] input: syz1 as /devices/virtual/input/input24 [ 218.747288][ T7240] FAULT_INJECTION: forcing a failure. [ 218.747288][ T7240] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 218.762650][ T7240] CPU: 1 UID: 0 PID: 7240 Comm: syz.3.279 Not tainted syzkaller #0 PREEMPT(full) [ 218.762676][ T7240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 218.762688][ T7240] Call Trace: [ 218.762695][ T7240] [ 218.762708][ T7240] dump_stack_lvl+0x100/0x190 [ 218.762741][ T7240] should_fail_ex.cold+0x5/0xa [ 218.762768][ T7240] strncpy_from_user+0x3b/0x2d0 [ 218.762792][ T7240] do_getname+0x78/0x390 [ 218.762822][ T7240] user_path_at+0x26/0x60 [ 218.762843][ T7240] __x64_sys_mount+0x1fb/0x310 [ 218.762870][ T7240] ? __pfx___x64_sys_mount+0x10/0x10 [ 218.762905][ T7240] do_syscall_64+0x123/0x790 [ 218.762931][ T7240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.762951][ T7240] RIP: 0033:0x7fa113d9e159 [ 218.762967][ T7240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.762985][ T7240] RSP: 002b:00007fa114cae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 218.763005][ T7240] RAX: ffffffffffffffda RBX: 00007fa114025fa0 RCX: 00007fa113d9e159 [ 218.763018][ T7240] RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200 [ 218.763031][ T7240] RBP: 00007fa114cae090 R08: 0000000000000000 R09: 0000000000000000 [ 218.763043][ T7240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.763054][ T7240] R13: 00007fa114026038 R14: 00007fa114025fa0 R15: 00007ffe6c1ad138 [ 218.763082][ T7240] [ 219.584738][ T6901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.992054][ T5705] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 220.892649][ T5705] usb 4-1: Using ep0 maxpacket: 16 [ 220.936420][ T5705] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 220.961222][ T5705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.972571][ T5705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.972643][ T5705] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 220.972827][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.006538][ T7268] FAULT_INJECTION: forcing a failure. [ 221.006538][ T7268] name failslab, interval 1, probability 0, space 0, times 0 [ 221.006565][ T7268] CPU: 0 UID: 0 PID: 7268 Comm: syz.5.283 Not tainted syzkaller #0 PREEMPT(full) [ 221.006588][ T7268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 221.006600][ T7268] Call Trace: [ 221.006606][ T7268] [ 221.006614][ T7268] dump_stack_lvl+0x100/0x190 [ 221.006646][ T7268] should_fail_ex.cold+0x5/0xa [ 221.006673][ T7268] ? __pfx_cond_bools_destroy+0x10/0x10 [ 221.006697][ T7268] should_failslab+0xc2/0x120 [ 221.006722][ T7268] __kmalloc_noprof+0xfc/0x840 [ 221.006743][ T7268] ? hashtab_duplicate+0x6e/0x5c0 [ 221.006768][ T7268] ? __pfx_cond_bools_destroy+0x10/0x10 [ 221.006790][ T7268] hashtab_duplicate+0x6e/0x5c0 [ 221.006810][ T7268] ? __pfx_cond_bools_copy+0x10/0x10 [ 221.006832][ T7268] ? __kmalloc_noprof+0x350/0x840 [ 221.006852][ T7268] ? cond_policydb_dup+0x11a/0x750 [ 221.006882][ T7268] cond_policydb_dup+0x155/0x750 [ 221.006908][ T7268] ? security_set_bools+0x115/0x6c0 [ 221.006933][ T7268] ? __asan_memcpy+0x3c/0x60 [ 221.006954][ T7268] security_set_bools+0x13f/0x6c0 [ 221.006987][ T7268] sel_commit_bools_write+0x36d/0x420 [ 221.007013][ T7268] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 221.007047][ T7268] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 221.007072][ T7268] vfs_writev+0x5ed/0xdd0 [ 221.007108][ T7268] ? __pfx_vfs_writev+0x10/0x10 [ 221.007140][ T7268] ? lock_acquire+0x1d1/0x380 [ 221.007160][ T7268] ? __fget_files+0x34/0x3d0 [ 221.007192][ T7268] ? __fget_files+0x21f/0x3d0 [ 221.007223][ T7268] ? do_writev+0x13e/0x340 [ 221.007249][ T7268] do_writev+0x13e/0x340 [ 221.007276][ T7268] ? __pfx_do_writev+0x10/0x10 [ 221.007311][ T7268] do_syscall_64+0x123/0x790 [ 221.007338][ T7268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.007357][ T7268] RIP: 0033:0x7fca5819e159 [ 221.007374][ T7268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.007391][ T7268] RSP: 002b:00007fca58fbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 221.007410][ T7268] RAX: ffffffffffffffda RBX: 00007fca58426180 RCX: 00007fca5819e159 [ 221.007423][ T7268] RDX: 0000000000000002 RSI: 0000200000003600 RDI: 0000000000000009 [ 221.007434][ T7268] RBP: 00007fca58fbd090 R08: 0000000000000000 R09: 0000000000000000 [ 221.007446][ T7268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.007458][ T7268] R13: 00007fca58426218 R14: 00007fca58426180 R15: 00007fff0698a558 [ 221.007485][ T7268] [ 221.316141][ T5705] usb 4-1: config 0 descriptor?? [ 221.518377][ T6901] veth0_vlan: entered promiscuous mode [ 221.550636][ T6901] veth1_vlan: entered promiscuous mode [ 221.623284][ T6901] veth0_macvtap: entered promiscuous mode [ 221.649951][ T6901] veth1_macvtap: entered promiscuous mode [ 221.724171][ T6901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.736901][ T6901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.771857][ T5705] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 221.779799][ T5705] hid_parser_main: 5 callbacks suppressed [ 221.779836][ T5705] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 221.779865][ T5705] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 221.779888][ T5705] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 221.779911][ T5705] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 221.779934][ T5705] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 221.779957][ T5705] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 221.779979][ T5705] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 221.780002][ T5705] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 221.780024][ T5705] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 221.780047][ T5705] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 221.792387][ T6552] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.792433][ T6552] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.792463][ T6552] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.792492][ T6552] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.271947][ T5705] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 223.286203][ T5705] usb 4-1: USB disconnect, device number 5 [ 223.300426][ T31] audit: type=1400 audit(1788825956.239:442): avc: denied { write } for pid=7250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.400037][ T6853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.400069][ T6853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.548864][ T1529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.548897][ T1529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.553245][ T7280] fido_id[7280]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 224.706788][ T31] audit: type=1400 audit(1788825957.649:443): avc: denied { write } for pid=7285 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.281188][ T5610] Bluetooth: hci1: status 0x01 [ 225.966612][ T7294] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 226.319781][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.288'. [ 228.456271][ T31] audit: type=1400 audit(1788825961.399:444): avc: denied { write } for pid=7326 comm="syz.0.295" name="usb_gadget" dev="configfs" ino=2700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 228.472020][ T31] audit: type=1400 audit(1788825961.399:445): avc: denied { create } for pid=7326 comm="syz.0.295" name="g_uac2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 228.497493][ T31] audit: type=1400 audit(1788825961.429:446): avc: denied { write } for pid=7326 comm="syz.0.295" name="functions" dev="configfs" ino=13981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 228.513290][ T31] audit: type=1400 audit(1788825961.449:447): avc: denied { write } for pid=7326 comm="syz.0.295" name="configs" dev="configfs" ino=13982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 228.516828][ T31] audit: type=1400 audit(1788825961.449:448): avc: denied { write } for pid=7326 comm="syz.0.295" name="c.1" dev="configfs" ino=13988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 228.531209][ T31] audit: type=1400 audit(1788825961.469:449): avc: denied { create } for pid=7326 comm="syz.0.295" name="uac2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 228.560106][ T31] audit: type=1400 audit(1788825961.469:450): avc: denied { write } for pid=7326 comm="syz.0.295" name="c.1" dev="configfs" ino=13988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 228.584048][ T7329] capability: warning: `syz.2.294' uses deprecated v2 capabilities in a way that may be insecure [ 228.708269][ T31] audit: type=1400 audit(1788825961.649:451): avc: denied { bind } for pid=7326 comm="syz.0.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 228.712804][ T31] audit: type=1400 audit(1788825961.649:452): avc: denied { name_bind } for pid=7326 comm="syz.0.295" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 228.718666][ T31] audit: type=1400 audit(1788825961.649:453): avc: denied { node_bind } for pid=7326 comm="syz.0.295" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 229.981106][ T5721] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 230.100432][ T7351] jffs2: notice: (7351) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 230.154725][ T5721] usb 6-1: Using ep0 maxpacket: 32 [ 230.160365][ T5721] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 230.172875][ T5721] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.172912][ T5721] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 230.172963][ T5721] usb 6-1: config 1 interface 1 has no altsetting 0 [ 230.294984][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.303627][ T5721] usb 6-1: Product: syz [ 230.303714][ T5721] usb 6-1: Manufacturer: syz [ 230.303776][ T5721] usb 6-1: SerialNumber: syz [ 232.621361][ T5721] usb 6-1: selecting invalid altsetting 0 [ 233.344517][ T5721] usb 6-1: USB disconnect, device number 6 [ 234.637880][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.729545][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 234.729583][ T31] audit: type=1400 audit(1788825967.669:462): avc: denied { write } for pid=7378 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.054623][ T31] audit: type=1400 audit(1788825967.999:463): avc: denied { write } for pid=7382 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.940842][ T31] audit: type=1400 audit(1788825968.879:464): avc: denied { ioctl } for pid=7394 comm="syz.6.296" path="socket:[15181]" dev="sockfs" ino=15181 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 236.048794][ T31] audit: type=1400 audit(1788825968.989:465): avc: denied { create } for pid=7394 comm="syz.6.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 236.869275][ T31] audit: type=1400 audit(1788825969.789:466): avc: denied { write } for pid=7400 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.729139][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 239.342491][ T31] audit: type=1400 audit(1788825972.289:467): avc: denied { write } for pid=7405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.589719][ T31] audit: type=1400 audit(1788825972.529:468): avc: denied { write } for pid=7423 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.642963][ T7426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.788473][ T31] audit: type=1400 audit(1788825972.729:469): avc: denied { block_suspend } for pid=7428 comm="syz.6.308" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 239.893930][ T31] audit: type=1400 audit(1788825972.829:470): avc: denied { setopt } for pid=7428 comm="syz.6.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 240.792996][ T7443] jffs2: notice: (7443) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 242.589488][ T31] audit: type=1400 audit(1788825975.529:471): avc: denied { create } for pid=7465 comm="syz.6.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 242.798360][ T31] audit: type=1400 audit(1788825975.739:472): avc: denied { setopt } for pid=7466 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.828101][ T31] audit: type=1400 audit(1788825975.769:473): avc: denied { getopt } for pid=7466 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.836392][ T31] audit: type=1400 audit(1788825975.779:474): avc: denied { ioctl } for pid=7467 comm="syz.5.311" path="socket:[14125]" dev="sockfs" ino=14125 ioctlcmd=0x5402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 242.911970][ T31] audit: type=1400 audit(1788825975.849:475): avc: denied { mounton } for pid=7466 comm="syz.0.319" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 242.963088][ T31] audit: type=1400 audit(1788825975.909:476): avc: denied { write } for pid=7465 comm="syz.6.320" path="socket:[15267]" dev="sockfs" ino=15267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 245.981874][ T31] audit: type=1400 audit(1788825978.919:477): avc: denied { accept } for pid=7487 comm="syz.5.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 247.153563][ T159] IPVS: starting estimator thread 0... [ 247.241108][ T7496] IPVS: using max 65 ests per chain, 156000 per kthread [ 247.327502][ T7498] jffs2: notice: (7498) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 248.122610][ T7506] sg_write: data in/out 548864/136 bytes for SCSI command 0x0-- guessing data in; [ 248.122610][ T7506] program syz.3.330 not setting count and/or reply_len properly [ 250.879157][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.879226][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.141781][ T7528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.342628][ T7535] Zero length message leads to an empty skb [ 252.366423][ T31] audit: type=1400 audit(1788825985.309:478): avc: denied { ioctl } for pid=7534 comm="syz.5.337" path="socket:[15382]" dev="sockfs" ino=15382 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 252.366440][ T7536] netlink: 'syz.5.337': attribute type 10 has an invalid length. [ 253.331641][ T7544] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 253.427022][ T31] audit: type=1400 audit(1788825986.369:479): avc: denied { read } for pid=7542 comm="syz.5.339" name="usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 253.427357][ T31] audit: type=1400 audit(1788825986.369:480): avc: denied { open } for pid=7542 comm="syz.5.339" path="/dev/usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 253.526604][ T7554] jffs2: notice: (7554) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 254.859319][ T7575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.585386][ T31] audit: type=1400 audit(1788825989.609:481): avc: denied { ioctl } for pid=7582 comm="syz.3.347" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 257.741086][ T5712] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 257.902485][ T5712] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 257.913187][ T5712] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.923355][ T5712] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 257.935036][ T5712] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 257.948074][ T5712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.009056][ T7596] jffs2: notice: (7596) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 258.427904][ T7581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.428380][ T7581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.507762][ T31] audit: type=1400 audit(1788825991.449:482): avc: denied { mount } for pid=7600 comm="syz.6.351" name="/" dev="hugetlbfs" ino=16539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 258.839753][ T5712] cxacru 6-1:1.0: receive of cm 0x91 failed (-71) [ 258.839824][ T5712] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 258.839856][ T5712] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 261.103310][ T5712] cxacru 6-1:1.0: probe with driver cxacru failed with error -71 [ 261.107469][ T5712] usb 6-1: USB disconnect, device number 7 [ 261.534481][ T31] audit: type=1400 audit(1788825994.479:483): avc: denied { unmount } for pid=6901 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 261.666662][ T7613] netlink: 24 bytes leftover after parsing attributes in process `syz.5.355'. [ 263.795777][ T31] audit: type=1400 audit(1788825996.739:484): avc: denied { name_bind } for pid=7626 comm="syz.2.359" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 266.625342][ T7645] input: syz1 as /devices/virtual/input/input25 [ 266.715345][ T31] audit: type=1400 audit(1788825999.659:485): avc: denied { read } for pid=4957 comm="acpid" name="js0" dev="devtmpfs" ino=3135 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.737943][ T31] audit: type=1400 audit(1788825999.659:486): avc: denied { open } for pid=4957 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3135 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.763647][ T31] audit: type=1400 audit(1788825999.709:487): avc: denied { ioctl } for pid=4957 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3135 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 267.412973][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.365'. [ 268.476022][ T7659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.368'. [ 270.768222][ T7670] jffs2: notice: (7670) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 270.917755][ T7675] jffs2: notice: (7675) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 270.998542][ T7673] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 272.361565][ T31] audit: type=1400 audit(1788826005.309:488): avc: denied { create } for pid=7688 comm="syz.6.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 272.414917][ T31] audit: type=1400 audit(1788826005.359:489): avc: denied { connect } for pid=7688 comm="syz.6.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 273.545553][ T7693] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 274.312879][ T7715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.381'. [ 275.729136][ T7725] jffs2: notice: (7725) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 275.874222][ T7729] fuse: Unknown parameter 'grou00000000000000000000' [ 276.488502][ T7734] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 276.598739][ T7740] sg_write: data in/out 548864/136 bytes for SCSI command 0x0-- guessing data in; [ 276.598739][ T7740] program syz.5.389 not setting count and/or reply_len properly [ 277.126616][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 278.527267][ T7747] FAULT_INJECTION: forcing a failure. [ 278.527267][ T7747] name failslab, interval 1, probability 0, space 0, times 0 [ 278.527304][ T7747] CPU: 0 UID: 0 PID: 7747 Comm: syz.5.390 Not tainted syzkaller #0 PREEMPT(full) [ 278.527318][ T7747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 278.527327][ T7747] Call Trace: [ 278.527332][ T7747] [ 278.527336][ T7747] dump_stack_lvl+0x100/0x190 [ 278.527357][ T7747] should_fail_ex.cold+0x5/0xa [ 278.527374][ T7747] should_failslab+0xc2/0x120 [ 278.527388][ T7747] __kmalloc_cache_noprof+0x91/0x6d0 [ 278.527406][ T7747] ? nbd_add_socket+0x284/0xf20 [ 278.527424][ T7747] nbd_add_socket+0x284/0xf20 [ 278.527438][ T7747] ? __pfx_nbd_add_socket+0x10/0x10 [ 278.527452][ T7747] ? __nla_parse+0x40/0x60 [ 278.527470][ T7747] nbd_genl_foreach_sock+0x2ab/0x3e0 [ 278.527482][ T7747] ? __pfx_nbd_genl_connect_sock_cb+0x10/0x10 [ 278.527496][ T7747] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 278.527515][ T7747] ? __init_waitqueue_head+0xca/0x150 [ 278.527532][ T7747] nbd_genl_connect+0xd48/0x1760 [ 278.527548][ T7747] ? __pfx_nbd_genl_connect+0x10/0x10 [ 278.527564][ T7747] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 278.527578][ T7747] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 278.527594][ T7747] genl_family_rcv_msg_doit+0x214/0x300 [ 278.527609][ T7747] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 278.527621][ T7747] ? genl_get_cmd+0x3e7/0x760 [ 278.527637][ T7747] ? netlink_sendmsg+0x680/0xda0 [ 278.527647][ T7747] ? ____sys_sendmsg+0xa4d/0xbe0 [ 278.527660][ T7747] ? __radix_tree_lookup+0x217/0x2b0 [ 278.527677][ T7747] genl_rcv_msg+0x560/0x800 [ 278.527691][ T7747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.527703][ T7747] ? __lock_acquire+0x5c0/0x1f40 [ 278.527714][ T7747] ? __pfx_nbd_genl_connect+0x10/0x10 [ 278.527730][ T7747] ? __lock_acquire+0x5c0/0x1f40 [ 278.527744][ T7747] netlink_rcv_skb+0x159/0x420 [ 278.527755][ T7747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.527768][ T7747] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.527785][ T7747] ? netlink_deliver_tap+0x1ae/0xcc0 [ 278.527804][ T7747] genl_rcv+0x28/0x40 [ 278.527815][ T7747] netlink_unicast+0x585/0x850 [ 278.527828][ T7747] ? __pfx_netlink_unicast+0x10/0x10 [ 278.527843][ T7747] netlink_sendmsg+0x8b0/0xda0 [ 278.527856][ T7747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.527869][ T7747] ? selinux_socket_sendmsg+0x198/0x2f0 [ 278.527889][ T7747] ____sys_sendmsg+0xa4d/0xbe0 [ 278.527903][ T7747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.527915][ T7747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.527934][ T7747] ? lock_acquire+0x1d1/0x380 [ 278.527944][ T7747] ? get_pid_task+0x2a/0x250 [ 278.527961][ T7747] ___sys_sendmsg+0x190/0x1e0 [ 278.527978][ T7747] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.527993][ T7747] ? get_pid_task+0x106/0x250 [ 278.528014][ T7747] ? find_held_lock+0x2b/0x80 [ 278.528039][ T7747] __sys_sendmsg+0x160/0x210 [ 278.528052][ T7747] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.528072][ T7747] do_syscall_64+0x123/0x790 [ 278.528088][ T7747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.528099][ T7747] RIP: 0033:0x7fca5819e159 [ 278.528110][ T7747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.528120][ T7747] RSP: 002b:00007fca58fff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.528132][ T7747] RAX: ffffffffffffffda RBX: 00007fca58425fa0 RCX: 00007fca5819e159 [ 278.528139][ T7747] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 278.528146][ T7747] RBP: 00007fca58fff090 R08: 0000000000000000 R09: 0000000000000000 [ 278.528153][ T7747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.528160][ T7747] R13: 00007fca58426038 R14: 00007fca58425fa0 R15: 00007fff0698a558 [ 278.528175][ T7747] [ 278.724039][ T7750] jffs2: notice: (7750) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 280.642167][ T7771] netlink: 1004 bytes leftover after parsing attributes in process `syz.6.388'. [ 281.872251][ T7778] fuse: Unknown parameter 'grou00000000000000000000' [ 284.481205][ T5338] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 284.792680][ T7784] ima: policy update failed [ 284.971292][ T31] audit: type=1807 audit(1788826017.479:490): UNKNOWN=m res=0 [ 284.979019][ T31] audit: type=1802 audit(1788826017.479:491): pid=7795 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.3.402" res=0 errno=0 [ 284.998183][ T31] audit: type=1802 audit(1788826017.739:492): pid=7784 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.402" res=0 errno=0 [ 285.533243][ T5338] usb 7-1: Using ep0 maxpacket: 16 [ 285.636892][ T5338] usb 7-1: device descriptor read/all, error -71 [ 285.850689][ T7801] input: syz1 as /devices/virtual/input/input26 [ 286.993155][ T7805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.827867][ T7813] jffs2: notice: (7813) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 289.442666][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'. [ 291.023910][ T7828] jffs2: notice: (7828) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 292.413347][ T7845] fuse: Unknown parameter 'grou00000000000000000000' [ 292.425989][ T7843] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 292.632819][ T31] audit: type=1400 audit(1788826025.569:493): avc: denied { read write } for pid=7838 comm="syz.3.410" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 292.658048][ T31] audit: type=1400 audit(1788826025.599:494): avc: denied { open } for pid=7838 comm="syz.3.410" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 292.809523][ T5721] hid_parser_main: 3 callbacks suppressed [ 292.809630][ T5721] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 293.056972][ T5721] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 293.676525][ T31] audit: type=1400 audit(1788826026.619:495): avc: denied { unlink } for pid=7838 comm="syz.3.410" name="#1" dev="tmpfs" ino=504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 293.806180][ T7849] fido_id[7849]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 294.106590][ T7855] input: syz1 as /devices/virtual/input/input27 [ 294.740465][ T7858] input: syz1 as /devices/virtual/input/input28 [ 295.558425][ T7865] sg_write: data in/out 548864/136 bytes for SCSI command 0x0-- guessing data in; [ 295.558425][ T7865] program syz.2.418 not setting count and/or reply_len properly [ 295.940730][ T7868] jffs2: notice: (7868) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 296.625387][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 298.735225][ T6853] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.754614][ T6853] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.068258][ T31] audit: type=1400 audit(1788826032.009:496): avc: denied { accept } for pid=7893 comm="syz.2.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 299.071965][ T7896] mmap: syz.2.426 (7896) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 299.143521][ T6853] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.155464][ T6853] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.572276][ T6853] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.572328][ T6853] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.857713][ T6853] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.857767][ T6853] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.170115][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.173159][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.183442][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.196089][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.205720][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.462458][ T6853] bridge_slave_1: left allmulticast mode [ 301.463099][ T6853] bridge_slave_1: left promiscuous mode [ 301.464873][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.508465][ T6853] bridge_slave_0: left allmulticast mode [ 301.514995][ T6853] bridge_slave_0: left promiscuous mode [ 301.520778][ T6853] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.343749][ T52] Bluetooth: hci3: command tx timeout [ 302.799120][ T6853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.813406][ T6853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.824711][ T6853] bond0 (unregistering): Released all slaves [ 302.870629][ T31] audit: type=1400 audit(1788826035.809:497): avc: denied { bind } for pid=7924 comm="syz.0.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 302.912081][ T31] audit: type=1400 audit(1788826035.859:498): avc: denied { map } for pid=7924 comm="syz.0.433" path="socket:[16144]" dev="sockfs" ino=16144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 302.912140][ T31] audit: type=1400 audit(1788826035.859:499): avc: denied { read } for pid=7924 comm="syz.0.433" path="socket:[16144]" dev="sockfs" ino=16144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 303.151829][ T31] audit: type=1400 audit(1788826036.089:500): avc: denied { write } for pid=7912 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.888429][ T31] audit: type=1400 audit(1788826036.829:501): avc: denied { write } for pid=7941 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.082700][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.436'. [ 304.371172][ T52] Bluetooth: hci3: command tx timeout [ 304.400397][ T7951] jffs2: notice: (7951) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 305.755517][ T6853] hsr_slave_0: left promiscuous mode [ 305.766465][ T6853] hsr_slave_1: left promiscuous mode [ 305.776899][ T6853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.786111][ T6853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.802843][ T6853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.891645][ T6853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.451080][ T52] Bluetooth: hci3: command tx timeout [ 306.468689][ T6853] veth1_macvtap: left promiscuous mode [ 306.468754][ T6853] veth0_macvtap: left promiscuous mode [ 306.468876][ T6853] veth1_vlan: left promiscuous mode [ 306.468931][ T6853] veth0_vlan: left promiscuous mode [ 307.923902][ T6853] team0 (unregistering): Port device team_slave_1 removed [ 307.995007][ T6853] team0 (unregistering): Port device team_slave_0 removed [ 308.531413][ T52] Bluetooth: hci3: command tx timeout [ 308.865152][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 312.297252][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.297335][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.281201][ T5788] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 313.441189][ T5788] usb 7-1: Using ep0 maxpacket: 16 [ 313.449683][ T5788] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 313.481282][ T5788] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.492755][ T5788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.538661][ T6853] IPVS: stop unused estimator thread 0... [ 313.645165][ T5788] usb 7-1: config 0 descriptor?? [ 313.807259][ T5788] pxrc 7-1:0.0: Could not find endpoint [ 315.160641][ T5721] usb 7-1: USB disconnect, device number 4 [ 315.298780][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 315.860937][ T7901] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.865489][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.871289][ T7901] bridge_slave_0: entered allmulticast mode [ 315.873795][ T7901] bridge_slave_0: entered promiscuous mode [ 315.879953][ T7901] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.880087][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.880181][ T7901] bridge_slave_1: entered allmulticast mode [ 315.883847][ T7901] bridge_slave_1: entered promiscuous mode [ 315.985169][ T7901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.997769][ T7901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.045083][ T31] audit: type=1400 audit(1788826048.989:502): avc: denied { write } for pid=8002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.062918][ T8022] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 316.145929][ T7901] team0: Port device team_slave_0 added [ 316.157894][ T7901] team0: Port device team_slave_1 added [ 316.274414][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.274448][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.274469][ T7901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.282252][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.282266][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.288697][ T7901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.440183][ T31] audit: type=1400 audit(1788826049.379:503): avc: denied { write } for pid=8029 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.496419][ T7901] hsr_slave_0: entered promiscuous mode [ 316.500138][ T7901] hsr_slave_1: entered promiscuous mode [ 316.503023][ T7901] debugfs: 'hsr0' already exists in 'hsr' [ 316.503041][ T7901] Cannot create hsr debugfs directory [ 317.479760][ T8040] sg_write: data in/out 548864/136 bytes for SCSI command 0x0-- guessing data in; [ 317.479760][ T8040] program syz.0.444 not setting count and/or reply_len properly [ 317.517146][ T5267] 8021q: adding VLAN 0 to HW filter on device eth10 [ 319.539776][ T5610] Bluetooth: hci1: command 0x0406 tx timeout [ 320.980243][ T7901] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 321.005457][ T7901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.017063][ T7901] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 321.069840][ T7901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.078113][ T7901] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 321.113444][ T7901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.124832][ T7901] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 321.140387][ T7901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.319488][ T31] audit: type=1400 audit(1788826054.259:504): avc: denied { write } for pid=8063 comm="syz.2.457" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 321.347677][ T31] audit: type=1400 audit(1788826054.289:505): avc: denied { ioctl } for pid=8063 comm="syz.2.457" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 321.528114][ T8073] sg_write: data in/out 548864/136 bytes for SCSI command 0x0-- guessing data in; [ 321.528114][ T8073] program syz.0.456 not setting count and/or reply_len properly [ 322.969955][ T8072] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 322.969990][ T8072] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 322.971697][ T8072] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 322.973279][ T31] audit: type=1400 audit(1788826055.909:506): avc: denied { firmware_load } for pid=8063 comm="syz.2.457" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 324.109474][ T7901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.173874][ T7901] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.300574][ T31] audit: type=1400 audit(1788826057.239:507): avc: denied { write } for pid=8048 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.357015][ T6853] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.357114][ T6853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.383878][ T6853] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.383977][ T6853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.360212][ T7901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.360249][ T7901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.540309][ T31] audit: type=1400 audit(1788826058.479:508): avc: denied { write } for pid=8103 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.564435][ T8107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.404416][ T7901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.890612][ T7901] veth0_vlan: entered promiscuous mode [ 326.920028][ T8130] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 326.934554][ T7901] veth1_vlan: entered promiscuous mode [ 327.024720][ T7901] veth0_macvtap: entered promiscuous mode [ 327.046632][ T7901] veth1_macvtap: entered promiscuous mode [ 327.110779][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.133597][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.683339][ T50] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.683778][ T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.683942][ T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.684027][ T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.729903][ T5267] 8021q: adding VLAN 0 to HW filter on device eth11 [ 330.435297][ T8145] FAULT_INJECTION: forcing a failure. [ 330.435297][ T8145] name failslab, interval 1, probability 0, space 0, times 0 [ 330.435771][ T8145] CPU: 0 UID: 0 PID: 8145 Comm: syz.5.469 Not tainted syzkaller #0 PREEMPT(full) [ 330.435796][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 330.435815][ T8145] Call Trace: [ 330.435822][ T8145] [ 330.435830][ T8145] dump_stack_lvl+0x100/0x190 [ 330.435852][ T8145] should_fail_ex.cold+0x5/0xa [ 330.435869][ T8145] should_failslab+0xc2/0x120 [ 330.435884][ T8145] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 330.435898][ T8145] ? __d_alloc+0x35/0xa50 [ 330.435915][ T8145] __d_alloc+0x35/0xa50 [ 330.435932][ T8145] d_alloc_parallel+0x105/0x14c0 [ 330.435949][ T8145] ? lock_acquire+0x5e/0x380 [ 330.435961][ T8145] ? __pfx_d_alloc_parallel+0x10/0x10 [ 330.435973][ T8145] ? __pfx___might_resched+0x10/0x10 [ 330.435983][ T8145] ? rcu_is_watching+0x13/0xc0 [ 330.436001][ T8145] ? down_read+0x13b/0x4c0 [ 330.436018][ T8145] ? __pfx_down_read+0x10/0x10 [ 330.436034][ T8145] __lookup_slow+0x98/0x320 [ 330.436053][ T8145] lookup_slow+0x50/0x70 [ 330.436074][ T8145] path_lookupat+0x5e8/0xc40 [ 330.436089][ T8145] filename_lookup+0x202/0x590 [ 330.436103][ T8145] ? __pfx_filename_lookup+0x10/0x10 [ 330.436127][ T8145] ? do_getname_kernel+0x5d/0x250 [ 330.436143][ T8145] ? __asan_memcpy+0x3c/0x60 [ 330.436157][ T8145] kern_path+0x37/0x50 [ 330.436169][ T8145] lookup_bdev+0xd8/0x2a0 [ 330.436185][ T8145] ? __pfx_lookup_bdev+0x10/0x10 [ 330.436201][ T8145] ? __asan_memcpy+0x3c/0x60 [ 330.436213][ T8145] resume_store+0x1d6/0x460 [ 330.436227][ T8145] ? irqentry_exit+0x24d/0xa10 [ 330.436241][ T8145] ? __pfx_resume_store+0x10/0x10 [ 330.436257][ T8145] ? __pfx_resume_store+0x10/0x10 [ 330.436276][ T8145] ? __pfx_resume_store+0x10/0x10 [ 330.436289][ T8145] kobj_attr_store+0x58/0x80 [ 330.436305][ T8145] ? __pfx_kobj_attr_store+0x10/0x10 [ 330.436321][ T8145] sysfs_kf_write+0xf2/0x150 [ 330.436336][ T8145] kernfs_fop_write_iter+0x3e0/0x5f0 [ 330.436347][ T8145] ? __pfx_sysfs_kf_write+0x10/0x10 [ 330.436362][ T8145] vfs_write+0x6af/0x1050 [ 330.436373][ T8145] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 330.436386][ T8145] ? __pfx_vfs_write+0x10/0x10 [ 330.436396][ T8145] ? find_held_lock+0x2b/0x80 [ 330.436422][ T8145] ksys_write+0x12a/0x250 [ 330.436432][ T8145] ? __pfx_ksys_write+0x10/0x10 [ 330.436448][ T8145] do_syscall_64+0x123/0x790 [ 330.436464][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.436476][ T8145] RIP: 0033:0x7fca5819e159 [ 330.436487][ T8145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.436498][ T8145] RSP: 002b:00007fca58fde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 330.436510][ T8145] RAX: ffffffffffffffda RBX: 00007fca58426090 RCX: 00007fca5819e159 [ 330.436518][ T8145] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 0000000000000005 [ 330.436524][ T8145] RBP: 00007fca58fde090 R08: 0000000000000000 R09: 0000000000000000 [ 330.436531][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.436538][ T8145] R13: 00007fca58426128 R14: 00007fca58426090 R15: 00007fff0698a558 [ 330.436554][ T8145] [ 330.448477][ T8145] overlayfs: overlapping lowerdir path [ 332.121442][ T8152] jffs2: notice: (8152) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 332.322810][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.322838][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.390641][ T8156] ALSA: mixer_oss: invalid OSS volume 'OGADá¿CaptuOª'.â‹L*8ŒP88re' [ 332.390914][ T8156] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 332.468317][ T8156] netlink: 'syz.2.470': attribute type 1 has an invalid length. [ 332.468348][ T8156] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.470'. [ 332.484673][ T1529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.484692][ T1529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.660677][ T31] audit: type=1400 audit(1788826065.599:509): avc: denied { mount } for pid=7901 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 332.857471][ T8165] Driver unsupported XDP return value 0 on prog (id 51) dev N/A, expect packet loss! [ 333.191888][ T8173] input: syz1 as /devices/virtual/input/input31 [ 334.196221][ T8183] sg_write: data in/out 548864/136 bytes for SCSI command 0x0-- guessing data in; [ 334.196221][ T8183] program syz.7.474 not setting count and/or reply_len properly [ 334.725171][ T31] audit: type=1400 audit(1788826067.669:510): avc: denied { write } for pid=8160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.103873][ T31] audit: type=1400 audit(1788826068.049:511): avc: denied { write } for pid=8189 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.033867][ T5267] 8021q: adding VLAN 0 to HW filter on device eth12 [ 336.148472][ T8207] netlink: 'syz.5.479': attribute type 10 has an invalid length. [ 336.150677][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.152070][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.040489][ T31] audit: type=1400 audit(1788826069.979:512): avc: denied { read } for pid=8204 comm="syz.2.478" name="set_event" dev="tracefs" ino=3176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 337.098340][ T8207] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.098439][ T8207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.099604][ T8207] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.099710][ T8207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.218830][ T8207] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 337.587588][ T8215] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 337.898634][ T8223] input: syz1 as /devices/virtual/input/input32 [ 338.711199][ T5338] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 338.785274][ T31] audit: type=1400 audit(1788826071.729:513): avc: denied { write } for pid=8231 comm="syz.6.484" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.785723][ T31] audit: type=1400 audit(1788826071.729:514): avc: denied { ioctl } for pid=8231 comm="syz.6.484" path="socket:[17981]" dev="sockfs" ino=17981 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.787929][ T31] audit: type=1400 audit(1788826071.729:515): avc: denied { read } for pid=8231 comm="syz.6.484" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.800180][ T31] audit: type=1400 audit(1788826071.739:516): avc: denied { connect } for pid=8231 comm="syz.6.484" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.862452][ T5338] usb 1-1: Using ep0 maxpacket: 16 [ 338.867244][ T5338] usb 1-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 338.872114][ T5338] usb 1-1: config 0 has an invalid interface number: 180 but max is 0 [ 338.872137][ T5338] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.872156][ T5338] usb 1-1: config 0 has no interface number 0 [ 338.880220][ T5338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.880243][ T5338] usb 1-1: Product: syz [ 338.880258][ T5338] usb 1-1: Manufacturer: syz [ 338.880271][ T5338] usb 1-1: SerialNumber: syz [ 338.898720][ T5338] usb 1-1: config 0 descriptor?? [ 338.912097][ T5338] rndis_host 1-1:0.180: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 339.580698][ T5788] usb 1-1: USB disconnect, device number 6 [ 342.975470][ T8257] jffs2: notice: (8257) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 343.983423][ T31] audit: type=1400 audit(1788826076.909:517): avc: denied { read write } for pid=8268 comm="syz.6.492" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 344.021794][ T31] audit: type=1400 audit(1788826076.969:518): avc: denied { open } for pid=8268 comm="syz.6.492" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 345.345148][ T8275] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 345.462156][ T8273] overlayfs: overlapping lowerdir path [ 345.493319][ T8273] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 345.501669][ T8273] overlayfs: overlapping lowerdir path [ 349.517661][ T31] audit: type=1400 audit(1788826082.459:519): avc: denied { write } for pid=8295 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.982206][ T31] audit: type=1400 audit(1788826083.929:520): avc: denied { write } for pid=8325 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.209609][ T31] audit: type=1400 audit(1788826086.149:521): avc: denied { write } for pid=8330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.483145][ T8348] warning: `syz.2.507' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 354.179815][ T31] audit: type=1400 audit(1788826087.119:522): avc: denied { write } for pid=8354 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.538220][ T8362] Invalid ELF header magic: != ELF [ 354.588721][ T31] audit: type=1400 audit(1788826087.479:523): avc: denied { module_load } for pid=8358 comm="syz.5.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 354.994092][ T31] audit: type=1400 audit(1788826087.849:524): avc: denied { write } for pid=8355 comm="syz.2.508" name="mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 355.644737][ T8360] block device autoloading is deprecated and will be removed. [ 355.925751][ T8368] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 356.153834][ T8377] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 356.153860][ T8377] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 356.153950][ T8377] vhci_hcd vhci_hcd.0: Device attached [ 356.170348][ T8377] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 356.170371][ T8377] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 356.170428][ T8377] vhci_hcd vhci_hcd.0: Device attached [ 356.176271][ T8377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.413118][ T8387] sg_write: data in/out 548864/136 bytes for SCSI command 0x0-- guessing data in; [ 356.413118][ T8387] program syz.7.512 not setting count and/or reply_len properly [ 356.503022][ T5788] usb 37-2: new low-speed USB device number 2 using vhci_hcd [ 356.545345][ T8381] vhci_hcd: connection closed [ 356.546609][ T6853] vhci_hcd vhci_hcd.2: stop threads [ 356.546645][ T6853] vhci_hcd vhci_hcd.2: release socket [ 356.548197][ T6853] vhci_hcd vhci_hcd.2: disconnect device [ 356.581112][ T8383] vhci_hcd: connection reset by peer [ 356.613537][ T6853] vhci_hcd vhci_hcd.2: stop threads [ 356.613559][ T6853] vhci_hcd vhci_hcd.2: release socket [ 356.614278][ T6853] vhci_hcd vhci_hcd.2: disconnect device [ 360.132044][ T31] audit: type=1400 audit(1788826093.079:525): avc: denied { write } for pid=8367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.837662][ T31] audit: type=1400 audit(1788826094.779:526): avc: denied { write } for pid=8420 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.906915][ T5788] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 363.166437][ T8435] FAULT_INJECTION: forcing a failure. [ 363.166437][ T8435] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 363.166500][ T8435] CPU: 0 UID: 0 PID: 8435 Comm: syz.5.524 Not tainted syzkaller #0 PREEMPT(full) [ 363.166519][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 363.166526][ T8435] Call Trace: [ 363.166531][ T8435] [ 363.166536][ T8435] dump_stack_lvl+0x100/0x190 [ 363.166556][ T8435] should_fail_ex.cold+0x5/0xa [ 363.166570][ T8435] ? prepare_alloc_pages+0x16d/0x5b0 [ 363.166586][ T8435] should_fail_alloc_page+0xeb/0x140 [ 363.166601][ T8435] prepare_alloc_pages+0x1f0/0x5b0 [ 363.166617][ T8435] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 363.166635][ T8435] ? __pfx_get_page_from_freelist+0x10/0x10 [ 363.166653][ T8435] ? prepare_alloc_pages+0x1f0/0x5b0 [ 363.166668][ T8435] ? rcu_is_watching+0x13/0xc0 [ 363.166683][ T8435] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 363.166702][ T8435] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 363.166721][ T8435] ? find_held_lock+0x2b/0x80 [ 363.166736][ T8435] ? is_bpf_text_address+0x8a/0x1a0 [ 363.166751][ T8435] ? is_bpf_text_address+0x8a/0x1a0 [ 363.166765][ T8435] ? bpf_ksym_find+0x128/0x1c0 [ 363.166781][ T8435] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 363.166799][ T8435] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 363.166816][ T8435] ? is_bpf_text_address+0x94/0x1a0 [ 363.166830][ T8435] ? __kernel_text_address+0xd/0x30 [ 363.166858][ T8435] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 363.166876][ T8435] ? up_write+0x2dc/0x5b0 [ 363.166890][ T8435] ? policy_nodemask+0xed/0x4f0 [ 363.166906][ T8435] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 363.166932][ T8435] __kasan_populate_vmalloc+0xf0/0x210 [ 363.166953][ T8435] alloc_vmap_area+0x95d/0x2bb0 [ 363.166971][ T8435] ? kasan_save_track+0x14/0x30 [ 363.166983][ T8435] ? __kasan_kmalloc+0xaa/0xb0 [ 363.166994][ T8435] ? __pfx_alloc_vmap_area+0x10/0x10 [ 363.167008][ T8435] ? __get_vm_area_node+0x124/0x350 [ 363.167023][ T8435] __get_vm_area_node+0x1ed/0x350 [ 363.167039][ T8435] __vmalloc_node_range_noprof+0x268/0x1420 [ 363.167053][ T8435] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 363.167069][ T8435] ? __pfx_stack_trace_save+0x10/0x10 [ 363.167086][ T8435] ? stack_depot_save_flags+0x27/0x9f0 [ 363.167102][ T8435] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 363.167116][ T8435] ? __kasan_kmalloc+0xaa/0xb0 [ 363.167127][ T8435] ? do_syscall_64+0x123/0x790 [ 363.167143][ T8435] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 363.167163][ T8435] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 363.167176][ T8435] __vmalloc_node_noprof+0xad/0xf0 [ 363.167190][ T8435] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 363.167205][ T8435] __vmalloc_noprof+0xa3/0x120 [ 363.167219][ T8435] ? __pfx___vmalloc_noprof+0x10/0x10 [ 363.167238][ T8435] bpf_prog_alloc_no_stats+0x59/0x690 [ 363.167254][ T8435] bpf_prog_alloc+0x3b/0x200 [ 363.167268][ T8435] bpf_prog_create_from_user+0xb4/0x2e0 [ 363.167283][ T8435] ? __pfx_seccomp_check_filter+0x10/0x10 [ 363.167300][ T8435] do_seccomp+0x870/0x27c0 [ 363.167316][ T8435] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 363.167331][ T8435] ? __fget_files+0x21f/0x3d0 [ 363.167346][ T8435] ? __pfx_do_seccomp+0x10/0x10 [ 363.167362][ T8435] ? fput+0x7c/0x100 [ 363.167375][ T8435] ? ksys_write+0x1ac/0x250 [ 363.167386][ T8435] ? __pfx_ksys_write+0x10/0x10 [ 363.167401][ T8435] do_syscall_64+0x123/0x790 [ 363.167419][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.167438][ T8435] RIP: 0033:0x7fca5819e159 [ 363.167450][ T8435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.167461][ T8435] RSP: 002b:00007fca58fff028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 363.167472][ T8435] RAX: ffffffffffffffda RBX: 00007fca58425fa0 RCX: 00007fca5819e159 [ 363.167480][ T8435] RDX: 0000200000000240 RSI: 0000000000000007 RDI: 0000000000000001 [ 363.167487][ T8435] RBP: 00007fca58fff090 R08: 0000000000000000 R09: 0000000000000000 [ 363.167494][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.167500][ T8435] R13: 00007fca58426038 R14: 00007fca58425fa0 R15: 00007fff0698a558 [ 363.167515][ T8435] [ 363.167569][ T8435] syz.5.524: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 363.167612][ T8435] CPU: 0 UID: 0 PID: 8435 Comm: syz.5.524 Not tainted syzkaller #0 PREEMPT(full) [ 363.167625][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 363.167632][ T8435] Call Trace: [ 363.167636][ T8435] [ 363.167640][ T8435] dump_stack_lvl+0x100/0x190 [ 363.167656][ T8435] warn_alloc.cold+0x9e/0xb2 [ 363.167669][ T8435] ? __pfx_warn_alloc+0x10/0x10 [ 363.167684][ T8435] ? lockdep_hardirqs_on+0x7d/0x110 [ 363.167699][ T8435] ? __get_vm_area_node+0x2f0/0x350 [ 363.167715][ T8435] ? __get_vm_area_node+0x22b/0x350 [ 363.167731][ T8435] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 363.167746][ T8435] ? __pfx_stack_trace_save+0x10/0x10 [ 363.167762][ T8435] ? stack_depot_save_flags+0x27/0x9f0 [ 363.167778][ T8435] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 363.167792][ T8435] ? __kasan_kmalloc+0xaa/0xb0 [ 363.167803][ T8435] ? do_syscall_64+0x123/0x790 [ 363.167817][ T8435] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 363.167837][ T8435] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 363.167850][ T8435] __vmalloc_node_noprof+0xad/0xf0 [ 363.167864][ T8435] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 363.167879][ T8435] __vmalloc_noprof+0xa3/0x120 [ 363.167893][ T8435] ? __pfx___vmalloc_noprof+0x10/0x10 [ 363.167912][ T8435] bpf_prog_alloc_no_stats+0x59/0x690 [ 363.167927][ T8435] bpf_prog_alloc+0x3b/0x200 [ 363.167941][ T8435] bpf_prog_create_from_user+0xb4/0x2e0 [ 363.167960][ T8435] ? __pfx_seccomp_check_filter+0x10/0x10 [ 363.167976][ T8435] do_seccomp+0x870/0x27c0 [ 363.167991][ T8435] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 363.168006][ T8435] ? __fget_files+0x21f/0x3d0 [ 363.168021][ T8435] ? __pfx_do_seccomp+0x10/0x10 [ 363.168036][ T8435] ? fput+0x7c/0x100 [ 363.168049][ T8435] ? ksys_write+0x1ac/0x250 [ 363.168059][ T8435] ? __pfx_ksys_write+0x10/0x10 [ 363.168074][ T8435] do_syscall_64+0x123/0x790 [ 363.168088][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.168100][ T8435] RIP: 0033:0x7fca5819e159 [ 363.168109][ T8435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.168119][ T8435] RSP: 002b:00007fca58fff028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 363.168129][ T8435] RAX: ffffffffffffffda RBX: 00007fca58425fa0 RCX: 00007fca5819e159 [ 363.168136][ T8435] RDX: 0000200000000240 RSI: 0000000000000007 RDI: 0000000000000001 [ 363.168143][ T8435] RBP: 00007fca58fff090 R08: 0000000000000000 R09: 0000000000000000 [ 363.168150][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.168156][ T8435] R13: 00007fca58426038 R14: 00007fca58425fa0 R15: 00007fff0698a558 [ 363.168171][ T8435] [ 363.168180][ T8435] Mem-Info: [ 363.168189][ T8435] active_anon:9941 inactive_anon:96621 isolated_anon:0 [ 363.168189][ T8435] active_file:25407 inactive_file:17725 isolated_file:0 [ 363.168189][ T8435] unevictable:0 dirty:582 writeback:0 [ 363.168189][ T8435] slab_reclaimable:9199 slab_unreclaimable:98637 [ 363.168189][ T8435] mapped:46464 shmem:93264 pagetables:1719 [ 363.168189][ T8435] sec_pagetables:0 bounce:0 [ 363.168189][ T8435] kernel_misc_reclaimable:0 [ 363.168189][ T8435] free:570029 free_pcp:22191 free_cma:0 [ 363.168220][ T8435] Node 0 active_anon:39744kB inactive_anon:142396kB active_file:96984kB inactive_file:69416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180936kB dirty:2328kB writeback:0kB shmem:129776kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13316kB pagetables:6224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 363.168250][ T8435] Node 1 active_anon:20kB inactive_anon:244088kB active_file:4644kB inactive_file:1484kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4920kB dirty:0kB writeback:0kB shmem:243280kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:208kB pagetables:652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 363.168280][ T8435] Node 0 DMA free:10140kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:804kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:140kB local_pcp:72kB free_cma:0kB [ 363.168314][ T8435] lowmem_reserve[]: 0 2470 2470 2470 2470 [ 363.168344][ T8435] Node 0 DMA32 free:42440kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:39744kB inactive_anon:141692kB active_file:96984kB inactive_file:69416kB unevictable:0kB writepending:2328kB zspages:28kB present:3129332kB managed:2530196kB mlocked:0kB bounce:0kB free_pcp:16508kB local_pcp:8552kB free_cma:0kB [ 363.168378][ T8435] lowmem_reserve[]: 0 0 0 0 0 [ 363.168407][ T8435] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 363.168439][ T8435] lowmem_reserve[]: 0 0 0 0 0 [ 363.168467][ T8435] Node 1 Normal free:2227536kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:20kB inactive_anon:244088kB active_file:4644kB inactive_file:1484kB unevictable:0kB writepending:0kB zspages:12kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:72116kB local_pcp:66776kB free_cma:0kB [ 363.168502][ T8435] lowmem_reserve[]: 0 0 0 0 0 [ 363.168530][ T8435] Node 0 DMA: 8*4kB (U) 8*8kB (UM) 4*16kB (UM) 0*32kB 2*64kB (M) 3*128kB (UM) 1*256kB (M) 2*512kB (UM) 0*1024kB 0*2048kB 2*4096kB (M) = 10144kB [ 363.168641][ T8435] Node 0 DMA32: 460*4kB (UME) 260*8kB (UME) 193*16kB (UME) 261*32kB (UME) 126*64kB (UME) 87*128kB (UME) 11*256kB (UM) 6*512kB (UME) 2*1024kB (U) 0*2048kB 0*4096kB = 42496kB [ 363.168756][ T8435] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 363.168831][ T8435] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 1*16kB (M) 3*32kB (UME) 1*64kB (M) 7*128kB (UME) 11*256kB (UME) 13*512kB (UE) 5*1024kB (UE) 0*2048kB 540*4096kB (M) = 2227528kB [ 363.168955][ T8435] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 363.168966][ T8435] Node 0 hugepages_total=588 hugepages_free=588 hugepages_surp=0 hugepages_size=2048kB [ 363.168976][ T8435] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 363.168986][ T8435] Node 1 hugepages_total=670 hugepages_free=670 hugepages_surp=0 hugepages_size=2048kB [ 363.168996][ T8435] 136423 total pagecache pages [ 363.169002][ T8435] 39 pages in swap cache [ 363.169007][ T8435] Free swap = 124832kB [ 363.169013][ T8435] Total swap = 124996kB [ 363.169018][ T8435] 2097051 pages RAM [ 363.169024][ T8435] 0 pages HighMem/MovableOnly [ 363.169029][ T8435] 432868 pages reserved [ 363.169034][ T8435] 0 pages cma reserved [ 363.824406][ T5753] usb usb38-port1: attempt power cycle [ 364.472078][ T5753] usb usb38-port1: unable to enumerate USB device [ 364.569748][ T31] audit: type=1400 audit(1788826097.499:527): avc: denied { write } for pid=8428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.711717][ T8447] vlan0: entered promiscuous mode [ 364.736753][ T8447] team0: Port device vlan0 added [ 364.828656][ T31] audit: type=1400 audit(1788826097.769:528): avc: denied { write } for pid=8452 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.197844][ T31] audit: type=1400 audit(1788826099.139:529): avc: denied { create } for pid=8461 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 367.386811][ T8469] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 368.366080][ T8479] jffs2: notice: (8479) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 368.851051][ T5721] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 369.892590][ T5721] usb 1-1: Using ep0 maxpacket: 8 [ 369.898272][ T5721] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 369.914110][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.914144][ T5721] usb 1-1: Product: syz [ 369.914171][ T5721] usb 1-1: Manufacturer: syz [ 369.914188][ T5721] usb 1-1: SerialNumber: syz [ 369.942604][ T5721] usb 1-1: config 0 descriptor?? [ 369.973914][ T5721] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 369.982236][ T5721] pctv452e: pctv452e_power_ctrl: 1 [ 369.982236][ T5721] [ 369.989612][ T5721] usb 1-1: selecting invalid altsetting 3 [ 369.996253][ T5721] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 369.996253][ T5721] [ 370.006897][ T5721] dvb-usb: bulk message failed: -22 (5/0) [ 370.017536][ T5721] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 370.029606][ T5721] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 370.040823][ T5721] usb 1-1: media controller created [ 370.046633][ T5721] dvb-usb: bulk message failed: -22 (8/0) [ 370.052828][ T5721] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 370.061259][ T5721] dvb-usb: MAC address reading failed. [ 371.226267][ T31] audit: type=1400 audit(1788826104.169:530): avc: denied { create } for pid=8496 comm="syz.6.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 371.246283][ T31] audit: type=1400 audit(1788826104.189:531): avc: denied { connect } for pid=8496 comm="syz.6.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 371.257437][ T31] audit: type=1400 audit(1788826104.199:532): avc: denied { ioctl } for pid=8496 comm="syz.6.538" path="socket:[19037]" dev="sockfs" ino=19037 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 371.493497][ T31] audit: type=1400 audit(1788826104.429:533): avc: denied { read } for pid=8496 comm="syz.6.538" path="socket:[19037]" dev="sockfs" ino=19037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 371.693104][ T8505] jffs2: notice: (8505) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 371.725127][ T5721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 371.870801][ T5721] DVB: Unable to find symbol stb0899_attach() [ 371.870842][ T5721] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 372.976630][ T5721] rc_core: IR keymap rc-tt-1500 not found [ 372.982457][ T5721] Registered IR keymap rc-empty [ 373.055639][ T5721] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 373.078700][ T5721] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input33 [ 373.173672][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.173731][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.200175][ T5721] dvb-usb: schedule remote query interval to 100 msecs. [ 373.208917][ T5721] pctv452e: pctv452e_power_ctrl: 0 [ 373.208917][ T5721] [ 373.218386][ T5721] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 373.242182][ T5721] usb 1-1: USB disconnect, device number 7 [ 373.486980][ T8526] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 373.547775][ T5721] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 374.431125][ T8534] Invalid ELF header magic: != ELF [ 374.861425][ T8534] FAULT_INJECTION: forcing a failure. [ 374.861425][ T8534] name failslab, interval 1, probability 0, space 0, times 0 [ 374.861450][ T8534] CPU: 1 UID: 0 PID: 8534 Comm: syz.0.544 Not tainted syzkaller #0 PREEMPT(full) [ 374.861464][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 374.861472][ T8534] Call Trace: [ 374.861476][ T8534] [ 374.861480][ T8534] dump_stack_lvl+0x100/0x190 [ 374.861501][ T8534] should_fail_ex.cold+0x5/0xa [ 374.861517][ T8534] should_failslab+0xc2/0x120 [ 374.861531][ T8534] kmem_cache_alloc_noprof+0x92/0x6a0 [ 374.861543][ T8534] ? __pfx_map_id_range_down+0x10/0x10 [ 374.861556][ T8534] ? security_inode_alloc+0x3b/0x2c0 [ 374.861576][ T8534] security_inode_alloc+0x3b/0x2c0 [ 374.861593][ T8534] inode_init_always_gfp+0xc6f/0xfb0 [ 374.861610][ T8534] alloc_inode+0x8e/0x250 [ 374.861621][ T8534] new_inode+0x22/0x1c0 [ 374.861632][ T8534] __debugfs_create_file+0xd8/0x4d0 [ 374.861650][ T8534] debugfs_create_file_full+0x41/0x60 [ 374.861667][ T8534] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 374.861682][ T8534] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 374.861709][ T8534] ? lockdep_init_map_type+0x5c/0x250 [ 374.861724][ T8534] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 374.861736][ T8534] alloc_netdev_mqs+0x314/0x15c0 [ 374.861752][ T8534] ipip6_tunnel_locate+0x47d/0x880 [ 374.861768][ T8534] ? __pfx_ipip6_tunnel_locate+0x10/0x10 [ 374.861782][ T8534] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 374.861797][ T8534] ipip6_tunnel_ctl+0x44c/0x780 [ 374.861811][ T8534] ip_tunnel_siocdevprivate+0x114/0x1b0 [ 374.861826][ T8534] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 374.861843][ T8534] ? find_held_lock+0x2b/0x80 [ 374.861862][ T8534] ipip6_tunnel_siocdevprivate+0x364/0x16a0 [ 374.861877][ T8534] ? __pfx_ipip6_tunnel_siocdevprivate+0x10/0x10 [ 374.861894][ T8534] ? lock_acquire+0x1d1/0x380 [ 374.861905][ T8534] ? dev_ioctl+0x6fd/0x10e0 [ 374.861920][ T8534] ? rcu_is_watching+0x13/0xc0 [ 374.861934][ T8534] ? full_name_hash+0xbc/0x100 [ 374.861952][ T8534] ? dev_ifsioc+0xc7a/0x1fc0 [ 374.861962][ T8534] dev_ifsioc+0xc7a/0x1fc0 [ 374.861975][ T8534] ? __pfx_dev_ifsioc+0x10/0x10 [ 374.861986][ T8534] ? __pfx___mutex_lock+0x10/0x10 [ 374.862003][ T8534] ? lock_acquire+0x1d1/0x380 [ 374.862016][ T8534] ? dev_load+0x8e/0x240 [ 374.862026][ T8534] ? dev_load+0x8e/0x240 [ 374.862041][ T8534] dev_ioctl+0x70e/0x10e0 [ 374.862054][ T8534] sock_ioctl+0x494/0x6b0 [ 374.862071][ T8534] ? __pfx_sock_ioctl+0x10/0x10 [ 374.862090][ T8534] ? selinux_file_ioctl+0x13b/0x290 [ 374.862101][ T8534] ? selinux_file_ioctl+0xb6/0x290 [ 374.862113][ T8534] ? __pfx_sock_ioctl+0x10/0x10 [ 374.862129][ T8534] __x64_sys_ioctl+0x18e/0x210 [ 374.862142][ T8534] do_syscall_64+0x123/0x790 [ 374.862157][ T8534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.862169][ T8534] RIP: 0033:0x7fe42e19e159 [ 374.862179][ T8534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.862190][ T8534] RSP: 002b:00007fe42ef8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.862201][ T8534] RAX: ffffffffffffffda RBX: 00007fe42e426180 RCX: 00007fe42e19e159 [ 374.862209][ T8534] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000007 [ 374.862216][ T8534] RBP: 00007fe42ef8f090 R08: 0000000000000000 R09: 0000000000000000 [ 374.862223][ T8534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.862229][ T8534] R13: 00007fe42e426218 R14: 00007fe42e426180 R15: 00007ffca1702988 [ 374.862245][ T8534] [ 374.862263][ T8534] debugfs: out of free dentries, can not create file 'netdev@ffff888081e90700' [ 376.545246][ T5753] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 376.771624][ T5753] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 376.782064][ T5753] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 376.791168][ T5753] usb 1-1: config 0 has no interface number 0 [ 376.791222][ T5753] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 376.810736][ T5753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.819820][ T5753] usb 1-1: Product: syz [ 376.819856][ T5753] usb 1-1: Manufacturer: syz [ 376.819875][ T5753] usb 1-1: SerialNumber: syz [ 376.845854][ T5753] usb 1-1: config 0 descriptor?? [ 376.883149][ T5753] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 378.220221][ T31] audit: type=1326 audit(1788826111.159:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8542 comm="syz.0.547" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe42e19e159 code=0x0 [ 378.324308][ T31] audit: type=1400 audit(1788826111.269:535): avc: denied { create } for pid=8558 comm="syz.6.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 378.354077][ T31] audit: type=1400 audit(1788826111.289:536): avc: denied { setopt } for pid=8558 comm="syz.6.552" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 378.377252][ T8562] syz_tun: entered allmulticast mode [ 378.859507][ T31] audit: type=1400 audit(1788826111.799:537): avc: denied { setopt } for pid=8542 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 379.225828][ T31] audit: type=1400 audit(1788826112.159:538): avc: denied { listen } for pid=8556 comm="syz.5.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 379.304587][ T31] audit: type=1400 audit(1788826112.249:539): avc: denied { setopt } for pid=8556 comm="syz.5.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 379.659651][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 379.660890][ T5753] usb 1-1: USB disconnect, device number 8 [ 379.686581][ T5753] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 380.007628][ T31] audit: type=1400 audit(1788826112.919:540): avc: denied { wake_alarm } for pid=8556 comm="syz.5.551" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 381.750923][ T8581] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 383.843444][ T31] audit: type=1400 audit(1788826116.789:541): avc: denied { write } for pid=8598 comm="syz.6.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 385.689469][ T8616] jffs2: notice: (8616) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 386.237783][ T8614] sg_write: data in/out 548864/136 bytes for SCSI command 0x0-- guessing data in; [ 386.237783][ T8614] program syz.7.557 not setting count and/or reply_len properly [ 386.695354][ T8625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.627581][ T31] audit: type=1400 audit(1788826120.569:542): avc: denied { bind } for pid=8629 comm="syz.0.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 387.670581][ T31] audit: type=1400 audit(1788826120.609:543): avc: denied { create } for pid=8629 comm="syz.0.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 387.943806][ T31] audit: type=1400 audit(1788826120.889:544): avc: denied { read } for pid=8629 comm="syz.0.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 388.193206][ T190] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 388.392610][ T190] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 388.402194][ T190] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 388.402256][ T190] usb 3-1: config 0 has no interface number 0 [ 388.402451][ T190] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 388.500593][ T190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.500664][ T190] usb 3-1: Product: syz [ 388.500743][ T190] usb 3-1: Manufacturer: syz [ 388.500816][ T190] usb 3-1: SerialNumber: syz [ 388.727698][ T190] usb 3-1: config 0 descriptor?? [ 388.981211][ T5784] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 389.068821][ T190] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 389.142184][ T5784] usb 7-1: Using ep0 maxpacket: 16 [ 389.150053][ T5784] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 389.179044][ T5784] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.190086][ T5784] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.257741][ T8640] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 389.369842][ T5784] usb 7-1: config 0 descriptor?? [ 389.549411][ T5784] pxrc 7-1:0.0: Could not find endpoint [ 389.735585][ T190] usb 3-1: USB disconnect, device number 6 [ 390.522871][ T190] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 390.690341][ T5788] usb 7-1: USB disconnect, device number 5 [ 390.755259][ T8650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.562408][ T8668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.970513][ T8681] input: syz1 as /devices/virtual/input/input34 [ 397.200365][ T5705] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 397.404507][ T5705] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 397.405637][ T5705] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 397.405661][ T5705] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 397.407439][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.407461][ T5705] usb 1-1: Product: syz [ 397.407475][ T5705] usb 1-1: Manufacturer: syz [ 397.407490][ T5705] usb 1-1: SerialNumber: syz [ 397.423929][ T5705] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 397.444125][ T5705] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 397.444125][ T5705] Please send a copy of this message to and [ 397.695549][ T5705] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 397.708263][ T5705] usb 1-1: USB disconnect, device number 9 [ 397.714143][ T31] audit: type=1400 audit(1788826130.649:545): avc: denied { module_load } for pid=8692 comm="syz.2.583" path="/sys/kernel/oops_count" dev="sysfs" ino=53298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 398.719085][ T8708] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 401.411736][ T31] audit: type=1400 audit(1788826134.349:546): avc: denied { map } for pid=8716 comm="syz.0.590" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 401.708664][ T8729] qnx4: unable to read the superblock [ 401.787333][ T8734] input: syz1 as /devices/virtual/input/input35 [ 402.925943][ T31] audit: type=1400 audit(1788826135.849:547): avc: denied { ioctl } for pid=8733 comm="syz.5.594" path="/104/file0" dev="tmpfs" ino=626 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 403.312309][ T5788] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 403.441454][ T5788] usb 3-1: device descriptor read/64, error -71 [ 403.451518][ T31] audit: type=1400 audit(1788826136.399:548): avc: denied { append } for pid=8743 comm="syz.0.595" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 403.476626][ T31] audit: type=1400 audit(1788826136.419:549): avc: denied { connect } for pid=8743 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 403.478873][ T31] audit: type=1400 audit(1788826136.419:550): avc: denied { write } for pid=8743 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 403.480648][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'. [ 404.671073][ T31] audit: type=1400 audit(1788826136.619:551): avc: denied { sqpoll } for pid=8746 comm="syz.6.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 404.815625][ T5788] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 408.520054][ T8780] binder: 8779:8780 unknown command 0 [ 408.520088][ T8780] binder: 8779:8780 ioctl c0306201 200000000080 returned -22 [ 409.007249][ T8787] input: syz1 as /devices/virtual/input/input36 [ 409.700967][ T8793] syzkaller0: entered promiscuous mode [ 409.706525][ T8793] syzkaller0: entered allmulticast mode [ 409.714879][ T8793] tipc: Started in network mode [ 409.719807][ T8793] tipc: Node identity a6964a4f0454, cluster identity 4711 [ 409.728192][ T8793] tipc: Enabled bearer , priority 0 [ 409.738801][ T8793] tipc: Resetting bearer [ 409.819939][ T8792] tipc: Resetting bearer [ 409.899229][ T8792] tipc: Disabling bearer [ 410.338388][ T31] audit: type=1400 audit(1788826143.279:552): avc: denied { getopt } for pid=8797 comm="syz.0.608" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 411.591908][ T8811] netlink: 28 bytes leftover after parsing attributes in process `syz.7.610'. [ 414.047901][ T31] audit: type=1400 audit(1788826146.989:553): avc: denied { name_bind } for pid=8810 comm="syz.7.610" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 414.951073][ T5705] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 415.343881][ T8831] sg_write: data in/out 548864/136 bytes for SCSI command 0x0-- guessing data in; [ 415.343881][ T8831] program syz.5.612 not setting count and/or reply_len properly [ 415.431042][ T5705] usb 1-1: Using ep0 maxpacket: 32 [ 415.440176][ T5705] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 415.445108][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.528178][ T5705] usb 1-1: config 0 descriptor?? [ 415.900808][ T5705] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 416.717741][ T5705] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 416.759243][ T5705] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 416.759483][ T5705] usb 1-1: media controller created [ 417.418343][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 418.923514][ T8856] input: syz1 as /devices/virtual/input/input39 [ 419.298918][ T5705] az6027: usb out operation failed. (-71) [ 419.323388][ T5705] az6027: usb out operation failed. (-71) [ 419.331251][ T5705] stb0899_attach: Driver disabled by Kconfig [ 419.337452][ T5705] az6027: no front-end attached [ 419.337452][ T5705] [ 419.347190][ T5705] az6027: usb out operation failed. (-71) [ 419.354001][ T5705] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 419.386301][ T5705] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input40 [ 419.418979][ T5705] dvb-usb: schedule remote query interval to 400 msecs. [ 419.426009][ T5705] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 419.443530][ T5705] usb 1-1: USB disconnect, device number 10 [ 419.669839][ T31] audit: type=1400 audit(1788826152.609:554): avc: denied { connect } for pid=8862 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 420.967489][ T5705] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 421.201002][ T5721] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 421.357728][ T5721] usb 3-1: Using ep0 maxpacket: 32 [ 421.363449][ T5721] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 421.374123][ T5721] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.374158][ T5721] usb 3-1: config 0 has no interfaces? [ 421.395278][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.395322][ T5721] usb 3-1: Product: syz [ 421.395349][ T5721] usb 3-1: Manufacturer: syz [ 421.395367][ T5721] usb 3-1: SerialNumber: syz [ 421.421790][ T5721] usb 3-1: config 0 descriptor?? [ 421.644667][ T5721] usb 3-1: USB disconnect, device number 9 [ 424.540207][ T8901] input: syz1 as /devices/virtual/input/input41 [ 425.051131][ T5721] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 425.211233][ T31] audit: type=1400 audit(1788826158.159:555): avc: denied { append } for pid=8903 comm="syz.7.633" name="uprobe_events" dev="tracefs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 425.231041][ T5721] usb 7-1: device descriptor read/64, error -71 [ 425.499101][ T31] audit: type=1400 audit(1788826158.439:556): avc: denied { create } for pid=8905 comm="syz.2.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 425.511032][ T5721] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 425.641025][ T5721] usb 7-1: device descriptor read/64, error -71 [ 425.751239][ T5721] usb usb7-port1: attempt power cycle [ 425.798610][ T8910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8910 comm=syz.2.634 [ 425.799719][ T8910] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.634'. [ 425.843071][ T31] audit: type=1400 audit(1788826158.759:557): avc: denied { read write } for pid=8905 comm="syz.2.634" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 425.843256][ T31] audit: type=1400 audit(1788826158.759:558): avc: denied { open } for pid=8905 comm="syz.2.634" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 425.991937][ T31] audit: type=1400 audit(1788826158.909:559): avc: denied { remount } for pid=8907 comm="syz.7.635" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 426.027443][ T31] audit: type=1804 audit(1788826158.969:560): pid=8880 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.0.627" name="ima_policy_written" res=0 errno=-17 [ 426.027493][ T31] audit: type=1807 audit(1788826158.969:561): UNKNOWN=m res=0 [ 426.027522][ T31] audit: type=1802 audit(1788826158.969:562): pid=8880 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.0.627" res=0 errno=0 [ 426.091079][ T5721] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 426.119990][ T5721] usb 7-1: device descriptor read/8, error -71 [ 426.319424][ T31] audit: type=1400 audit(1788826159.239:563): avc: denied { bind } for pid=8907 comm="syz.7.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 426.319609][ T31] audit: type=1400 audit(1788826159.239:564): avc: denied { node_bind } for pid=8907 comm="syz.7.635" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 426.371050][ T5721] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 426.449111][ T5721] usb 7-1: device descriptor read/8, error -71 [ 426.455658][ T5610] Bluetooth: hci3: command 0x0405 tx timeout [ 426.554845][ T5721] usb usb7-port1: unable to enumerate USB device [ 426.562679][ T8878] ima: policy update failed [ 427.476698][ T5712] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 427.786156][ T5712] usb 8-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 427.867340][ T5712] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.876207][ T5712] usb 8-1: Product: syz [ 427.881806][ T5712] usb 8-1: Manufacturer: syz [ 427.887548][ T5712] usb 8-1: SerialNumber: syz [ 428.266112][ T5712] kalmia 8-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 428.278907][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.7.639'. [ 428.564430][ T8936] block nbd0: server does not support multiple connections per device. [ 428.580116][ T8936] block nbd0: shutting down sockets [ 428.716574][ T5712] kalmia 8-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 428.716806][ T5712] kalmia 8-1:1.0: probe with driver kalmia failed with error -71 [ 428.759094][ T5712] usb 8-1: USB disconnect, device number 2 [ 429.104906][ T8942] input: syz1 as /devices/virtual/input/input42 [ 429.338204][ T8941] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 430.561487][ T8951] jffs2: notice: (8951) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 434.612527][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.612585][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.930707][ T9016] jffs2: notice: (9016) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 440.965170][ T9015] input: syz1 as /devices/virtual/input/input43 [ 441.491396][ T5784] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 441.682853][ T5784] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 441.694305][ T5784] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.694364][ T5784] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 441.694400][ T5784] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 441.694425][ T5784] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.694463][ T5784] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.792762][ T9025] fuse: Invalid rootmode [ 442.301065][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 442.301119][ T31] audit: type=1400 audit(1788826175.219:569): avc: denied { read } for pid=9021 comm="syz.7.658" name="sg0" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 442.319706][ T31] audit: type=1400 audit(1788826175.259:570): avc: denied { ioctl } for pid=9021 comm="syz.7.658" path="/dev/sg0" dev="devtmpfs" ino=975 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 443.850444][ T9043] syz.6.662 (9043): /proc/9043/oom_adj is deprecated, please use /proc/9043/oom_score_adj instead. [ 443.911000][ T31] audit: type=1400 audit(1788826176.789:571): avc: denied { setopt } for pid=9042 comm="syz.6.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 443.911052][ T31] audit: type=1400 audit(1788826176.789:572): avc: denied { listen } for pid=9042 comm="syz.6.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 443.911093][ T31] audit: type=1400 audit(1788826176.789:573): avc: denied { accept } for pid=9042 comm="syz.6.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 443.990322][ T5784] gud 8-1:1.0: USB-1: Failed to add properties (ret=-71) [ 443.990378][ T5784] gud 8-1:1.0: Failed to get connectors (error=-71) [ 443.990405][ T5784] gud 8-1:1.0: probe with driver gud failed with error -71 [ 444.034980][ T5784] usb 8-1: USB disconnect, device number 3 [ 445.230979][ T5712] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 445.275570][ T9055] jffs2: notice: (9055) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 445.500643][ T9060] input: syz1 as /devices/virtual/input/input44 [ 445.532688][ T5712] usb 3-1: Using ep0 maxpacket: 16 [ 445.535389][ T5712] usb 3-1: New USB device found, idVendor=0e41, idProduct=5044, bcdDevice= 0.40 [ 445.548382][ T5712] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.548419][ T5712] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 445.548466][ T5712] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 445.568441][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.568464][ T5712] usb 3-1: Product: syz [ 445.568478][ T5712] usb 3-1: Manufacturer: syz [ 445.568491][ T5712] usb 3-1: SerialNumber: syz [ 447.127007][ T9070] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 447.235023][ T31] audit: type=1400 audit(1788826180.179:574): avc: denied { create } for pid=9074 comm="syz.0.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 447.409637][ T5712] usb 3-1: BAAD GENERIC IO: no channels? [ 448.657681][ T5712] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 448.664286][ T5712] snd_usb_pod 3-1:1.0: Line 6 PODxt found [ 448.664307][ T5712] usb 3-1: selecting invalid altsetting 5 [ 448.664330][ T5712] snd_usb_pod 3-1:1.0: set_interface failed [ 448.664581][ T5712] snd_usb_pod 3-1:1.0: Line 6 PODxt now disconnected [ 448.664725][ T5712] snd_usb_pod 3-1:1.0: probe with driver snd_usb_pod failed with error -22 [ 448.674031][ T5712] snd_usb_pod 3-1:1.1: Line 6 PODxt found [ 448.674051][ T5712] usb 3-1: selecting invalid altsetting 5 [ 448.674066][ T5712] snd_usb_pod 3-1:1.1: set_interface failed [ 448.674217][ T5712] snd_usb_pod 3-1:1.1: Line 6 PODxt now disconnected [ 448.674350][ T5712] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 448.680643][ T5712] usb 3-1: USB disconnect, device number 10 [ 448.719979][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.733371][ T9092] jffs2: notice: (9092) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 450.831088][ T190] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 450.861236][ T5721] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 451.036514][ T190] usb 3-1: Using ep0 maxpacket: 32 [ 451.142796][ T190] usb 3-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=71.fa [ 451.171475][ T5721] usb 7-1: unable to get BOS descriptor or descriptor too short [ 451.173380][ T5721] usb 7-1: not running at top speed; connect to a high speed hub [ 451.173407][ T5721] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 451.174446][ T5721] usb 7-1: config 5 has an invalid interface number: 246 but max is 0 [ 451.174469][ T5721] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 451.174489][ T5721] usb 7-1: config 5 has no interface number 0 [ 451.174522][ T5721] usb 7-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 451.174545][ T5721] usb 7-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 451.174569][ T5721] usb 7-1: config 5 interface 246 has no altsetting 0 [ 451.210468][ T5721] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.210491][ T5721] usb 7-1: Product: syz [ 451.210506][ T5721] usb 7-1: Manufacturer: syz [ 451.210520][ T5721] usb 7-1: SerialNumber: syz [ 451.288590][ T190] usb 3-1: config 9 has an invalid interface number: 27 but max is 0 [ 451.296841][ T190] usb 3-1: config 9 has no interface number 0 [ 451.303491][ T190] usb 3-1: config 9 interface 27 has no altsetting 0 [ 451.341076][ T190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.349810][ T190] usb 3-1: Product: syz [ 451.354547][ T190] usb 3-1: Manufacturer: syz [ 451.359205][ T190] usb 3-1: SerialNumber: syz [ 451.531133][ T9093] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 451.551027][ T31] audit: type=1400 audit(1788826184.489:575): avc: denied { mounton } for pid=9089 comm="syz.6.679" path="/70/debug/tracing/trace_pipe" dev="tracefs" ino=3187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 451.737587][ T9099] input: syz1 as /devices/virtual/input/input45 [ 451.884413][ T190] qmi_wwan 3-1:9.27: bogus CDC Union: master=0, slave=1 [ 451.884631][ T190] qmi_wwan 3-1:9.27: probe with driver qmi_wwan failed with error -22 [ 451.906623][ T190] usb 3-1: USB disconnect, device number 11 [ 453.535336][ T9109] overlayfs: failed to resolve './bus:/': -2 [ 454.088311][ T5721] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 454.097784][ T5721] usb 7-1: USB disconnect, device number 10 [ 454.108434][ T9107] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 454.121987][ T6853] usb 7-1: Failed to submit usb control message: -19 [ 454.122581][ T6853] usb 7-1: unable to send the bmi data to the device: -19 [ 454.122601][ T6853] usb 7-1: unable to get target info from device [ 454.122614][ T6853] usb 7-1: could not get target info (-19) [ 454.122831][ T6853] usb 7-1: could not probe fw (-19) [ 456.944701][ T9125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.981454][ T31] audit: type=1400 audit(1788826189.919:576): avc: denied { getopt } for pid=9135 comm="syz.5.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 459.730364][ T31] audit: type=1400 audit(1788826192.669:577): avc: denied { unmount } for pid=6039 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 460.144853][ T9144] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 460.248468][ T9151] netlink: 60 bytes leftover after parsing attributes in process `syz.5.698'. [ 462.248977][ T9163] jffs2: notice: (9163) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 462.401144][ T5753] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 462.588600][ T5753] usb 6-1: not running at top speed; connect to a high speed hub [ 462.588644][ T5753] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 462.619424][ T5753] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 462.619483][ T5753] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.619514][ T5753] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 462.619558][ T5753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.678516][ T5753] uvcvideo 6-1:1.0: Found UVC 1.00 device (046d:0825) [ 462.810610][ T9169] capability: warning: `syz.7.705' uses 32-bit capabilities (legacy support in use) [ 462.864251][ T9169] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 462.942508][ T9169] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 462.942548][ T9169] overlayfs: missing 'lowerdir' [ 462.977679][ T31] audit: type=1400 audit(1788826195.919:578): avc: denied { setopt } for pid=9157 comm="syz.5.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 463.024404][ T31] audit: type=1400 audit(1788826195.969:579): avc: denied { ioctl } for pid=9157 comm="syz.5.702" path="socket:[21665]" dev="sockfs" ino=21665 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 463.061792][ T5753] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC error code control 2 on unit 1: -71 (exp. 1). [ 464.056200][ T5753] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 464.065879][ T5753] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 464.185711][ T5721] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 464.189094][ T5753] usb 6-1: USB disconnect, device number 8 [ 464.351671][ T5721] usb 8-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 464.363852][ T5721] usb 8-1: config 1 has an invalid interface number: 9 but max is 0 [ 464.363886][ T5721] usb 8-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 464.363908][ T5721] usb 8-1: config 1 has no interface number 0 [ 464.363938][ T5721] usb 8-1: too many endpoints for config 1 interface 9 altsetting 83: 112, using maximum allowed: 30 [ 464.363974][ T5721] usb 8-1: config 1 interface 9 altsetting 83 has 0 endpoint descriptors, different from the interface descriptor's value: 112 [ 464.364003][ T5721] usb 8-1: config 1 interface 9 has no altsetting 0 [ 464.364035][ T5721] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.658753][ T5721] usb 8-1: string descriptor 0 read error: -71 [ 464.682556][ T5721] usb 8-1: USB disconnect, device number 4 [ 464.735106][ T9178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.707'. [ 464.735220][ T9178] netlink: 'syz.2.707': attribute type 7 has an invalid length. [ 464.735255][ T9178] netlink: 'syz.2.707': attribute type 8 has an invalid length. [ 464.735273][ T9178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.707'. [ 464.788483][ T9178] gretap0: entered promiscuous mode [ 464.834835][ T9179] netlink: 'syz.2.707': attribute type 1 has an invalid length. [ 464.834874][ T9179] netlink: 224 bytes leftover after parsing attributes in process `syz.2.707'. [ 465.000587][ T9178] gretap0: left promiscuous mode [ 465.060483][ T9185] sg_write: data in/out 548864/136 bytes for SCSI command 0x0-- guessing data in; [ 465.060483][ T9185] program syz.0.708 not setting count and/or reply_len properly [ 466.150290][ T9184] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 467.417017][ T31] audit: type=1400 audit(1788826200.359:580): avc: denied { read } for pid=5267 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 467.465028][ T9197] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 467.582532][ T9197] netlink: 'syz.5.712': attribute type 13 has an invalid length. [ 468.573530][ T9210] jffs2: notice: (9210) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 475.043554][ T9233] fuse: Unknown parameter 'use00000000000000000000' [ 475.111032][ T5721] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 475.275595][ T5721] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 475.287418][ T5721] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 475.287456][ T5721] usb 1-1: config 0 has no interface number 0 [ 475.287504][ T5721] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 475.324019][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.324055][ T5721] usb 1-1: Product: syz [ 475.324084][ T5721] usb 1-1: Manufacturer: syz [ 475.324101][ T5721] usb 1-1: SerialNumber: syz [ 475.349411][ T5721] usb 1-1: config 0 descriptor?? [ 475.374042][ T5721] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 475.942743][ T31] audit: type=1326 audit(1788826208.879:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.0.713" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe42e19e159 code=0x0 [ 476.063439][ T9236] FAULT_INJECTION: forcing a failure. [ 476.063439][ T9236] name fail_futex, interval 1, probability 0, space 0, times 1 [ 476.063481][ T9236] CPU: 0 UID: 0 PID: 9236 Comm: syz.7.723 Not tainted syzkaller #0 PREEMPT(full) [ 476.063504][ T9236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 476.063515][ T9236] Call Trace: [ 476.063522][ T9236] [ 476.063530][ T9236] dump_stack_lvl+0x100/0x190 [ 476.063563][ T9236] should_fail_ex.cold+0x5/0xa [ 476.063590][ T9236] get_futex_key+0x293/0x14f0 [ 476.063618][ T9236] ? __pfx_get_futex_key+0x10/0x10 [ 476.063640][ T9236] ? __mutex_unlock_slowpath+0x35d/0x930 [ 476.063669][ T9236] futex_wake+0xf4/0x5e0 [ 476.063699][ T9236] ? __pfx_futex_wake+0x10/0x10 [ 476.063728][ T9236] ? lock_acquire+0x1d1/0x380 [ 476.063746][ T9236] ? detach_task_ctx_data+0x83/0x490 [ 476.063778][ T9236] do_futex+0x2b2/0x440 [ 476.063803][ T9236] ? __pfx_do_futex+0x10/0x10 [ 476.063824][ T9236] ? __might_fault+0xc5/0x140 [ 476.063856][ T9236] mm_exit_exec_release+0x256/0x2f0 [ 476.063876][ T9236] do_exit+0x707/0x2ae0 [ 476.063902][ T9236] ? __pfx_do_exit+0x10/0x10 [ 476.063925][ T9236] ? do_raw_spin_lock+0x128/0x260 [ 476.063947][ T9236] ? find_held_lock+0x2b/0x80 [ 476.063972][ T9236] ? get_signal+0x7e0/0x21e0 [ 476.063994][ T9236] do_group_exit+0xd5/0x2a0 [ 476.064019][ T9236] get_signal+0x1ec7/0x21e0 [ 476.064048][ T9236] ? __pfx_get_signal+0x10/0x10 [ 476.064075][ T9236] ? do_futex+0x190/0x440 [ 476.064101][ T9236] arch_do_signal_or_restart+0x91/0x7e0 [ 476.064129][ T9236] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 476.064167][ T9236] ? __x64_sys_openat+0x12d/0x210 [ 476.064200][ T9236] exit_to_user_mode_loop+0x139/0x700 [ 476.064221][ T9236] ? rcu_is_watching+0x13/0xc0 [ 476.064247][ T9236] do_syscall_64+0x661/0x790 [ 476.064273][ T9236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.064292][ T9236] RIP: 0033:0x7f2381b9e159 [ 476.064309][ T9236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.064326][ T9236] RSP: 002b:00007f2382a1b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 476.064345][ T9236] RAX: fffffffffffffe00 RBX: 00007f2381e26098 RCX: 00007f2381b9e159 [ 476.064358][ T9236] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2381e26098 [ 476.064370][ T9236] RBP: 00007f2381e26090 R08: 0000000000000000 R09: 0000000000000000 [ 476.064380][ T9236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.064392][ T9236] R13: 00007f2381e26128 R14: 00007ffcecf15360 R15: 00007ffcecf15448 [ 476.064418][ T9236] [ 476.436854][ T9246] jffs2: notice: (9246) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 476.494522][ T9244] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 476.727528][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 476.735035][ T5705] usb 1-1: USB disconnect, device number 11 [ 476.747222][ T5705] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 478.058039][ T9263] sg_write: data in/out 548864/136 bytes for SCSI command 0x0-- guessing data in; [ 478.058039][ T9263] program syz.5.721 not setting count and/or reply_len properly [ 480.419034][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.728'. [ 480.985155][ T31] audit: type=1400 audit(1788826213.929:582): avc: denied { execute } for pid=9282 comm="syz.5.731" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 481.048103][ T9270] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 481.059223][ T9270] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 481.079077][ T9270] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 481.079105][ T9270] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 481.246952][ T31] audit: type=1400 audit(1788826214.189:583): avc: denied { ioctl } for pid=9282 comm="syz.5.731" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 484.891857][ T9301] jffs2: notice: (9301) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 485.062372][ T31] audit: type=1400 audit(1788826218.009:584): avc: denied { shutdown } for pid=9305 comm="syz.5.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 485.091107][ T31] audit: type=1400 audit(1788826218.029:585): avc: denied { getopt } for pid=9305 comm="syz.5.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 485.091322][ T9307] sctp: [Deprecated]: syz.5.739 (pid 9307) Use of int in max_burst socket option deprecated. [ 485.091322][ T9307] Use struct sctp_assoc_value instead [ 485.092557][ T9307] netlink: 24 bytes leftover after parsing attributes in process `syz.5.739'. [ 485.092575][ T9307] netlink: 24 bytes leftover after parsing attributes in process `syz.5.739'. [ 485.275806][ T9312] CIFS: Attempting to mount //127.0.0.1/share [ 485.304854][ T9312] CIFS: VFS: Error connecting to socket. Aborting operation. [ 485.327087][ T9312] CIFS: VFS: cifs_mount failed w/return code = -101 [ 485.364844][ T9315] fuse: Unknown parameter 'user_id00000000000000000000' [ 488.287820][ T31] audit: type=1400 audit(1788826221.229:586): avc: denied { setopt } for pid=9344 comm="syz.6.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 488.422121][ T9350] jffs2: notice: (9350) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 488.946221][ T9354] sctp: [Deprecated]: syz.5.752 (pid 9354) Use of int in max_burst socket option deprecated. [ 488.946221][ T9354] Use struct sctp_assoc_value instead [ 488.947471][ T31] audit: type=1400 audit(1788826221.459:587): avc: denied { write } for pid=9344 comm="syz.6.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 488.947515][ T31] audit: type=1400 audit(1788826221.459:588): avc: denied { connect } for pid=9344 comm="syz.6.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 489.221478][ T9348] netlink: 24 bytes leftover after parsing attributes in process `syz.5.752'. [ 489.221509][ T9348] netlink: 24 bytes leftover after parsing attributes in process `syz.5.752'. [ 490.199105][ T9365] fuse: Bad value for 'fd' [ 490.733335][ T31] audit: type=1400 audit(1788826223.679:589): avc: denied { bind } for pid=9372 comm="syz.7.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 490.812145][ T31] audit: type=1400 audit(1788826223.759:590): avc: denied { setopt } for pid=9372 comm="syz.7.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 491.138441][ T31] audit: type=1400 audit(1788826224.079:591): avc: denied { write } for pid=9370 comm="syz.2.758" name="subsystems" dev="configfs" ino=2689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 491.168104][ T31] audit: type=1400 audit(1788826224.109:592): avc: denied { write } for pid=9370 comm="syz.2.758" name="ports" dev="configfs" ino=2690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 491.250805][ T31] audit: type=1400 audit(1788826224.189:593): avc: denied { read } for pid=9370 comm="syz.2.758" name="addr_trtype" dev="configfs" ino=22048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 491.279691][ T31] audit: type=1400 audit(1788826224.219:594): avc: denied { write } for pid=9370 comm="syz.2.758" name="subsystems" dev="configfs" ino=21409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 491.304122][ T31] audit: type=1400 audit(1788826224.219:595): avc: denied { write } for pid=9370 comm="syz.2.758" name="subsystems" dev="configfs" ino=21409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 496.055636][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.131100][ T5784] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 496.352603][ T5784] usb 8-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 496.381575][ T5784] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.544492][ T31] audit: type=1400 audit(1788826229.489:596): avc: denied { listen } for pid=9393 comm="syz.2.765" lport=54121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 496.583438][ T31] audit: type=1400 audit(1788826229.529:597): avc: denied { accept } for pid=9393 comm="syz.2.765" lport=54121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 497.096704][ T9406] sctp: [Deprecated]: syz.2.767 (pid 9406) Use of int in max_burst socket option deprecated. [ 497.096704][ T9406] Use struct sctp_assoc_value instead [ 497.098377][ T9406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.767'. [ 497.098416][ T9406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.767'. [ 497.387948][ C0] ================================================================== [ 497.387975][ C0] BUG: KASAN: slab-use-after-free in pn533_acr122_is_rx_frame_valid+0x132/0x150 [ 497.388039][ C0] Read of size 1 at addr ffff88807cf523d5 by task syz-executor/6901 [ 497.388068][ C0] [ 497.388082][ C0] CPU: 0 UID: 0 PID: 6901 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 497.388119][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 497.388136][ C0] Call Trace: [ 497.388145][ C0] [ 497.388156][ C0] dump_stack_lvl+0x100/0x190 [ 497.388203][ C0] print_report+0x13d/0x4b0 [ 497.388251][ C0] ? __virt_addr_valid+0x239/0x430 [ 497.388283][ C0] ? pn533_acr122_is_rx_frame_valid+0x132/0x150 [ 497.388335][ C0] kasan_report+0xdf/0x1c0 [ 497.388374][ C0] ? pn533_acr122_is_rx_frame_valid+0x132/0x150 [ 497.388428][ C0] pn533_acr122_is_rx_frame_valid+0x132/0x150 [ 497.388480][ C0] pn533_recv_frame+0x1b7/0x6d0 [ 497.388521][ C0] ? pn533_recv_response+0x7c/0x200 [ 497.388569][ C0] __usb_hcd_giveback_urb+0x38e/0x610 [ 497.388616][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 497.388671][ C0] dummy_timer+0xdb2/0x3700 [ 497.388729][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 497.388769][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 497.388816][ C0] ? mark_held_locks+0x40/0x70 [ 497.388847][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 497.388882][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 497.388925][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 497.388973][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 497.389020][ C0] handle_softirqs+0x1e6/0x9d0 [ 497.389055][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 497.389086][ C0] ? _raw_spin_unlock+0x28/0x50 [ 497.389117][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 497.389165][ C0] __irq_exit_rcu+0x16a/0x210 [ 497.389194][ C0] irq_exit_rcu+0x9/0x30 [ 497.389224][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 497.389260][ C0] [ 497.389270][ C0] [ 497.389280][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 497.389312][ C0] RIP: 0010:stack_access_ok+0x1d/0x1d0 [ 497.389351][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 48 b8 00 00 00 00 00 fc ff df 41 55 41 54 49 89 d4 48 89 fa 55 48 c1 ea 03 48 89 f5 53 <48> 89 fb 48 83 ec 08 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 3f 01 00 [ 497.389384][ C0] RSP: 0018:ffffc9000205f2d8 EFLAGS: 00000a02 [ 497.389411][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff91f990dc [ 497.389432][ C0] RDX: 1ffff9200040be6e RSI: ffffc9000205fda0 RDI: ffffc9000205f370 [ 497.389454][ C0] RBP: ffffc9000205fda0 R08: 0000000000000001 R09: 0000000000000007 [ 497.389474][ C0] R10: 0000000000000200 R11: 0000000000019d4e R12: 0000000000000008 [ 497.389494][ C0] R13: ffffc9000205f370 R14: ffffc9000205fdd0 R15: ffffc9000205f3a4 [ 497.389528][ C0] unwind_next_frame+0x1551/0x2090 [ 497.389569][ C0] ? iput.part.0+0x989/0x1050 [ 497.389617][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 497.389675][ C0] arch_stack_walk+0x94/0xf0 [ 497.389717][ C0] ? iput+0x35/0x40 [ 497.389761][ C0] stack_trace_save+0x8e/0xc0 [ 497.389808][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 497.389857][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 497.389888][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 497.389922][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 497.389960][ C0] save_stack+0x162/0x1e0 [ 497.389997][ C0] ? __pfx_save_stack+0x10/0x10 [ 497.390034][ C0] ? free_unref_folios+0xa4a/0x1790 [ 497.390080][ C0] ? folios_put_refs+0x585/0xaa0 [ 497.390120][ C0] ? shmem_undo_range+0x5e5/0x1570 [ 497.390162][ C0] ? shmem_evict_inode+0x3b1/0xca0 [ 497.390206][ C0] ? evict+0x3c2/0xad0 [ 497.390246][ C0] ? iput.part.0+0x989/0x1050 [ 497.390294][ C0] ? page_ext_put+0x3e/0xd0 [ 497.390333][ C0] __reset_page_owner+0x84/0x190 [ 497.390373][ C0] free_unref_folios+0xa4a/0x1790 [ 497.390423][ C0] ? folios_put_refs+0x51d/0xaa0 [ 497.390462][ C0] ? folios_put_refs+0x51d/0xaa0 [ 497.390500][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 497.390537][ C0] folios_put_refs+0x585/0xaa0 [ 497.390579][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 497.390622][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 497.390682][ C0] shmem_undo_range+0x5e5/0x1570 [ 497.390734][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 497.390793][ C0] ? kernel_text_address+0x8d/0x100 [ 497.390839][ C0] ? __kernel_text_address+0xd/0x30 [ 497.390882][ C0] ? unwind_get_return_address+0x59/0xa0 [ 497.390923][ C0] ? arch_stack_walk+0xa6/0xf0 [ 497.390970][ C0] ? kasan_save_stack+0x3f/0x50 [ 497.391011][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 497.391060][ C0] shmem_evict_inode+0x3b1/0xca0 [ 497.391107][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 497.391149][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 497.391186][ C0] ? lock_acquire+0x1d1/0x380 [ 497.391221][ C0] ? find_held_lock+0x2b/0x80 [ 497.391262][ C0] ? evict+0x37e/0xad0 [ 497.391306][ C0] ? evict+0x37e/0xad0 [ 497.391352][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 497.391399][ C0] evict+0x3c2/0xad0 [ 497.391444][ C0] ? __pfx_evict+0x10/0x10 [ 497.391488][ C0] ? lock_acquire+0x1d1/0x380 [ 497.391523][ C0] ? iput.part.0+0x981/0x1050 [ 497.391573][ C0] iput.part.0+0x989/0x1050 [ 497.391623][ C0] iput+0x35/0x40 [ 497.391674][ C0] filename_unlinkat+0x466/0x730 [ 497.391718][ C0] ? __pfx_filename_unlinkat+0x10/0x10 [ 497.391767][ C0] ? do_getname+0x191/0x390 [ 497.391813][ C0] __x64_sys_unlink+0x46/0x70 [ 497.391853][ C0] do_syscall_64+0x123/0x790 [ 497.391893][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.391926][ C0] RIP: 0033:0x7fdc0519d247 [ 497.391952][ C0] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 497.391984][ C0] RSP: 002b:00007fff9c1684c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 497.392015][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdc0519d247 [ 497.392038][ C0] RDX: 00007fff9c1684f0 RSI: 00007fff9c168580 RDI: 00007fff9c168580 [ 497.392060][ C0] RBP: 00007fff9c168580 R08: 00007fff9c169580 R09: 00000000ffffffff [ 497.392082][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff9c169610 [ 497.392102][ C0] R13: 00007fdc05234474 R14: 0000000000078bbe R15: 00007fff9c169650 [ 497.392132][ C0] [ 497.392142][ C0] [ 497.392148][ C0] Allocated by task 4972: [ 497.392163][ C0] kasan_save_stack+0x30/0x50 [ 497.392196][ C0] kasan_save_track+0x14/0x30 [ 497.392230][ C0] __kasan_kmalloc+0xaa/0xb0 [ 497.392261][ C0] __kmalloc_noprof+0x32f/0x840 [ 497.392289][ C0] tomoyo_realpath_from_path+0xb6/0x690 [ 497.392323][ C0] tomoyo_check_open_permission+0x2af/0x3c0 [ 497.392370][ C0] tomoyo_file_open+0x6b/0x90 [ 497.392406][ C0] security_file_open+0xb5/0x1e0 [ 497.392437][ C0] do_dentry_open+0x588/0x14d0 [ 497.392465][ C0] vfs_open+0x82/0x3f0 [ 497.392500][ C0] path_openat+0x19fa/0x2440 [ 497.392534][ C0] do_file_open+0x20e/0x430 [ 497.392569][ C0] do_sys_openat2+0x10f/0x1e0 [ 497.392608][ C0] __x64_sys_openat+0x12d/0x210 [ 497.392652][ C0] do_syscall_64+0x123/0x790 [ 497.392685][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.392713][ C0] [ 497.392720][ C0] Freed by task 4972: [ 497.392734][ C0] kasan_save_stack+0x30/0x50 [ 497.392764][ C0] kasan_save_track+0x14/0x30 [ 497.392796][ C0] kasan_save_free_info+0x3b/0x70 [ 497.392832][ C0] __kasan_slab_free+0x5f/0x80 [ 497.392869][ C0] kfree+0x22b/0x6d0 [ 497.392903][ C0] tomoyo_realpath_from_path+0x19c/0x690 [ 497.392931][ C0] tomoyo_check_open_permission+0x2af/0x3c0 [ 497.392974][ C0] tomoyo_file_open+0x6b/0x90 [ 497.393005][ C0] security_file_open+0xb5/0x1e0 [ 497.393033][ C0] do_dentry_open+0x588/0x14d0 [ 497.393058][ C0] vfs_open+0x82/0x3f0 [ 497.393094][ C0] path_openat+0x19fa/0x2440 [ 497.393128][ C0] do_file_open+0x20e/0x430 [ 497.393163][ C0] do_sys_openat2+0x10f/0x1e0 [ 497.393211][ C0] __x64_sys_openat+0x12d/0x210 [ 497.393246][ C0] do_syscall_64+0x123/0x790 [ 497.393280][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.393311][ C0] [ 497.393318][ C0] The buggy address belongs to the object at ffff88807cf52000 [ 497.393318][ C0] which belongs to the cache kmalloc-4k of size 4096 [ 497.393343][ C0] The buggy address is located 981 bytes inside of [ 497.393343][ C0] freed 4096-byte region [ffff88807cf52000, ffff88807cf53000) [ 497.393376][ C0] [ 497.393383][ C0] The buggy address belongs to the physical page: [ 497.393394][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cf50 [ 497.393418][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 497.393441][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 497.393467][ C0] page_type: f5(slab) [ 497.393500][ C0] raw: 00fff00000000040 ffff88801c034140 dead000000000100 dead000000000122 [ 497.393530][ C0] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 497.393559][ C0] head: 00fff00000000040 ffff88801c034140 dead000000000100 dead000000000122 [ 497.393583][ C0] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 497.393612][ C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 497.393644][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 497.393662][ C0] page dumped because: kasan: bad access detected [ 497.393679][ C0] page_owner tracks the page as allocated [ 497.393690][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4973, tgid 4973 (udevadm), ts 22516608184 [ 497.393739][ C0] post_alloc_hook+0xfd/0x120 [ 497.393782][ C0] get_page_from_freelist+0x110d/0x35d0 [ 497.393827][ C0] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 497.393876][ C0] new_slab+0xa9/0x6e0 [ 497.393914][ C0] refill_objects+0xe3/0x410 [ 497.393960][ C0] __pcs_replace_empty_main+0x35e/0x650 [ 497.394001][ C0] __kmalloc_noprof+0x67c/0x840 [ 497.394029][ C0] tomoyo_realpath_from_path+0xb6/0x690 [ 497.394060][ C0] tomoyo_path_perm+0x276/0x460 [ 497.394099][ C0] security_inode_getattr+0x116/0x280 [ 497.394126][ C0] vfs_statx+0x11f/0x3f0 [ 497.394158][ C0] vfs_fstatat+0x77/0xe0 [ 497.394194][ C0] __do_sys_newfstatat+0x9d/0x120 [ 497.394229][ C0] do_syscall_64+0x123/0x790 [ 497.394264][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.394293][ C0] page last free pid 1 tgid 1 ts 18731441900 stack trace: [ 497.394313][ C0] free_pages_prepare+0x586/0xe00 [ 497.394354][ C0] __free_contig_range_common+0x14f/0x250 [ 497.394397][ C0] destroy_args+0xa8/0x7a0 [ 497.394432][ C0] debug_vm_pgtable+0x1d69/0x3490 [ 497.394468][ C0] do_one_initcall+0x11c/0x6f0 [ 497.394497][ C0] kernel_init_freeable+0x6ea/0x7b0 [ 497.394531][ C0] kernel_init+0x21/0x1e0 [ 497.394574][ C0] ret_from_fork+0x730/0xd60 [ 497.394604][ C0] ret_from_fork_asm+0x1a/0x30 [ 497.394641][ C0] [ 497.394647][ C0] Memory state around the buggy address: [ 497.394667][ C0] ffff88807cf52280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 497.394691][ C0] ffff88807cf52300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 497.394713][ C0] >ffff88807cf52380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 497.394730][ C0] ^ [ 497.394746][ C0] ffff88807cf52400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 497.394767][ C0] ffff88807cf52480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 497.394784][ C0] ================================================================== [ 497.394802][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 498.524707][ C0] CPU: 0 UID: 0 PID: 6901 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 498.534158][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 498.544203][ C0] Call Trace: [ 498.547470][ C0] [ 498.550300][ C0] dump_stack_lvl+0x100/0x190 [ 498.554988][ C0] vpanic+0x553/0x970 [ 498.558963][ C0] ? __pfx_vpanic+0x10/0x10 [ 498.563457][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 498.568490][ C0] ? pn533_acr122_is_rx_frame_valid+0x132/0x150 [ 498.574744][ C0] panic+0xd1/0xe0 [ 498.578458][ C0] ? __pfx_panic+0x10/0x10 [ 498.582866][ C0] ? end_report.part.0+0x23/0x90 [ 498.587808][ C0] ? rcu_is_watching+0x13/0xc0 [ 498.592574][ C0] ? end_report.part.0+0x23/0x90 [ 498.597523][ C0] check_panic_on_warn.cold+0x19/0x34 [ 498.602888][ C0] end_report.part.0+0x3a/0x90 [ 498.607656][ C0] kasan_report.cold+0xe/0x18 [ 498.612340][ C0] ? pn533_acr122_is_rx_frame_valid+0x132/0x150 [ 498.618595][ C0] pn533_acr122_is_rx_frame_valid+0x132/0x150 [ 498.624675][ C0] pn533_recv_frame+0x1b7/0x6d0 [ 498.629536][ C0] ? pn533_recv_response+0x7c/0x200 [ 498.634743][ C0] __usb_hcd_giveback_urb+0x38e/0x610 [ 498.640120][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 498.645323][ C0] dummy_timer+0xdb2/0x3700 [ 498.649841][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 498.655645][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 498.660590][ C0] ? mark_held_locks+0x40/0x70 [ 498.665347][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 498.671147][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 498.676088][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 498.681292][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 498.686407][ C0] handle_softirqs+0x1e6/0x9d0 [ 498.691168][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 498.696445][ C0] ? _raw_spin_unlock+0x28/0x50 [ 498.701289][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 498.706928][ C0] __irq_exit_rcu+0x16a/0x210 [ 498.711599][ C0] irq_exit_rcu+0x9/0x30 [ 498.715840][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 498.721470][ C0] [ 498.724390][ C0] [ 498.727307][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 498.733285][ C0] RIP: 0010:stack_access_ok+0x1d/0x1d0 [ 498.738763][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 48 b8 00 00 00 00 00 fc ff df 41 55 41 54 49 89 d4 48 89 fa 55 48 c1 ea 03 48 89 f5 53 <48> 89 fb 48 83 ec 08 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 3f 01 00 [ 498.758373][ C0] RSP: 0018:ffffc9000205f2d8 EFLAGS: 00000a02 [ 498.764448][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff91f990dc [ 498.772418][ C0] RDX: 1ffff9200040be6e RSI: ffffc9000205fda0 RDI: ffffc9000205f370 [ 498.780383][ C0] RBP: ffffc9000205fda0 R08: 0000000000000001 R09: 0000000000000007 [ 498.788348][ C0] R10: 0000000000000200 R11: 0000000000019d4e R12: 0000000000000008 [ 498.796314][ C0] R13: ffffc9000205f370 R14: ffffc9000205fdd0 R15: ffffc9000205f3a4 [ 498.804292][ C0] unwind_next_frame+0x1551/0x2090 [ 498.809418][ C0] ? iput.part.0+0x989/0x1050 [ 498.814116][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 498.820294][ C0] arch_stack_walk+0x94/0xf0 [ 498.824905][ C0] ? iput+0x35/0x40 [ 498.828725][ C0] stack_trace_save+0x8e/0xc0 [ 498.833410][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 498.838792][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 498.843725][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 498.849530][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 498.854731][ C0] save_stack+0x162/0x1e0 [ 498.859061][ C0] ? __pfx_save_stack+0x10/0x10 [ 498.863913][ C0] ? free_unref_folios+0xa4a/0x1790 [ 498.869117][ C0] ? folios_put_refs+0x585/0xaa0 [ 498.874057][ C0] ? shmem_undo_range+0x5e5/0x1570 [ 498.879174][ C0] ? shmem_evict_inode+0x3b1/0xca0 [ 498.884292][ C0] ? evict+0x3c2/0xad0 [ 498.888370][ C0] ? iput.part.0+0x989/0x1050 [ 498.893058][ C0] ? page_ext_put+0x3e/0xd0 [ 498.897562][ C0] __reset_page_owner+0x84/0x190 [ 498.902502][ C0] free_unref_folios+0xa4a/0x1790 [ 498.907536][ C0] ? folios_put_refs+0x51d/0xaa0 [ 498.912484][ C0] ? folios_put_refs+0x51d/0xaa0 [ 498.917423][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 498.923230][ C0] folios_put_refs+0x585/0xaa0 [ 498.928005][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 498.933298][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 498.939638][ C0] shmem_undo_range+0x5e5/0x1570 [ 498.944586][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 498.949974][ C0] ? kernel_text_address+0x8d/0x100 [ 498.955185][ C0] ? __kernel_text_address+0xd/0x30 [ 498.960391][ C0] ? unwind_get_return_address+0x59/0xa0 [ 498.966028][ C0] ? arch_stack_walk+0xa6/0xf0 [ 498.970801][ C0] ? kasan_save_stack+0x3f/0x50 [ 498.975648][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 498.981032][ C0] shmem_evict_inode+0x3b1/0xca0 [ 498.985975][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 498.991442][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 498.997507][ C0] ? lock_acquire+0x1d1/0x380 [ 499.002178][ C0] ? find_held_lock+0x2b/0x80 [ 499.006857][ C0] ? evict+0x37e/0xad0 [ 499.010929][ C0] ? evict+0x37e/0xad0 [ 499.015004][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 499.020466][ C0] evict+0x3c2/0xad0 [ 499.024368][ C0] ? __pfx_evict+0x10/0x10 [ 499.028790][ C0] ? lock_acquire+0x1d1/0x380 [ 499.033471][ C0] ? iput.part.0+0x981/0x1050 [ 499.038156][ C0] iput.part.0+0x989/0x1050 [ 499.042667][ C0] iput+0x35/0x40 [ 499.046305][ C0] filename_unlinkat+0x466/0x730 [ 499.051245][ C0] ? __pfx_filename_unlinkat+0x10/0x10 [ 499.056708][ C0] ? do_getname+0x191/0x390 [ 499.061214][ C0] __x64_sys_unlink+0x46/0x70 [ 499.065892][ C0] do_syscall_64+0x123/0x790 [ 499.070482][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.076370][ C0] RIP: 0033:0x7fdc0519d247 [ 499.080774][ C0] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 499.100379][ C0] RSP: 002b:00007fff9c1684c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 499.108811][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdc0519d247 [ 499.116785][ C0] RDX: 00007fff9c1684f0 RSI: 00007fff9c168580 RDI: 00007fff9c168580 [ 499.124754][ C0] RBP: 00007fff9c168580 R08: 00007fff9c169580 R09: 00000000ffffffff [ 499.132719][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff9c169610 [ 499.140685][ C0] R13: 00007fdc05234474 R14: 0000000000078bbe R15: 00007fff9c169650 [ 499.148654][ C0] [ 499.151869][ C0] Kernel Offset: disabled [ 499.156180][ C0] Rebooting in 86400 seconds..