last executing test programs: 13m13.05895668s ago: executing program 32 (id=11): r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fdatasync(r1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa}}, 0x0, 0x0, 0x12, 0x0, "7c44c885d2967be8b3384b185e496ab45b9c27e7e102e079ef166077e2b21ae9eb363bb9076bc8a5ad0ff3997a83e5e008df627dafbbc113ba22165c31fee8561df31f18c9c9082d54db5b99396e7dba"}, 0xd8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) 13m11.848862285s ago: executing program 33 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 13m7.005073217s ago: executing program 34 (id=22): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32, @ANYRES64=r0, @ANYRES64, @ANYBLOB="01"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x200004d0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) getpid() syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x309, 0xe6, 0xe8, 0xdc, 0x40, 0x5e1, 0x408, 0xa4d6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xc, 0xb, 0x40, 0x9, "", [{{0x9, 0x4, 0x63, 0xe, 0x1, 0xb9, 0x12, 0xd0, 0x1, [], [{{0x9, 0x5, 0x2, 0x4, 0x8, 0x7, 0x10, 0x1}}]}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0a9c8085000000710000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc) read$FUSE(r2, &(0x7f0000008140)={0x2020}, 0x207f) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x10a, 0x0, 0x6}]}) 13m1.036192103s ago: executing program 35 (id=31): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200140) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000100)={0x0, &(0x7f0000000040)="9293385e3200a172acb3b0a68779447914b74e246b4bbd23265e376e73bca16e8879cc51ac97ce5c51b198704be4b7e2257945fda58546a45004ffe3c588526af592be60b8a3f9754634533302f70f7d6f5c50c0fc7ce80bf1465a2b871de2c5f3a262a0b03692dad6b6baedc150f9b89c74dd8f5af62213311b4c57e85467f0a855f9751ca86a3e6cd9c9308b", 0x8d}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={&(0x7f0000000140)="477623a3946e18295de27f92f4449538f8f05879fbbe4a2475", &(0x7f0000000180)=""/2, &(0x7f00000001c0)="036850cef626f59ac10d2ba215d14456700fe42083b155c76bf8b92a4e4d931c3c258beedcb7f30c9a455d24a2ea990d5dee90e57eb698d61c2d36d1bbb441a2786915520ccb2d81efe38fd66be6624ade03c96e22fe53d819448461bb3bf1c3a91fed0a98a945aaf8ecc978760f8ea6e40ad875530047754c71e417c7a91e6b4db28d6c3ae55a4e123304a13fe3b8fa6deedc014f631a8492", &(0x7f0000000280)="0a9d0c61d629d6a03e0be3726f6ea3006ffc94779a149219072f032699e62701a2a242e376abf5643e5c15a8d9a85dc5fed710fb3caee1d5c97827676797", 0x4, r0}, 0x38) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x800) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000300)=0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x800, 0x15}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000480)={r1, 0x84, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, @in6={0xa, 0x4e22, 0xeae, @private1, 0x5c5}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x43}, 0xe95}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f00000004c0)=0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x42b4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45040}, 0x84) recvmsg$unix(r0, &(0x7f00000008c0)={&(0x7f0000000640), 0x6e, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/84, 0x54}, {&(0x7f0000000740)=""/58, 0x3a}], 0x2, &(0x7f00000007c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x10001) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r9, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x70, r11, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x8085) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000ac0)={0x0, 0x6}, &(0x7f0000000b00)=0x8) sendmsg$sock(r5, &(0x7f0000000e00)={&(0x7f0000000b40)=@pptp={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="a23809b6da28e8ca5f0153e11f3631d3cf1f9e6a8949b9a0dc002862bab6f9168450beac7cf1c04a15efb61c09bdc010d9f5a14cf24e470120aa90bd4b426d7667b40d80f321cd8d57d724b5fdeb7c1c42b55b8f8360eb4b1d20f8c8f34e99bce7cc430a8c91345969d84cbd6118c9928113fabc260d02996ed3605f9005fd16f149e96812b97e5eae5d5af09206b05443d96e654efa6e14245e97a76a4cd7cca4c12b93ace073ddb05df65be4392bf435f0dd9d10a837eef864e043fbf3c311160becd8b66b0faf", 0xc8}, {&(0x7f0000000cc0)="2955ef9e1bbaa95915e0bc97478d419cf8a91900389c532d6525192a615f18ff9225acb6bbfe60731e1a81e2f0b221a75121174568f1", 0x36}], 0x2, &(0x7f0000000d40)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xa12a}}, @txtime={{0x18, 0x1, 0x3d, 0xf}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18}}], 0xc0}, 0x24040080) ioctl$XFS_IOC_GET_RESBLKS(r4, 0x80105873, &(0x7f0000000e40)) syz_io_uring_setup(0x344a, &(0x7f0000000e80)={0x0, 0xb1ff, 0x1000, 0x2, 0x3e1, 0x0, r7}, &(0x7f0000000f00), &(0x7f0000000f40), &(0x7f0000000f80)) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000000fc0)={0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) pipe2$watch_queue(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001080), r7) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r12, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0xb0, r13, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0xc4}, 0x4000000) r14 = add_key$fscrypt_v1(&(0x7f0000001200), &(0x7f0000001240)={'fscrypt:', @desc3}, &(0x7f0000001280)={0x0, "18adeb445c2f83cf5212472b9899abfed1f1bc995e6a21624a647fdb4e0ce1c49e559451783edae6607104ae7b80fc6a3e2293c34f22cfdf322cd6d8deb44656", 0x3c}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r14, r5, 0x94) prlimit64(r8, 0xc, &(0x7f0000001300)={0x3, 0x1}, &(0x7f0000001340)) flock(r7, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000001380)={r2, 0x1}, &(0x7f00000013c0)=0x8) r15 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001400), 0x4a0800, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r15, 0x8010500d, &(0x7f0000001440)) ioctl$SCSI_IOCTL_PROBE_HOST(r12, 0x5385, &(0x7f0000001480)={0xf1, ""/241}) 12m45.012893046s ago: executing program 36 (id=55): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) preadv2(r2, &(0x7f0000000c80)=[{&(0x7f0000000080)=""/104, 0x68}, {&(0x7f0000000400)=""/178, 0xb2}, {&(0x7f00000004c0)=""/132, 0x84}, {&(0x7f0000000580)=""/174, 0xae}, {&(0x7f0000000640)=""/185, 0xb9}, {&(0x7f00000007c0)=""/220, 0xdc}, {&(0x7f00000008c0)=""/45, 0x2d}, {&(0x7f0000000ac0)=""/201, 0xc9}, {&(0x7f0000000bc0)=""/192, 0xc0}], 0x9, 0x6, 0x2, 0x2) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000040)={r5, 0x7, 0x6}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0xe}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x4044044) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000007800010402000000000000000700000064"], 0x2c}}, 0x0) 12m35.86785201s ago: executing program 37 (id=59): sendmmsg(0xffffffffffffffff, &(0x7f000000a7c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x20}}], 0x1, 0x800) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) syz_open_dev$vim2m(&(0x7f0000000580), 0x20, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x70d}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/211) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 12m18.280818801s ago: executing program 38 (id=92): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x500141, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x1120006, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000a0a01020000000000000000020000000900010073"], 0x20}}, 0x4000000) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x2}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x804) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) accept4(r3, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) socket(0x1a, 0xc0530f76dbf76697, 0x9) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8880b870dffe) socket$kcm(0x2, 0x200000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffb000/0x4000)=nil) 11m41.448177325s ago: executing program 39 (id=215): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x4004004, &(0x7f0000000180)={0xc9, 0x1, r3, 0x1, 0x0, 0x6, @remote}, 0x14) (fail_nth: 3) 11m15.710404005s ago: executing program 40 (id=365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x52880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x87, 0x2, 0x0, 0x9}, {0x6, 0x40, 0x0, 0x2}]}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x87, 0x2, 0x0, 0x9}, {0x6, 0x40, 0x0, 0x2}]}) 11m5.754900642s ago: executing program 41 (id=407): r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fdatasync(r1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa}}, 0x0, 0x0, 0x12, 0x0, "7c44c885d2967be8b3384b185e496ab45b9c27e7e102e079ef166077e2b21ae9eb363bb9076bc8a5ad0ff3997a83e5e008df627dafbbc113ba22165c31fee8561df31f18c9c9082d54db5b99396e7dba"}, 0xd8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) 10m46.613467638s ago: executing program 42 (id=466): r0 = epoll_create1(0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, 0x0, 0x8, 0x503, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x9b}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x29c}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xbe}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4040001}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3c}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x889}, 0x20040895) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48011}, 0xc0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r7, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000580)={0x4, [0x9, 0x3, 0x10, 0x9]}, 0xc) r9 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000000880)={&(0x7f00000005c0)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)="3d40e01375386d1762f29ec87dfe968ff147298eeaa33b258d23afb3ed4b82829b6a00ebe4", 0x25}], 0x1, &(0x7f00000006c0)=[{0x110, 0x10c, 0x7, "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"}, {0x58, 0x108, 0x2, "2b18ab25e7c49d6b27257db7ec9b5ff485d258ad778b7a65b73f135a25cf2ea88aa6360b0584cf1ee16adf679171eaf31109cef0cd822db969cc80b70492b01f39b0fa72ad9f5735"}, {0x40, 0x113, 0x7, "9c10d3e2d961aafcaab6fcd1dd2e4692935bf5ffa7f434d649150312692302f45af28f6f008b2f5a695ac5a2d07366"}], 0x1a8}, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r6) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r10, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x65a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0xc080) setxattr$security_ima(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), &(0x7f0000000ac0)=@ng={0x4, 0x2, "fe88031b5f0f29936e5134ad1080"}, 0x10, 0xd27d0eb8ea1268c8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000b00)={0x3, 'veth0_to_bond\x00', {0x64}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000b40)={0xc03, 0x1}) open$dir(&(0x7f0000000b80)='./file0\x00', 0x10400, 0x20) r11 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000bc0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000c00)=0x1c, 0x0) sendto$inet6(r11, &(0x7f0000000c40)="344e80ac01ce1bac4857d62ae86dee7d32e0a898968e5f0a", 0x18, 0x20000010, &(0x7f0000000c80)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x100}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r11, 0x84, 0x1e, &(0x7f0000000cc0)=0xc, 0x4) r12 = dup3(r4, r1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r12}, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000dc0)={r5, 0x5, 0x8, "4c54ac17ff1b0ae430bf884b4a663ae630fd507d04b0a5398a5b337246686caecd795672d0fbf188ec6d1b836ca0d349f99524370509a05158d15c4d070502ddae5217a074006d72a672c3f29ebf152d10ba6c025feb9d15c27abf83f85d2d56e84e31f27a2a426b670dacb3bba9c6379949893584fc706ddfdfaec49b73294d27a136a464c14c6a3f4eeb62486fc250a824c6e9c965fda6f55df0e94012fab4d1e6971d34400a9906076fa56bae513f4c4d66f6fc98fa23ac6b60b3b071ff86fdcd527f1bd22f1b5273041d297bfce73e74c2ae445a269fb92a4bf83e201f295db9ca6ea893de1323"}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000f00)) 10m41.24321287s ago: executing program 43 (id=491): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="e800000048000701"], 0xe8}}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000100001042dbd7000eeffffff00000000b6336ce8612828c8d1ceed8fcb9ec344004300"/51, @ANYRES32, @ANYBLOB="82490000ca0107001c0037800b00010067726574617000000c0002800600180001000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc10}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000000ffff0c0007800800124000000005050001000600470005000500024e1bd9ac698cd8220000000900020073797a310000000014000300686173683a69702c706f72742c6970007b"], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211000000505050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) 10m24.353681881s ago: executing program 44 (id=545): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000100001042dbd7000eeffffff00000000b6336ce8612828c8d1ceed8fcb9ec344004300"/51, @ANYRES32, @ANYBLOB="82490000ca0107001c0037800b00010067726574617000000c0002800600180001000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc10}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000000ffff0c0007800800124000000005050001000600470005000500024e1bd9ac698cd8220000000900020073797a310000000014000300686173683a69702c706f72742c6970007b"], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211000000505050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) 10m21.797924643s ago: executing program 45 (id=554): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x6a521}, [@IFLA_LINK={0x8, 0x5, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) 9m21.146291471s ago: executing program 46 (id=876): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 8m22.586951972s ago: executing program 47 (id=1458): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0), 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='loop\n', 0x5) 7m27.225321273s ago: executing program 48 (id=2001): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYRES64=r0], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xb) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) readv(0xffffffffffffffff, &(0x7f0000001980)=[{&(0x7f00000007c0)=""/22, 0x16}], 0x1) 7m2.836761797s ago: executing program 49 (id=2132): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x503, 0x70bd28, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x440b0) 6m32.726028945s ago: executing program 50 (id=2280): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="a00000002100010000000000feffffffffffffff00000000000000000000000000000000000000000000ffff0a010100fffe00004e2200010a00e02000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000005000110000000000000000000000000000000001fc020000000000000000ddbc6ebfc494fddb"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5m43.357376219s ago: executing program 51 (id=2444): keyctl$session_to_parent(0x12) 5m30.779343541s ago: executing program 52 (id=2498): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x403, 0x1, 0x0, {0x0, 0x0, 0x4, 0x0, 0x8301}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x8044) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010400000000ffdbdf", @ANYRES32=r2, @ANYBLOB="3a2205000a010000300012800b00010067656e657665"], 0x50}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) 4m34.509282466s ago: executing program 2 (id=2717): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x1, 0x25dfdbfe, {0xa, 0x10, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8, 0x17, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) pipe(&(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x70) inotify_init() r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$UI_SET_RELBIT(r6, 0x40045566, 0xa) close(r5) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 4m33.338037419s ago: executing program 2 (id=2722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000080003007379"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 4m32.731686315s ago: executing program 2 (id=2725): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) pipe2(&(0x7f0000000040), 0x0) socket(0x10, 0x2, 0x0) setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xb}, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000280)=[{0x30, 0x9, 0xfd, 0x5ae9}, {0x6, 0x40, 0x82, 0x1ffe}]}, 0x10) 4m30.86371866s ago: executing program 2 (id=2730): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x44048084}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000800000000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="6fff08002244471f1400030076657468305f76695e745f776966750008001e00feffffff"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x2) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRESHEX=r2], 0x50}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)}, 0x10) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES16=r3], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl(r4, 0xc0145608, &(0x7f0000000400)="030000000100000001") ioctl(0xffffffffffffffff, 0xc0405613, &(0x7f0000000580)="5a94196aeeca7809c90bca496cc3e5d2dedfff163f3e080098b7c04d9a53dbfd626c745c5e2545a1000000000000000000000000f8ffffff00000000") syz_io_uring_setup(0x3d5d, &(0x7f00000004c0)={0x0, 0xce1d, 0x10826, 0x3, 0x358}, &(0x7f0000000000), 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) listns(&(0x7f00000003c0), 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 4m27.963735029s ago: executing program 2 (id=2744): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLL', 0xe, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r5, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'}) 4m26.23581175s ago: executing program 2 (id=2749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 4m26.031440524s ago: executing program 53 (id=2749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 2m1.128306555s ago: executing program 0 (id=3242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x400, 0xc, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x200}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x4}}]}, 0x74}}, 0x20000000) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r2, 0x406, r2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x8}}]}}]}, 0x48}}, 0x20040084) sendto$packet(r3, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m59.358057965s ago: executing program 0 (id=3245): userfaultfd(0x80001) r0 = syz_ublk_setup_io_uring(0x22, 0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f00000004c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 1m59.256560019s ago: executing program 0 (id=3246): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000002100), 0x800404, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@default_permissions}]}}) 1m59.239922637s ago: executing program 0 (id=3247): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x1) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000000, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x4008090, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0xfe, 0x6, 0xfe, 0x9, 0xfe, 0x9, 0x5, 0x1, 0xfc, 0x0, 0x20, 0xff, 0x0, 0x2}, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@gettaction={0x44, 0x32, 0x31, 0x70bd2b, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xc9}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}]}, 0x44}}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x80000000000003) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) ptrace$ARCH_GET_FS(0x1e, r2, &(0x7f0000000200), 0x1003) 1m58.610000652s ago: executing program 4 (id=3253): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x98, 0x130, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x287, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x4d0d) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600060009000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m58.12384619s ago: executing program 0 (id=3254): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={&(0x7f0000004640)=ANY=[@ANYBLOB], 0x82}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000240)=@ll, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000700)=""/40, 0x28}, {&(0x7f0000000780)=""/55, 0x37}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/203, 0xcb}, {&(0x7f00000018c0)=""/164, 0xa4}, {&(0x7f0000001980)=""/156, 0x9c}, {0x0}], 0x7}, 0x2000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="600500010f000000"], 0x8) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000040)=@t={0x81, 0x5, 0x3, 0x4, @generic=0xffffe861}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x208000, 0x0) write(r0, &(0x7f0000000960)='1', 0x1) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) 1m56.791367446s ago: executing program 4 (id=3257): userfaultfd(0x80001) r0 = syz_ublk_setup_io_uring(0x22, 0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f00000004c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 1m56.65338899s ago: executing program 0 (id=3259): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x53345000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) 1m56.522791169s ago: executing program 4 (id=3260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r3, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700", @ANYRES32=r2], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6}, @GTPA_FAMILY={0x5, 0xd, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) 1m55.519357184s ago: executing program 4 (id=3264): sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000010) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e0c400714"], 0x11) (async) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e0c400714"], 0x11) r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000080)=[{}, {}], 0x2, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000080)=[{}, {}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x66}, @l2cap_cid_signaling={{0x62}, [@l2cap_info_rsp={{0xb, 0x3, 0x5e}, {0x9, 0x1ff, "f228fcc5fe9263ff64f121e9923c9d8260a05b2c0ffcb26acc9b091c93eaceff67683850244fd68f938e78d51909a006569a868859487eb8ab253b36949ca475455dc2557718dcbb4d073580cb8e99b61e087f7d5a264b8f3ce3"}}]}}, 0x6b) 1m53.680072945s ago: executing program 4 (id=3271): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={&(0x7f0000004640)=ANY=[@ANYBLOB="200000006a0001002ab970000000"], 0x82}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000240)=@ll, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000700)=""/40, 0x28}, {&(0x7f0000000780)=""/55, 0x37}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/203, 0xcb}, {&(0x7f00000018c0)=""/164, 0xa4}, {&(0x7f0000001980)=""/156, 0x9c}, {0x0}], 0x7}, 0x2000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="600500010f000000"], 0x8) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000040)=@t={0x81, 0x5, 0x3, 0x4, @generic=0xffffe861}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x208000, 0x0) write(r0, &(0x7f0000000960)='1', 0x1) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) 1m53.153893054s ago: executing program 4 (id=3272): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r5, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'}) 1m41.290144998s ago: executing program 54 (id=3259): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x53345000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) 1m37.762488115s ago: executing program 55 (id=3272): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r5, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'}) 1m24.562555702s ago: executing program 6 (id=3366): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'netdevsim0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r5, 0x0, 0x37e9, 0x2f92) 1m23.465732054s ago: executing program 6 (id=3368): socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (fail_nth: 4) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10002, 0x20}}}}}, 0x0) 1m22.108543499s ago: executing program 6 (id=3372): r0 = memfd_create(&(0x7f0000000440)='-B\xd5O4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\xb90a\xa9\xb2\x00\x00\x00\x00=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7V\x00@Ip]D\xd6\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xf6L\\\xa3O\x92\x90i\xed\xd36\xf3\xa5\xaf\x87\x90@k\xe2\x14/rn$x\x13/\xc5\\W\x04\br\x17\xd18\xd9L:\xc2\x11\xfb2\a\x99i\x90/\x19@\x1cq\xeb\xc8\xb9KvJ\x8c\xf2c\xfe\x8d]k\x01\xb7\x84H?\xc0z:\x913\xfa8\xac\xd3q\xe4vPGUQ\x93\xca1\xff\xf8\x13\x0fT\xa9\xc3\xcfozi_\x9a1\x97\xd4\xb1\x96\xc0\r\xdd\xe8\xe7P\x16\xbcT\xa5\t\xe2X\x1e\x19\xff\xfd\xa0\r\x94c\r\xb8\f\xed.M0[y\xfbz\xeb{\\j~\xf6\xca\xd9\xa5\xf13\t-\x00j\xf5\x88\x94p\x04\xe9\x93\xadcn~\xb9:\x0e+P\x97\x7f\xa3\xcd\xe8\xb8\x9c+\x9c|\x90\xdcg_t\x92l\x88UU\xf0\xdc\xd9\x00\xb4\xa5\xe3*\xb7\xba\x81\xbazT\xb8\xb7\xf8\xbb\xcew\xb3\x0e\xc47BR\x88B\xe4\xffQt\x96\xbd_\xaashy\xd3\x1d\xcc\xf9G\xc1wpAL\v\xf3|\x93\x00%+\xe4\xef\x97\xc9\xde\x98(\x01\x85\xe5;\xd6a\xb5\x14\x1f\xc9\x0e\xf0\x8a\xe4\x9a\xc2\x86\xb85\x8e\x85)\xaa\a1\x86\x82B|\xee\a\xca5\xb2\x06\xf4_\x86\x15z`\x8e\xd3\x81\aT\xd4}\xea\xc82\xbb\xfc\xc5\xad\x9dgf\xd6L\xcf\x17)\xc6v\x06\xe8O\xcdd\x91\x06|\xbe\xc1\xb8\n\x18+\x04\x81\xdc\xdf~Q\x85{\x10x\x18c#6\x96Bl\x00~\x7f\x16eQe{\xa2\xf9q\xb6\xc1t*S\\\xff:\x8b\xa3\x11\xb0\x86t\xac\xc4(8V&*B+[<\xde\xab\xc8X\xd6\x1d\x1b\xdf\xa8b\x82l\x94ecwrDb\x15\xc8r\xec\x91\x88\xc9\xf4\x81C\xee\x8c\x93\xbdr\x1d_\xd7\xc9\x90\xef\xf3n1\fy\xbe\x93\x060x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11dc, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80ac1b, 0x1, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m21.400117829s ago: executing program 6 (id=3375): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={&(0x7f0000004640)=ANY=[@ANYBLOB="200000006a0001002ab9700000000000020000000000e0ff"], 0x82}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000240)=@ll, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000700)=""/40, 0x28}, {&(0x7f0000000780)=""/55, 0x37}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/203, 0xcb}, {&(0x7f00000018c0)=""/164, 0xa4}, {&(0x7f0000001980)=""/156, 0x9c}, {0x0}], 0x7}, 0x2000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="600500010f000000"], 0x8) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000040)=@t={0x81, 0x5, 0x3, 0x4, @generic=0xffffe861}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x208000, 0x0) write(r0, &(0x7f0000000960)='1', 0x1) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) 1m20.976461093s ago: executing program 6 (id=3378): r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) fallocate(r0, 0x0, 0x0, 0x1001ed) fallocate(r0, 0x3, 0xf00, 0x10000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) recvmsg$unix(r1, &(0x7f0000000180)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x40002042) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/bluetooth/hci0/msft_opcode\x00', 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) 1m20.83837275s ago: executing program 1 (id=3379): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) (async) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)=0x0) syz_open_procfs(r3, &(0x7f0000000200)='fdinfo\x00') ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCSETS2(r2, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) (async) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xe, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@local, @in6=@mcast1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x70}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=r6, @ANYBLOB="200001"], 0x38}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=r6, @ANYBLOB="200001"], 0x38}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r7, 0x0, 0x3, &(0x7f0000000100)=""/2, &(0x7f0000000300)=0x2) (async) getsockopt$bt_hci(r7, 0x0, 0x3, &(0x7f0000000100)=""/2, &(0x7f0000000300)=0x2) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x201, 0x800003f, r8, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, 0x0, &(0x7f0000000100)) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000000040)={r11}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r11}, 0x8) 1m20.507868273s ago: executing program 1 (id=3380): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_FUTEX_WAITV={0x35, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[{0x4, 0x0, 0x2}, {0x4, 0x0, 0x82}], 0x2, 0x0, 0x1}) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0x10, 0x2, 0x0) write(r4, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) socket(0x400000000010, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0x54e, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80}}}, 0x0) 1m20.100721233s ago: executing program 1 (id=3382): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'netdevsim0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r4, 0x0, 0x37e9, 0x2f92) 1m19.212459114s ago: executing program 1 (id=3383): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, 0x0, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11dc, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80ac1b, 0x1, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m17.052099615s ago: executing program 1 (id=3387): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={&(0x7f0000004640)=ANY=[@ANYBLOB="200000006a0001002ab9700000000000020000000000e0ff"], 0x82}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000240)=@ll, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000700)=""/40, 0x28}, {&(0x7f0000000780)=""/55, 0x37}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/203, 0xcb}, {&(0x7f00000018c0)=""/164, 0xa4}, {&(0x7f0000001980)=""/156, 0x9c}, {0x0}], 0x7}, 0x2000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="600500010f000000"], 0x8) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000040)=@t={0x81, 0x5, 0x3, 0x4, @generic=0xffffe861}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x208000, 0x0) write(r0, &(0x7f0000000960)='1', 0x1) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) 1m16.713735736s ago: executing program 1 (id=3390): timer_create(0x7, &(0x7f0000000040)={0x0, 0x33, 0x4, @thr={0x0, 0x0}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)}], 0x1}}], 0x2, 0x931766f6319eed40) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20010d"], 0x0}) 1m5.677563903s ago: executing program 56 (id=3378): r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) fallocate(r0, 0x0, 0x0, 0x1001ed) fallocate(r0, 0x3, 0xf00, 0x10000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) recvmsg$unix(r1, &(0x7f0000000180)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x40002042) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/bluetooth/hci0/msft_opcode\x00', 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) 1m1.325488997s ago: executing program 57 (id=3390): timer_create(0x7, &(0x7f0000000040)={0x0, 0x33, 0x4, @thr={0x0, 0x0}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)}], 0x1}}], 0x2, 0x931766f6319eed40) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20010d"], 0x0}) 7.847100519s ago: executing program 3 (id=3629): sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e21, 0x100, @remote, 0x2}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) open$dir(0x0, 0x80140, 0xc4) r3 = syz_open_dev$audion(&(0x7f0000000300), 0x0, 0x84101) ioctl$DVB_DVR_DMX_EXPBUF(r3, 0xc00c6f3e, &(0x7f0000000380)={0x5, 0x80000}) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf02000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$XFS_IOC_SWAPEXT(r7, 0xc0c0586d, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x3, '\x00', {0xd0fb, 0x800, 0x1, 0xff, 0x2, 0x1, 0x3, 0x3, {0x9, 0x80}, {0x4, 0xbf}, {0xd3d, 0x1}, 0x7fffffffffffffff, 0x7fff, 0x10000, 0x7, 0x0, 0x8, 0x2, 0x1000, 0x5, 0x6, '\x00', 0x80000000, 0x4, 0x1, 0x8}}) r8 = socket(0x840000000002, 0x3, 0xfa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @empty}}, [0x0, 0x7ffffffffffffd, 0x72219, 0x0, 0x400000000000, 0x2, 0x5, 0x4c8, 0x0, 0x0, 0x10, 0x4, 0x0, 0xfffffffffffffffe, 0x9]}, &(0x7f0000000000)=0x100) 7.247883255s ago: executing program 7 (id=3635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r10, 0x1, 0x4, 0x100003, {{}, {}, {0x14, 0x19, {0x9, 0x42, 0x4, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008044}, 0x1004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x3}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) 6.184294907s ago: executing program 5 (id=3638): userfaultfd(0x1) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010400100000ffdfb62500c5000c", @ANYRES32=0x0, @ANYBLOB="322200000f8d00002c0012800e00010069703665727370616e000000180002800500160002000000040012000500170002000000"], 0x4c}}, 0x40890) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x20004004) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000480)=""/194, 0xc2}, {&(0x7f0000000580)=""/100, 0x64}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000700)=""/228, 0xe4}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000000380)=""/113, 0x71}], 0x6, &(0x7f0000000a00)=""/150, 0x96}, 0x3e3a}], 0x1, 0x12141, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r3, 0x200000000114, 0x2715, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.096790396s ago: executing program 3 (id=3639): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpgrp(0x0) syz_clone(0x32040000, &(0x7f0000000080)="e36618faadeb8ad962c1711f250ae28246855743831da9e9b9c4d2eb33d914f4e90b4db1e1071bc8e22b5964070d5bde2aaa233274e00ccdc00a112de42b270370608279f047f1fb4ff986d333c7cd47c9bcd0238ca9a0b42f22a415b4e49a6bb896ac4aefa2d13703858ff605758018538064eff1cbee705f2a12e73053dc1538caae0369560450ea716b10ba7429ee10ed7b3831ca745626", 0x99, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="54660ada39508701dc2c5a791491f71782bf006d70702d1f2455fca2bd4a25122193b83d637264559d14eb210e281963a118941ec317e9ba5cf9b0d10e26ac66e1a0dda9dad5bcd3f723d448036ec2d5ae1b1e602a6135847d04576379f605f55c86498013216f44fc2b33") fcntl$getown(r0, 0x9) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x20d02, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r4, 0x2, &(0x7f0000000340)) pwritev2(r5, &(0x7f0000001f00)=[{&(0x7f0000001c00)="4309e0f1", 0x4}], 0x1, 0xffffffff, 0x7, 0x0) r6 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x1000, 0x4000}) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001300)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x28}, {&(0x7f0000001340)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0e29f4aa7ee5dfc9e0e2fa3d59a243b5df74f60381bf4ad9e3e16a1de87a8875fc86535b03b997622653f20432199b86d7d17a55eebf993cfef3abade09ee51e1f199a56c26c5ff6bcc6bdb22aaed52d72c45f32bc87f47f7891d6df5a1333ec9b599ed3c6e3e5d86ae6f9184d52a24dfa58dfc4d09c4e04e2143e4d2364245e5b00c75c3ae1f06f62596ba033853948baebd3eb35516df9678b95414a07ef00bd57b7b77d9ed8b8d34291ab4e544dd03a6780fb56c2fae9ee01e13db0a22151c2651dfa4cc361d5e00b08004b00", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\x00\r\x00E\x00nl802154\x00\x00\x00\x00\b\x00\b\x00', @ANYRES32=r1, @ANYBLOB="e9446c7299682dfbc24bad84744a95fc4d89115722ec08b9a59b17fd423f74bd0ff81e960b7dc0a4e11e32e1463632c780e14c7060f23d8886fc857e880a25f0b7221ec9db4ceae2412f90ef0d017aa303bc02aebd4e7e656aae6a7b2f193248fefcf9aec156fa2308527d678f9676a1dff285495b6726ef32e2539eb9f486fbcd0ba5709ff4a91d25042b46d8399e9db096b0a56a56505eeab52b5193183d6ca70de74e298d4134d88df401e19a6d243ed04d435101e9dbe529a32570aa3f45bfe266db5fce94970ab02e80aa5b6b81f8015de6a238e708005100e00000020c000800040000000000", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0400cf8004004c80fcd17aae6267c1b16bc21b452ef5e59dc31fbaa97174f0a8156795f5579c7b1db8a6e863034966b35b11928faa72d0375d34c4b39dc78a6abbbcb04e2e9e564b8d0505c0222a653a58a61b8af2f6474d63d74c702530723b8da2d20ff9524f434d8928695ab327de5173380667469984a02a47435563ce85aab055c13c679d032011c6eb051bb11b277c99b84d56d33c5fe6f8a4664bec76f995897df00645fc6e1cffe48a3cb4c8f58c092e208289841c754ff6ea165992bc539d416825e8fc2567428002bf7b1b6e8af7eba90bf488ad142cbe89d2543db47d652f42de36b9753c66c34107c501cd27ae9a4074330000"], 0x243c}], 0x2, 0x0, 0x0, 0x2000000}, 0x0) socket$inet6(0xa, 0x5, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000fbdbdf25150000002c002b8020000380080002000300000006000100000000000c0004000203aaaaaaaaaaaa08000100000000000c000600010000000100000008002a"], 0x54}, 0x1, 0x0, 0x0, 0x4045}, 0x8004) 5.996198075s ago: executing program 7 (id=3640): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 5.547805443s ago: executing program 7 (id=3642): r0 = socket$kcm(0x10, 0x2, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'gre0\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 5.476527911s ago: executing program 3 (id=3644): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='loop\n', 0x5) 5.337870753s ago: executing program 5 (id=3645): bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) 5.272139899s ago: executing program 3 (id=3646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0d00000000000100000000968e00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000000000000"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r0, &(0x7f00000000c0), 0x0, 0x4}, 0x20) syz_open_dev$usbfs(0x0, 0xb, 0x8041) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00001c"], 0x8, 0x0) 5.134071419s ago: executing program 5 (id=3647): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/auth_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0xc6) (fail_nth: 4) 4.98000399s ago: executing program 3 (id=3649): r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="600a1e0000001e0a5c01431fe1e62668a3dbcbbe7896139a6d5bce6d"], &(0x7f0000000280)={0x0, 0x3, 0xc6, @string={0xc6, 0x3, "a716060f33e75130b06548ca46a4d82dba37eb1f607c689468bf9232c1fce2b0f1e8c446d47776ce757fa9953431625132a41fe885c3b918c696836f6a91ce445b10a2b51ccf204c73d4abfd5b1c486e336b9adfc8d43358b38414918e3aa9d579f1cb00a194f8ada175740b12e84b5a70e1e242424cdc42279f43e3a87df3f4045f90bf4b61ca2d7e0bb79e1745a64de87cdeae7a42db61f59e1d0d8c08d344ac1e540280f6c3291d6310bd2ea6556c7cd4e8e038a734d21101f0b1fa72c1f84a1ca68e"}}, &(0x7f0000000380)={0x0, 0xf, 0xfe, {0x5, 0xf, 0xfe, 0x2, [@generic={0xf2, 0x10, 0x2, "d6c36e366d1f62b40db4c5b6b424000cb473196467077c1d1cdc320be48f05b671dc9a3e5ff521936124784bea932463d6551d76c136df59ad0538af42f7ff503bae188b784c20b53595e48654d94775e196d04b5b59681805f64c684de3138cfef35a3571e411d04e736c2269de136351d7c20e6707f6b232a4f80a945f50b5c73159fa4a29cc478eadabc092473cc7821a644d90a1526da1b9ec69755f22de176a4c263f75e3e6909abe914670b1349cb5421debde42ffbe2fd466edcdfd9858e728ea42658e9424ce70a0b10f07257b5b54a131fcabb102c5aad97a370979789f6e2e8cdf1f0be4e7eee467f046"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x7, 0x9, 0xe09}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x60, 0x3, 0x6, "843ad1f8", "53066f61"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x7, 0x8, 0x1, 0x0, 0x9}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000580)={0x0, 0x18, 0xd9, "6b701753de1fa0ffd95cf8087ce0a20280e8008d6e2d81fd0e60c5dfda7e384bed2d94c47189ff0e0cdd2dfb02cc77ca44aa6f485f097e111d783f12f48bd9ec14f43c514f6cf11ebb0209797f9b365b058f0953116d13ec59b5051a68277ba11386cf59620671a1fb1885c658d6585fcbddb3f8cba05e35afe198a21b9d0d2b4f94aec6ee80fad1df09b64abf6b0971b24ff2913a2f2d7418b8855c62ef79d99112ff4e400c9dcc3a236440f733bcbae61fa02eb703b3f013a80e2d6fd672636d70442438ab75a5ffe2c3b124b70c4a52f3ef82b672053194"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xa}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x8, 0x4}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x200}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0xfa}, &(0x7f0000000840)={0x40, 0xb, 0x2, "a29c"}, &(0x7f0000000880)={0x40, 0xf, 0x2}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000900)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000940)={0x40, 0x19, 0x2, "c805"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x9}, &(0x7f00000009c0)={0x40, 0x1c, 0x1}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x21, 0x1}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x58, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1}, {0x2}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8}]}]}, 0x100}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000000000000000000008000000000000001f00000000000000070000000000000002000000fcffffff004f35002abd700004350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x10b8, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/226, 0xe2, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 4.939792007s ago: executing program 7 (id=3650): connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="2e000000010000", 0x7) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00000008000400010001000800"], 0x58}}, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x388, 0x41d9fda7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0xfffc, {0x5, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x89, 0x0, @private=0xa010102, @local}, "daaf008000000000"}}}}}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) 4.708217381s ago: executing program 5 (id=3653): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x23) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 4.345969336s ago: executing program 5 (id=3654): syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/delay_retrans\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x10, 0x400) setresuid(0x0, 0x0, 0x0) shutdown(r4, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.857751095s ago: executing program 5 (id=3655): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000480)={'veth1_macvtap\x00', &(0x7f00000003c0)=@ethtool_rxnfc={0x32, 0xd, 0x2, {0x3, @usr_ip6_spec={@loopback, @dev={0xfe, 0x80, '\x00', 0xd}, 0x8001, 0x2, 0x7}, {0x0, @multicast, 0x3, 0x8, [0x7, 0xd]}, @sctp_ip6_spec={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x4e21, 0x4e21, 0xfa}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 0x200, 0x6, [0xff, 0x8]}, 0x5, 0x6}}}) write$tun(r0, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@ra={0x94, 0x4, 0x1}]}}, {0x4e24, 0x4e20, 0x4d, 0x0, @opaque="741f38df1014247f9d50a4e12bde6944d1e1b77b033f03963ac27173ff6b6fd94db024c46e0942e19820cfc16e1626e5ce51d050a4e8025a73265bf130fdc1c42675b02b6a"}}}, 0x73) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (fail_nth: 4) 3.675138607s ago: executing program 8 (id=3657): bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) 3.662014084s ago: executing program 7 (id=3658): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000940)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x61, &(0x7f00000004c0)=[{&(0x7f0000000800)="03", 0x1}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f00000005c0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1d, &(0x7f0000000900)=[{&(0x7f0000000600)="5d6e70eec25704f4a1a244509b1d80441899b3b19b18b53aef3247614bfa8cd67e4e1c5510bbafc02b090a8051c6a6b6060a2ba17e98bc3297b3cd5084b6177ae956515b4f9276be317f028506046270aff49ec6479cd17a743ea0ca0a6f62718371a71a0606f5cda8022e6017692c8f3b79c5bdf87e536ddce4b8a7318ee980e7f9d78f67b224"}, {&(0x7f00000006c0)="9bd5b6db1e13fac175279b7a2096fede21c78b71a644ff624a1268c6a7bd8de2ff291911dfa339a4e551e0d5bba9a12b5a4ca351016658a6580f39823d0d9f6dd9b768e96f4e59db3c7ffd3933384142f57f75bd60169f90a85200687ceef8b6d1cd8db7ec4ee112f0b21960f84f4bc142e2d0a5d40235a210cf0a3eb71ed736de9ac92d9cfc6133ea71209dcdbcc2741801f3934ab7e6efaa2e9d37c7729b2ef93ee7869cf0d3ce1684295b9b43447f5f31fe330ab770663da8636f171e5feacc2ffdeb39"}, {&(0x7f00000007c0)="8985400e7112e2eeea6c4b580cd52d258e2c396f906b8eb432f5c2806b0006848a1e479ef786020f209c936c1b84a49fa0a833a30e"}], 0x0, &(0x7f0000000840)=[@init={0x0, 0x84, 0x0, {0x3d06, 0x4, 0x81, 0x6}}], 0x0, 0x8000}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xff}, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "d20fac525dfe9fee", "51d58b2f32926cd175373bcf36f6e2bf", "a122a070", "66e171f3a1724eaf"}, 0x28) sendto$inet6(r1, 0x0, 0xffffffffffffff94, 0x0, &(0x7f00000000c0)={0xa, 0x1000, 0x0, @private1, 0x2}, 0x1c) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffa, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff1, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000580)={0x0, 0x0, 0x8, 0x15, 0x81, &(0x7f0000000180)="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"}) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000000)={&(0x7f00000001c0)=[{0x7f, 0x4a02, 0x3a, &(0x7f00000000c0)="d863f6728c1b9504e03ce3b6c70b9ad0deb2007f0ff50c0d7d6dbf3dccdd5a754a56a0720109be5e3a08356fd783984cb0695cfadba58928e401"}], 0x1}) 3.382142973s ago: executing program 8 (id=3660): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) pwrite64(r0, 0x0, 0x0, 0x6ae2) 3.181956363s ago: executing program 8 (id=3661): r0 = socket(0x10, 0x80002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random=' \x00'}) r2 = accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f0000000380), 0x0, 0x240000c5, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000000380), 0x0, 0x240000c5, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="c57db783be2700000000000008004500002c0300004000119078000000000000000200000022001890780400"/58], 0x0) shutdown(r3, 0x1) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000100)={{0x2, 0x4e23, @empty}, {0x1, @remote}, 0x78, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip_vti0\x00'}) (async) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000100)={{0x2, 0x4e23, @empty}, {0x1, @remote}, 0x78, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip_vti0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.950981803s ago: executing program 9 (id=3662): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x6) 2.939295032s ago: executing program 8 (id=3663): add_key(&(0x7f0000000180)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000001584852aa000000010000007c0000000ed71cf845d4c3966f3e9e38cb472c15000200861fa7f85b0150410471e3d20d0000000000004161c833020a6da8881bb79e1104a0af3ec3399f6e911483bfadf224a22c76ecc7a56843a85f7df5289cf0eb84ef8f0f07342db3b0e5a16dea8a76aea5647b7bed1fbf069ca712670adf7d9fb6d2600fd9c198", 0x90, 0xffffffffffffffff) 2.7873514s ago: executing program 9 (id=3664): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x23) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 2.768591548s ago: executing program 8 (id=3665): openat$kvm(0xffffffffffffff9c, 0x0, 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000001780)=""/4101, 0x1010, 0x400020a4, 0x0, 0xba) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x388, 0x41d9fda7) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) (fail_nth: 1) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) 2.556536826s ago: executing program 9 (id=3666): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ed) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)="2b62e7", 0x3) 2.008292754s ago: executing program 9 (id=3667): openat$kvm(0xffffffffffffff9c, 0x0, 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000001780)=""/4101, 0x1010, 0x400020a4, 0x0, 0xba) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x388, 0x41d9fda7) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) 1.754681587s ago: executing program 8 (id=3668): connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="2e000000010000", 0x7) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00000008000400010001000800"], 0x58}}, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x388, 0x41d9fda7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0xfffc, {0x5, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x89, 0x0, @private=0xa010102, @local}, "daaf008000000000"}}}}}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) 922.315504ms ago: executing program 9 (id=3669): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='loop\n', 0x5) 807.959748ms ago: executing program 9 (id=3670): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000001000000000000000000000000fdffffffffff3f00000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) ioctl$VIDIOC_DBG_S_REGISTER(r9, 0x4038564f, &(0x7f00000002c0)={{0x0, @addr=0x7f}, 0x8, 0x7, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7030000000000008500000001000000b700000000000000950000000000000015a19e5db906c6257a0627ea323477e1a0e4ffb05e1c7d170c55ed4fb273483e7f7b90d25541c791cf5d064de3f7b06448bd43056f37fea571fe1466dadb8fcfbc26b7c24f287b4aa5d0759945abd5997f8c6a0a722ef134b431611075dec2872754ef4ce4826d3b29a88f98c8ebe7d9216a0217015b63c0cdf3dec83502"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)={r0, r7}) sendmmsg$inet(r8, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a24", 0x4}], 0x1}}], 0x1, 0x40) 789.735136ms ago: executing program 3 (id=3671): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = dup(r1) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000040)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x2c93a000) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x3, 0x3440, 0x2, 0x3}, 0xfffffffffffffd81, 0x0) landlock_restrict_self(r3, 0xe) 0s ago: executing program 7 (id=3672): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0d00000000000100000000968e00000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="01000000030000000000000000"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r1, &(0x7f00000000c0), 0x0, 0x4}, 0x20) syz_open_dev$usbfs(0x0, 0xb, 0x8041) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00001c"], 0x8, 0x0) kernel console output (not intermixed with test programs): .0: 1 port detected [ 801.554517][ T30] audit: type=1400 audit(1797100261.807:1424): avc: denied { write } for pid=22197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.714929][ T30] audit: type=1400 audit(1797100261.967:1425): avc: denied { write } for pid=22232 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.816610][ T30] audit: type=1400 audit(1797100262.067:1426): avc: denied { ioctl } for pid=22234 comm="syz.3.3394" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 801.893938][T22238] FAULT_INJECTION: forcing a failure. [ 801.893938][T22238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.909305][T22238] CPU: 1 UID: 0 PID: 22238 Comm: syz.3.3395 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.909335][T22238] Tainted: [L]=SOFTLOCKUP [ 801.909341][T22238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 801.909349][T22238] Call Trace: [ 801.909355][T22238] [ 801.909362][T22238] dump_stack_lvl+0x100/0x190 [ 801.909397][T22238] should_fail_ex.cold+0x5/0xa [ 801.909419][T22238] _copy_to_user+0x32/0xd0 [ 801.909444][T22238] simple_read_from_buffer+0xcb/0x170 [ 801.909468][T22238] proc_fail_nth_read+0x1af/0x230 [ 801.909491][T22238] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 801.909514][T22238] ? rw_verify_area+0xce/0x6d0 [ 801.909540][T22238] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 801.909564][T22238] vfs_read+0x1e4/0xb40 [ 801.909582][T22238] ? lock_acquire+0x1d1/0x380 [ 801.909601][T22238] ? __fget_files+0x34/0x3d0 [ 801.909623][T22238] ? __pfx_vfs_read+0x10/0x10 [ 801.909637][T22238] ? find_held_lock+0x2b/0x80 [ 801.909662][T22238] ? __fget_files+0x215/0x3d0 [ 801.909687][T22238] ? __fget_files+0x21f/0x3d0 [ 801.909715][T22238] ksys_read+0x12a/0x250 [ 801.909732][T22238] ? __pfx_ksys_read+0x10/0x10 [ 801.909757][T22238] do_syscall_64+0x123/0x790 [ 801.909782][T22238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.909802][T22238] RIP: 0033:0x7fcbcc95e98e [ 801.909819][T22238] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 801.909836][T22238] RSP: 002b:00007fcbcd8aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 801.909855][T22238] RAX: ffffffffffffffda RBX: 00007fcbcd8af6c0 RCX: 00007fcbcc95e98e [ 801.909867][T22238] RDX: 000000000000000f RSI: 00007fcbcd8af0a0 RDI: 0000000000000004 [ 801.909879][T22238] RBP: 00007fcbcd8af090 R08: 0000000000000000 R09: 0000000000000000 [ 801.909890][T22238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.909901][T22238] R13: 00007fcbccc26038 R14: 00007fcbccc25fa0 R15: 00007ffe46db2bd8 [ 801.909926][T22238] [ 802.305485][ T30] audit: type=1400 audit(1797100262.557:1427): avc: denied { write } for pid=22236 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 802.799527][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 802.799568][ T30] audit: type=1400 audit(1797100263.047:1429): avc: denied { write } for pid=22258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 802.907769][ T30] audit: type=1400 audit(1797100263.157:1430): avc: denied { write } for pid=22271 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.112082][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.246291][T22260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3399'. [ 803.295461][ T30] audit: type=1400 audit(1797100263.547:1431): avc: denied { write } for pid=22273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.535242][ T30] audit: type=1400 audit(1797100263.787:1432): avc: denied { write } for pid=22290 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.497775][ T30] audit: type=1400 audit(1797100264.747:1433): avc: denied { write } for pid=22296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.542047][T22319] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3404'. [ 804.644421][T22314] netlink: 'syz.7.3404': attribute type 10 has an invalid length. [ 804.667061][T22314] team0: Device veth1_virt_wifi failed to register rx_handler [ 804.667812][ T30] audit: type=1400 audit(1797100264.907:1434): avc: denied { mounton } for pid=22313 comm="syz.7.3404" path="/file0" dev="ramfs" ino=66393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 804.803228][ T30] audit: type=1400 audit(1797100265.057:1435): avc: denied { write } for pid=22324 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.078633][T22318] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 805.078670][T22318] overlayfs: failed to set xattr on upper [ 805.078689][T22318] overlayfs: ...falling back to redirect_dir=nofollow. [ 805.078696][T22318] overlayfs: ...falling back to index=off. [ 805.386853][ T5718] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 806.361864][ T5718] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 806.371987][ T5718] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 806.386759][ T5718] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 806.405124][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.405175][ T5718] usb 4-1: Product: syz [ 806.405203][ T5718] usb 4-1: Manufacturer: syz [ 806.405216][ T5718] usb 4-1: SerialNumber: syz [ 806.426232][ T5718] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 806.512085][ T5718] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 806.562562][ T5718] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 806.594034][ T30] audit: type=1400 audit(1797100266.837:1436): avc: denied { write } for pid=22326 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.703838][ T30] audit: type=1400 audit(1797100266.957:1437): avc: denied { write } for pid=22346 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 807.054274][ T30] audit: type=1400 audit(1797100267.307:1438): avc: denied { write } for pid=22348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 807.865345][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 807.865425][ T30] audit: type=1400 audit(1797100268.117:1440): avc: denied { write } for pid=22362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 807.966003][T22374] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3410'. [ 808.107841][ T30] audit: type=1400 audit(1797100268.357:1441): avc: denied { write } for pid=22377 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 808.233879][ T25] kworker/1:0 (25) used greatest stack depth: 17632 bytes left [ 808.577123][T22385] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 808.587266][T22385] CIFS: Attempting to mount //::1/share [ 808.596488][T22385] CIFS: VFS: Error connecting to socket. Aborting operation. [ 808.596596][T22385] CIFS: VFS: cifs_mount failed w/return code = -111 [ 809.346965][ T30] audit: type=1400 audit(1797100269.597:1442): avc: denied { write } for pid=22384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 809.621596][ T30] audit: type=1400 audit(1797100269.877:1443): avc: denied { write } for pid=22404 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 810.313549][T22327] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 810.314415][T22327] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 810.317872][ T5718] usb 4-1: USB disconnect, device number 17 [ 810.327623][ T5718] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 810.334446][ T5718] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 810.335105][ T5718] ti_usb_3410_5052 4-1:2.0: device disconnected [ 810.467368][T22420] FAULT_INJECTION: forcing a failure. [ 810.467368][T22420] name failslab, interval 1, probability 0, space 0, times 0 [ 810.482583][T22420] CPU: 1 UID: 0 PID: 22420 Comm: syz.3.3417 Tainted: G L syzkaller #0 PREEMPT(full) [ 810.482613][T22420] Tainted: [L]=SOFTLOCKUP [ 810.482619][T22420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 810.482628][T22420] Call Trace: [ 810.482634][T22420] [ 810.482641][T22420] dump_stack_lvl+0x100/0x190 [ 810.482668][T22420] should_fail_ex.cold+0x5/0xa [ 810.482689][T22420] should_failslab+0xc2/0x120 [ 810.482707][T22420] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 810.482723][T22420] ? __alloc_skb+0x5b7/0x710 [ 810.482737][T22420] ? __alloc_skb+0x140/0x710 [ 810.482758][T22420] __alloc_skb+0x140/0x710 [ 810.482771][T22420] ? __alloc_skb+0x5b7/0x710 [ 810.482784][T22420] ? __pfx___alloc_skb+0x10/0x10 [ 810.482803][T22420] netlink_alloc_large_skb+0x69/0x150 [ 810.482827][T22420] netlink_sendmsg+0x680/0xda0 [ 810.482852][T22420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.482876][T22420] ? selinux_socket_sendmsg+0x198/0x2f0 [ 810.482901][T22420] ____sys_sendmsg+0xa4d/0xbe0 [ 810.482919][T22420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.482942][T22420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 810.482965][T22420] ? lock_acquire+0x1d1/0x380 [ 810.482980][T22420] ? get_pid_task+0x2a/0x250 [ 810.483001][T22420] ___sys_sendmsg+0x190/0x1e0 [ 810.483025][T22420] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.483044][T22420] ? get_pid_task+0x106/0x250 [ 810.483070][T22420] ? find_held_lock+0x2b/0x80 [ 810.483101][T22420] __sys_sendmsg+0x160/0x210 [ 810.483117][T22420] ? __pfx___sys_sendmsg+0x10/0x10 [ 810.483142][T22420] do_syscall_64+0x123/0x790 [ 810.483162][T22420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.483177][T22420] RIP: 0033:0x7fcbcc99e159 [ 810.483190][T22420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.483204][T22420] RSP: 002b:00007fcbcd8af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.483219][T22420] RAX: ffffffffffffffda RBX: 00007fcbccc25fa0 RCX: 00007fcbcc99e159 [ 810.483229][T22420] RDX: 0000000000040000 RSI: 0000200000000180 RDI: 0000000000000003 [ 810.483238][T22420] RBP: 00007fcbcd8af090 R08: 0000000000000000 R09: 0000000000000000 [ 810.483247][T22420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.483257][T22420] R13: 00007fcbccc26038 R14: 00007fcbccc25fa0 R15: 00007ffe46db2bd8 [ 810.483276][T22420] [ 810.685283][T22417] No control pipe specified [ 810.694213][ T5602] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 810.734557][ T30] audit: type=1400 audit(1797100270.977:1444): avc: denied { write } for pid=22408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 810.959812][ T30] audit: type=1400 audit(1797100271.207:1445): avc: denied { write } for pid=22429 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 810.980326][ T5718] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 811.130844][ T5718] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 811.131724][ T5718] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 811.133725][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.133753][ T5718] usb 4-1: Product: syz [ 811.133779][ T5718] usb 4-1: Manufacturer: syz [ 811.133796][ T5718] usb 4-1: SerialNumber: syz [ 811.158954][ T5718] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 811.411317][ T30] audit: type=1400 audit(1797100271.667:1446): avc: denied { write } for pid=22432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 811.502675][T22446] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3421'. [ 811.503501][T22446] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3421'. [ 811.507470][T22446] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3421'. [ 811.555887][ T30] audit: type=1400 audit(1797100271.807:1447): avc: denied { write } for pid=22447 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 811.765593][ T30] audit: type=1400 audit(1797100272.017:1448): avc: denied { write } for pid=22424 comm="syz.3.3418" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 811.776334][T22454] binder: 22424:22454 ioctl c0306201 200000000080 returned -14 [ 811.795473][T22454] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3418'. [ 811.796019][T22454] binder: 22424:22454 ioctl c0306201 2000000003c0 returned -14 [ 811.799375][T22454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22454 comm=syz.3.3418 [ 811.884947][ T5718] gspca_mr97310a: reg read [21] error -110 [ 811.885041][ T5718] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -110 [ 812.222821][ T30] audit: type=1400 audit(1797100272.477:1449): avc: denied { write } for pid=22450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 812.494766][T22473] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22473 comm=syz.9.3425 [ 812.598857][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 812.615263][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 812.624408][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 812.641513][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 812.652730][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 812.815779][T22473] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.3425'. [ 812.864308][ T4333] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.944601][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 812.944841][ T30] audit: type=1400 audit(1797100273.197:1451): avc: denied { write } for pid=22475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.052486][ T30] audit: type=1400 audit(1797100273.307:1452): avc: denied { write } for pid=22492 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.185703][ T4333] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.277686][ T30] audit: type=1400 audit(1797100273.527:1453): avc: denied { mount } for pid=22497 comm="syz.9.3426" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 813.329047][ T4333] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.477054][ T4333] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.813545][ T5688] usb 4-1: USB disconnect, device number 18 [ 814.079680][ T5603] Bluetooth: hci4: hcon ffff888079ffc000 sent 1 < count 114 [ 814.079788][ T5603] Bluetooth: hci4: hcon ffff888028c10000 sent 1 < count 8 [ 814.079809][ T5603] Bluetooth: hci4: hcon ffff888079ffc000 sent 0 < count 65530 [ 814.116284][ T5603] Bluetooth: hci4: hcon ffff888079ffc000 sent 0 < count 8 [ 814.116337][ T5603] Bluetooth: hci4: hcon ffff888079ffc000 sent 0 < count 65535 [ 814.426520][ T30] audit: type=1400 audit(1797100274.677:1454): avc: denied { write } for pid=22525 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.602933][ T4333] bridge_slave_1: left allmulticast mode [ 814.602972][ T4333] bridge_slave_1: left promiscuous mode [ 814.603146][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.634093][ T4333] bridge_slave_0: left allmulticast mode [ 814.634136][ T4333] bridge_slave_0: left promiscuous mode [ 814.634293][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.689190][ T4333] batman_adv: batadv0: Interface deactivated: gretap1 [ 814.713021][ T5603] Bluetooth: hci0: command tx timeout [ 814.753984][ T30] audit: type=1400 audit(1797100275.007:1455): avc: denied { write } for pid=22548 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 815.519864][ T4333] batman_adv: batadv0: Removing interface: gretap1 [ 815.612080][ T4333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.617755][ T4333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.619915][ T4333] bond0 (unregistering): Released all slaves [ 816.153597][ T5264] 8021q: adding VLAN 0 to HW filter on device eth13 [ 816.154458][T22566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3437'. [ 816.257365][ T4333] tipc: Left network mode [ 816.263752][T22563] syzkaller0: entered promiscuous mode [ 816.269604][T22563] syzkaller0: entered allmulticast mode [ 816.352489][T22562] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3437'. [ 816.790481][ T5603] Bluetooth: hci0: command tx timeout [ 817.004801][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 817.018160][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 817.203917][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 817.217134][ T5602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 817.224303][ T5602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 817.533630][ T30] audit: type=1400 audit(1797100277.787:1456): avc: denied { write } for pid=22576 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.604517][T22476] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.604607][T22476] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.604742][T22476] bridge_slave_0: entered allmulticast mode [ 817.608997][T22476] bridge_slave_0: entered promiscuous mode [ 817.615295][T22476] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.615377][T22476] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.615490][T22476] bridge_slave_1: entered allmulticast mode [ 817.618125][T22476] bridge_slave_1: entered promiscuous mode [ 817.811444][T22476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.823730][T22476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.141957][ T30] audit: type=1400 audit(1797100278.387:1457): avc: denied { write } for pid=22606 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.187279][T22476] team0: Port device team_slave_0 added [ 818.200034][T22476] team0: Port device team_slave_1 added [ 818.287914][T22476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.287947][T22476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.287968][T22476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.297337][T22476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.297353][T22476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.297371][T22476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.422846][ T5264] 8021q: adding VLAN 0 to HW filter on device eth14 [ 818.622682][T22476] hsr_slave_0: entered promiscuous mode [ 818.623411][T22476] hsr_slave_1: entered promiscuous mode [ 818.778559][ T30] audit: type=1400 audit(1797100279.027:1458): avc: denied { watch_reads } for pid=22636 comm="syz.3.3449" path="/21" dev="tmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 818.813438][ T30] audit: type=1400 audit(1797100279.067:1459): avc: denied { setopt } for pid=22636 comm="syz.3.3449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 818.837998][ T4333] hsr_slave_0: left promiscuous mode [ 818.843643][ T4333] hsr_slave_1: left promiscuous mode [ 818.844347][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 818.844363][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 818.862508][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 818.862528][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 818.872183][ T5603] Bluetooth: hci0: command tx timeout [ 818.887753][ T4333] veth1_macvtap: left promiscuous mode [ 818.887824][ T4333] veth0_macvtap: left promiscuous mode [ 818.887894][ T4333] veth1_vlan: left promiscuous mode [ 818.887941][ T4333] veth0_vlan: left promiscuous mode [ 818.926312][T22642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3449'. [ 818.978413][ T30] audit: type=1400 audit(1797100279.227:1460): avc: denied { write } for pid=22624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.062456][T22651] Bluetooth: MGMT ver 1.23 [ 819.109525][ T30] audit: type=1400 audit(1797100279.357:1461): avc: denied { write } for pid=22652 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.371486][ T5603] Bluetooth: hci2: command tx timeout [ 819.631322][ T4333] team0 (unregistering): Port device team_slave_1 removed [ 819.667148][ T4333] team0 (unregistering): Port device team_slave_0 removed [ 819.869037][T22642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 819.892747][T22642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 819.922342][T22651] IPv6: sit1: Disabled Multicast RS [ 819.922814][T22651] sit1: entered allmulticast mode [ 819.952940][ T5264] 8021q: adding VLAN 0 to HW filter on device eth15 [ 820.999561][ T5603] Bluetooth: hci0: command tx timeout [ 821.430369][ T5603] Bluetooth: hci2: command tx timeout [ 821.853260][ T30] audit: type=1400 audit(1797100282.107:1462): avc: denied { write } for pid=22658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.748144][ T30] audit: type=1400 audit(1797100282.997:1463): avc: denied { write } for pid=22689 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.906604][ T5264] 8021q: adding VLAN 0 to HW filter on device eth16 [ 823.002669][ T5718] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 823.161031][ T5718] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 823.161934][ T5718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.161974][ T5718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.162000][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.172973][ T5718] usb 4-1: config 0 descriptor?? [ 823.398058][ T30] audit: type=1400 audit(1797100283.657:1464): avc: denied { write } for pid=22698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 823.514739][ T5603] Bluetooth: hci2: command tx timeout [ 823.770200][ T30] audit: type=1400 audit(1797100283.987:1465): avc: denied { ioctl } for pid=22691 comm="syz.3.3453" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 823.924769][T22714] ceph: No mds server is up or the cluster is laggy [ 823.931922][ T5711] libceph: connect (1)[c::]:6789 error -101 [ 823.932074][ T5711] libceph: mon0 (1)[c::]:6789 connect error [ 824.041682][ T30] audit: type=1400 audit(1797100284.277:1466): avc: denied { recv } for pid=22710 comm="syz.7.3461" saddr=10.128.0.169 src=30006 daddr=10.128.0.207 dest=54362 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 824.045494][ T5718] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 824.045519][ T5718] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 824.045537][ T5718] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 824.045554][ T5718] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 824.045572][ T5718] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 824.045589][ T5718] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 824.045613][ T5718] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 824.165059][ T5718] pyra 0003:1E7D:2CF6.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 824.192298][ T30] audit: type=1400 audit(1797100284.437:1467): avc: denied { search } for pid=22712 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 824.192363][ T30] audit: type=1400 audit(1797100284.437:1468): avc: denied { read } for pid=22712 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 824.192398][ T30] audit: type=1400 audit(1797100284.437:1469): avc: denied { open } for pid=22712 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 824.192428][ T30] audit: type=1400 audit(1797100284.437:1470): avc: denied { getattr } for pid=22712 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 824.231548][ T30] audit: type=1400 audit(1797100284.487:1471): avc: denied { egress } for pid=22710 comm="syz.7.3461" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 824.231679][ T30] audit: type=1400 audit(1797100284.487:1472): avc: denied { sendto } for pid=22710 comm="syz.7.3461" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 824.364133][T22591] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.365848][T22591] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.368420][ T5718] pyra 0003:1E7D:2CF6.000E: couldn't init struct pyra_device [ 824.368457][ T5718] pyra 0003:1E7D:2CF6.000E: couldn't install mouse [ 824.398092][T22591] bridge_slave_0: entered allmulticast mode [ 824.524338][T22591] bridge_slave_0: entered promiscuous mode [ 824.527820][ T5718] pyra 0003:1E7D:2CF6.000E: probe with driver pyra failed with error -71 [ 824.535397][T22591] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.535469][T22591] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.535566][T22591] bridge_slave_1: entered allmulticast mode [ 824.579840][T22591] bridge_slave_1: entered promiscuous mode [ 824.615808][ T5718] usb 4-1: USB disconnect, device number 19 [ 824.786649][ T30] audit: type=1400 audit(1797100285.037:1473): avc: denied { write } for pid=22719 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 825.144352][T22718] fido_id[22718]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 825.600303][ T5603] Bluetooth: hci2: command tx timeout [ 825.639914][T22591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.668349][ T5264] 8021q: adding VLAN 0 to HW filter on device eth17 [ 825.682573][T22591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.396355][T22591] team0: Port device team_slave_0 added [ 826.404713][T22591] team0: Port device team_slave_1 added [ 826.523624][T22591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.523662][T22591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.523683][T22591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.525241][T22591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.525255][T22591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.525273][T22591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.767170][T22591] hsr_slave_0: entered promiscuous mode [ 826.768001][T22591] hsr_slave_1: entered promiscuous mode [ 826.781457][T22591] debugfs: 'hsr0' already exists in 'hsr' [ 826.781493][T22591] Cannot create hsr debugfs directory [ 827.098674][T22751] netlink: 'syz.7.3467': attribute type 21 has an invalid length. [ 827.098723][T22751] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3467'. [ 827.102272][T22751] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3467'. [ 827.173655][ T5264] 8021q: adding VLAN 0 to HW filter on device eth18 [ 827.261978][T22757] fuse: fd is not a fuse device [ 827.280036][T22755] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3468'. [ 827.412608][T22476] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 827.427245][T22476] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 827.462369][T22476] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 827.493222][T22476] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 828.058223][T22476] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 828.199516][T22476] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 828.200484][T22476] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 828.202802][T22476] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 828.275056][ T4333] bridge_slave_1: left allmulticast mode [ 828.441164][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 828.441203][ T30] audit: type=1400 audit(1797100288.677:1532): avc: denied { read write } for pid=22772 comm="syz.7.3473" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 828.441384][ T30] audit: type=1400 audit(1797100288.677:1533): avc: denied { open } for pid=22772 comm="syz.7.3473" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 828.441518][ T30] audit: type=1400 audit(1797100288.687:1534): avc: denied { ioctl } for pid=22772 comm="syz.7.3473" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 828.441638][ T30] audit: type=1400 audit(1797100288.687:1535): avc: denied { execute } for pid=22772 comm="syz.7.3473" name="file0" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 828.579393][ T4333] bridge_slave_1: left promiscuous mode [ 828.584333][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.607452][ T4333] bridge_slave_0: left allmulticast mode [ 828.607533][ T4333] bridge_slave_0: left promiscuous mode [ 828.612631][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.885406][ T30] audit: type=1400 audit(1797100289.137:1536): avc: denied { ioctl } for pid=22788 comm="syz.9.3475" path="socket:[68765]" dev="sockfs" ino=68765 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 828.887052][T22790] fuse: fd is not a fuse device [ 828.963900][ T4333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.976669][ T4333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.985857][ T4333] bond0 (unregistering): Released all slaves [ 828.990709][ T4333] bond1 (unregistering): Released all slaves [ 829.042232][ T5264] 8021q: adding VLAN 0 to HW filter on device eth19 [ 829.341703][ T30] audit: type=1400 audit(1797100289.597:1537): avc: denied { watch watch_reads } for pid=22798 comm="syz.7.3477" path="pipe:[68778]" dev="pipefs" ino=68778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 829.345259][ T30] audit: type=1400 audit(1797100289.597:1538): avc: denied { relabelfrom } for pid=22798 comm="syz.7.3477" name="" dev="pipefs" ino=68779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 829.346384][ T30] audit: type=1400 audit(1797100289.597:1539): avc: denied { setopt } for pid=22798 comm="syz.7.3477" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 829.371681][ T4333] tipc: Left network mode [ 829.371710][T22799] lo: entered allmulticast mode [ 829.422396][ T30] audit: type=1400 audit(1797100289.677:1540): avc: denied { mount } for pid=22798 comm="syz.7.3477" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 829.423011][ T30] audit: type=1400 audit(1797100289.677:1541): avc: denied { create } for pid=22798 comm="syz.7.3477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 829.566811][T22807] FAULT_INJECTION: forcing a failure. [ 829.566811][T22807] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 829.581814][T22807] CPU: 1 UID: 0 PID: 22807 Comm: syz.7.3479 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.581844][T22807] Tainted: [L]=SOFTLOCKUP [ 829.581851][T22807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 829.581860][T22807] Call Trace: [ 829.581867][T22807] [ 829.581875][T22807] dump_stack_lvl+0x100/0x190 [ 829.581909][T22807] should_fail_ex.cold+0x5/0xa [ 829.581933][T22807] iommufd_get_object+0x7a/0x470 [ 829.581952][T22807] ? __pfx_iommufd_get_object+0x10/0x10 [ 829.581972][T22807] ? lock_acquire+0x1d1/0x380 [ 829.581993][T22807] ? __might_fault+0xc5/0x140 [ 829.582018][T22807] iommufd_ioas_unmap+0xe9/0x540 [ 829.582036][T22807] ? __pfx_iommufd_ioas_unmap+0x10/0x10 [ 829.582059][T22807] iommufd_fops_ioctl+0x358/0x520 [ 829.582078][T22807] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 829.582095][T22807] ? __fget_files+0x34/0x3d0 [ 829.582133][T22807] ? selinux_file_ioctl+0x13b/0x290 [ 829.582149][T22807] ? selinux_file_ioctl+0xb6/0x290 [ 829.582166][T22807] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 829.582185][T22807] __x64_sys_ioctl+0x18e/0x210 [ 829.582204][T22807] do_syscall_64+0x123/0x790 [ 829.582228][T22807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.582247][T22807] RIP: 0033:0x7ff3ca99e159 [ 829.582262][T22807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.582277][T22807] RSP: 002b:00007ff3cb7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 829.582294][T22807] RAX: ffffffffffffffda RBX: 00007ff3cac25fa0 RCX: 00007ff3ca99e159 [ 829.582305][T22807] RDX: 0000200000000340 RSI: 0000000000003b86 RDI: 0000000000000003 [ 829.582315][T22807] RBP: 00007ff3cb7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 829.582325][T22807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.582335][T22807] R13: 00007ff3cac26038 R14: 00007ff3cac25fa0 R15: 00007fff8b044538 [ 829.582359][T22807] [ 829.693851][T22807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 829.824703][T22476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.855894][T22813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 830.312588][T22476] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.421633][ T1442] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.421742][ T1442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.428527][ T1442] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.428630][ T1442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.581148][ T4333] hsr_slave_0: left promiscuous mode [ 830.588937][ T4333] hsr_slave_1: left promiscuous mode [ 830.604303][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.615268][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.029699][T22852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3488'. [ 831.032169][T22852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3488'. [ 832.206360][ T4333] team0 (unregistering): Port device team_slave_1 removed [ 832.217771][ T4333] team0 (unregistering): Port device team_slave_0 removed [ 832.365599][ T5264] 8021q: adding VLAN 0 to HW filter on device eth20 [ 833.699180][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 833.700265][ T30] audit: type=1400 audit(1797100293.937:1562): avc: denied { module_request } for pid=22476 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 833.775021][ T30] audit: type=1400 audit(1797100294.027:1563): avc: denied { sys_module } for pid=22476 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 833.778720][T22591] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 833.809030][T22591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 833.815683][T22591] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 833.826422][ T30] audit: type=1400 audit(1797100294.077:1564): avc: denied { write } for pid=22862 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.827043][ T30] audit: type=1400 audit(1797100294.077:1565): avc: denied { create } for pid=22883 comm="syz.3.3495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 833.845213][T22591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 833.849235][T22591] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 833.850013][ T30] audit: type=1400 audit(1797100294.097:1566): avc: denied { write } for pid=22883 comm="syz.3.3495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 833.850048][ T30] audit: type=1400 audit(1797100294.097:1567): avc: denied { nlmsg_read } for pid=22883 comm="syz.3.3495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 833.858934][T22591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 833.866607][T22591] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 833.885019][T22591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 834.039406][ T30] audit: type=1400 audit(1797100294.287:1568): avc: denied { name_bind } for pid=22898 comm="syz.7.3496" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 834.044502][ T30] audit: type=1400 audit(1797100294.297:1569): avc: denied { node_bind } for pid=22898 comm="syz.7.3496" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 834.047561][ T30] audit: type=1400 audit(1797100294.297:1570): avc: denied { create } for pid=22898 comm="syz.7.3496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 834.048634][ T30] audit: type=1400 audit(1797100294.297:1571): avc: denied { shutdown } for pid=22898 comm="syz.7.3496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 834.205554][T22908] FAULT_INJECTION: forcing a failure. [ 834.205554][T22908] name failslab, interval 1, probability 0, space 0, times 0 [ 834.205638][T22908] CPU: 1 UID: 0 PID: 22908 Comm: syz.3.3497 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.205665][T22908] Tainted: [L]=SOFTLOCKUP [ 834.205672][T22908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 834.205684][T22908] Call Trace: [ 834.205691][T22908] [ 834.205699][T22908] dump_stack_lvl+0x100/0x190 [ 834.205731][T22908] should_fail_ex.cold+0x5/0xa [ 834.205758][T22908] should_failslab+0xc2/0x120 [ 834.205781][T22908] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 834.205802][T22908] ? __d_alloc+0x35/0xa50 [ 834.205829][T22908] __d_alloc+0x35/0xa50 [ 834.205850][T22908] d_alloc_pseudo+0x1c/0xc0 [ 834.205865][T22908] alloc_file_pseudo+0x118/0x290 [ 834.205886][T22908] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 834.205910][T22908] __anon_inode_getfile+0xe8/0x280 [ 834.205936][T22908] __anon_inode_getfd+0x5c/0xe0 [ 834.205953][T22908] __sys_bpf+0x1744/0x4a30 [ 834.205968][T22908] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 834.205990][T22908] ? __pfx___sys_bpf+0x10/0x10 [ 834.206003][T22908] ? trace_sched_exit_tp+0x120/0x160 [ 834.206023][T22908] ? __schedule+0x126b/0x6920 [ 834.206038][T22908] ? get_pid_task+0xfc/0x250 [ 834.206062][T22908] ? find_held_lock+0x2b/0x80 [ 834.206087][T22908] ? find_held_lock+0x2b/0x80 [ 834.206106][T22908] ? ksys_write+0x190/0x250 [ 834.206119][T22908] ? ksys_write+0x190/0x250 [ 834.206144][T22908] ? ksys_write+0x141/0x250 [ 834.206158][T22908] ? fput+0x7c/0x100 [ 834.206175][T22908] ? ksys_write+0x1ac/0x250 [ 834.206190][T22908] ? __x64_sys_bpf+0xce/0x140 [ 834.206203][T22908] __x64_sys_bpf+0xce/0x140 [ 834.206218][T22908] ? do_syscall_64+0xae/0x790 [ 834.206236][T22908] do_syscall_64+0x123/0x790 [ 834.206254][T22908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.206270][T22908] RIP: 0033:0x7fcbcc99e159 [ 834.206283][T22908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.206297][T22908] RSP: 002b:00007fcbcd84c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 834.206312][T22908] RAX: ffffffffffffffda RBX: 00007fcbccc26270 RCX: 00007fcbcc99e159 [ 834.206322][T22908] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000e [ 834.206331][T22908] RBP: 00007fcbcd84c090 R08: 0000000000000000 R09: 0000000000000000 [ 834.206340][T22908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.206349][T22908] R13: 00007fcbccc26308 R14: 00007fcbccc26270 R15: 00007ffe46db2bd8 [ 834.206368][T22908] [ 834.403846][T22908] tipc: Started in network mode [ 834.403865][T22908] tipc: Node identity 4, cluster identity 4711 [ 834.403876][T22908] tipc: Node number set to 4 [ 834.423250][T22591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.483192][T22591] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.523618][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.523697][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.539230][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.539305][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.811710][T22923] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3498'. [ 835.832526][T22923] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3498'. [ 835.887371][T22476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.803796][ T5718] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 836.894429][T22476] veth0_vlan: entered promiscuous mode [ 836.906706][T22476] veth1_vlan: entered promiscuous mode [ 836.929298][T22476] veth0_macvtap: entered promiscuous mode [ 836.938798][T22476] veth1_macvtap: entered promiscuous mode [ 837.027222][T22591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.051744][ T5718] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 837.052651][ T5718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.052676][ T5718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.052704][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.053668][T22476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.062457][ T5718] usb 4-1: config 0 descriptor?? [ 837.086924][T22476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 837.194787][ T42] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.201074][ T6400] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.202455][ T169] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.206010][ T169] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.325422][ T6400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.325479][ T6400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.336463][T22965] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 837.336592][T22965] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 837.413837][ T6400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.413873][ T6400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.574604][ T5718] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 837.589496][ T5718] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 837.589550][ T5718] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 837.589569][ T5718] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 837.589585][ T5718] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 837.589601][ T5718] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 837.589619][ T5718] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 837.599172][ T5718] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 837.638523][T22978] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 837.825633][T22591] veth0_vlan: entered promiscuous mode [ 837.845910][T22591] veth1_vlan: entered promiscuous mode [ 837.859838][T22983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 837.866877][T22983] FAULT_INJECTION: forcing a failure. [ 837.866877][T22983] name fail_iommufd, interval 1, probability 0, space 0, times 0 [ 837.866911][T22983] CPU: 0 UID: 0 PID: 22983 Comm: syz.5.3505 Tainted: G L syzkaller #0 PREEMPT(full) [ 837.866936][T22983] Tainted: [L]=SOFTLOCKUP [ 837.866943][T22983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 837.866954][T22983] Call Trace: [ 837.866961][T22983] [ 837.866968][T22983] dump_stack_lvl+0x100/0x190 [ 837.866999][T22983] should_fail_ex.cold+0x5/0xa [ 837.867025][T22983] iommufd_get_object+0x7a/0x470 [ 837.867046][T22983] ? __pfx_iommufd_get_object+0x10/0x10 [ 837.867065][T22983] ? tomoyo_path_number_perm+0x188/0x580 [ 837.867094][T22983] iommufd_hwpt_invalidate+0x279/0x7e0 [ 837.867118][T22983] ? find_held_lock+0x2b/0x80 [ 837.867140][T22983] ? __might_fault+0xc5/0x140 [ 837.867162][T22983] ? __pfx_iommufd_hwpt_invalidate+0x10/0x10 [ 837.867192][T22983] iommufd_fops_ioctl+0x358/0x520 [ 837.867211][T22983] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 837.867228][T22983] ? __fget_files+0x34/0x3d0 [ 837.867255][T22983] ? selinux_file_ioctl+0x13b/0x290 [ 837.867270][T22983] ? selinux_file_ioctl+0xb6/0x290 [ 837.867287][T22983] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 837.867306][T22983] __x64_sys_ioctl+0x18e/0x210 [ 837.867324][T22983] do_syscall_64+0x123/0x790 [ 837.867345][T22983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.867362][T22983] RIP: 0033:0x7f397119e159 [ 837.867377][T22983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.867392][T22983] RSP: 002b:00007f39720cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 837.867409][T22983] RAX: ffffffffffffffda RBX: 00007f3971425fa0 RCX: 00007f397119e159 [ 837.867420][T22983] RDX: 0000200000000280 RSI: 0000000000003b8d RDI: 0000000000000003 [ 837.867430][T22983] RBP: 00007f39720cf090 R08: 0000000000000000 R09: 0000000000000000 [ 837.867440][T22983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.867456][T22983] R13: 00007f3971426038 R14: 00007f3971425fa0 R15: 00007ffc633e7b08 [ 837.867478][T22983] [ 837.944851][T22591] veth0_macvtap: entered promiscuous mode [ 837.967475][T22591] veth1_macvtap: entered promiscuous mode [ 837.984881][ T5718] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device [ 837.984919][ T5718] pyra 0003:1E7D:2CF6.000F: couldn't install mouse [ 837.990866][ T5718] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -71 [ 838.009766][ T5718] usb 4-1: USB disconnect, device number 20 [ 838.083528][T22591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.113643][T22591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.161831][ T42] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.165671][ T42] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.165819][ T42] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.165846][ T42] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.360805][T19738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.360838][T19738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.381644][ T1684] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 838.508976][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.509022][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.510778][ T1684] usb 6-1: device descriptor read/64, error -71 [ 839.501219][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 839.501265][ T30] audit: type=1400 audit(1797100299.757:1616): avc: denied { unmount } for pid=21708 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 839.631448][ T1684] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 839.760295][ T1684] usb 6-1: device descriptor read/64, error -71 [ 839.828153][T23021] FAULT_INJECTION: forcing a failure. [ 839.828153][T23021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.841630][T23021] CPU: 1 UID: 0 PID: 23021 Comm: syz.8.3439 Tainted: G L syzkaller #0 PREEMPT(full) [ 839.841662][T23021] Tainted: [L]=SOFTLOCKUP [ 839.841670][T23021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 839.841682][T23021] Call Trace: [ 839.841689][T23021] [ 839.841697][T23021] dump_stack_lvl+0x100/0x190 [ 839.841731][T23021] should_fail_ex.cold+0x5/0xa [ 839.841758][T23021] _copy_from_user+0x2e/0xd0 [ 839.841788][T23021] memdup_user+0x6b/0xe0 [ 839.841817][T23021] strndup_user+0x78/0xe0 [ 839.841845][T23021] __x64_sys_mount+0x136/0x310 [ 839.841872][T23021] ? __pfx___x64_sys_mount+0x10/0x10 [ 839.841900][T23021] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 839.841932][T23021] do_syscall_64+0x123/0x790 [ 839.841958][T23021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.841978][T23021] RIP: 0033:0x7f80e559e159 [ 839.841995][T23021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.842013][T23021] RSP: 002b:00007f80e64d8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 839.842032][T23021] RAX: ffffffffffffffda RBX: 00007f80e5826270 RCX: 00007f80e559e159 [ 839.842045][T23021] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000200000000000 [ 839.842057][T23021] RBP: 00007f80e64d8090 R08: 0000000000000000 R09: 0000000000000000 [ 839.842068][T23021] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000001 [ 839.842079][T23021] R13: 00007f80e5826308 R14: 00007f80e5826270 R15: 00007fffc2fb8b08 [ 839.842104][T23021] [ 839.843792][ T30] audit: type=1400 audit(1797100300.097:1617): avc: denied { getopt } for pid=23016 comm="syz.8.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 839.870592][ T1684] usb usb6-port1: attempt power cycle [ 840.380309][ T1684] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 840.400836][ T1684] usb 6-1: device descriptor read/8, error -71 [ 840.641124][ T1684] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 840.665182][ T1684] usb 6-1: device descriptor read/8, error -71 [ 840.684200][T23028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 840.701779][T23032] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 840.773712][ T1684] usb usb6-port1: unable to enumerate USB device [ 840.883027][ T30] audit: type=1400 audit(1797100301.137:1618): avc: denied { write } for pid=23007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.627906][ T30] audit: type=1400 audit(1797100301.877:1619): avc: denied { mount } for pid=23037 comm="syz.3.3515" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 841.756044][ T30] audit: type=1400 audit(1797100302.007:1620): avc: denied { write } for pid=23046 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.871333][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 842.132244][ T9] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 842.142249][ T9] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 842.142313][ T9] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 8202, setting to 1024 [ 842.143546][ T9] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 842.143570][ T9] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 8202, setting to 1024 [ 842.156519][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.156543][ T9] usb 4-1: Product: syz [ 842.156556][ T9] usb 4-1: Manufacturer: syz [ 842.156569][ T9] usb 4-1: SerialNumber: syz [ 842.171458][ T9] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 842.188661][ T9] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 842.205697][ T9] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 842.441312][ T30] audit: type=1400 audit(1797100302.687:1621): avc: denied { read } for pid=23058 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 842.441367][ T30] audit: type=1400 audit(1797100302.687:1622): avc: denied { open } for pid=23058 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 842.448733][ T30] audit: type=1400 audit(1797100302.697:1623): avc: denied { ioctl } for pid=23049 comm="syz.5.3519" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 842.457230][ T30] audit: type=1400 audit(1797100302.707:1624): avc: denied { create } for pid=23049 comm="syz.5.3519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 842.485986][ T30] audit: type=1400 audit(1797100302.737:1625): avc: denied { mount } for pid=23049 comm="syz.5.3519" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 842.515342][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 842.530345][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 842.533046][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 842.540948][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 842.542284][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 842.615035][T23061] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3510'. [ 842.679035][T23061] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3510'. [ 842.856798][T23056] Option 'dnserror' to dns_resolver key: bad/missing value [ 842.862952][T23056] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3519'. [ 843.260397][ T1684] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 843.411589][ T1684] usb 9-1: Using ep0 maxpacket: 8 [ 843.412275][ T1684] usb 9-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 843.413615][ T1684] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.413656][ T1684] usb 9-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 843.413685][ T1684] usb 9-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 843.413711][ T1684] usb 9-1: config 0 interface 0 has no altsetting 0 [ 843.416078][ T1684] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.416104][ T1684] usb 9-1: Product: syz [ 843.416128][ T1684] usb 9-1: Manufacturer: syz [ 843.416165][ T1684] usb 9-1: SerialNumber: syz [ 843.423841][ T1684] usb 9-1: config 0 descriptor?? [ 843.465314][ T1684] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 found [ 843.667708][ T1684] snd_usb_toneport 9-1:0.0: cannot get proper max packet size [ 843.668021][ T1684] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 now disconnected [ 843.677581][ T1684] snd_usb_toneport 9-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 843.857034][T23102] binder: 23101:23102 ioctl c0306201 200000000080 returned -14 [ 843.865442][T23102] binder: 23101:23102 ioctl c0306201 2000000003c0 returned -14 [ 843.876617][T23099] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 844.048165][T23109] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 844.111713][T19738] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.207481][ T5603] Bluetooth: hci3: command tx timeout [ 845.214263][T23040] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 845.368325][ T10] usb 4-1: USB disconnect, device number 21 [ 845.381835][ T10] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 845.382216][T23123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3530'. [ 845.386205][ T10] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 845.388524][ T10] ti_usb_3410_5052 4-1:2.0: device disconnected [ 845.426423][T23123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3530'. [ 845.525113][T19738] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.615106][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 845.622275][ T30] audit: type=1400 audit(1797100305.877:1643): avc: denied { name_connect } for pid=23129 comm="syz.5.3531" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 845.632429][T23130] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 845.632449][T23130] audit: out of memory in audit_log_start [ 845.656835][ T30] audit: type=1400 audit(1797100305.877:1644): avc: denied { listen } for pid=23129 comm="syz.5.3531" lport=34867 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 845.683344][ T30] audit: type=1400 audit(1797100305.887:1645): avc: denied { accept } for pid=23129 comm="syz.5.3531" lport=34867 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 845.722796][T17019] usb 9-1: USB disconnect, device number 7 [ 845.724527][ T30] audit: type=1400 audit(1797100305.977:1646): avc: denied { unmount } for pid=21784 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 845.773473][ T30] audit: type=1400 audit(1797100306.027:1647): avc: denied { unmount } for pid=22591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 845.840262][ T30] audit: type=1400 audit(1797100306.087:1648): avc: denied { execute } for pid=23136 comm="syz.3.3533" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=70512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 845.899323][T23145] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3534'. [ 845.908967][ T30] audit: type=1400 audit(1797100306.157:1649): avc: denied { write } for pid=23115 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 845.940247][ T30] audit: type=1400 audit(1797100306.187:1650): avc: denied { mount } for pid=23136 comm="syz.3.3533" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 846.028762][ T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 846.088526][T19738] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.192509][ T10] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 846.195825][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.195847][ T10] usb 6-1: Product: syz [ 846.195867][ T10] usb 6-1: Manufacturer: syz [ 846.195880][ T10] usb 6-1: SerialNumber: syz [ 846.243478][T23058] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.243604][T23058] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.243718][T23058] bridge_slave_0: entered allmulticast mode [ 846.267750][T23058] bridge_slave_0: entered promiscuous mode [ 846.277043][T23058] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.279189][T23058] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.279335][T23058] bridge_slave_1: entered allmulticast mode [ 846.287491][T23058] bridge_slave_1: entered promiscuous mode [ 846.395325][T19738] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.426026][T23135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.435471][T23135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.547343][T23058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.563658][T23058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.569406][ T10] rtl8150 6-1:1.0: couldn't reset the device [ 846.569613][ T10] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 846.593844][ T10] usb 6-1: USB disconnect, device number 27 [ 846.715972][T23058] team0: Port device team_slave_0 added [ 846.722693][T23058] team0: Port device team_slave_1 added [ 846.816079][T23058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.816116][T23058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.816138][T23058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.826509][T23058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.826525][T23058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.826544][T23058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.219866][T23058] hsr_slave_0: entered promiscuous mode [ 847.222716][T23058] hsr_slave_1: entered promiscuous mode [ 847.223161][T23058] debugfs: 'hsr0' already exists in 'hsr' [ 847.223177][T23058] Cannot create hsr debugfs directory [ 847.273110][ T5603] Bluetooth: hci3: command tx timeout [ 847.387179][T23191] tmpfs: Bad value for 'size' [ 847.496624][T19738] bridge_slave_1: left allmulticast mode [ 847.496672][T19738] bridge_slave_1: left promiscuous mode [ 847.496832][T19738] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.504473][T19738] bridge_slave_0: left allmulticast mode [ 847.504496][T19738] bridge_slave_0: left promiscuous mode [ 847.507665][T19738] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.620328][ T7271] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 847.688012][T19738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 847.706349][T19738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 847.716071][T19738] bond0 (unregistering): Released all slaves [ 847.721184][T19738] bond1 (unregistering): Released all slaves [ 847.729231][T19738] bond2 (unregistering): Released all slaves [ 847.822126][ T7271] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 847.867816][ T7271] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 847.867865][ T7271] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 8202, setting to 1024 [ 847.876976][ T7271] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 847.877007][ T7271] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 8202, setting to 1024 [ 847.879976][ T7271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.879998][ T7271] usb 6-1: Product: syz [ 847.880011][ T7271] usb 6-1: Manufacturer: syz [ 847.880024][ T7271] usb 6-1: SerialNumber: syz [ 847.933178][ T7271] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 847.943361][ T7271] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 847.961401][ T7271] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 848.168518][T23205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 848.633388][T19738] hsr_slave_0: left promiscuous mode [ 848.639373][T19738] hsr_slave_1: left promiscuous mode [ 848.645053][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 848.651454][T19738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.651490][T19738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.653690][T19738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.653707][T19738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.671281][T19738] veth1_macvtap: left promiscuous mode [ 848.671317][T19738] veth0_macvtap: left promiscuous mode [ 848.671437][T19738] veth1_vlan: left promiscuous mode [ 848.671461][T19738] veth0_vlan: left promiscuous mode [ 848.802092][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 848.807474][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 848.810476][ T9] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 848.810499][ T9] usb 4-1: config 0 has no interface number 0 [ 848.810529][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 848.810551][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 848.816897][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.816921][ T9] usb 4-1: Product: syz [ 848.816935][ T9] usb 4-1: Manufacturer: syz [ 848.816948][ T9] usb 4-1: SerialNumber: syz [ 848.820891][ T9] usb 4-1: config 0 descriptor?? [ 848.821461][T23209] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 848.821554][T23209] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 848.830708][ T10] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 848.890298][T19738] team0 (unregistering): Port device team_slave_1 removed [ 848.915324][T19738] team0 (unregistering): Port device team_slave_0 removed [ 848.982996][ T10] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 849.006405][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.007966][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.008854][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.015070][ T10] usb 9-1: config 0 descriptor?? [ 849.046479][T23209] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 849.054679][T23209] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 849.255627][T23058] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 849.278890][T23058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 849.287380][T23058] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 849.319073][T23058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 849.327765][T23058] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 849.341087][T23058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 849.350738][ T5603] Bluetooth: hci3: command tx timeout [ 849.357032][T23058] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 849.438962][T23058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 849.987686][T23183] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 850.030526][ T10] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 850.030582][ T10] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 850.030617][ T10] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 850.030661][ T10] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 850.030683][ T10] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 850.030706][ T10] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 850.030728][ T10] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 850.045794][ T7271] usb 6-1: USB disconnect, device number 28 [ 850.274340][T19738] IPVS: stop unused estimator thread 0... [ 850.946930][ T10] pyra 0003:1E7D:2CF6.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.8-1/input0 [ 851.015589][ T7271] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 851.401463][ T10] pyra 0003:1E7D:2CF6.0010: couldn't init struct pyra_device [ 851.401543][ T10] pyra 0003:1E7D:2CF6.0010: couldn't install mouse [ 851.430324][ T5603] Bluetooth: hci3: command tx timeout [ 851.587081][ T7271] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 851.661979][ T10] pyra 0003:1E7D:2CF6.0010: probe with driver pyra failed with error -71 [ 851.662874][T23058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.664874][ T10] usb 9-1: USB disconnect, device number 8 [ 851.706761][ T7271] ti_usb_3410_5052 6-1:2.0: device disconnected [ 851.725282][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 851.725319][ T30] audit: type=1400 audit(1797100311.977:1666): avc: denied { read append } for pid=23226 comm="syz.7.3549" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 851.731712][ T30] audit: type=1400 audit(1797100311.977:1667): avc: denied { open } for pid=23226 comm="syz.7.3549" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 851.826665][ T30] audit: type=1400 audit(1797100312.077:1668): avc: denied { nlmsg_write } for pid=23226 comm="syz.7.3549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 851.828569][T23225] fido_id[23225]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 851.839189][T23058] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.916934][ T6401] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.917034][ T6401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.969420][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.969512][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.979257][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 851.979414][ T9] asix 4-1:0.34: probe with driver asix failed with error -71 [ 852.016512][ T9] usb 4-1: USB disconnect, device number 22 [ 852.508262][ T30] audit: type=1400 audit(1797100312.757:1669): avc: denied { read write } for pid=23253 comm="syz.8.3553" name="sg0" dev="devtmpfs" ino=884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 852.530314][ T30] audit: type=1400 audit(1797100312.757:1670): avc: denied { open } for pid=23253 comm="syz.8.3553" path="/dev/sg0" dev="devtmpfs" ino=884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 852.674948][ T30] audit: type=1400 audit(1797100312.927:1671): avc: denied { write } for pid=23223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.915767][ T30] audit: type=1400 audit(1797100313.167:1672): avc: denied { write } for pid=23272 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 853.478366][ T30] audit: type=1400 audit(1797100313.727:1673): avc: denied { read write } for pid=23283 comm="syz.5.3555" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 853.504207][ T30] audit: type=1400 audit(1797100313.757:1674): avc: denied { open } for pid=23283 comm="syz.5.3555" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 853.555603][T23058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.613265][T23298] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3560'. [ 853.628429][ T30] audit: type=1400 audit(1797100313.877:1675): avc: denied { read write } for pid=23297 comm="syz.5.3560" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 853.715858][ T7271] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 853.731582][T23304] netlink: zone id is out of range [ 853.736935][T23304] netlink: set zone limit has 4 unknown bytes [ 853.812085][ T10] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 853.850292][ T7271] usb 4-1: device descriptor read/64, error -71 [ 853.962812][ T10] usb 9-1: not running at top speed; connect to a high speed hub [ 853.962864][ T10] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 853.967680][ T10] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 853.967731][ T10] usb 9-1: can't read configurations, error -61 [ 854.096096][ T10] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 854.121951][ T7271] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 854.247416][ T10] usb 9-1: not running at top speed; connect to a high speed hub [ 854.247466][ T10] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 854.250364][ T10] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 854.250397][ T10] usb 9-1: can't read configurations, error -61 [ 854.250612][ T10] usb usb9-port1: attempt power cycle [ 854.288355][ T7271] usb 4-1: device descriptor read/64, error -71 [ 854.301665][T23058] veth0_vlan: entered promiscuous mode [ 854.330124][T23058] veth1_vlan: entered promiscuous mode [ 854.391862][ T7271] usb usb4-port1: attempt power cycle [ 854.425989][T23058] veth0_macvtap: entered promiscuous mode [ 854.469689][T23058] veth1_macvtap: entered promiscuous mode [ 854.576465][T23058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.590595][ T10] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 854.605221][T23058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.613183][ T10] usb 9-1: not running at top speed; connect to a high speed hub [ 854.613228][ T10] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 854.624899][ T10] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 854.624932][ T10] usb 9-1: can't read configurations, error -61 [ 854.640586][ T42] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.641732][ T42] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.641762][ T42] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.641788][ T42] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.741250][ T7271] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 854.762893][ T7271] usb 4-1: device descriptor read/8, error -71 [ 854.771282][ T10] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 854.803496][ T10] usb 9-1: not running at top speed; connect to a high speed hub [ 854.803553][ T10] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 854.810321][ T10] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 854.810349][ T10] usb 9-1: can't read configurations, error -61 [ 854.810565][ T10] usb usb9-port1: unable to enumerate USB device [ 854.938456][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.938501][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.020289][ T7271] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 855.031557][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.031600][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.048180][ T7271] usb 4-1: device descriptor read/8, error -71 [ 855.160702][ T7271] usb usb4-port1: unable to enumerate USB device [ 855.400342][ T5787] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 855.551744][ T5787] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 855.554623][ T5787] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.554659][ T5787] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.566334][ T5787] usb 10-1: config 0 descriptor?? [ 855.789431][T23344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.802425][T23344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.824884][ T5787] usbhid 10-1:0.0: can't add hid device: -71 [ 855.825000][ T5787] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 855.835677][ T5787] usb 10-1: USB disconnect, device number 3 [ 856.313409][ T44] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 856.481965][ T44] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 856.492519][ T44] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.492584][ T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.515656][ T44] usb 10-1: config 0 descriptor?? [ 857.160150][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 857.168777][ T30] audit: type=1400 audit(1797100317.407:1688): avc: denied { write } for pid=23417 comm="syz.5.3572" name="current_tracer" dev="tracefs" ino=3540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 857.192879][ T30] audit: type=1400 audit(1797100317.417:1689): avc: denied { read } for pid=23417 comm="syz.5.3572" name="current_tracer" dev="tracefs" ino=3540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 857.192920][ T30] audit: type=1400 audit(1797100317.417:1690): avc: denied { mount } for pid=23415 comm="syz.7.3571" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 857.400915][ T30] audit: type=1400 audit(1797100317.567:1691): avc: denied { read write } for pid=23417 comm="syz.5.3572" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 857.400979][ T30] audit: type=1400 audit(1797100317.567:1692): avc: denied { open } for pid=23417 comm="syz.5.3572" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 857.401030][ T30] audit: type=1400 audit(1797100317.567:1693): avc: denied { create } for pid=23417 comm="syz.5.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 857.401067][ T30] audit: type=1400 audit(1797100317.567:1694): avc: denied { ioctl } for pid=23417 comm="syz.5.3572" path="socket:[71284]" dev="sockfs" ino=71284 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 857.401107][ T30] audit: type=1400 audit(1797100317.627:1695): avc: denied { write } for pid=23404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.691180][ T44] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 857.697911][ T30] audit: type=1400 audit(1797100317.907:1696): avc: denied { write } for pid=23431 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.729425][ T44] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input103 [ 858.260868][ T30] audit: type=1400 audit(1797100318.517:1697): avc: denied { read } for pid=4954 comm="acpid" name="mouse1" dev="devtmpfs" ino=3478 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 858.776404][T23441] FAULT_INJECTION: forcing a failure. [ 858.776404][T23441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.776505][T23441] CPU: 1 UID: 0 PID: 23441 Comm: syz.8.3575 Tainted: G L syzkaller #0 PREEMPT(full) [ 858.776535][T23441] Tainted: [L]=SOFTLOCKUP [ 858.776544][T23441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 858.776555][T23441] Call Trace: [ 858.776562][T23441] [ 858.776570][T23441] dump_stack_lvl+0x100/0x190 [ 858.776603][T23441] should_fail_ex.cold+0x5/0xa [ 858.776631][T23441] _copy_from_iter+0x1f4/0x1690 [ 858.776665][T23441] ? __asan_memset+0x23/0x50 [ 858.776695][T23441] ? __pfx__copy_from_iter+0x10/0x10 [ 858.776723][T23441] ? __pfx___alloc_skb+0x10/0x10 [ 858.776753][T23441] netlink_sendmsg+0x808/0xda0 [ 858.776787][T23441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 858.776818][T23441] ? selinux_socket_sendmsg+0x198/0x2f0 [ 858.776851][T23441] ____sys_sendmsg+0xa4d/0xbe0 [ 858.776875][T23441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 858.776905][T23441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 858.776934][T23441] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 858.776961][T23441] ___sys_sendmsg+0x190/0x1e0 [ 858.776988][T23441] ? __pfx____sys_sendmsg+0x10/0x10 [ 858.777025][T23441] ? find_held_lock+0x2b/0x80 [ 858.777066][T23441] __sys_sendmsg+0x160/0x210 [ 858.777087][T23441] ? __pfx___sys_sendmsg+0x10/0x10 [ 858.777120][T23441] do_syscall_64+0x123/0x790 [ 858.777145][T23441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.777165][T23441] RIP: 0033:0x7f80e559e159 [ 858.777181][T23441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.777199][T23441] RSP: 002b:00007f80e651a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 858.777225][T23441] RAX: ffffffffffffffda RBX: 00007f80e5826090 RCX: 00007f80e559e159 [ 858.777238][T23441] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 858.777250][T23441] RBP: 00007f80e651a090 R08: 0000000000000000 R09: 0000000000000000 [ 858.777261][T23441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.777272][T23441] R13: 00007f80e5826128 R14: 00007f80e5826090 R15: 00007fffc2fb8b08 [ 858.777297][T23441] [ 858.964757][ T44] usb 10-1: USB disconnect, device number 4 [ 858.964880][ C1] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 859.320362][ T5688] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 859.441241][T17019] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 859.480313][ T5688] usb 6-1: Using ep0 maxpacket: 16 [ 859.601720][T17019] usb 9-1: LPM exit latency is zeroed, disabling LPM. [ 859.601770][T17019] usb 9-1: New USB device found, idVendor=19d2, idProduct=0412, bcdDevice=69.83 [ 859.618987][T17019] usb 9-1: config 129 has an invalid interface number: 176 but max is 0 [ 859.627479][T17019] usb 9-1: config 129 has no interface number 0 [ 859.627519][T17019] usb 9-1: config 129 interface 176 has no altsetting 0 [ 859.640393][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 859.653020][T17019] usb 9-1: string descriptor 0 read error: -22 [ 859.659370][T17019] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.675109][T17019] option 9-1:129.176: GSM modem (1-port) converter detected [ 859.771780][ T10] usb 10-1: device descriptor read/64, error -71 [ 859.907602][T17019] usb 9-1: USB disconnect, device number 13 [ 859.909173][T17019] option 9-1:129.176: device disconnected [ 860.014133][ T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 860.036042][T23486] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[21784] was attempted by ""[23486] [ 860.140299][ T10] usb 10-1: device descriptor read/64, error -71 [ 860.250983][ T10] usb usb10-port1: attempt power cycle [ 860.348591][T23501] FAULT_INJECTION: forcing a failure. [ 860.348591][T23501] name failslab, interval 1, probability 0, space 0, times 0 [ 860.370796][T23501] CPU: 1 UID: 0 PID: 23501 Comm: syz.7.3583 Tainted: G L syzkaller #0 PREEMPT(full) [ 860.370828][T23501] Tainted: [L]=SOFTLOCKUP [ 860.370835][T23501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 860.370847][T23501] Call Trace: [ 860.370854][T23501] [ 860.370862][T23501] dump_stack_lvl+0x100/0x190 [ 860.370910][T23501] should_fail_ex.cold+0x5/0xa [ 860.370937][T23501] should_failslab+0xc2/0x120 [ 860.370960][T23501] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 860.370980][T23501] ? xas_split_alloc+0x182/0x530 [ 860.371009][T23501] xas_split_alloc+0x182/0x530 [ 860.371038][T23501] __folio_split+0x95e/0x1bf0 [ 860.371076][T23501] ? __pfx___folio_split+0x10/0x10 [ 860.371103][T23501] ? __pfx___up_read+0x10/0x10 [ 860.371124][T23501] ? __rmap_walk_file+0x5ef/0x6c0 [ 860.371146][T23501] ? __rmap_walk_file+0x5ef/0x6c0 [ 860.371173][T23501] ? __rmap_walk_file+0x532/0x6c0 [ 860.371198][T23501] shmem_writeout+0x786/0x1a00 [ 860.371229][T23501] ? __pfx_shmem_writeout+0x10/0x10 [ 860.371253][T23501] ? __pfx_try_to_unmap+0x10/0x10 [ 860.371278][T23501] ? find_held_lock+0x2b/0x80 [ 860.371303][T23501] ? inode_to_bdi+0x9e/0x160 [ 860.371331][T23501] ? folio_clear_dirty_for_io+0x178/0x960 [ 860.371364][T23501] shrink_folio_list+0x399a/0x5e40 [ 860.371403][T23501] ? __pfx_shrink_folio_list+0x10/0x10 [ 860.371424][T23501] ? unwind_next_frame+0xbd/0x2090 [ 860.371452][T23501] ? lock_acquire+0x1d1/0x380 [ 860.371478][T23501] ? is_bpf_text_address+0x8a/0x1a0 [ 860.371501][T23501] ? is_bpf_text_address+0x8a/0x1a0 [ 860.371524][T23501] ? bpf_ksym_find+0x128/0x1c0 [ 860.371573][T23501] ? __lock_acquire+0x4c5/0x1ec0 [ 860.371591][T23501] ? __css_rstat_updated+0x1ce/0x590 [ 860.371615][T23501] ? __pfx___css_rstat_updated+0x10/0x10 [ 860.371639][T23501] reclaim_folio_list+0xe9/0x5e0 [ 860.371664][T23501] ? __pfx_reclaim_folio_list+0x10/0x10 [ 860.371685][T23501] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 860.371714][T23501] ? lru_gen_update_size+0x431/0xe20 [ 860.371740][T23501] ? lru_gen_del_folio+0x382/0x5f0 [ 860.371761][T23501] reclaim_pages+0x428/0x5e0 [ 860.371785][T23501] ? __pfx_reclaim_pages+0x10/0x10 [ 860.371805][T23501] ? madvise_cold_or_pageout_pte_range+0x22ba/0x27b0 [ 860.371831][T23501] ? folio_isolate_lru+0xd6/0xe90 [ 860.371856][T23501] madvise_cold_or_pageout_pte_range+0x147e/0x27b0 [ 860.371886][T23501] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 860.371917][T23501] ? is_bpf_text_address+0x94/0x1a0 [ 860.371940][T23501] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 860.371965][T23501] ? __kernel_text_address+0xd/0x30 [ 860.371992][T23501] ? unwind_get_return_address+0x59/0xa0 [ 860.372019][T23501] ? __lock_acquire+0x4c5/0x1ec0 [ 860.372040][T23501] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 860.372074][T23501] walk_pgd_range+0xbef/0x1e00 [ 860.372107][T23501] ? register_lock_class+0x3f/0x7b0 [ 860.372134][T23501] ? __pfx_walk_pgd_range+0x10/0x10 [ 860.372167][T23501] __walk_page_range+0x171/0x850 [ 860.372203][T23501] walk_page_range_vma_unsafe+0x209/0x8f0 [ 860.372223][T23501] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 860.372246][T23501] ? find_held_lock+0x2b/0x80 [ 860.372268][T23501] ? mlock_drain_local+0x254/0x4e0 [ 860.372291][T23501] ? mlock_drain_local+0x254/0x4e0 [ 860.372318][T23501] walk_page_range_vma+0x63/0x90 [ 860.372337][T23501] madvise_pageout+0x29e/0x5b0 [ 860.372360][T23501] ? __pfx_madvise_pageout+0x10/0x10 [ 860.372405][T23501] madvise_vma_behavior+0x48b/0x2350 [ 860.372431][T23501] ? mas_prev+0xa4/0x100 [ 860.372456][T23501] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 860.372480][T23501] ? mas_walk+0x260/0x310 [ 860.372501][T23501] ? find_vma_prev+0xd8/0x150 [ 860.372521][T23501] ? __pfx_find_vma_prev+0x10/0x10 [ 860.372548][T23501] ? __pfx__kstrtoull+0x10/0x10 [ 860.372571][T23501] ? lock_acquire+0x1d1/0x380 [ 860.372592][T23501] madvise_walk_vmas+0x30e/0xc50 [ 860.372619][T23501] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 860.372653][T23501] ? lock_acquire+0x1d1/0x380 [ 860.372674][T23501] madvise_do_behavior+0x1ea/0x510 [ 860.372701][T23501] ? __pfx_madvise_do_behavior+0x10/0x10 [ 860.372726][T23501] ? down_read+0x13b/0x4c0 [ 860.372762][T23501] do_madvise+0x238/0x290 [ 860.372784][T23501] ? __pfx_do_madvise+0x10/0x10 [ 860.372812][T23501] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 860.372845][T23501] ? ksys_write+0x1ac/0x250 [ 860.372862][T23501] ? __pfx_ksys_write+0x10/0x10 [ 860.372884][T23501] __x64_sys_madvise+0xa9/0x110 [ 860.372907][T23501] ? lockdep_hardirqs_on+0x7d/0x110 [ 860.372928][T23501] do_syscall_64+0x123/0x790 [ 860.372953][T23501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.372972][T23501] RIP: 0033:0x7ff3ca99e159 [ 860.372989][T23501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.373006][T23501] RSP: 002b:00007ff3cb7f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 860.373026][T23501] RAX: ffffffffffffffda RBX: 00007ff3cac25fa0 RCX: 00007ff3ca99e159 [ 860.373039][T23501] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000200000000000 [ 860.373050][T23501] RBP: 00007ff3cb7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 860.373061][T23501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.373072][T23501] R13: 00007ff3cac26038 R14: 00007ff3cac25fa0 R15: 00007fff8b044538 [ 860.373108][T23501] [ 860.592461][ T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 860.612816][ T10] usb 10-1: device descriptor read/8, error -71 [ 860.831754][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 860.944695][ T10] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 860.962439][ T10] usb 10-1: device descriptor read/8, error -71 [ 861.074104][ T10] usb usb10-port1: unable to enumerate USB device [ 862.458945][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 862.458990][ T30] audit: type=1400 audit(1797100322.707:1707): avc: denied { ioctl } for pid=23532 comm="syz.8.3589" path="socket:[72228]" dev="sockfs" ino=72228 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 862.511902][ T30] audit: type=1400 audit(1797100322.727:1708): avc: denied { write } for pid=23532 comm="syz.8.3589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 862.521561][ T5688] usb 6-1: unable to get BOS descriptor or descriptor too short [ 862.521599][ T5688] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 862.521629][ T5688] usb 6-1: no configurations [ 862.521639][ T5688] usb 6-1: can't read configurations, error -22 [ 862.758238][ T30] audit: type=1400 audit(1797100323.007:1709): avc: denied { create } for pid=23538 comm="syz.9.3591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 862.810381][ T30] audit: type=1400 audit(1797100323.057:1710): avc: denied { bind } for pid=23538 comm="syz.9.3591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 862.974391][ T30] audit: type=1400 audit(1797100323.177:1711): avc: denied { listen } for pid=23538 comm="syz.9.3591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 863.217940][ T30] audit: type=1400 audit(1797100323.467:1712): avc: denied { bind } for pid=23545 comm="syz.5.3592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 863.257612][ T30] audit: type=1400 audit(1797100323.507:1713): avc: denied { write } for pid=23515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.363451][ T30] audit: type=1400 audit(1797100323.617:1714): avc: denied { write } for pid=23545 comm="syz.5.3592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 863.410855][ T30] audit: type=1400 audit(1797100323.657:1715): avc: denied { write } for pid=23538 comm="syz.9.3591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 863.724690][ T30] audit: type=1400 audit(1797100323.967:1716): avc: denied { read } for pid=23545 comm="syz.5.3592" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 863.821577][T23561] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 864.067380][T23574] FAULT_INJECTION: forcing a failure. [ 864.067380][T23574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.067425][T23574] CPU: 1 UID: 0 PID: 23574 Comm: syz.8.3599 Tainted: G L syzkaller #0 PREEMPT(full) [ 864.067451][T23574] Tainted: [L]=SOFTLOCKUP [ 864.067458][T23574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 864.067469][T23574] Call Trace: [ 864.067476][T23574] [ 864.067483][T23574] dump_stack_lvl+0x100/0x190 [ 864.067515][T23574] should_fail_ex.cold+0x5/0xa [ 864.067542][T23574] _copy_from_iter+0x1f4/0x1690 [ 864.067573][T23574] ? __asan_memset+0x23/0x50 [ 864.067600][T23574] ? __pfx__copy_from_iter+0x10/0x10 [ 864.067627][T23574] ? __pfx___alloc_skb+0x10/0x10 [ 864.067654][T23574] netlink_sendmsg+0x808/0xda0 [ 864.067687][T23574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.067717][T23574] ? selinux_socket_sendmsg+0x198/0x2f0 [ 864.067749][T23574] ____sys_sendmsg+0xa4d/0xbe0 [ 864.067772][T23574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.067801][T23574] ? __pfx_____sys_sendmsg+0x10/0x10 [ 864.067830][T23574] ? lock_acquire+0x1d1/0x380 [ 864.067849][T23574] ? get_pid_task+0x2a/0x250 [ 864.067876][T23574] ___sys_sendmsg+0x190/0x1e0 [ 864.067902][T23574] ? __pfx____sys_sendmsg+0x10/0x10 [ 864.067927][T23574] ? get_pid_task+0x106/0x250 [ 864.067960][T23574] ? find_held_lock+0x2b/0x80 [ 864.068001][T23574] __sys_sendmsg+0x160/0x210 [ 864.068021][T23574] ? __pfx___sys_sendmsg+0x10/0x10 [ 864.068053][T23574] do_syscall_64+0x123/0x790 [ 864.068079][T23574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.068099][T23574] RIP: 0033:0x7f80e559e159 [ 864.068115][T23574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.068132][T23574] RSP: 002b:00007f80e653b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.068156][T23574] RAX: ffffffffffffffda RBX: 00007f80e5825fa0 RCX: 00007f80e559e159 [ 864.068168][T23574] RDX: 0000000000040000 RSI: 0000200000000200 RDI: 0000000000000003 [ 864.068180][T23574] RBP: 00007f80e653b090 R08: 0000000000000000 R09: 0000000000000000 [ 864.068194][T23574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.068205][T23574] R13: 00007f80e5826038 R14: 00007f80e5825fa0 R15: 00007fffc2fb8b08 [ 864.068231][T23574] [ 864.073887][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 864.552611][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 866.151752][T23609] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 866.225722][T23616] FAULT_INJECTION: forcing a failure. [ 866.225722][T23616] name failslab, interval 1, probability 0, space 0, times 0 [ 866.266800][T23616] CPU: 1 UID: 0 PID: 23616 Comm: syz.9.3608 Tainted: G L syzkaller #0 PREEMPT(full) [ 866.266833][T23616] Tainted: [L]=SOFTLOCKUP [ 866.266841][T23616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 866.266851][T23616] Call Trace: [ 866.266858][T23616] [ 866.266866][T23616] dump_stack_lvl+0x100/0x190 [ 866.266899][T23616] should_fail_ex.cold+0x5/0xa [ 866.266921][T23616] ? __netlink_lookup+0x652/0x900 [ 866.266950][T23616] should_failslab+0xc2/0x120 [ 866.266972][T23616] kmem_cache_alloc_noprof+0x92/0x6a0 [ 866.266992][T23616] ? skb_clone+0x190/0x400 [ 866.267013][T23616] skb_clone+0x190/0x400 [ 866.267033][T23616] netlink_deliver_tap+0xaed/0xcc0 [ 866.267066][T23616] netlink_unicast+0x62b/0x850 [ 866.267098][T23616] ? __pfx_netlink_unicast+0x10/0x10 [ 866.267133][T23616] netlink_sendmsg+0x8b0/0xda0 [ 866.267175][T23616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 866.267205][T23616] ? selinux_socket_sendmsg+0x198/0x2f0 [ 866.267236][T23616] ____sys_sendmsg+0xa4d/0xbe0 [ 866.267258][T23616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 866.267286][T23616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 866.267315][T23616] ? lock_acquire+0x1d1/0x380 [ 866.267334][T23616] ? get_pid_task+0x2a/0x250 [ 866.267357][T23616] ___sys_sendmsg+0x190/0x1e0 [ 866.267383][T23616] ? __pfx____sys_sendmsg+0x10/0x10 [ 866.267405][T23616] ? get_pid_task+0x106/0x250 [ 866.267438][T23616] ? find_held_lock+0x2b/0x80 [ 866.267478][T23616] __sys_sendmsg+0x160/0x210 [ 866.267496][T23616] ? __pfx___sys_sendmsg+0x10/0x10 [ 866.267527][T23616] do_syscall_64+0x123/0x790 [ 866.267551][T23616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.267570][T23616] RIP: 0033:0x7f7e9659e159 [ 866.267587][T23616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.267604][T23616] RSP: 002b:00007f7e973c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 866.267622][T23616] RAX: ffffffffffffffda RBX: 00007f7e96825fa0 RCX: 00007f7e9659e159 [ 866.267635][T23616] RDX: 0000000020000100 RSI: 00002000000000c0 RDI: 0000000000000003 [ 866.267646][T23616] RBP: 00007f7e973c5090 R08: 0000000000000000 R09: 0000000000000000 [ 866.267657][T23616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.267669][T23616] R13: 00007f7e96826038 R14: 00007f7e96825fa0 R15: 00007fffeee0e438 [ 866.267694][T23616] [ 866.462983][T23619] xt_policy: too many policy elements [ 866.466921][ T44] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 866.636505][ T44] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 866.646816][ T44] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.646864][ T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.678821][ T44] usb 9-1: config 0 descriptor?? [ 866.873063][ T5264] 8021q: adding VLAN 0 to HW filter on device eth3 [ 867.089480][T23614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.089900][T23614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.129183][ T44] usbhid 9-1:0.0: can't add hid device: -71 [ 867.129289][ T44] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 867.139565][ T44] usb 9-1: USB disconnect, device number 14 [ 867.493250][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 867.493292][ T30] audit: type=1400 audit(1797100327.747:1736): avc: denied { mounton } for pid=23673 comm="syz.5.3617" path="/27/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 867.603187][ T30] audit: type=1400 audit(1797100327.857:1737): avc: denied { create } for pid=23678 comm="syz.9.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 867.623272][ T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 867.818228][ T9] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 867.846320][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.846374][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.049682][ T9] usb 9-1: config 0 descriptor?? [ 868.427287][ T5264] 8021q: adding VLAN 0 to HW filter on device eth4 [ 868.601825][T23693] netlink: 'syz.5.3623': attribute type 2 has an invalid length. [ 868.601862][T23693] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3623'. [ 868.820326][ T5718] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 868.852574][ T30] audit: type=1400 audit(1797100329.107:1738): avc: denied { write } for pid=23686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.951895][ T5688] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 868.970431][ T5718] usb 4-1: Using ep0 maxpacket: 8 [ 868.976105][ T5718] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 868.988058][ T5718] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 868.996500][ T5718] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.011502][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 869.011540][ T5718] usb 4-1: Product: syz [ 869.026941][ T5718] usb 4-1: config 0 descriptor?? [ 869.035341][ T9] aiptek 9-1:0.0: Aiptek using 400 ms programming speed [ 869.044195][ T9] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input108 [ 869.086647][ T30] audit: type=1400 audit(1797100329.337:1739): avc: denied { write } for pid=23720 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.130635][ T5688] usb 10-1: Using ep0 maxpacket: 32 [ 869.132428][ T5688] usb 10-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 869.137020][ T5688] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 869.137042][ T5688] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 869.137074][ T5688] usb 10-1: config 1 interface 1 has no altsetting 0 [ 869.138996][ T5688] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.139017][ T5688] usb 10-1: Product: syz [ 869.139030][ T5688] usb 10-1: Manufacturer: syz [ 869.139043][ T5688] usb 10-1: SerialNumber: syz [ 869.279063][ T5718] usb 4-1: USB disconnect, device number 27 [ 869.324878][T23524] usb 9-1: USB disconnect, device number 15 [ 869.363580][ T30] audit: type=1400 audit(1797100329.617:1740): avc: denied { ioctl } for pid=23701 comm="syz.9.3625" path="socket:[72415]" dev="sockfs" ino=72415 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 869.382608][T23702] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3625'. [ 869.382638][T23702] netlink: 'syz.9.3625': attribute type 3 has an invalid length. [ 869.738009][ T30] audit: type=1400 audit(1797100329.987:1741): avc: denied { write } for pid=23724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.859466][ T30] audit: type=1400 audit(1797100330.107:1742): avc: denied { write } for pid=23739 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.949793][ T30] audit: type=1400 audit(1797100330.197:1743): avc: denied { block_suspend } for pid=23730 comm="syz.7.3628" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 870.034592][ T30] audit: type=1400 audit(1797100330.287:1744): avc: denied { map } for pid=23730 comm="syz.7.3628" path="/dev/video7" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 870.034655][ T30] audit: type=1400 audit(1797100330.287:1745): avc: denied { execute } for pid=23730 comm="syz.7.3628" path="/dev/video7" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 870.177520][ T5603] Bluetooth: hci2: link tx timeout [ 870.177668][ T5603] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 870.182001][ T5603] Bluetooth: hci2: link tx timeout [ 870.182280][ T5603] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 870.684949][T23767] FAULT_INJECTION: forcing a failure. [ 870.684949][T23767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 870.700852][T23767] CPU: 0 UID: 0 PID: 23767 Comm: syz.8.3636 Tainted: G L syzkaller #0 PREEMPT(full) [ 870.700887][T23767] Tainted: [L]=SOFTLOCKUP [ 870.700894][T23767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 870.700905][T23767] Call Trace: [ 870.700913][T23767] [ 870.700921][T23767] dump_stack_lvl+0x100/0x190 [ 870.700957][T23767] should_fail_ex.cold+0x5/0xa [ 870.700985][T23767] _copy_to_user+0x32/0xd0 [ 870.701014][T23767] simple_read_from_buffer+0xcb/0x170 [ 870.701038][T23767] proc_fail_nth_read+0x1af/0x230 [ 870.701062][T23767] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 870.701084][T23767] ? rw_verify_area+0xce/0x6d0 [ 870.701112][T23767] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 870.701133][T23767] vfs_read+0x1e4/0xb40 [ 870.701151][T23767] ? lock_acquire+0x1d1/0x380 [ 870.701169][T23767] ? __fget_files+0x34/0x3d0 [ 870.701197][T23767] ? __pfx_vfs_read+0x10/0x10 [ 870.701213][T23767] ? find_held_lock+0x2b/0x80 [ 870.701238][T23767] ? __fget_files+0x215/0x3d0 [ 870.701263][T23767] ? __fget_files+0x21f/0x3d0 [ 870.701292][T23767] ksys_read+0x12a/0x250 [ 870.701309][T23767] ? __pfx_ksys_read+0x10/0x10 [ 870.701325][T23767] ? v4l2_ioctl+0x1c5/0x250 [ 870.701356][T23767] do_syscall_64+0x123/0x790 [ 870.701381][T23767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.701400][T23767] RIP: 0033:0x7f80e555e98e [ 870.701416][T23767] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 870.701433][T23767] RSP: 002b:00007f80e653afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 870.701452][T23767] RAX: ffffffffffffffda RBX: 00007f80e653b6c0 RCX: 00007f80e555e98e [ 870.701465][T23767] RDX: 000000000000000f RSI: 00007f80e653b0a0 RDI: 0000000000000004 [ 870.701476][T23767] RBP: 00007f80e653b090 R08: 0000000000000000 R09: 0000000000000000 [ 870.701487][T23767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 870.701497][T23767] R13: 00007f80e5826038 R14: 00007f80e5825fa0 R15: 00007fffc2fb8b08 [ 870.701524][T23767] [ 870.798886][T23765] 9p: Bad value for 'rfdno' [ 871.772934][ T5688] usb 10-1: selecting invalid altsetting 0 [ 872.193128][ T5688] usb 10-1: USB disconnect, device number 9 [ 872.230377][ T5603] Bluetooth: hci2: command 0x0406 tx timeout [ 872.431225][T23322] udevd[23322]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 872.508662][ T5603] Bluetooth: hci3: hcon ffff88807a13c000 sent 3 < count 114 [ 872.519959][ T5603] Bluetooth: hci3: hcon ffff8880546f0000 sent 1 < count 8 [ 872.519990][ T5603] Bluetooth: hci3: hcon ffff88807a13c000 sent 0 < count 65530 [ 872.534235][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 872.534253][ T30] audit: type=1400 audit(1797100332.777:1759): avc: denied { write } for pid=23801 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 872.563771][ T5603] Bluetooth: hci3: hcon ffff88807a13c000 sent 0 < count 8 [ 872.595492][T23811] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3642'. [ 872.765728][T23816] FAULT_INJECTION: forcing a failure. [ 872.765728][T23816] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 872.765782][T23816] CPU: 1 UID: 0 PID: 23816 Comm: syz.5.3647 Tainted: G L syzkaller #0 PREEMPT(full) [ 872.765808][T23816] Tainted: [L]=SOFTLOCKUP [ 872.765814][T23816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 872.765825][T23816] Call Trace: [ 872.765831][T23816] [ 872.765839][T23816] dump_stack_lvl+0x100/0x190 [ 872.765869][T23816] should_fail_ex.cold+0x5/0xa [ 872.765892][T23816] ? prepare_alloc_pages+0x16d/0x5b0 [ 872.765916][T23816] should_fail_alloc_page+0xeb/0x140 [ 872.765940][T23816] prepare_alloc_pages+0x1f0/0x5b0 [ 872.765965][T23816] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 872.765993][T23816] ? __kernel_text_address+0xd/0x30 [ 872.766019][T23816] ? unwind_get_return_address+0x59/0xa0 [ 872.766044][T23816] ? arch_stack_walk+0xa6/0xf0 [ 872.766077][T23816] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 872.766106][T23816] ? __pfx_stack_trace_save+0x10/0x10 [ 872.766136][T23816] ? stack_depot_save_flags+0x27/0x9f0 [ 872.766157][T23816] ? bpf_ksym_find+0x128/0x1c0 [ 872.766189][T23816] ? kasan_save_stack+0x3f/0x50 [ 872.766209][T23816] ? kasan_save_stack+0x30/0x50 [ 872.766228][T23816] ? kasan_save_track+0x14/0x30 [ 872.766247][T23816] ? __kasan_kmalloc+0xaa/0xb0 [ 872.766266][T23816] ? __kmalloc_noprof+0x32f/0x840 [ 872.766282][T23816] ? copy_splice_read+0x1a3/0xbb0 [ 872.766304][T23816] ? do_splice_read+0x285/0x370 [ 872.766325][T23816] ? splice_direct_to_actor+0x2a1/0xa30 [ 872.766347][T23816] ? do_splice_direct+0x174/0x240 [ 872.766369][T23816] ? do_sendfile+0xadc/0xe20 [ 872.766412][T23816] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 872.766451][T23816] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 872.766480][T23816] ? rcu_is_watching+0x13/0xc0 [ 872.766508][T23816] ? __kmalloc_noprof+0x350/0x840 [ 872.766528][T23816] ? copy_splice_read+0x1a3/0xbb0 [ 872.766555][T23816] copy_splice_read+0x1e1/0xbb0 [ 872.766585][T23816] ? __pfx_copy_splice_read+0x10/0x10 [ 872.766611][T23816] ? look_up_lock_class+0x55/0x120 [ 872.766633][T23816] ? rcu_is_watching+0x13/0xc0 [ 872.766656][T23816] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 872.766679][T23816] ? lockdep_init_map_type+0x5c/0x250 [ 872.766702][T23816] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 872.766723][T23816] ? __pfx_copy_splice_read+0x10/0x10 [ 872.766745][T23816] do_splice_read+0x285/0x370 [ 872.766777][T23816] splice_direct_to_actor+0x2a1/0xa30 [ 872.766801][T23816] ? __pfx_direct_splice_actor+0x10/0x10 [ 872.766827][T23816] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 872.766853][T23816] ? lock_acquire+0x1d1/0x380 [ 872.766874][T23816] do_splice_direct+0x174/0x240 [ 872.766898][T23816] ? __pfx_do_splice_direct+0x10/0x10 [ 872.766921][T23816] ? avc_policy_seqno+0x9/0x20 [ 872.766944][T23816] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 872.766971][T23816] ? rw_verify_area+0xce/0x6d0 [ 872.767000][T23816] do_sendfile+0xadc/0xe20 [ 872.767033][T23816] ? __pfx_do_sendfile+0x10/0x10 [ 872.767059][T23816] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 872.767084][T23816] ? __fget_files+0x21f/0x3d0 [ 872.767113][T23816] __x64_sys_sendfile64+0x1d8/0x220 [ 872.767135][T23816] ? ksys_write+0x1ac/0x250 [ 872.767152][T23816] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 872.767182][T23816] do_syscall_64+0x123/0x790 [ 872.767207][T23816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.767227][T23816] RIP: 0033:0x7f397119e159 [ 872.767244][T23816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.767262][T23816] RSP: 002b:00007f39720cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 872.767282][T23816] RAX: ffffffffffffffda RBX: 00007f3971425fa0 RCX: 00007f397119e159 [ 872.767296][T23816] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 872.767307][T23816] RBP: 00007f39720cf090 R08: 0000000000000000 R09: 0000000000000000 [ 872.767319][T23816] R10: 00000000000000c6 R11: 0000000000000246 R12: 0000000000000001 [ 872.767331][T23816] R13: 00007f3971426038 R14: 00007f3971425fa0 R15: 00007ffc633e7b08 [ 872.767357][T23816] [ 873.190358][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 873.201880][ T30] audit: type=1326 audit(1797100333.447:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23831 comm="syz.9.3652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9659e159 code=0x7ffc0000 [ 873.202130][ T30] audit: type=1326 audit(1797100333.457:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23831 comm="syz.9.3652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9659e159 code=0x7ffc0000 [ 873.336114][T23836] IPv6: sit1: Disabled Multicast RS [ 873.336941][T23836] sit1: entered allmulticast mode [ 873.420325][ T30] audit: type=1326 audit(1797100333.647:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23831 comm="syz.9.3652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9659e159 code=0x7ffc0000 [ 873.420386][ T30] audit: type=1326 audit(1797100333.647:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23831 comm="syz.9.3652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9659e159 code=0x7ffc0000 [ 873.421023][ T30] audit: type=1326 audit(1797100333.677:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23831 comm="syz.9.3652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7e9659e159 code=0x7ffc0000 [ 873.421287][ T30] audit: type=1326 audit(1797100333.677:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23831 comm="syz.9.3652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9659e159 code=0x7ffc0000 [ 873.421468][ T30] audit: type=1326 audit(1797100333.677:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23831 comm="syz.9.3652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9659e159 code=0x7ffc0000 [ 873.423387][ T30] audit: type=1326 audit(1797100333.677:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23831 comm="syz.9.3652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9659e159 code=0x7ffc0000 [ 873.423570][ T30] audit: type=1326 audit(1797100333.677:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23831 comm="syz.9.3652" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9659e159 code=0x7ffc0000 [ 874.322381][ T5603] Bluetooth: hci2: command 0x0406 tx timeout [ 874.816928][ T9] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 874.913412][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 875.053936][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.053961][ T9] usb 4-1: Product: syz [ 875.053975][ T9] usb 4-1: Manufacturer: syz [ 875.053989][ T9] usb 4-1: SerialNumber: syz [ 875.093886][ T9] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 875.269949][T23873] FAULT_INJECTION: forcing a failure. [ 875.269949][T23873] name failslab, interval 1, probability 0, space 0, times 0 [ 875.270031][T23873] CPU: 1 UID: 0 PID: 23873 Comm: syz.8.3665 Tainted: G L syzkaller #0 PREEMPT(full) [ 875.270057][T23873] Tainted: [L]=SOFTLOCKUP [ 875.270064][T23873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 875.270075][T23873] Call Trace: [ 875.270082][T23873] [ 875.270090][T23873] dump_stack_lvl+0x100/0x190 [ 875.270121][T23873] should_fail_ex.cold+0x5/0xa [ 875.270154][T23873] should_failslab+0xc2/0x120 [ 875.270176][T23873] __kmalloc_noprof+0xfc/0x840 [ 875.270196][T23873] ? rcu_is_watching+0x13/0xc0 [ 875.270218][T23873] ? tomoyo_realpath_from_path+0xb6/0x690 [ 875.270242][T23873] tomoyo_realpath_from_path+0xb6/0x690 [ 875.270265][T23873] tomoyo_path_number_perm+0x23c/0x580 [ 875.270291][T23873] ? tomoyo_path_number_perm+0x22e/0x580 [ 875.270318][T23873] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 875.270343][T23873] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 875.270368][T23873] ? __lock_acquire+0x4c5/0x1ec0 [ 875.270392][T23873] ? __fget_files+0x34/0x3d0 [ 875.270410][T23873] ? find_held_lock+0x2b/0x80 [ 875.270429][T23873] ? hook_file_ioctl_common+0x140/0x440 [ 875.270454][T23873] ? __fget_files+0x21f/0x3d0 [ 875.270474][T23873] security_file_ioctl+0xd3/0x230 [ 875.270498][T23873] __x64_sys_ioctl+0xb7/0x210 [ 875.270514][T23873] do_syscall_64+0x123/0x790 [ 875.270533][T23873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.270548][T23873] RIP: 0033:0x7f80e559e159 [ 875.270561][T23873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.270575][T23873] RSP: 002b:00007f80e64f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 875.270592][T23873] RAX: ffffffffffffffda RBX: 00007f80e5826180 RCX: 00007f80e559e159 [ 875.270602][T23873] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000009 [ 875.270611][T23873] RBP: 00007f80e64f9090 R08: 0000000000000000 R09: 0000000000000000 [ 875.270620][T23873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.270628][T23873] R13: 00007f80e5826218 R14: 00007f80e5826180 R15: 00007fffc2fb8b08 [ 875.270649][T23873] [ 875.270992][T23873] ERROR: Out of memory at tomoyo_realpath_from_path. [ 875.844789][T23878] binder: 23820:23878 ioctl c0306201 200000000080 returned -14 [ 875.897598][T23878] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3649'. [ 876.617023][ T9] gspca_mr97310a: reg read [21] error -110 [ 876.617110][ T9] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -110 [ 876.967269][T23524] usb 4-1: USB disconnect, device number 28 [ 877.704688][T23902] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x2c949 pfn:0x78ca1 [ 877.704731][T23902] memcg:ffff888035f8d980 [ 877.704755][T23902] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 877.704783][T23902] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 877.704802][T23902] raw: 000000000002c949 0000000000000000 00000001ffffffff ffff888035f8d980 [ 877.704816][T23902] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 877.704830][T23902] page_owner tracks the page as allocated [ 877.704840][T23902] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 23902, tgid 23902 (syz.3.3671), ts 877704669565 [ 877.704872][T23902] post_alloc_hook+0xfd/0x120 [ 877.704903][T23902] get_page_from_freelist+0x110d/0x35d0 [ 877.704931][T23902] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 877.704961][T23902] alloc_pages_mpol+0x201/0x550 [ 877.704984][T23902] folio_alloc_noprof+0x22/0x250 [ 877.705017][T23902] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 877.705049][T23902] filemap_alloc_folio_noprof+0x5e/0x80 [ 877.705077][T23902] page_cache_ra_order+0x539/0xed0 [ 877.705099][T23902] filemap_fault+0x1943/0x3130 [ 877.705124][T23902] __do_fault+0x10b/0x440 [ 877.705142][T23902] do_fault+0x585/0x1830 [ 877.705163][T23902] __handle_mm_fault+0x150b/0x2f60 [ 877.705188][T23902] handle_mm_fault+0x363/0xa20 [ 877.705213][T23902] do_user_addr_fault+0x59c/0x12f0 [ 877.705248][T23902] exc_page_fault+0x6f/0xd0 [ 877.705270][T23902] asm_exc_page_fault+0x26/0x30 [ 877.705290][T23902] page last free pid 23910 tgid 23902 ts 877702498960 stack trace: [ 877.705305][T23902] free_unref_folios+0xa4a/0x1790 [ 877.705332][T23902] folios_put_refs+0x585/0xaa0 [ 877.705355][T23902] truncate_inode_pages_range+0x30c/0x1050 [ 877.705384][T23902] set_blocksize+0x2d1/0x460 [ 877.705411][T23902] blkdev_bszset+0x19b/0x240 [ 877.705430][T23902] blkdev_ioctl+0x513/0x6f0 [ 877.705448][T23902] __x64_sys_ioctl+0x18e/0x210 [ 877.705467][T23902] do_syscall_64+0x123/0x790 [ 877.705489][T23902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.705637][T23902] ------------[ cut here ]------------ [ 877.705646][T23902] kernel BUG at mm/filemap.c:858! [ 877.717321][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 877.717339][ T30] audit: type=1400 audit(1797100337.977:1818): avc: denied { read } for pid=4951 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 877.717379][ T30] audit: type=1400 audit(1797100337.977:1819): avc: denied { search } for pid=4951 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 877.750560][ T30] audit: type=1400 audit(1797100337.987:1820): avc: denied { write search } for pid=4951 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 877.750797][ T30] audit: type=1400 audit(1797100338.007:1821): avc: denied { add_name } for pid=4951 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 877.754657][ T30] audit: type=1400 audit(1797100338.007:1822): avc: denied { create } for pid=4951 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 877.754698][ T30] audit: type=1400 audit(1797100338.007:1823): avc: denied { append open } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 877.754730][ T30] audit: type=1400 audit(1797100338.007:1824): avc: denied { getattr } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 877.864572][T23902] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 878.111338][T23902] CPU: 0 UID: 0 PID: 23902 Comm: syz.3.3671 Tainted: G L syzkaller #0 PREEMPT(full) [ 878.122261][T23902] Tainted: [L]=SOFTLOCKUP [ 878.126566][T23902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 878.136625][T23902] RIP: 0010:__filemap_add_folio+0x108b/0x1370 [ 878.142773][T23902] Code: 79 bf ff 48 c7 c6 40 cb fe 8b 4c 89 ef e8 3d fc 12 00 90 0f 0b e8 c5 79 bf ff 48 c7 c6 a0 cb fe 8b 4c 89 ef e8 26 fc 12 00 90 <0f> 0b e8 ae 79 bf ff 48 c7 c6 20 cc fe 8b 4c 89 ef e8 0f fc 12 00 [ 878.162365][T23902] RSP: 0018:ffffc90002e9f7d0 EFLAGS: 00010293 [ 878.168417][T23902] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 878.176376][T23902] RDX: ffff88802b714b00 RSI: ffffffff825f8308 RDI: ffff88802b714fc4 [ 878.184416][T23902] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000000 [ 878.192384][T23902] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 878.200342][T23902] R13: ffffea0001e32840 R14: 0000000000000000 R15: 1ffff920005d3f26 [ 878.208296][T23902] FS: 0000555563e18500(0000) GS:ffff888123b5f000(0000) knlGS:0000000000000000 [ 878.217210][T23902] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 878.223779][T23902] CR2: 000000110c414b72 CR3: 000000005a3da000 CR4: 00000000003526f0 [ 878.231733][T23902] Call Trace: [ 878.234999][T23902] [ 878.237913][T23902] ? lock_acquire+0x1d1/0x380 [ 878.242575][T23902] ? __pfx___filemap_add_folio+0x10/0x10 [ 878.248200][T23902] filemap_add_folio+0x1d8/0x6a0 [ 878.253122][T23902] ? __pfx_filemap_add_folio+0x10/0x10 [ 878.258570][T23902] page_cache_ra_order+0x602/0xed0 [ 878.263668][T23902] filemap_fault+0x1943/0x3130 [ 878.268425][T23902] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 878.274216][T23902] ? __pfx_filemap_fault+0x10/0x10 [ 878.279324][T23902] ? __rcu_read_unlock+0x27f/0x5e0 [ 878.284424][T23902] __do_fault+0x10b/0x440 [ 878.288737][T23902] do_fault+0x585/0x1830 [ 878.292962][T23902] ? __pfx_filemap_map_pages+0x10/0x10 [ 878.298408][T23902] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 878.304638][T23902] ? __pfx_do_fault+0x10/0x10 [ 878.309297][T23902] ? pgd_none+0x9f/0xe0 [ 878.313441][T23902] ? __pfx_pgd_none+0x10/0x10 [ 878.318119][T23902] __handle_mm_fault+0x150b/0x2f60 [ 878.323219][T23902] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 878.329013][T23902] ? __pfx___handle_mm_fault+0x10/0x10 [ 878.334460][T23902] ? __rcu_read_unlock+0x26a/0x5e0 [ 878.339556][T23902] ? rcu_is_watching+0x13/0xc0 [ 878.344312][T23902] handle_mm_fault+0x363/0xa20 [ 878.349063][T23902] do_user_addr_fault+0x59c/0x12f0 [ 878.354164][T23902] exc_page_fault+0x6f/0xd0 [ 878.358652][T23902] asm_exc_page_fault+0x26/0x30 [ 878.363485][T23902] RIP: 0033:0x7fcbcc8676c5 [ 878.367884][T23902] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 74 24 10 48 0f ce 48 89 74 24 10 48 83 f8 01 0f 85 f0 02 00 00 48 8b 44 24 18 48 8b 54 24 10 <48> 89 10 e9 5a fe ff ff 48 8b 44 24 20 48 0b 44 24 28 75 30 48 8b [ 878.387477][T23902] RSP: 002b:00007ffe46db2d00 EFLAGS: 00010246 [ 878.393535][T23902] RAX: 00002000000002c0 RBX: 0000000000000008 RCX: 0000000000000000 [ 878.401488][T23902] RDX: 0000000000000120 RSI: 0000000000000000 RDI: 0000555563e183d8 [ 878.409443][T23902] RBP: 00007ffe46db2e20 R08: 0000000000000000 R09: 0000000000000000 [ 878.417397][T23902] R10: 0000000000000120 R11: 0000000000000001 R12: 00007ffe46db2e60 [ 878.425441][T23902] R13: 00007fcbccc2618c R14: 00000000000d61e0 R15: 00007ffe46db2e40 [ 878.433412][T23902] [ 878.436414][T23902] Modules linked in: [ 878.441239][T23902] ---[ end trace 0000000000000000 ]--- [ 878.552003][T23902] RIP: 0010:__filemap_add_folio+0x108b/0x1370 [ 878.558175][T23902] Code: 79 bf ff 48 c7 c6 40 cb fe 8b 4c 89 ef e8 3d fc 12 00 90 0f 0b e8 c5 79 bf ff 48 c7 c6 a0 cb fe 8b 4c 89 ef e8 26 fc 12 00 90 <0f> 0b e8 ae 79 bf ff 48 c7 c6 20 cc fe 8b 4c 89 ef e8 0f fc 12 00 [ 878.578186][T23902] RSP: 0018:ffffc90002e9f7d0 EFLAGS: 00010293 [ 878.586202][T23902] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 878.612557][T ** replaying previous printk message ** [ 878.612557][T23902] RDX: ffff88802b714b00 RSI: ffffffff825f8308 RDI: ffff88802b714fc4 [ 878.612728][T23902] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000000 [ 878.612740][T23902] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 878.612750][T23902] R13: ffffea0001e32840 R14: 0000000000000000 R15: 1ffff920005d3f26 [ 878.612760][T23902] FS: 0000555563e18500(0000) GS:ffff888123b5f000(0000) knlGS:0000000000000000 [ 878.612777][T23902] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 878.612787][T23902] CR2: 00007f7e967ef2f8 CR3: 000000005a3da000 CR4: 00000000003526f0 [ 878.612802][T23902] Kernel panic - not syncing: Fatal exception [ 878.679336][T23902] Kernel Offset: disabled [ 878.683634][T23902] Rebooting in 86400 seconds..